@remnic/core 9.69.32 → 9.69.34

package/dist/chunk-YEN4TREG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/fallback-llm.ts","../src/providers/codex-subscription.ts"],"sourcesContent":["import { log } from \"./logger.js\";\nimport path from \"node:path\";\nimport type { AgentPersonaModelConfig, GatewayConfig, ModelProviderConfig, PluginConfig } from \"./types.js\";\nimport { extractJsonCandidates } from \"./json-extract.js\";\nimport {\n  buildChatCompletionTemperature,\n  buildChatCompletionTokenLimit,\n  shouldAssumeOpenAiChatCompletions,\n} from \"./openai-chat-compat.js\";\nimport {\n  resolveProviderApiKey,\n  getGatewayRuntimeAuthForModel,\n  type GetRuntimeAuthForModelFn,\n  type ResolveApiKeyFn,\n} from \"./resolve-provider-secret.js\";\nimport {\n  CODEX_SUBSCRIPTION_PROVIDER_ID,\n  codexSubscriptionBuiltinProviderConfig,\n  ensureCodexSubscriptionRunnerRegistered,\n} from \"./providers/codex-subscription.js\";\nimport { loadModelsJsonProviders } from \"./models-json.js\";\nimport { callCodexCliFallback } from \"./cli-fallback.js\";\nimport { resolveHomeDir } from \"./runtime/env.js\";\nimport { expandTildePath } from \"./utils/path.js\";\n\nexport interface FallbackLlmOptions {\n  temperature?: number;\n  maxTokens?: number;\n  timeoutMs?: number;\n  signal?: AbortSignal;\n  /** Set the Responses API storage policy. Other transports ignore this value. */\n  store?: boolean;\n  /** Request strict JSON output when a route uses the Responses API. */\n  responsesJsonSchema?: { name: string; schema: Record<string, unknown> };\n  /** Request provider-native structured output on supported JSON transports. */\n  jsonSchema?: { name: string; schema: Record<string, unknown>; strict?: boolean };\n  /** Hide provider error details that could echo private request content. */\n  redactProviderErrors?: boolean;\n  /** Explicit \"provider/model\" override to try before the configured chain. */\n  model?: string;\n  /** Explicit model chain override to use instead of the configured agent/default chain. */\n  modelChain?: AgentPersonaModelConfig;\n  /** Append the gateway default chain after an explicit model chain. */\n  includeDefaultModelFallback?: boolean;\n  /** Override which agent persona's model chain to use (by ID from agents.list[]). */\n  agentId?: string;\n  /** Reject a transport-successful response and continue through the configured model chain. */\n  acceptResponse?: (response: FallbackLlmResponse) => boolean;\n}\n\nexport interface FallbackLlmAvailabilityOptions {\n  agentId?: string;\n  modelChain?: AgentPersonaModelConfig;\n}\n\n/**\n * Resolve the gateway routing options Remnic's background tasks should pass to\n * FallbackLlmClient — extraction, fact/profile/identity consolidation,\n * summarization, calibration, and causal/semantic consolidation. Single source\n * of truth so every task path stays consistent and can't diverge (gotcha #22):\n * in gateway mode an explicit `taskModelChain` wins over the gateway agent\n * persona; otherwise the persona (if any) is used. Returns `{}` in plugin mode\n * because the chain resolves through gateway providers only. Issue #1365.\n */\nexport function gatewayTaskChainOptions(\n  config: Pick<PluginConfig, \"modelSource\" | \"taskModelChain\" | \"gatewayAgentId\">,\n): Pick<FallbackLlmOptions, \"modelChain\" | \"agentId\"> {\n  if (config.modelSource !== \"gateway\") return {};\n  if (config.taskModelChain) return { modelChain: config.taskModelChain };\n  return config.gatewayAgentId ? { agentId: config.gatewayAgentId } : {};\n}\n\nexport interface FallbackLlmResponse {\n  content: string;\n  modelUsed: string;\n  usage?: {\n    inputTokens?: number;\n    outputTokens?: number;\n    totalTokens?: number;\n  };\n}\n\nexport interface FallbackLlmRuntimeContext {\n  agentDir?: string;\n  getRuntimeAuthForModel?: GetRuntimeAuthForModelFn | null;\n  resolveApiKeyForProvider?: ResolveApiKeyFn | null;\n  workspaceDir?: string;\n}\n\nexport function fallbackLlmRuntimeContextFromConfig(\n  config: Pick<\n    GatewayBackedRuntimeConfig,\n    \"providerApiKeyResolver\" | \"runtimeAuthForModelResolver\" | \"workspaceDir\"\n  >,\n  overrides: FallbackLlmRuntimeContext = {},\n): FallbackLlmRuntimeContext {\n  return {\n    workspaceDir: config.workspaceDir,\n    resolveApiKeyForProvider: config.providerApiKeyResolver,\n    getRuntimeAuthForModel: config.runtimeAuthForModelResolver,\n    ...overrides,\n  };\n}\n\ntype GatewayBackedRuntimeConfig = {\n  providerApiKeyResolver?: ResolveApiKeyFn | null;\n  runtimeAuthForModelResolver?: GetRuntimeAuthForModelFn | null;\n  workspaceDir?: string;\n};\n\ninterface ModelRef {\n  providerId: string;\n  modelId: string;\n  providerConfig: ModelProviderConfig;\n  modelString: string;\n}\n\nfunction isUnsupportedJsonSchemaError(error: unknown): boolean {\n  const message = error instanceof Error ? error.message : String(error);\n  // Require an HTTP status plus explicit schema/format context. A bare\n  // \"unsupported\" (e.g. \"'temperature' is unsupported with this model\") must\n  // NOT trigger the schema-stripping retry, or we pay a duplicate request\n  // for unrelated provider errors.\n  if (!/\\b(?:400|404|422)\\b/.test(message)) {\n    return false;\n  }\n  if (/(?:response[_ ]?format|json[_ ]?schema|structured[_ ]?output)/i.test(message)) {\n    return true;\n  }\n  // \"unsupported\" only counts when adjacent to schema/format terminology.\n  return /\\bunsupported\\b[\\s\\S]{0,40}\\b(?:schema|format)\\b/i.test(message);\n}\n\nconst PROVIDER_ALIASES: Record<string, readonly string[]> = {\n  \"openai-codex\": [\"codex\"],\n  codex: [\"openai-codex\"],\n  \"claude-cli\": [\"anthropic\"],\n};\n\nconst LEGACY_PROVIDER_IDS = new Set([\"openai-codex\", \"claude-cli\"]);\n\nconst MANAGED_SECRETREF_MARKER = [\"secretref\", \"managed\"].join(\"-\");\nconst PROVIDER_API_KEY_FIELD = [\"api\", \"Key\"].join(\"\") as keyof ModelProviderConfig;\n\n/**\n * Built-in provider fallbacks for providers that are commonly configured via\n * OAuth or gateway-managed auth rather than an explicit apiKey in\n * openclaw.json. These entries let resolveProviderConfig() succeed so the\n * chain proceeds to tryModel() → resolveRuntimeAuth(), which is where the\n * gateway's native OAuth token exchange happens.\n *\n * Without these, OAuth-only providers like `openai` are rejected with\n * \"provider not found\" before runtime auth is ever attempted.\n */\nconst BUILT_IN_PROVIDER_FALLBACKS: Record<string, ModelProviderConfig> = {\n  anthropic: {\n    baseUrl: \"https://api.anthropic.com/v1\",\n    api: \"anthropic-messages\",\n    models: [],\n    [PROVIDER_API_KEY_FIELD]: MANAGED_SECRETREF_MARKER,\n  },\n  openai: {\n    baseUrl: \"https://api.openai.com/v1\",\n    api: \"openai-responses\",\n    models: [],\n    [PROVIDER_API_KEY_FIELD]: MANAGED_SECRETREF_MARKER,\n  },\n  // Subscription-OAuth extraction provider (issue #2784): no apiKey — the\n  // codex CLI login authenticates, via the runner the codex-subscription\n  // module registers on this same seam.\n  [CODEX_SUBSCRIPTION_PROVIDER_ID]: codexSubscriptionBuiltinProviderConfig(),\n};\n\n/**\n * Generic fallback LLM client that uses the gateway's default AI configuration\n * and walks through the full fallback chain (primary + fallbacks).\n * Supports OpenAI and Anthropic API formats.\n */\nexport class FallbackLlmClient {\n  private gatewayConfig: GatewayConfig | undefined;\n  private runtimeContext: FallbackLlmRuntimeContext;\n\n  constructor(\n    gatewayConfig?: GatewayConfig,\n    runtimeContext: FallbackLlmRuntimeContext = {},\n  ) {\n    this.gatewayConfig = gatewayConfig;\n    this.runtimeContext = {\n      ...runtimeContext,\n      workspaceDir:\n        normalizeRuntimePath(runtimeContext.workspaceDir) ??\n        readGatewayWorkspaceDir(gatewayConfig) ??\n        defaultOpenClawWorkspaceDir(),\n    };\n  }\n\n  /**\n   * Check if fallback is available (gateway config has at least one model).\n   */\n  isAvailable(agentIdOrOptions?: string | FallbackLlmAvailabilityOptions): boolean {\n    const options = typeof agentIdOrOptions === \"string\"\n      ? { agentId: agentIdOrOptions }\n      : (agentIdOrOptions ?? {});\n    const models = this.getModelChain(options.agentId, undefined, options.modelChain);\n    return models.length > 0;\n  }\n\n  /**\n   * Make a chat completion request using the gateway's default AI chain.\n   * Tries primary first, then each fallback in order.\n   * When agentId is provided, uses that agent persona's model chain instead of defaults.\n   */\n  async chatCompletion(\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    options: FallbackLlmOptions = {},\n  ): Promise<FallbackLlmResponse | null> {\n    const models = this.getModelChain(\n      options.agentId,\n      options.model,\n      options.modelChain,\n      options.includeDefaultModelFallback,\n    );\n    if (models.length === 0) {\n      log.warn(\"fallback LLM: no models configured in gateway\");\n      return null;\n    }\n\n    const runChain = async (\n      initialOptions: FallbackLlmOptions,\n    ): Promise<FallbackLlmResponse | null> => {\n      let runOptions = initialOptions;\n      let lastRejectedResponse: FallbackLlmResponse | null = null;\n      // Try each model in the chain\n      for (let i = 0; i < models.length; i++) {\n        if (runOptions.signal?.aborted) {\n          throw abortReason(runOptions.signal);\n        }\n        const model = models[i];\n        const isFallback = i > 0;\n\n        try {\n          const result = await this.tryModel(model, messages, runOptions);\n          if (result) {\n            const response = {\n              content: result.content,\n              modelUsed: model.modelString,\n              usage: result.usage,\n            };\n            if (runOptions.acceptResponse && !runOptions.acceptResponse(response)) {\n              lastRejectedResponse = response;\n              log.debug(`fallback LLM: ${model.modelString} returned rejected output, trying next...`);\n              continue;\n            }\n            if (isFallback) {\n              log.debug(`fallback LLM: succeeded using ${model.modelString} (fallback ${i})`);\n            }\n            return response;\n          }\n        } catch (err) {\n          if (runOptions.signal?.aborted) {\n            throw abortReason(runOptions.signal);\n          }\n          if (\n            (runOptions.jsonSchema || runOptions.responsesJsonSchema) &&\n            isUnsupportedJsonSchemaError(err)\n          ) {\n            log.debug(`fallback LLM: ${model.modelString} rejected native JSON schema; retrying without it`);\n            // Degrade to prompt-only for the REST of the chain too, so an\n            // N-model chain where every provider rejects structured output\n            // costs N+1 requests instead of 2N.\n            runOptions = {\n              ...runOptions,\n              jsonSchema: undefined,\n              responsesJsonSchema: undefined,\n            };\n            try {\n              const result = await this.tryModel(model, messages, runOptions);\n              if (result) {\n                const response = {\n                  content: result.content,\n                  modelUsed: model.modelString,\n                  usage: result.usage,\n                };\n                if (!runOptions.acceptResponse || runOptions.acceptResponse(response)) {\n                  return response;\n                }\n                lastRejectedResponse = response;\n                log.debug(`fallback LLM: ${model.modelString} unstructured retry output rejected by acceptResponse, trying next model...`);\n                continue;\n              }\n            } catch (retryError) {\n              if (runOptions.signal?.aborted) throw abortReason(runOptions.signal);\n              const retryErrorMsg = runOptions.redactProviderErrors\n                ? \"provider error details redacted\"\n                : retryError instanceof Error\n                  ? retryError.message\n                  : String(retryError);\n              log.debug(\n                `fallback LLM: ${model.modelString} unstructured retry failed (${retryErrorMsg})`,\n              );\n            }\n            continue;\n          }\n          const errorMsg = runOptions.redactProviderErrors\n            ? \"provider error details redacted\"\n            : err instanceof Error\n              ? err.message\n              : String(err);\n          log.debug(`fallback LLM: ${model.modelString} failed (${errorMsg}), trying next...`);\n          // Continue to next model in chain\n        }\n      }\n\n      log.warn(`fallback LLM: all ${models.length} models in chain failed`);\n      return lastRejectedResponse;\n    };\n\n    if (typeof options.timeoutMs === \"number\") {\n      if (options.timeoutMs <= 0) {\n        log.warn(\"fallback LLM: timed out before request started\");\n        return null;\n      }\n      let timeoutHandle: ReturnType<typeof setTimeout> | undefined;\n      const controller = new AbortController();\n      const onCallerAbort = (): void => {\n        controller.abort(abortReason(options.signal));\n      };\n      options.signal?.addEventListener(\"abort\", onCallerAbort, { once: true });\n      if (options.signal?.aborted) {\n        onCallerAbort();\n      }\n      const timedOptions = { ...options, signal: controller.signal };\n      const chain = runChain(timedOptions);\n      chain.catch(() => {});\n      try {\n        return await Promise.race([\n          chain,\n          new Promise<null>((resolve) => {\n            timeoutHandle = setTimeout(() => {\n              log.warn(`fallback LLM: timed out after ${options.timeoutMs}ms`);\n              controller.abort(\n                new Error(`fallback LLM timed out after ${options.timeoutMs}ms`),\n              );\n              resolve(null);\n            }, options.timeoutMs);\n          }),\n        ]);\n      } finally {\n        if (timeoutHandle) clearTimeout(timeoutHandle);\n        options.signal?.removeEventListener(\"abort\", onCallerAbort);\n      }\n    }\n\n    return await runChain(options);\n  }\n\n  /**\n   * Make a request with structured output (Zod schema).\n   * Returns parsed JSON or null on failure.\n   */\n  async parseWithSchema<T>(\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    schema: { parse: (data: unknown) => T },\n    options: FallbackLlmOptions = {},\n  ): Promise<T | null> {\n    const detailed = await this.parseWithSchemaDetailed(messages, schema, options);\n    return detailed?.result ?? null;\n  }\n\n  /**\n   * Like parseWithSchema but also returns the model that was used,\n   * so callers can emit accurate trace events.\n   */\n  async parseWithSchemaDetailed<T>(\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    schema: { parse: (data: unknown) => T },\n    options: FallbackLlmOptions = {},\n  ): Promise<\n    | { result: T; modelUsed: string }\n    | { result: null; failureReason: \"no_models\" | \"empty\" | \"http_error\" }\n  > {\n    let response: FallbackLlmResponse | null;\n    try {\n      response = await this.chatCompletion(messages, options);\n    } catch (err) {\n      // Caller aborts must propagate (e.g. recall planner cancellation) — do\n      // not swallow them as a provider failure, or abort-driven callers lose\n      // cancellation and treat it as an extraction error (codex review).\n      if (options.signal?.aborted) throw err;\n      log.warn(\"fallback LLM: chatCompletion threw during structured parse:\", err);\n      return { result: null, failureReason: \"http_error\" };\n    }\n    if (!response?.content) {\n      // chatCompletion returns null both when no models are configured\n      // (auth/config) and when every configured model errored (transient).\n      // Disambiguate via the resolved model chain so the retry layer can pick\n      // the right failure class.\n      const hasModels =\n        this.getModelChain(\n          options.agentId,\n          options.model,\n          options.modelChain,\n          options.includeDefaultModelFallback,\n        ).length > 0;\n      return { result: null, failureReason: hasModels ? \"http_error\" : \"no_models\" };\n    }\n\n    try {\n      const candidates = extractJsonCandidates(response.content);\n      for (const c of candidates) {\n        try {\n          const parsed = JSON.parse(c);\n          return { result: schema.parse(parsed), modelUsed: response.modelUsed };\n        } catch {\n          // keep trying other candidates\n        }\n      }\n      return { result: null, failureReason: \"empty\" };\n    } catch (err) {\n      log.warn(\"fallback LLM: failed to parse structured output:\", err);\n      return { result: null, failureReason: \"empty\" };\n    }\n  }\n\n  /**\n   * Get the full model chain from gateway config.\n   * Returns array of models in order: [primary, fallback1, fallback2, ...]\n   *\n   * When modelChainOverride is provided, uses it instead of any configured\n   * agent/default chain. Otherwise, when agentId is provided, looks up the\n   * matching entry in agents.list[] and uses that persona's model chain.\n   * Falls back to agents.defaults.model if agentId is not found or not provided.\n   */\n  private getModelChain(\n    agentId?: string,\n    modelOverride?: string,\n    modelChainOverride?: AgentPersonaModelConfig,\n    includeDefaultModelFallback = true,\n  ): ModelRef[] {\n    const chain: ModelRef[] = [];\n    const providers = this.gatewayConfig?.models?.providers ?? {};\n\n    // Resolve the model config: explicit task chain, agent persona chain, or global defaults\n    let modelConfig: AgentPersonaModelConfig | undefined;\n\n    if (modelChainOverride?.primary) {\n      modelConfig = modelChainOverride;\n      log.debug(\"fallback LLM: using explicit model chain override\");\n    } else if (modelChainOverride) {\n      log.warn(\"fallback LLM: ignoring explicit model chain override without primary model\");\n    }\n\n    if (!modelConfig && agentId) {\n      const persona = this.gatewayConfig?.agents?.list?.find(\n        (a) => a.id === agentId,\n      );\n      if (persona?.model) {\n        modelConfig = persona.model;\n        log.debug(`fallback LLM: using agent persona \"${agentId}\" model chain`);\n      } else {\n        log.warn(\n          `fallback LLM: agent persona \"${agentId}\" not found or has no model config, falling back to defaults`,\n        );\n      }\n    }\n\n    if (!modelConfig) {\n      modelConfig = this.gatewayConfig?.agents?.defaults?.model;\n    }\n\n    // Build list of model strings: primary + fallbacks\n    const modelStrings: string[] = [];\n\n    const addModelString = (value: unknown): void => {\n      if (typeof value !== \"string\") return;\n      const trimmed = value.trim();\n      if (trimmed.length > 0 && !modelStrings.includes(trimmed)) {\n        modelStrings.push(trimmed);\n      }\n    };\n\n    addModelString(modelOverride);\n    addModelString(modelConfig?.primary);\n\n    if (Array.isArray(modelConfig?.fallbacks)) {\n      for (const fb of modelConfig.fallbacks) {\n        addModelString(fb);\n      }\n    }\n\n    // Parse each model string and look up provider config\n    for (const modelString of modelStrings) {\n      const modelRef = this.parseModelString(modelString, providers);\n      if (modelRef) {\n        chain.push(modelRef);\n      }\n    }\n\n    // Implicit last-resort: when a task-specific modelChain override is active,\n    // append the gateway default model so a stale or exhausted taskModelChain\n    // never leaves the chain empty — Remnic should never be the reason a chat is\n    // interrupted by a flush failure. Keyed on `modelChainOverride?.primary` —\n    // the SAME activation condition chain resolution uses above — so a\n    // primary-less override (e.g. {}) that falls through to a persona/default\n    // chain does NOT get the default appended (gotcha #39). Issue #1365 / PR #1370.\n    if (includeDefaultModelFallback && modelChainOverride?.primary && modelStrings.length > 0) {\n      // Append the FULL gateway default chain (primary + fallbacks), not just\n      // the primary — if the default primary is also unreachable, a listed\n      // default fallback may still succeed (cursor review #1425).\n      const defaults = this.gatewayConfig?.agents?.defaults?.model;\n      const defaultStrings: string[] = [\n        ...(typeof defaults?.primary === \"string\" ? [defaults.primary] : []),\n        ...(Array.isArray(defaults?.fallbacks) ? defaults.fallbacks : []),\n      ];\n      for (const candidate of defaultStrings) {\n        if (typeof candidate !== \"string\") continue;\n        const trimmed = candidate.trim();\n        if (trimmed.length === 0 || modelStrings.includes(trimmed)) continue;\n        const defaultRef = this.parseModelString(trimmed, providers);\n        if (defaultRef) {\n          chain.push(defaultRef);\n          modelStrings.push(trimmed); // keep dedupe correct for later default fallbacks\n          log.debug(\n            `fallback LLM: appended gateway default model \"${trimmed}\" as implicit last resort`,\n          );\n        }\n      }\n    }\n\n    return chain;\n  }\n\n  /**\n   * Parse a \"provider/model\" string and look up its config.\n   */\n  private parseModelString(\n    modelString: string,\n    providers: Record<string, ModelProviderConfig>,\n  ): ModelRef | null {\n    // Parse \"provider/model\" format (e.g., \"openai/gpt-5.5\", \"anthropic/claude-opus-4-6\")\n    const parts = modelString.split(\"/\");\n    if (parts.length < 2) {\n      log.warn(`fallback LLM: invalid model format: ${modelString}`);\n      return null;\n    }\n\n    const requestedProviderId = parts[0];\n    const modelId = parts.slice(1).join(\"/\"); // Handle cases like \"openai/gpt-5.5\"\n\n    // Respect the active gateway config first so profile-local overrides and\n    // credentials win. Fall back to the materialized models.json only when\n    // the provider is absent from the loaded config (for built-in providers\n    // registered by the gateway at runtime).\n    const resolvedProvider = this.resolveProviderConfig(requestedProviderId, providers);\n    const providerConfig = resolvedProvider?.config;\n    if (!providerConfig) {\n      log.warn(\n        `fallback LLM: provider not found: ${requestedProviderId} ` +\n        `(tried: ${this.providerResolutionCandidates(requestedProviderId).join(\", \")})`,\n      );\n      return null;\n    }\n\n    return {\n      providerId: resolvedProvider.providerId,\n      modelId,\n      providerConfig,\n      modelString,\n    };\n  }\n\n  private resolveProviderConfig(\n    providerId: string,\n    providers: Record<string, ModelProviderConfig>,\n  ): { providerId: string; config: ModelProviderConfig } | null {\n    const candidates = this.providerResolutionCandidates(providerId);\n    const aliasCandidates = candidates.filter((candidate) => candidate !== providerId);\n    const fallbackCandidates = LEGACY_PROVIDER_IDS.has(providerId)\n      ? [...aliasCandidates, providerId]\n      : [providerId, ...aliasCandidates];\n    for (const candidate of candidates) {\n      const config = providers[candidate];\n      if (config) {\n        if (candidate !== providerId) {\n          log.debug(`fallback LLM: provider \"${providerId}\" resolved via alias \"${candidate}\"`);\n        }\n        return { providerId: candidate, config };\n      }\n    }\n    for (const candidate of fallbackCandidates) {\n      const config = this.resolveFromModelsJson(candidate);\n      if (config) {\n        if (candidate !== providerId) {\n          log.debug(`fallback LLM: provider \"${providerId}\" resolved via models.json alias \"${candidate}\"`);\n        }\n        return { providerId: candidate, config };\n      }\n      const builtInConfig = BUILT_IN_PROVIDER_FALLBACKS[candidate];\n      if (builtInConfig) {\n        if (candidate === providerId) {\n          log.debug(`fallback LLM: provider \"${providerId}\" resolved from built-in defaults`);\n          return { providerId, config: builtInConfig };\n        }\n        log.debug(`fallback LLM: provider \"${providerId}\" resolved via built-in alias \"${candidate}\"`);\n        return { providerId: candidate, config: builtInConfig };\n      }\n    }\n    return null;\n  }\n\n  private providerResolutionCandidates(providerId: string): string[] {\n    const candidates = [providerId, ...(PROVIDER_ALIASES[providerId] ?? [])];\n    return [...new Set(candidates)];\n  }\n\n  /**\n   * Look up a provider from the gateway's materialized models.json, which\n   * contains all providers including built-in ones (openai-codex, google-vertex,\n   * etc.) that aren't in the user's openclaw.json but are registered by\n   * gateway plugins. Returns null if the provider isn't found there either.\n   */\n  private resolveFromModelsJson(providerId: string): ModelProviderConfig | null {\n    const allProviders = loadModelsJsonProviders();\n    const config = allProviders[providerId];\n    if (config) {\n      log.debug(`fallback LLM: resolved provider \"${providerId}\" from models.json (api: ${config.api ?? \"default\"})`);\n      return config;\n    }\n    return null;\n  }\n\n  /**\n   * Try to call a single model.\n   *\n   * Uses the gateway's native getRuntimeAuthForModel when available — this\n   * handles all provider-specific auth transforms (OAuth token exchange,\n   * base URL overrides for codex/copilot/etc.) through the same codepath\n   * the gateway itself uses. Falls back to resolveProviderApiKey for\n   * simpler providers or when the runtime module isn't loaded.\n   */\n  private async tryModel(\n    model: ModelRef,\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    options: FallbackLlmOptions,\n  ): Promise<{ content: string; usage?: FallbackLlmResponse[\"usage\"] } | null> {\n    // Try the gateway's native runtime auth first — it handles all provider-\n    // specific transforms (OAuth exchange, base URL rewrite, etc.)\n    const runtimeAuth = model.providerConfig.api === \"codex-cli\"\n      ? null\n      : await this.resolveRuntimeAuth(model);\n    const effectiveBaseUrl = runtimeAuth?.baseUrl ?? model.providerConfig.baseUrl;\n    const resolvedApiKey = runtimeAuth?.apiKey\n      ?? (\n        model.providerConfig.api === \"codex-cli\" && model.providerConfig.apiKey === undefined\n          ? undefined\n          : await this.resolveFallbackApiKey(model)\n      );\n\n    // If the raw key looks like an unresolved secret ref and resolution fails,\n    // skip this provider entirely so the chain falls through to the next.\n    const rawKey = model.providerConfig.apiKey;\n    const needsResolution = rawKey === \"secretref-managed\"\n      || (typeof rawKey === \"object\" && rawKey !== null);\n    if (needsResolution && !resolvedApiKey) {\n      throw new Error(`API key for provider \"${model.providerId}\" could not be resolved from secret ref`);\n    }\n\n    const effectiveConfig: ModelProviderConfig = {\n      ...model.providerConfig,\n      baseUrl: effectiveBaseUrl,\n      ...(resolvedApiKey ? { apiKey: resolvedApiKey } : {}),\n    };\n\n    if (model.providerConfig.api === \"anthropic-messages\") {\n      return await this.callAnthropic(effectiveConfig, model.modelId, messages, options);\n    }\n\n    if (model.providerConfig.api === \"codex-cli\") {\n      // Registers the core subprocess transport only when no host/benchmark\n      // runner claimed the seam, so daemon/plugin runtimes work out of the box.\n      ensureCodexSubscriptionRunnerRegistered();\n      return await callCodexCliFallback(\n        effectiveConfig,\n        model.modelId,\n        messages,\n        { timeoutMs: options.timeoutMs, signal: options.signal },\n      );\n    }\n\n    if (model.providerConfig.api === \"ollama-chat\") {\n      return await this.callOllamaChat(effectiveConfig, model.modelId, messages, options);\n    }\n\n    if (\n      model.providerConfig.api === \"openai-responses\" ||\n      model.providerConfig.api === \"openai-codex-responses\" ||\n      model.providerConfig.api === \"azure-openai-responses\"\n    ) {\n      return await this.callOpenAIResponses(\n        effectiveConfig,\n        model.modelId,\n        messages,\n        options,\n      );\n    }\n\n    // For OpenAI-compatible chat-completions APIs (openai-completions,\n    // ollama, etc.) and unknown formats, use chat completions — the gateway's\n    // runtime auth resolver returns request-ready base URL and credentials for\n    // most providers.\n    return await this.callOpenAI(\n      effectiveConfig,\n      model.modelId,\n      messages,\n      options,\n      shouldAssumeOpenAiChatCompletions(effectiveConfig.baseUrl),\n    );\n  }\n\n  /**\n   * Resolve request-ready auth through the gateway's native runtime, which\n   * handles provider-specific transforms (OAuth token exchange for codex/copilot,\n   * base URL rewrite, etc.). Returns null if the runtime isn't available.\n   */\n  private async resolveRuntimeAuth(\n    model: ModelRef,\n  ): Promise<{ apiKey?: string; baseUrl?: string } | null> {\n    try {\n      const getRuntimeAuth = await getGatewayRuntimeAuthForModel({\n        getRuntimeAuthForModel: this.runtimeContext.getRuntimeAuthForModel,\n      });\n      if (!getRuntimeAuth) return null;\n\n      const result = await getRuntimeAuth({\n        model: {\n          provider: model.providerId,\n          id: model.modelId,\n          api: model.providerConfig.api,\n          baseUrl: model.providerConfig.baseUrl,\n        },\n        cfg: this.gatewayConfig,\n        workspaceDir: this.runtimeContext.workspaceDir,\n      });\n\n      if (result?.apiKey || result?.baseUrl) {\n        log.debug(\n          `fallback LLM: resolved runtime auth for \"${model.modelString}\" (source: ${result.source ?? \"unknown\"}, mode: ${result.mode ?? \"unknown\"})`,\n        );\n        return { apiKey: result.apiKey, baseUrl: result.baseUrl };\n      }\n    } catch (err) {\n      log.debug(\n        `fallback LLM: gateway runtime auth failed for \"${model.modelString}\": ${err instanceof Error ? err.message : String(err)}`,\n      );\n    }\n    return null;\n  }\n\n  /**\n   * Resolve API key through the existing provider-level resolution (env vars,\n   * secret refs, etc.). Used as fallback when gateway runtime auth isn't available.\n   */\n  private async resolveFallbackApiKey(model: ModelRef): Promise<string | undefined> {\n    return resolveProviderApiKey(\n      model.providerId,\n      model.providerConfig.apiKey,\n      this.gatewayConfig,\n      this.runtimeContext.agentDir,\n      {\n        resolveApiKeyForProvider: this.runtimeContext.resolveApiKeyForProvider,\n      },\n    );\n  }\n\n  /**\n   * Call OpenAI-compatible API.\n   */\n  private async callOpenAI(\n    config: ModelProviderConfig,\n    modelId: string,\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    options: FallbackLlmOptions,\n    assumeOpenAI: boolean,\n  ): Promise<{ content: string; usage?: FallbackLlmResponse[\"usage\"] } | null> {\n    const base = config.baseUrl.replace(/\\/$/, \"\");\n    const url = base.endsWith(\"/v1\")\n      ? `${base}/chat/completions`\n      : `${base}/v1/chat/completions`;\n\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n      ...config.headers,\n    };\n\n    // Handle auth — apiKey is already resolved to a string by tryModel()\n    if (config.apiKey && typeof config.apiKey === \"string\") {\n      if (config.authHeader !== false) {\n        headers[\"Authorization\"] = `Bearer ${config.apiKey}`;\n      }\n    }\n\n    const body = {\n      model: modelId,\n      messages,\n      ...buildChatCompletionTemperature(modelId, options.temperature ?? 0.3, {\n        assumeOpenAI,\n      }),\n      ...buildChatCompletionTokenLimit(modelId, options.maxTokens ?? 4096, {\n        assumeOpenAI,\n      }),\n      ...(options.jsonSchema\n        ? {\n            response_format: {\n              type: \"json_schema\",\n              json_schema: {\n                name: options.jsonSchema.name,\n                strict: options.jsonSchema.strict ?? false,\n                schema: options.jsonSchema.schema,\n              },\n            },\n          }\n        : {}),\n    };\n\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers,\n      signal: options.signal,\n      body: JSON.stringify(body),\n    });\n\n    if (!response.ok) {\n      const error = await response.text();\n      throw new Error(`OpenAI API error: ${response.status} ${error}`);\n    }\n\n    const data = (await response.json()) as {\n      choices: Array<{\n        message: {\n          content: string;\n        };\n      }>;\n      usage?: {\n        prompt_tokens?: number;\n        completion_tokens?: number;\n        total_tokens?: number;\n      };\n    };\n\n    const content = data.choices?.[0]?.message?.content;\n    if (!content) {\n      throw new Error(\"Empty response from OpenAI API\");\n    }\n\n    return {\n      content,\n      usage: data.usage\n        ? {\n            inputTokens: data.usage.prompt_tokens,\n            outputTokens: data.usage.completion_tokens,\n            totalTokens: data.usage.total_tokens,\n          }\n        : undefined,\n    };\n  }\n\n  /**\n   * Call Ollama's native /api/chat transport. This lets benchmark-isolated\n   * gateway configs route Remnic's own internal LLM calls to Ollama Cloud\n   * without requiring an OpenAI-compatible shim.\n   */\n  private async callOllamaChat(\n    config: ModelProviderConfig,\n    modelId: string,\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    options: FallbackLlmOptions,\n  ): Promise<{ content: string; usage?: FallbackLlmResponse[\"usage\"] } | null> {\n    const base = config.baseUrl.replace(/\\/$/, \"\");\n    const url = base.endsWith(\"/api\") ? `${base}/chat` : `${base}/api/chat`;\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n      ...config.headers,\n    };\n    if (config.apiKey && typeof config.apiKey === \"string\" && config.authHeader !== false) {\n      headers.Authorization = `Bearer ${config.apiKey}`;\n    }\n\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers,\n      signal: options.signal,\n      body: JSON.stringify({\n        model: modelId,\n        messages,\n        stream: false,\n        ...(config.disableThinking ? { think: false } : {}),\n        options: {\n          temperature: options.temperature ?? 0.3,\n          num_predict: options.maxTokens ?? 4096,\n        },\n      }),\n    });\n\n    if (!response.ok) {\n      const error = await response.text();\n      throw new Error(`Ollama API error: ${response.status} ${error}`);\n    }\n\n    const data = (await response.json()) as {\n      message?: { content?: string };\n      response?: string;\n      prompt_eval_count?: number;\n      eval_count?: number;\n    };\n    const content = data.message?.content ?? data.response;\n    if (!content) {\n      throw new Error(\"Empty response from Ollama API\");\n    }\n\n    const inputTokens = data.prompt_eval_count ?? 0;\n    const outputTokens = data.eval_count ?? 0;\n    return {\n      content,\n      usage: {\n        inputTokens,\n        outputTokens,\n        totalTokens: inputTokens + outputTokens,\n      },\n    };\n  }\n\n  /**\n   * Call an OpenAI-compatible Responses API.\n   */\n  private async callOpenAIResponses(\n    config: ModelProviderConfig,\n    modelId: string,\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    options: FallbackLlmOptions,\n  ): Promise<{ content: string; usage?: FallbackLlmResponse[\"usage\"] } | null> {\n    const base = config.baseUrl.replace(/\\/$/, \"\");\n    const url = base.endsWith(\"/v1\")\n      ? `${base}/responses`\n      : `${base}/v1/responses`;\n\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n      ...config.headers,\n    };\n\n    if (config.apiKey && typeof config.apiKey === \"string\" && config.authHeader !== false) {\n      headers[\"Authorization\"] = `Bearer ${config.apiKey}`;\n    }\n\n    const instructions = messages\n      .filter((message) => message.role === \"system\")\n      .map((message) => message.content)\n      .join(\"\\n\\n\")\n      .trim();\n    const input = messages\n      .filter((message) => message.role !== \"system\")\n      .map((message) => ({\n        role: message.role,\n        content: [{\n          type: message.role === \"assistant\" ? \"output_text\" : \"input_text\",\n          text: message.content,\n        }],\n      }));\n\n    const body: Record<string, unknown> = {\n      model: modelId,\n      input,\n      max_output_tokens: Math.max(0, Math.floor(options.maxTokens ?? 4096)),\n      ...buildChatCompletionTemperature(modelId, options.temperature ?? 0.3, {\n        assumeOpenAI: shouldAssumeOpenAiChatCompletions(config.baseUrl),\n      }),\n      ...(options.store === undefined ? {} : { store: options.store }),\n      ...(options.jsonSchema || options.responsesJsonSchema\n        ? {\n            text: {\n              format: {\n                type: \"json_schema\",\n                name: (options.jsonSchema ?? options.responsesJsonSchema)!.name,\n                strict: (options.jsonSchema?.strict ?? (options.responsesJsonSchema ? true : false)),\n                schema: (options.jsonSchema ?? options.responsesJsonSchema)!.schema,\n              },\n            },\n          }\n        : {}),\n    };\n    if (instructions.length > 0) {\n      body.instructions = instructions;\n    }\n\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers,\n      signal: options.signal,\n      body: JSON.stringify(body),\n    });\n\n    if (!response.ok) {\n      const error = await response.text();\n      throw new Error(`OpenAI Responses API error: ${response.status} ${error}`);\n    }\n\n    const data = (await response.json()) as {\n      output_text?: string;\n      output?: Array<{\n        type?: string;\n        text?: string;\n        content?: Array<{\n          type?: string;\n          text?: string;\n        }>;\n      }>;\n      usage?: {\n        input_tokens?: number;\n        output_tokens?: number;\n        total_tokens?: number;\n      };\n    };\n\n    const outputText = extractResponsesOutputText(data);\n    if (!outputText) {\n      throw new Error(\"Empty response from OpenAI Responses API\");\n    }\n\n    return {\n      content: outputText,\n      usage: data.usage\n        ? {\n            inputTokens: data.usage.input_tokens,\n            outputTokens: data.usage.output_tokens,\n            totalTokens: data.usage.total_tokens,\n          }\n        : undefined,\n    };\n  }\n\n  /**\n   * Call Anthropic Messages API.\n   */\n  private async callAnthropic(\n    config: ModelProviderConfig,\n    modelId: string,\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    options: FallbackLlmOptions,\n  ): Promise<{ content: string; usage?: FallbackLlmResponse[\"usage\"] } | null> {\n    const base = config.baseUrl.replace(/\\/$/, \"\");\n    const url = base.endsWith(\"/v1\")\n      ? `${base}/messages`\n      : `${base}/v1/messages`;\n\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n      \"anthropic-version\": \"2023-06-01\",\n      ...config.headers,\n    };\n\n    // Handle auth - Anthropic uses x-api-key header (apiKey resolved by tryModel)\n    if (config.apiKey && typeof config.apiKey === \"string\") {\n      headers[\"x-api-key\"] = config.apiKey;\n    }\n\n    // Extract system message (Anthropic handles it separately)\n    const systemMessage = messages.find((m) => m.role === \"system\")?.content;\n    const nonSystemMessages = messages.filter((m) => m.role !== \"system\");\n\n    // Convert messages to Anthropic format\n    const anthropicMessages = nonSystemMessages.map((m) => ({\n      role: m.role,\n      content: m.content,\n    }));\n\n    const body: Record<string, unknown> = {\n      model: modelId,\n      messages: anthropicMessages,\n      max_tokens: options.maxTokens ?? 4096,\n      temperature: options.temperature ?? 0.3,\n    };\n\n    if (systemMessage) {\n      body.system = systemMessage;\n    }\n\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers,\n      signal: options.signal,\n      body: JSON.stringify(body),\n    });\n\n    if (!response.ok) {\n      const error = await response.text();\n      throw new Error(`Anthropic API error: ${response.status} ${error}`);\n    }\n\n    const data = (await response.json()) as {\n      content: Array<{\n        type: string;\n        text: string;\n      }>;\n      usage?: {\n        input_tokens?: number;\n        output_tokens?: number;\n      };\n    };\n\n    const content = data.content?.[0]?.text;\n    if (!content) {\n      throw new Error(\"Empty response from Anthropic API\");\n    }\n\n    return {\n      content,\n      usage: data.usage\n        ? {\n            inputTokens: data.usage.input_tokens,\n            outputTokens: data.usage.output_tokens,\n            totalTokens: (data.usage.input_tokens ?? 0) + (data.usage.output_tokens ?? 0),\n          }\n        : undefined,\n    };\n  }\n}\n\nfunction abortReason(signal: AbortSignal | undefined): Error {\n  const reason = signal?.reason;\n  return reason instanceof Error ? reason : new Error(\"fallback LLM request aborted\");\n}\n\nfunction normalizeRuntimePath(value: unknown): string | undefined {\n  if (typeof value !== \"string\") return undefined;\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? expandTildePath(trimmed) : undefined;\n}\n\nfunction readGatewayWorkspaceDir(gatewayConfig: GatewayConfig | undefined): string | undefined {\n  if (!gatewayConfig || typeof gatewayConfig !== \"object\") return undefined;\n  const raw = gatewayConfig as Record<string, unknown>;\n  return (\n    normalizeRuntimePath(raw.workspaceDir) ??\n    normalizeRuntimePath(raw.workspacePath) ??\n    normalizeRuntimePath(raw.workspace)\n  );\n}\n\nfunction defaultOpenClawWorkspaceDir(): string {\n  return path.join(resolveHomeDir(), \".openclaw\", \"workspace\");\n}\n\nfunction extractResponsesOutputText(data: {\n  output_text?: string;\n  output?: Array<{\n    type?: string;\n    text?: string;\n    content?: Array<{\n      type?: string;\n      text?: string;\n    }>;\n  }>;\n}): string | null {\n  if (typeof data.output_text === \"string\" && data.output_text.trim().length > 0) {\n    return data.output_text;\n  }\n\n  const chunks: string[] = [];\n  for (const item of data.output ?? []) {\n    if (typeof item.text === \"string\" && item.text.trim().length > 0) {\n      chunks.push(item.text);\n    }\n    for (const part of item.content ?? []) {\n      if (\n        (part.type === \"output_text\" || part.type === \"text\") &&\n        typeof part.text === \"string\" &&\n        part.text.trim().length > 0\n      ) {\n        chunks.push(part.text);\n      }\n    }\n  }\n\n  const joined = chunks.join(\"\\n\").trim();\n  return joined.length > 0 ? joined : null;\n}\n","/**\n * Codex subscription extraction provider (issue #2784).\n *\n * Routes extraction/consolidation LLM calls through the `codex` CLI so the\n * operator's Codex subscription (ChatGPT OAuth login) authenticates the\n * request — no OpenAI API key and no codex-openai-proxy. Credentials stay in\n * the CLI's own auth store; this module never reads, accepts, or logs tokens.\n *\n * Transport contract mirrors `packages/bench/src/providers/codex-cli.ts`\n * (`codex exec --json --output-last-message`, env allowlist, login-status\n * precheck) but lives in core so the standalone daemon and host plugins get\n * a working `api: \"codex-cli\"` transport without importing the optional\n * bench package. Registered through the existing\n * `setCodexCliFallbackRunnerForProcess` seam, and only when no host or\n * benchmark runner has claimed it first.\n */\n\nimport { mkdir, mkdtemp, readFile, rm } from \"node:fs/promises\";\nimport os from \"node:os\";\nimport path from \"node:path\";\n\nimport type {\n  CodexCliFallbackConfig,\n  CodexCliFallbackMessage,\n  CodexCliFallbackRequest,\n  CodexCliFallbackResult,\n  CodexCliFallbackRunner,\n} from \"../cli-fallback.js\";\nimport { isCodexCliFallbackRunnerRegistered, normalizeCodexCliTimeoutMs, setCodexCliFallbackRunnerForProcess } from \"../cli-fallback.js\";\nimport { log } from \"../logger.js\";\nimport { launchProcess } from \"../runtime/child-process.js\";\nimport type { CodexCliReasoningEffort, ModelProviderConfig } from \"../types.js\";\nimport { expandTildePath } from \"../utils/path.js\";\n\nexport const CODEX_SUBSCRIPTION_PROVIDER_ID = \"codex-subscription\";\n\n/** Env var overriding the codex executable (mirrors the bench provider). */\nconst CODEX_EXECUTABLE_ENV = \"REMNIC_CODEX_EXECUTABLE\";\n\nconst DEFAULT_REASONING_EFFORT: CodexCliReasoningEffort = \"medium\";\nconst DEFAULT_TIMEOUT_MS = 120_000;\nconst LOGIN_STATUS_TIMEOUT_MS = 10_000;\nconst LOGIN_STATUS_CACHE_TTL_MS = 10 * 60_000;\nconst STDIO_LIMIT = 64_000;\nconst OUTPUT_SUMMARY_LIMIT = 500;\n\n/**\n * Environment keys forwarded to the codex child. Everything else — including\n * ambient `OPENAI_API_KEY` / `OPENAI_BASE_URL` — is stripped so the CLI cannot\n * silently fall back to metered API-key auth instead of the subscription\n * login. Mirrors the bench provider's allowlist.\n */\nconst CODEX_RUNTIME_ENV_ALLOWLIST: Readonly<Record<string, true>> = Object.freeze({\n  ALL_PROXY: true,\n  APPDATA: true,\n  CODEX_HOME: true,\n  COLORTERM: true,\n  COMSPEC: true,\n  FORCE_COLOR: true,\n  HOME: true,\n  HOMEDRIVE: true,\n  HOMEPATH: true,\n  LANG: true,\n  LOCALAPPDATA: true,\n  LOGNAME: true,\n  NO_COLOR: true,\n  NODE_EXTRA_CA_CERTS: true,\n  NO_PROXY: true,\n  NUMBER_OF_PROCESSORS: true,\n  OS: true,\n  PATH: true,\n  PATHEXT: true,\n  PROGRAMDATA: true,\n  PROCESSOR_ARCHITECTURE: true,\n  HTTP_PROXY: true,\n  HTTPS_PROXY: true,\n  SHELL: true,\n  SSL_CERT_DIR: true,\n  SSL_CERT_FILE: true,\n  SYSTEMDRIVE: true,\n  SYSTEMROOT: true,\n  TEMP: true,\n  TERM: true,\n  TMP: true,\n  TMPDIR: true,\n  USER: true,\n  USERNAME: true,\n  USERPROFILE: true,\n  WINDIR: true,\n  XDG_CACHE_HOME: true,\n  XDG_CONFIG_HOME: true,\n  XDG_DATA_HOME: true,\n  XDG_RUNTIME_DIR: true,\n});\n\nconst LOGIN_OK_PATTERN = /logged in using chatgpt/i;\nconst LOGIN_API_KEY_PATTERN = /api key/i;\n/** CLI output shapes that mean the subscription session was rejected. */\nconst AUTH_FAILURE_PATTERN =\n  /\\b401\\b|\\b403\\b|unauthorized|forbidden|not logged in|no active|re-?authenticat|token expired|session expired|please log ?in/i;\nconst TIMEOUT_PATTERN = /timed out after \\d+ms/i;\n/** Secret shapes a codex CLI could echo into errors; replaced before surfacing. */\nconst SECRET_ECHO_PATTERNS: readonly RegExp[] = [\n  /sk-[A-Za-z0-9_-]{8,}/g,\n  /Bearer\\s+[A-Za-z0-9._-]{8,}/g,\n  /eyJ[A-Za-z0-9._-]{10,}/g,\n];\n\n/**\n * Built-in provider entry so `\"codex-subscription/<model>\"` chains resolve\n * with no models.json and no apiKey — the transport owns authentication.\n */\nexport function codexSubscriptionBuiltinProviderConfig(): ModelProviderConfig {\n  return {\n    baseUrl: \"codex-cli://subscription\",\n    api: \"codex-cli\",\n    models: [],\n  };\n}\n\nexport type CodexSubscriptionAuthReason = \"unauthenticated\" | \"expired_or_revoked\";\n\n/** Login/authorization failure with actionable re-auth guidance. */\nexport class CodexSubscriptionAuthError extends Error {\n  readonly reason: CodexSubscriptionAuthReason;\n\n  constructor(reason: CodexSubscriptionAuthReason, message: string) {\n    super(message);\n    this.name = \"CodexSubscriptionAuthError\";\n    this.reason = reason;\n  }\n}\n\n/** Provider config violated the no-raw-credentials contract. */\nexport class CodexSubscriptionConfigError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"CodexSubscriptionConfigError\";\n  }\n}\n\n/** Request exceeded its deadline. Abort-driven cancellations rethrow the\n * caller's own abort reason instead, preserving the AbortError contract. */\nexport class CodexSubscriptionTimeoutError extends Error {\n  constructor(timeoutMs: number) {\n    super(`codex-subscription request timed out after ${timeoutMs}ms`);\n    this.name = \"TimeoutError\";\n  }\n}\n\nexport interface CodexSubscriptionExecRequest {\n  executable: string;\n  args: string[];\n  input: string;\n  env: NodeJS.ProcessEnv;\n  outputPath: string;\n  workspacePath: string;\n  timeoutMs?: number;\n  signal?: AbortSignal;\n}\n\nexport interface CodexSubscriptionExecResult {\n  status: number | null;\n  signal?: NodeJS.Signals | null;\n  stdout: string;\n  stderr: string;\n  outputText: string;\n}\n\nexport interface CodexSubscriptionRunnerDeps {\n  /** Runs `codex exec`. Default: isolated subprocess via launchProcess. */\n  runCodexExec?: (request: CodexSubscriptionExecRequest) => Promise<CodexSubscriptionExecResult>;\n  /** Runs `codex login status`. Default: isolated subprocess. Receives the\n   * login-status timeout budget (capped by the request deadline). */\n  runLoginStatus?: (\n    executable: string,\n    env: NodeJS.ProcessEnv,\n    timeoutMs: number\n  ) => Promise<{ status: number | null; stdout: string; stderr: string }>;\n  /** Environment the isolated child env is filtered from. Tests inject fakes. */\n  env?: NodeJS.ProcessEnv;\n  tmpdir?: () => string;\n  now?: () => number;\n}\n\ninterface CommandOutput {\n  status: number | null;\n  signal?: NodeJS.Signals | null;\n  stdout: string;\n  stderr: string;\n}\n\nconst loginStatusCache = new Map<string, { at: number; promise: Promise<void> }>();\nlet coreRunnerRegistered = false;\n\nexport function createCodexSubscriptionRunner(deps: CodexSubscriptionRunnerDeps = {}): CodexCliFallbackRunner {\n  const envSource = deps.env ?? process.env;\n  return (request) => runCodexSubscriptionRequest(request, deps, envSource);\n}\n\n/**\n * Registers the core subprocess transport on the codex-cli seam, but only\n * when no runner is registered yet — a host or benchmark runner that claimed\n * the seam first always wins. If the seam was cleared afterwards\n * (setCodexCliFallbackRunnerForProcess(undefined)), the core runner is\n * re-registered so the next call still routes. Idempotent.\n */\nexport function ensureCodexSubscriptionRunnerRegistered(deps: CodexSubscriptionRunnerDeps = {}): boolean {\n  if (isCodexCliFallbackRunnerRegistered()) return false;\n  setCodexCliFallbackRunnerForProcess(createCodexSubscriptionRunner(deps));\n  coreRunnerRegistered = true;\n  return true;\n}\n\nasync function runCodexSubscriptionRequest(\n  request: CodexCliFallbackRequest,\n  deps: CodexSubscriptionRunnerDeps,\n  envSource: NodeJS.ProcessEnv\n): Promise<CodexCliFallbackResult> {\n  const { config } = request;\n  assertNoApiKeyConfig(config);\n  const executable = resolveExecutable(config, envSource);\n  const env = buildIsolatedEnv(envSource);\n\n  const providerTimeoutMs = config.retryOptions?.timeoutMs !== undefined\n    ? normalizeCodexCliTimeoutMs(config.retryOptions.timeoutMs)\n    : undefined;\n  const timeoutMs = request.options.timeoutMs ?? providerTimeoutMs ?? DEFAULT_TIMEOUT_MS;\n  // The effective deadline starts BEFORE the login-status precheck: login\n  // consumes the same call/provider timeout budget, it is not additive.\n  const now = deps.now ?? Date.now;\n  const deadlineStartedAt = now();\n  await assertSubscriptionLogin(executable, env, deps, Math.min(LOGIN_STATUS_TIMEOUT_MS, timeoutMs));\n\n  if (request.options.signal?.aborted) {\n    throw abortErrorOf(request.options.signal);\n  }\n\n  const remainingTimeoutMs = timeoutMs - (now() - deadlineStartedAt);\n  if (remainingTimeoutMs <= 0) {\n    throw new CodexSubscriptionTimeoutError(timeoutMs);\n  }\n  let tempDir: string | undefined;\n  try {\n    tempDir = await mkdtemp(path.join(deps.tmpdir?.() ?? os.tmpdir(), \"remnic-codex-sub-\"));\n    const workspacePath = path.join(tempDir, \"workspace\");\n    const outputPath = path.join(tempDir, \"last-message.txt\");\n    await mkdir(workspacePath, { recursive: true });\n\n    const runCodexExec = deps.runCodexExec ?? runCodexExecSubprocess;\n    const result = await runCodexExec({\n      executable,\n      args: buildExecArgs(request.modelId, config, workspacePath, outputPath),\n      input: buildPrompt(request.messages),\n      env,\n      outputPath,\n      workspacePath,\n      timeoutMs: remainingTimeoutMs,\n      signal: request.options.signal,\n    });\n\n    if (request.options.signal?.aborted) {\n      throw abortErrorOf(request.options.signal);\n    }\n    if (result.status !== 0) {\n      throw execFailureError(result, remainingTimeoutMs, executable, env);\n    }\n\n    const content = result.outputText.trim();\n    if (content.length === 0) {\n      throw new Error(\n        `codex-subscription: codex exec returned no final message (${summarizeOutput(result.stderr, result.stdout)})`\n      );\n    }\n    return { content, ...usageFrom(result) };\n  } finally {\n    if (tempDir) {\n      await rm(tempDir, { force: true, recursive: true }).catch(() => {});\n    }\n  }\n}\n\n/**\n * This provider authenticates exclusively through the codex CLI login, so a\n * configured apiKey is a configuration mistake — reject it without echoing\n * the value.\n */\nfunction assertNoApiKeyConfig(config: CodexCliFallbackConfig): void {\n  if (config.apiKey !== undefined && config.apiKey !== \"\") {\n    throw new CodexSubscriptionConfigError(\n      `${CODEX_SUBSCRIPTION_PROVIDER_ID} does not accept apiKey configuration: it authenticates through the Codex CLI login. Remove the apiKey field and run \\`codex login\\` with a ChatGPT account instead.`\n    );\n  }\n}\n\nfunction resolveExecutable(config: CodexCliFallbackConfig, env: NodeJS.ProcessEnv): string {\n  const configured = config.codexCliExecutable ?? config.executable ?? env[CODEX_EXECUTABLE_ENV] ?? \"codex\";\n  const expanded = expandTildePath(String(configured).trim());\n  if (expanded.trim().length === 0) {\n    throw new CodexSubscriptionConfigError(`${CODEX_EXECUTABLE_ENV} / executable must not be empty`);\n  }\n  // The exec child runs with cwd = the temp workspace, and spawn resolves a\n  // relative executable against the CHILD cwd. Resolve relative paths against\n  // the original process cwd now so `./codex` stays valid; bare names keep\n  // PATH lookup.\n  if (expanded.includes(\"/\") || expanded.includes(\"\\\\\")) {\n    return path.resolve(expanded);\n  }\n  return expanded;\n}\n\nfunction buildIsolatedEnv(source: NodeJS.ProcessEnv): NodeJS.ProcessEnv {\n  const env: NodeJS.ProcessEnv = {};\n  for (const [key, value] of Object.entries(source)) {\n    if (value !== undefined && isAllowedEnvKey(key)) {\n      env[key] = value;\n    }\n  }\n  return env;\n}\n\nfunction isAllowedEnvKey(key: string): boolean {\n  const normalized = key.toUpperCase();\n  return CODEX_RUNTIME_ENV_ALLOWLIST[normalized] === true || normalized.startsWith(\"LC_\");\n}\n\n/**\n * Verifies the operator's Codex subscription login via `codex login status`.\n * Success is cached briefly; failures are never cached so a re-login takes\n * effect on the next request.\n */\nasync function assertSubscriptionLogin(\n  executable: string,\n  env: NodeJS.ProcessEnv,\n  deps: CodexSubscriptionRunnerDeps,\n  loginStatusTimeoutMs: number\n): Promise<void> {\n  const now = deps.now ?? Date.now;\n  const cacheKey = `${executable}\\0${env.CODEX_HOME ?? env.HOME ?? \"\"}`;\n  const cached = loginStatusCache.get(cacheKey);\n  if (cached && now() - cached.at < LOGIN_STATUS_CACHE_TTL_MS) {\n    await cached.promise;\n    return;\n  }\n  const promise = (async () => {\n    const runLoginStatus = deps.runLoginStatus ?? runLoginStatusSubprocess;\n    const result = await runLoginStatus(executable, env, loginStatusTimeoutMs);\n    const output = `${result.stdout}\\n${result.stderr}`.trim();\n    if (TIMEOUT_PATTERN.test(output)) {\n      // A login-status subprocess timeout is a deadline expiry, not an auth\n      // failure — never report it as \"unauthenticated\".\n      throw new CodexSubscriptionTimeoutError(loginStatusTimeoutMs);\n    }\n    if (result.status === 0 && LOGIN_OK_PATTERN.test(output)) {\n      return;\n    }\n    const apiKeyNote = LOGIN_API_KEY_PATTERN.test(output)\n      ? \" The CLI currently reports an API-key login; subscription extraction needs a ChatGPT login.\"\n      : \"\";\n    throw new CodexSubscriptionAuthError(\n      \"unauthenticated\",\n      `codex-subscription: no ChatGPT-backed Codex login found. Run \\`codex login\\` and choose the ChatGPT account option, then retry.${apiKeyNote}`\n    );\n  })();\n  loginStatusCache.set(cacheKey, { at: now(), promise });\n  try {\n    await promise;\n  } catch (err) {\n    loginStatusCache.delete(cacheKey);\n    throw err;\n  }\n}\n\n/**\n * Args mirror the bench provider: fully sandboxed, ephemeral, no tools/hooks/\n * plugins/memories — extraction must behave as a plain completion endpoint.\n */\nfunction buildExecArgs(\n  modelId: string,\n  config: CodexCliFallbackConfig,\n  workspacePath: string,\n  outputPath: string\n): string[] {\n  const reasoningEffort = readReasoningEffort(config) ?? DEFAULT_REASONING_EFFORT;\n  return [\n    \"exec\",\n    \"--strict-config\",\n    \"--model\",\n    modelId,\n    \"--config\",\n    `model_reasoning_effort=${JSON.stringify(reasoningEffort)}`,\n    \"--config\",\n    'approval_policy=\"never\"',\n    \"--config\",\n    'web_search=\"disabled\"',\n    \"--disable\",\n    \"hooks\",\n    \"--disable\",\n    \"shell_tool\",\n    \"--disable\",\n    \"unified_exec\",\n    \"--disable\",\n    \"apps\",\n    \"--disable\",\n    \"plugins\",\n    \"--disable\",\n    \"remote_plugin\",\n    \"--disable\",\n    \"multi_agent\",\n    \"--disable\",\n    \"browser_use\",\n    \"--disable\",\n    \"browser_use_external\",\n    \"--disable\",\n    \"computer_use\",\n    \"--disable\",\n    \"image_generation\",\n    \"--disable\",\n    \"in_app_browser\",\n    \"--disable\",\n    \"goals\",\n    \"--disable\",\n    \"memories\",\n    \"--disable\",\n    \"chronicle\",\n    \"--disable\",\n    \"tool_suggest\",\n    \"--disable\",\n    \"workspace_dependencies\",\n    \"--disable\",\n    \"shell_snapshot\",\n    \"--ephemeral\",\n    \"--ignore-user-config\",\n    \"--ignore-rules\",\n    \"--sandbox\",\n    \"read-only\",\n    \"--cd\",\n    workspacePath,\n    \"--skip-git-repo-check\",\n    \"--json\",\n    \"--output-last-message\",\n    outputPath,\n    \"-\",\n  ];\n}\n\nfunction readReasoningEffort(config: CodexCliFallbackConfig): CodexCliReasoningEffort | undefined {\n  for (const value of [config.codexCliReasoningEffort, config.reasoningEffort]) {\n    if (typeof value === \"string\") {\n      const normalized = value.trim().toLowerCase();\n      if (normalized === \"low\" || normalized === \"medium\" || normalized === \"high\" || normalized === \"xhigh\") {\n        return normalized;\n      }\n      throw new CodexSubscriptionConfigError(\n        \"codex-subscription reasoningEffort must be one of low, medium, high, xhigh (got unrecognized value)\"\n      );\n    }\n  }\n  return undefined;\n}\n\n/**\n * One JSON object per message: role boundaries are structural (JSON string\n * escaping), so literal `[system]`/role-marker text inside message content\n * can never forge another role's turn. Content stays model-visible verbatim.\n */\nfunction buildPrompt(messages: readonly CodexCliFallbackMessage[]): string {\n  const transcript = messages\n    .map((message) => JSON.stringify({ role: message.role, content: message.content }))\n    .join(\"\\n\");\n  return [\n    \"You are acting as an LLM completion endpoint for a memory-extraction pipeline, not as a coding agent.\",\n    \"Answer the request in the transcript below. Do not inspect files, run commands, browse, or use tools.\",\n    \"Return only the final answer text. If the request asks for JSON, return raw JSON only.\",\n    \"\",\n    'TRANSCRIPT (JSON Lines: one {\"role\":\"...\",\"content\":\"...\"} object per message; newlines inside content are escaped):',\n    transcript,\n  ].join(\"\\n\");\n}\n\nfunction execFailureError(\n  result: CodexSubscriptionExecResult,\n  timeoutMs: number,\n  executable: string,\n  env: NodeJS.ProcessEnv\n): Error {\n  const combined = `${result.stderr}\\n${result.stdout}`;\n  if (AUTH_FAILURE_PATTERN.test(combined)) {\n    // Re-check login on the next request; the cached status is now stale.\n    loginStatusCache.delete(`${executable}\\0${env.CODEX_HOME ?? env.HOME ?? \"\"}`);\n    return new CodexSubscriptionAuthError(\n      \"expired_or_revoked\",\n      \"codex-subscription: the Codex CLI rejected the request as unauthenticated \" +\n        \"(session expired or revoked). Run `codex login` again to re-authenticate, then retry.\"\n    );\n  }\n  if (TIMEOUT_PATTERN.test(combined)) {\n    return new CodexSubscriptionTimeoutError(timeoutMs);\n  }\n  const exitLabel = result.signal ? `signal ${result.signal}` : `exit ${result.status ?? \"unknown\"}`;\n  return new Error(\n    `codex-subscription: codex exec failed (${exitLabel}): ${summarizeOutput(result.stderr, result.stdout)}`\n  );\n}\n\n/** Secret-redacted, then bounded tail of child output — the only child text\n * that ever reaches a thrown error. Redaction runs BEFORE bounding so a\n * secret straddling the cutoff cannot survive as an unmatchable fragment. */\nfunction summarizeOutput(stderr: string, stdout: string): string {\n  const summary = [stderr.trim(), stdout.trim()].filter((part) => part.length > 0).join(\"\\n\");\n  if (summary.length === 0) {\n    return \"no process output\";\n  }\n  return redactSecretEchoes(summary).slice(-OUTPUT_SUMMARY_LIMIT);\n}\n\nexport function redactSecretEchoes(value: string): string {\n  let redacted = value;\n  for (const pattern of SECRET_ECHO_PATTERNS) {\n    redacted = redacted.replace(pattern, \"[redacted]\");\n  }\n  return redacted;\n}\ntype CodexSubscriptionUsage = Pick<CodexCliFallbackResult, \"usage\">;\n\nfunction usageFrom(result: CodexSubscriptionExecResult): CodexSubscriptionUsage {\n  const usage = parseCodexJsonlUsage(`${result.stdout}\\n${result.stderr}`);\n  if (!usage) {\n    return {};\n  }\n  return {\n    usage: {\n      inputTokens: usage.inputTokens,\n      outputTokens: usage.outputTokens,\n      totalTokens: usage.inputTokens + usage.outputTokens,\n    },\n  };\n}\n/** Parses `turn.completed` usage events from codex exec JSONL output.\n * Mirrors the bench parser (core cannot import the optional bench package). */\nexport function parseCodexJsonlUsage(output: string): { inputTokens: number; outputTokens: number } | undefined {\n  let usage: { inputTokens: number; outputTokens: number } | undefined;\n  for (const line of output.split(/\\r?\\n/)) {\n    const trimmed = line.trim();\n    if (!trimmed.startsWith(\"{\")) continue;\n    try {\n      const event = JSON.parse(trimmed) as {\n        type?: unknown;\n        usage?: Record<string, unknown>;\n      };\n      if (event.type !== \"turn.completed\" || !event.usage) continue;\n      const inputTokens = readCounter(event.usage.input_tokens);\n      const outputTokens = readCounter(event.usage.output_tokens);\n      if (inputTokens !== undefined && outputTokens !== undefined) {\n        usage = { inputTokens, outputTokens };\n      }\n    } catch {\n      // codex exec prints non-JSON status text alongside JSONL; ignore it\n    }\n  }\n  return usage;\n}\n\nfunction readCounter(value: unknown): number | undefined {\n  if (typeof value !== \"number\" || !Number.isFinite(value) || value < 0) {\n    return undefined;\n  }\n  return value;\n}\n\nfunction abortErrorOf(signal: AbortSignal): Error {\n  if (signal.reason instanceof Error) return signal.reason;\n  if (signal.reason !== undefined) return new Error(String(signal.reason));\n  return new DOMException(\"The operation was aborted.\", \"AbortError\");\n}\n\n/** Bounds streamed child output to STDIO_LIMIT, keeping the TAIL — codex\n * prints its final error or turn.completed result last. Secrets are redacted\n * BEFORE bounding so one straddling the cutoff cannot leak a fragment. */\nfunction appendBounded(existing: string, next: string): string {\n  const redacted = redactSecretEchoes(existing + next);\n  return redacted.length > STDIO_LIMIT ? redacted.slice(-STDIO_LIMIT) : redacted;\n}\n\nasync function runLoginStatusSubprocess(\n  executable: string,\n  env: NodeJS.ProcessEnv,\n  timeoutMs: number\n): Promise<{ status: number | null; stdout: string; stderr: string }> {\n  return await runSubprocess(executable, [\"login\", \"status\"], {\n    env,\n    stdin: undefined,\n    timeoutMs,\n    timeoutLabel: \"login status\",\n  });\n}\n\nasync function runCodexExecSubprocess(request: CodexSubscriptionExecRequest): Promise<CodexSubscriptionExecResult> {\n  const result = await runSubprocess(request.executable, request.args, {\n    env: request.env,\n    stdin: request.input,\n    timeoutMs: request.timeoutMs,\n    timeoutLabel: \"exec\",\n    signal: request.signal,\n    cwd: request.workspacePath,\n  });\n  let outputText = \"\";\n  try {\n    outputText = (await readFile(request.outputPath, \"utf8\")).trim();\n  } catch {\n    // Missing output file surfaces as the no-final-message error path.\n  }\n  return { ...result, outputText };\n}\n\ninterface SubprocessOptions {\n  env: NodeJS.ProcessEnv;\n  stdin?: string;\n  timeoutMs?: number;\n  timeoutLabel: string;\n  signal?: AbortSignal;\n  cwd?: string;\n}\n\nasync function runSubprocess(executable: string, args: string[], options: SubprocessOptions): Promise<CommandOutput> {\n  return await new Promise<CommandOutput>((resolve, reject) => {\n    if (options.signal?.aborted) {\n      reject(abortErrorOf(options.signal));\n      return;\n    }\n    const child = launchProcess(executable, args, {\n      ...(options.cwd ? { cwd: options.cwd } : {}),\n      env: options.env,\n      stdio: [options.stdin === undefined ? \"ignore\" : \"pipe\", \"pipe\", \"pipe\"],\n      detached: process.platform !== \"win32\",\n      windowsHide: true,\n    });\n    let stdout = \"\";\n    let stderr = \"\";\n    let timedOut = false;\n    let killTimeout: ReturnType<typeof setTimeout> | undefined;\n    const clearKillTimeout = (): void => {\n      if (killTimeout) {\n        clearTimeout(killTimeout);\n        killTimeout = undefined;\n      }\n    };\n    const terminate = (signal: NodeJS.Signals): void => {\n      if (child.pid && process.platform !== \"win32\") {\n        try {\n          process.kill(-child.pid, signal);\n          return;\n        } catch {\n          // fall through to killing the direct child\n        }\n      }\n      child.kill(signal);\n    };\n    const scheduleForcedKill = (): void => {\n      clearKillTimeout();\n      killTimeout = setTimeout(() => terminate(\"SIGKILL\"), 1_000);\n      killTimeout.unref();\n    };\n    const onAbort = (): void => {\n      terminate(\"SIGTERM\");\n      scheduleForcedKill();\n    };\n    options.signal?.addEventListener(\"abort\", onAbort, { once: true });\n    const timeout = options.timeoutMs\n      ? setTimeout(() => {\n          timedOut = true;\n          stderr = appendBounded(\n            stderr,\n            `\\ncodex-subscription: ${options.timeoutLabel} timed out after ${options.timeoutMs}ms.`\n          );\n          terminate(\"SIGTERM\");\n          scheduleForcedKill();\n        }, options.timeoutMs)\n      : undefined;\n    timeout?.unref();\n    child.stdout?.setEncoding(\"utf8\");\n    child.stderr?.setEncoding(\"utf8\");\n    child.stdout?.on(\"data\", (chunk: string) => {\n      stdout = appendBounded(stdout, chunk);\n    });\n    child.stderr?.on(\"data\", (chunk: string) => {\n      stderr = appendBounded(stderr, chunk);\n    });\n    child.stdin?.on(\"error\", (error: NodeJS.ErrnoException) => {\n      stderr = appendBounded(stderr, `\\ncodex-subscription: stdin error: ${error.code ?? error.message}`);\n    });\n    const settle = (fn: () => void): void => {\n      clearTimeout(timeout);\n      clearKillTimeout();\n      options.signal?.removeEventListener(\"abort\", onAbort);\n      fn();\n    };\n    child.on(\"error\", (error) => {\n      settle(() => {\n        reject(\n          child.pid\n            ? new Error(`codex-subscription: codex CLI failed after start: ${safeMessage(error)}`, { cause: error })\n            : new CodexSubscriptionAuthError(\n                \"unauthenticated\",\n                `codex-subscription: codex CLI not found at \\`${executable}\\` — install the Codex CLI and run \\`codex login\\` with a ChatGPT account, then retry.`\n              )\n        );\n      });\n    });\n    child.on(\"close\", (status, signal) => {\n      settle(() => {\n        resolve({\n          status: timedOut ? (status ?? 124) : status,\n          signal: timedOut ? (signal ?? \"SIGTERM\") : signal,\n          stdout,\n          stderr,\n        });\n      });\n    });\n    if (options.stdin !== undefined) {\n      try {\n        child.stdin?.end(options.stdin);\n      } catch (error) {\n        log.debug(`codex-subscription: failed writing prompt to stdin: ${safeMessage(error)}`);\n      }\n    }\n  });\n}\n\nfunction safeMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nexport const __codexSubscriptionTestHooks = {\n  appendBounded,\n  resetLoginStatusCache: (): void => {\n    loginStatusCache.clear();\n  },\n  isCoreRunnerRegistered: (): boolean => coreRunnerRegistered,\n  resetCoreRunnerRegistered: (): void => {\n    coreRunnerRegistered = false;\n  },\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,OAAOA,WAAU;;;ACgBjB,SAAS,OAAO,SAAS,UAAU,UAAU;AAC7C,OAAO,QAAQ;AACf,OAAO,UAAU;AAeV,IAAM,iCAAiC;AAG9C,IAAM,uBAAuB;AAE7B,IAAM,2BAAoD;AAC1D,IAAM,qBAAqB;AAC3B,IAAM,0BAA0B;AAChC,IAAM,4BAA4B,KAAK;AACvC,IAAM,cAAc;AACpB,IAAM,uBAAuB;AAQ7B,IAAM,8BAA8D,OAAO,OAAO;AAAA,EAChF,WAAW;AAAA,EACX,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM;AAAA,EACN,WAAW;AAAA,EACX,UAAU;AAAA,EACV,MAAM;AAAA,EACN,cAAc;AAAA,EACd,SAAS;AAAA,EACT,UAAU;AAAA,EACV,qBAAqB;AAAA,EACrB,UAAU;AAAA,EACV,sBAAsB;AAAA,EACtB,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,aAAa;AAAA,EACb,wBAAwB;AAAA,EACxB,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,OAAO;AAAA,EACP,cAAc;AAAA,EACd,eAAe;AAAA,EACf,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,MAAM;AAAA,EACN,MAAM;AAAA,EACN,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,UAAU;AAAA,EACV,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,gBAAgB;AAAA,EAChB,iBAAiB;AAAA,EACjB,eAAe;AAAA,EACf,iBAAiB;AACnB,CAAC;AAED,IAAM,mBAAmB;AACzB,IAAM,wBAAwB;AAE9B,IAAM,uBACJ;AACF,IAAM,kBAAkB;AAExB,IAAM,uBAA0C;AAAA,EAC9C;AAAA,EACA;AAAA,EACA;AACF;AAMO,SAAS,yCAA8D;AAC5E,SAAO;AAAA,IACL,SAAS;AAAA,IACT,KAAK;AAAA,IACL,QAAQ,CAAC;AAAA,EACX;AACF;AAKO,IAAM,6BAAN,cAAyC,MAAM;AAAA,EAC3C;AAAA,EAET,YAAY,QAAqC,SAAiB;AAChE,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AACF;AAGO,IAAM,+BAAN,cAA2C,MAAM;AAAA,EACtD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAIO,IAAM,gCAAN,cAA4C,MAAM;AAAA,EACvD,YAAY,WAAmB;AAC7B,UAAM,8CAA8C,SAAS,IAAI;AACjE,SAAK,OAAO;AAAA,EACd;AACF;AA4CA,IAAM,mBAAmB,oBAAI,IAAoD;AACjF,IAAI,uBAAuB;AAEpB,SAAS,8BAA8B,OAAoC,CAAC,GAA2B;AAC5G,QAAM,YAAY,KAAK,OAAO,QAAQ;AACtC,SAAO,CAAC,YAAY,4BAA4B,SAAS,MAAM,SAAS;AAC1E;AASO,SAAS,wCAAwC,OAAoC,CAAC,GAAY;AACvG,MAAI,mCAAmC,EAAG,QAAO;AACjD,sCAAoC,8BAA8B,IAAI,CAAC;AACvE,yBAAuB;AACvB,SAAO;AACT;AAEA,eAAe,4BACb,SACA,MACA,WACiC;AACjC,QAAM,EAAE,OAAO,IAAI;AACnB,uBAAqB,MAAM;AAC3B,QAAM,aAAa,kBAAkB,QAAQ,SAAS;AACtD,QAAM,MAAM,iBAAiB,SAAS;AAEtC,QAAM,oBAAoB,OAAO,cAAc,cAAc,SACzD,2BAA2B,OAAO,aAAa,SAAS,IACxD;AACJ,QAAM,YAAY,QAAQ,QAAQ,aAAa,qBAAqB;AAGpE,QAAM,MAAM,KAAK,OAAO,KAAK;AAC7B,QAAM,oBAAoB,IAAI;AAC9B,QAAM,wBAAwB,YAAY,KAAK,MAAM,KAAK,IAAI,yBAAyB,SAAS,CAAC;AAEjG,MAAI,QAAQ,QAAQ,QAAQ,SAAS;AACnC,UAAM,aAAa,QAAQ,QAAQ,MAAM;AAAA,EAC3C;AAEA,QAAM,qBAAqB,aAAa,IAAI,IAAI;AAChD,MAAI,sBAAsB,GAAG;AAC3B,UAAM,IAAI,8BAA8B,SAAS;AAAA,EACnD;AACA,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,QAAQ,KAAK,KAAK,KAAK,SAAS,KAAK,GAAG,OAAO,GAAG,mBAAmB,CAAC;AACtF,UAAM,gBAAgB,KAAK,KAAK,SAAS,WAAW;AACpD,UAAM,aAAa,KAAK,KAAK,SAAS,kBAAkB;AACxD,UAAM,MAAM,eAAe,EAAE,WAAW,KAAK,CAAC;AAE9C,UAAM,eAAe,KAAK,gBAAgB;AAC1C,UAAM,SAAS,MAAM,aAAa;AAAA,MAChC;AAAA,MACA,MAAM,cAAc,QAAQ,SAAS,QAAQ,eAAe,UAAU;AAAA,MACtE,OAAO,YAAY,QAAQ,QAAQ;AAAA,MACnC;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,QAAQ,QAAQ,QAAQ;AAAA,IAC1B,CAAC;AAED,QAAI,QAAQ,QAAQ,QAAQ,SAAS;AACnC,YAAM,aAAa,QAAQ,QAAQ,MAAM;AAAA,IAC3C;AACA,QAAI,OAAO,WAAW,GAAG;AACvB,YAAM,iBAAiB,QAAQ,oBAAoB,YAAY,GAAG;AAAA,IACpE;AAEA,UAAM,UAAU,OAAO,WAAW,KAAK;AACvC,QAAI,QAAQ,WAAW,GAAG;AACxB,YAAM,IAAI;AAAA,QACR,6DAA6D,gBAAgB,OAAO,QAAQ,OAAO,MAAM,CAAC;AAAA,MAC5G;AAAA,IACF;AACA,WAAO,EAAE,SAAS,GAAG,UAAU,MAAM,EAAE;AAAA,EACzC,UAAE;AACA,QAAI,SAAS;AACX,YAAM,GAAG,SAAS,EAAE,OAAO,MAAM,WAAW,KAAK,CAAC,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IACpE;AAAA,EACF;AACF;AAOA,SAAS,qBAAqB,QAAsC;AAClE,MAAI,OAAO,WAAW,UAAa,OAAO,WAAW,IAAI;AACvD,UAAM,IAAI;AAAA,MACR,GAAG,8BAA8B;AAAA,IACnC;AAAA,EACF;AACF;AAEA,SAAS,kBAAkB,QAAgC,KAAgC;AACzF,QAAM,aAAa,OAAO,sBAAsB,OAAO,cAAc,IAAI,oBAAoB,KAAK;AAClG,QAAM,WAAW,gBAAgB,OAAO,UAAU,EAAE,KAAK,CAAC;AAC1D,MAAI,SAAS,KAAK,EAAE,WAAW,GAAG;AAChC,UAAM,IAAI,6BAA6B,GAAG,oBAAoB,iCAAiC;AAAA,EACjG;AAKA,MAAI,SAAS,SAAS,GAAG,KAAK,SAAS,SAAS,IAAI,GAAG;AACrD,WAAO,KAAK,QAAQ,QAAQ;AAAA,EAC9B;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,QAA8C;AACtE,QAAM,MAAyB,CAAC;AAChC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,QAAI,UAAU,UAAa,gBAAgB,GAAG,GAAG;AAC/C,UAAI,GAAG,IAAI;AAAA,IACb;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,KAAsB;AAC7C,QAAM,aAAa,IAAI,YAAY;AACnC,SAAO,4BAA4B,UAAU,MAAM,QAAQ,WAAW,WAAW,KAAK;AACxF;AAOA,eAAe,wBACb,YACA,KACA,MACA,sBACe;AACf,QAAM,MAAM,KAAK,OAAO,KAAK;AAC7B,QAAM,WAAW,GAAG,UAAU,KAAK,IAAI,cAAc,IAAI,QAAQ,EAAE;AACnE,QAAM,SAAS,iBAAiB,IAAI,QAAQ;AAC5C,MAAI,UAAU,IAAI,IAAI,OAAO,KAAK,2BAA2B;AAC3D,UAAM,OAAO;AACb;AAAA,EACF;AACA,QAAM,WAAW,YAAY;AAC3B,UAAM,iBAAiB,KAAK,kBAAkB;AAC9C,UAAM,SAAS,MAAM,eAAe,YAAY,KAAK,oBAAoB;AACzE,UAAM,SAAS,GAAG,OAAO,MAAM;AAAA,EAAK,OAAO,MAAM,GAAG,KAAK;AACzD,QAAI,gBAAgB,KAAK,MAAM,GAAG;AAGhC,YAAM,IAAI,8BAA8B,oBAAoB;AAAA,IAC9D;AACA,QAAI,OAAO,WAAW,KAAK,iBAAiB,KAAK,MAAM,GAAG;AACxD;AAAA,IACF;AACA,UAAM,aAAa,sBAAsB,KAAK,MAAM,IAChD,gGACA;AACJ,UAAM,IAAI;AAAA,MACR;AAAA,MACA,kIAAkI,UAAU;AAAA,IAC9I;AAAA,EACF,GAAG;AACH,mBAAiB,IAAI,UAAU,EAAE,IAAI,IAAI,GAAG,QAAQ,CAAC;AACrD,MAAI;AACF,UAAM;AAAA,EACR,SAAS,KAAK;AACZ,qBAAiB,OAAO,QAAQ;AAChC,UAAM;AAAA,EACR;AACF;AAMA,SAAS,cACP,SACA,QACA,eACA,YACU;AACV,QAAM,kBAAkB,oBAAoB,MAAM,KAAK;AACvD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,0BAA0B,KAAK,UAAU,eAAe,CAAC;AAAA,IACz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oBAAoB,QAAqE;AAChG,aAAW,SAAS,CAAC,OAAO,yBAAyB,OAAO,eAAe,GAAG;AAC5E,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAC5C,UAAI,eAAe,SAAS,eAAe,YAAY,eAAe,UAAU,eAAe,SAAS;AACtG,eAAO;AAAA,MACT;AACA,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAOA,SAAS,YAAY,UAAsD;AACzE,QAAM,aAAa,SAChB,IAAI,CAAC,YAAY,KAAK,UAAU,EAAE,MAAM,QAAQ,MAAM,SAAS,QAAQ,QAAQ,CAAC,CAAC,EACjF,KAAK,IAAI;AACZ,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,SAAS,iBACP,QACA,WACA,YACA,KACO;AACP,QAAM,WAAW,GAAG,OAAO,MAAM;AAAA,EAAK,OAAO,MAAM;AACnD,MAAI,qBAAqB,KAAK,QAAQ,GAAG;AAEvC,qBAAiB,OAAO,GAAG,UAAU,KAAK,IAAI,cAAc,IAAI,QAAQ,EAAE,EAAE;AAC5E,WAAO,IAAI;AAAA,MACT;AAAA,MACA;AAAA,IAEF;AAAA,EACF;AACA,MAAI,gBAAgB,KAAK,QAAQ,GAAG;AAClC,WAAO,IAAI,8BAA8B,SAAS;AAAA,EACpD;AACA,QAAM,YAAY,OAAO,SAAS,UAAU,OAAO,MAAM,KAAK,QAAQ,OAAO,UAAU,SAAS;AAChG,SAAO,IAAI;AAAA,IACT,0CAA0C,SAAS,MAAM,gBAAgB,OAAO,QAAQ,OAAO,MAAM,CAAC;AAAA,EACxG;AACF;AAKA,SAAS,gBAAgB,QAAgB,QAAwB;AAC/D,QAAM,UAAU,CAAC,OAAO,KAAK,GAAG,OAAO,KAAK,CAAC,EAAE,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,KAAK,IAAI;AAC1F,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO;AAAA,EACT;AACA,SAAO,mBAAmB,OAAO,EAAE,MAAM,CAAC,oBAAoB;AAChE;AAEO,SAAS,mBAAmB,OAAuB;AACxD,MAAI,WAAW;AACf,aAAW,WAAW,sBAAsB;AAC1C,eAAW,SAAS,QAAQ,SAAS,YAAY;AAAA,EACnD;AACA,SAAO;AACT;AAGA,SAAS,UAAU,QAA6D;AAC9E,QAAM,QAAQ,qBAAqB,GAAG,OAAO,MAAM;AAAA,EAAK,OAAO,MAAM,EAAE;AACvE,MAAI,CAAC,OAAO;AACV,WAAO,CAAC;AAAA,EACV;AACA,SAAO;AAAA,IACL,OAAO;AAAA,MACL,aAAa,MAAM;AAAA,MACnB,cAAc,MAAM;AAAA,MACpB,aAAa,MAAM,cAAc,MAAM;AAAA,IACzC;AAAA,EACF;AACF;AAGO,SAAS,qBAAqB,QAA2E;AAC9G,MAAI;AACJ,aAAW,QAAQ,OAAO,MAAM,OAAO,GAAG;AACxC,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,CAAC,QAAQ,WAAW,GAAG,EAAG;AAC9B,QAAI;AACF,YAAM,QAAQ,KAAK,MAAM,OAAO;AAIhC,UAAI,MAAM,SAAS,oBAAoB,CAAC,MAAM,MAAO;AACrD,YAAM,cAAc,YAAY,MAAM,MAAM,YAAY;AACxD,YAAM,eAAe,YAAY,MAAM,MAAM,aAAa;AAC1D,UAAI,gBAAgB,UAAa,iBAAiB,QAAW;AAC3D,gBAAQ,EAAE,aAAa,aAAa;AAAA,MACtC;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,YAAY,OAAoC;AACvD,MAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,KAAK,QAAQ,GAAG;AACrE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,aAAa,QAA4B;AAChD,MAAI,OAAO,kBAAkB,MAAO,QAAO,OAAO;AAClD,MAAI,OAAO,WAAW,OAAW,QAAO,IAAI,MAAM,OAAO,OAAO,MAAM,CAAC;AACvE,SAAO,IAAI,aAAa,8BAA8B,YAAY;AACpE;AAKA,SAAS,cAAc,UAAkB,MAAsB;AAC7D,QAAM,WAAW,mBAAmB,WAAW,IAAI;AACnD,SAAO,SAAS,SAAS,cAAc,SAAS,MAAM,CAAC,WAAW,IAAI;AACxE;AAEA,eAAe,yBACb,YACA,KACA,WACoE;AACpE,SAAO,MAAM,cAAc,YAAY,CAAC,SAAS,QAAQ,GAAG;AAAA,IAC1D;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA,cAAc;AAAA,EAChB,CAAC;AACH;AAEA,eAAe,uBAAuB,SAA6E;AACjH,QAAM,SAAS,MAAM,cAAc,QAAQ,YAAY,QAAQ,MAAM;AAAA,IACnE,KAAK,QAAQ;AAAA,IACb,OAAO,QAAQ;AAAA,IACf,WAAW,QAAQ;AAAA,IACnB,cAAc;AAAA,IACd,QAAQ,QAAQ;AAAA,IAChB,KAAK,QAAQ;AAAA,EACf,CAAC;AACD,MAAI,aAAa;AACjB,MAAI;AACF,kBAAc,MAAM,SAAS,QAAQ,YAAY,MAAM,GAAG,KAAK;AAAA,EACjE,QAAQ;AAAA,EAER;AACA,SAAO,EAAE,GAAG,QAAQ,WAAW;AACjC;AAWA,eAAe,cAAc,YAAoB,MAAgB,SAAoD;AACnH,SAAO,MAAM,IAAI,QAAuB,CAAC,SAAS,WAAW;AAC3D,QAAI,QAAQ,QAAQ,SAAS;AAC3B,aAAO,aAAa,QAAQ,MAAM,CAAC;AACnC;AAAA,IACF;AACA,UAAM,QAAQ,cAAc,YAAY,MAAM;AAAA,MAC5C,GAAI,QAAQ,MAAM,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC;AAAA,MAC1C,KAAK,QAAQ;AAAA,MACb,OAAO,CAAC,QAAQ,UAAU,SAAY,WAAW,QAAQ,QAAQ,MAAM;AAAA,MACvE,UAAU,QAAQ,aAAa;AAAA,MAC/B,aAAa;AAAA,IACf,CAAC;AACD,QAAI,SAAS;AACb,QAAI,SAAS;AACb,QAAI,WAAW;AACf,QAAI;AACJ,UAAM,mBAAmB,MAAY;AACnC,UAAI,aAAa;AACf,qBAAa,WAAW;AACxB,sBAAc;AAAA,MAChB;AAAA,IACF;AACA,UAAM,YAAY,CAAC,WAAiC;AAClD,UAAI,MAAM,OAAO,QAAQ,aAAa,SAAS;AAC7C,YAAI;AACF,kBAAQ,KAAK,CAAC,MAAM,KAAK,MAAM;AAC/B;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AACA,YAAM,KAAK,MAAM;AAAA,IACnB;AACA,UAAM,qBAAqB,MAAY;AACrC,uBAAiB;AACjB,oBAAc,WAAW,MAAM,UAAU,SAAS,GAAG,GAAK;AAC1D,kBAAY,MAAM;AAAA,IACpB;AACA,UAAM,UAAU,MAAY;AAC1B,gBAAU,SAAS;AACnB,yBAAmB;AAAA,IACrB;AACA,YAAQ,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AACjE,UAAM,UAAU,QAAQ,YACpB,WAAW,MAAM;AACf,iBAAW;AACX,eAAS;AAAA,QACP;AAAA,QACA;AAAA,sBAAyB,QAAQ,YAAY,oBAAoB,QAAQ,SAAS;AAAA,MACpF;AACA,gBAAU,SAAS;AACnB,yBAAmB;AAAA,IACrB,GAAG,QAAQ,SAAS,IACpB;AACJ,aAAS,MAAM;AACf,UAAM,QAAQ,YAAY,MAAM;AAChC,UAAM,QAAQ,YAAY,MAAM;AAChC,UAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC1C,eAAS,cAAc,QAAQ,KAAK;AAAA,IACtC,CAAC;AACD,UAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC1C,eAAS,cAAc,QAAQ,KAAK;AAAA,IACtC,CAAC;AACD,UAAM,OAAO,GAAG,SAAS,CAAC,UAAiC;AACzD,eAAS,cAAc,QAAQ;AAAA,mCAAsC,MAAM,QAAQ,MAAM,OAAO,EAAE;AAAA,IACpG,CAAC;AACD,UAAM,SAAS,CAAC,OAAyB;AACvC,mBAAa,OAAO;AACpB,uBAAiB;AACjB,cAAQ,QAAQ,oBAAoB,SAAS,OAAO;AACpD,SAAG;AAAA,IACL;AACA,UAAM,GAAG,SAAS,CAAC,UAAU;AAC3B,aAAO,MAAM;AACX;AAAA,UACE,MAAM,MACF,IAAI,MAAM,qDAAqD,YAAY,KAAK,CAAC,IAAI,EAAE,OAAO,MAAM,CAAC,IACrG,IAAI;AAAA,YACF;AAAA,YACA,gDAAgD,UAAU;AAAA,UAC5D;AAAA,QACN;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AACD,UAAM,GAAG,SAAS,CAAC,QAAQ,WAAW;AACpC,aAAO,MAAM;AACX,gBAAQ;AAAA,UACN,QAAQ,WAAY,UAAU,MAAO;AAAA,UACrC,QAAQ,WAAY,UAAU,YAAa;AAAA,UAC3C;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAAA,IACH,CAAC;AACD,QAAI,QAAQ,UAAU,QAAW;AAC/B,UAAI;AACF,cAAM,OAAO,IAAI,QAAQ,KAAK;AAAA,MAChC,SAAS,OAAO;AACd,YAAI,MAAM,uDAAuD,YAAY,KAAK,CAAC,EAAE;AAAA,MACvF;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,SAAS,YAAY,OAAwB;AAC3C,SAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;;;AD3pBO,SAAS,wBACd,QACoD;AACpD,MAAI,OAAO,gBAAgB,UAAW,QAAO,CAAC;AAC9C,MAAI,OAAO,eAAgB,QAAO,EAAE,YAAY,OAAO,eAAe;AACtE,SAAO,OAAO,iBAAiB,EAAE,SAAS,OAAO,eAAe,IAAI,CAAC;AACvE;AAmBO,SAAS,oCACd,QAIA,YAAuC,CAAC,GACb;AAC3B,SAAO;AAAA,IACL,cAAc,OAAO;AAAA,IACrB,0BAA0B,OAAO;AAAA,IACjC,wBAAwB,OAAO;AAAA,IAC/B,GAAG;AAAA,EACL;AACF;AAeA,SAAS,6BAA6B,OAAyB;AAC7D,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAKrE,MAAI,CAAC,sBAAsB,KAAK,OAAO,GAAG;AACxC,WAAO;AAAA,EACT;AACA,MAAI,iEAAiE,KAAK,OAAO,GAAG;AAClF,WAAO;AAAA,EACT;AAEA,SAAO,oDAAoD,KAAK,OAAO;AACzE;AAEA,IAAM,mBAAsD;AAAA,EAC1D,gBAAgB,CAAC,OAAO;AAAA,EACxB,OAAO,CAAC,cAAc;AAAA,EACtB,cAAc,CAAC,WAAW;AAC5B;AAEA,IAAM,sBAAsB,oBAAI,IAAI,CAAC,gBAAgB,YAAY,CAAC;AAElE,IAAM,2BAA2B,CAAC,aAAa,SAAS,EAAE,KAAK,GAAG;AAClE,IAAM,yBAAyB,CAAC,OAAO,KAAK,EAAE,KAAK,EAAE;AAYrD,IAAM,8BAAmE;AAAA,EACvE,WAAW;AAAA,IACT,SAAS;AAAA,IACT,KAAK;AAAA,IACL,QAAQ,CAAC;AAAA,IACT,CAAC,sBAAsB,GAAG;AAAA,EAC5B;AAAA,EACA,QAAQ;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,QAAQ,CAAC;AAAA,IACT,CAAC,sBAAsB,GAAG;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA,EAIA,CAAC,8BAA8B,GAAG,uCAAuC;AAC3E;AAOO,IAAM,oBAAN,MAAwB;AAAA,EACrB;AAAA,EACA;AAAA,EAER,YACE,eACA,iBAA4C,CAAC,GAC7C;AACA,SAAK,gBAAgB;AACrB,SAAK,iBAAiB;AAAA,MACpB,GAAG;AAAA,MACH,cACE,qBAAqB,eAAe,YAAY,KAChD,wBAAwB,aAAa,KACrC,4BAA4B;AAAA,IAChC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,YAAY,kBAAqE;AAC/E,UAAM,UAAU,OAAO,qBAAqB,WACxC,EAAE,SAAS,iBAAiB,IAC3B,oBAAoB,CAAC;AAC1B,UAAM,SAAS,KAAK,cAAc,QAAQ,SAAS,QAAW,QAAQ,UAAU;AAChF,WAAO,OAAO,SAAS;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,eACJ,UACA,UAA8B,CAAC,GACM;AACrC,UAAM,SAAS,KAAK;AAAA,MAClB,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AACA,QAAI,OAAO,WAAW,GAAG;AACvB,UAAI,KAAK,+CAA+C;AACxD,aAAO;AAAA,IACT;AAEA,UAAM,WAAW,OACf,mBACwC;AACxC,UAAI,aAAa;AACjB,UAAI,uBAAmD;AAEvD,eAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,YAAI,WAAW,QAAQ,SAAS;AAC9B,gBAAM,YAAY,WAAW,MAAM;AAAA,QACrC;AACA,cAAM,QAAQ,OAAO,CAAC;AACtB,cAAM,aAAa,IAAI;AAEvB,YAAI;AACF,gBAAM,SAAS,MAAM,KAAK,SAAS,OAAO,UAAU,UAAU;AAC9D,cAAI,QAAQ;AACV,kBAAM,WAAW;AAAA,cACf,SAAS,OAAO;AAAA,cAChB,WAAW,MAAM;AAAA,cACjB,OAAO,OAAO;AAAA,YAChB;AACA,gBAAI,WAAW,kBAAkB,CAAC,WAAW,eAAe,QAAQ,GAAG;AACrE,qCAAuB;AACvB,kBAAI,MAAM,iBAAiB,MAAM,WAAW,2CAA2C;AACvF;AAAA,YACF;AACA,gBAAI,YAAY;AACd,kBAAI,MAAM,iCAAiC,MAAM,WAAW,cAAc,CAAC,GAAG;AAAA,YAChF;AACA,mBAAO;AAAA,UACT;AAAA,QACF,SAAS,KAAK;AACZ,cAAI,WAAW,QAAQ,SAAS;AAC9B,kBAAM,YAAY,WAAW,MAAM;AAAA,UACrC;AACA,eACG,WAAW,cAAc,WAAW,wBACrC,6BAA6B,GAAG,GAChC;AACA,gBAAI,MAAM,iBAAiB,MAAM,WAAW,mDAAmD;AAI/F,yBAAa;AAAA,cACX,GAAG;AAAA,cACH,YAAY;AAAA,cACZ,qBAAqB;AAAA,YACvB;AACA,gBAAI;AACF,oBAAM,SAAS,MAAM,KAAK,SAAS,OAAO,UAAU,UAAU;AAC9D,kBAAI,QAAQ;AACV,sBAAM,WAAW;AAAA,kBACf,SAAS,OAAO;AAAA,kBAChB,WAAW,MAAM;AAAA,kBACjB,OAAO,OAAO;AAAA,gBAChB;AACA,oBAAI,CAAC,WAAW,kBAAkB,WAAW,eAAe,QAAQ,GAAG;AACrE,yBAAO;AAAA,gBACT;AACA,uCAAuB;AACvB,oBAAI,MAAM,iBAAiB,MAAM,WAAW,6EAA6E;AACzH;AAAA,cACF;AAAA,YACF,SAAS,YAAY;AACnB,kBAAI,WAAW,QAAQ,QAAS,OAAM,YAAY,WAAW,MAAM;AACnE,oBAAM,gBAAgB,WAAW,uBAC7B,oCACA,sBAAsB,QACpB,WAAW,UACX,OAAO,UAAU;AACvB,kBAAI;AAAA,gBACF,iBAAiB,MAAM,WAAW,+BAA+B,aAAa;AAAA,cAChF;AAAA,YACF;AACA;AAAA,UACF;AACA,gBAAM,WAAW,WAAW,uBACxB,oCACA,eAAe,QACb,IAAI,UACJ,OAAO,GAAG;AAChB,cAAI,MAAM,iBAAiB,MAAM,WAAW,YAAY,QAAQ,mBAAmB;AAAA,QAErF;AAAA,MACF;AAEA,UAAI,KAAK,qBAAqB,OAAO,MAAM,yBAAyB;AACpE,aAAO;AAAA,IACT;AAEA,QAAI,OAAO,QAAQ,cAAc,UAAU;AACzC,UAAI,QAAQ,aAAa,GAAG;AAC1B,YAAI,KAAK,gDAAgD;AACzD,eAAO;AAAA,MACT;AACA,UAAI;AACJ,YAAM,aAAa,IAAI,gBAAgB;AACvC,YAAM,gBAAgB,MAAY;AAChC,mBAAW,MAAM,YAAY,QAAQ,MAAM,CAAC;AAAA,MAC9C;AACA,cAAQ,QAAQ,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AACvE,UAAI,QAAQ,QAAQ,SAAS;AAC3B,sBAAc;AAAA,MAChB;AACA,YAAM,eAAe,EAAE,GAAG,SAAS,QAAQ,WAAW,OAAO;AAC7D,YAAM,QAAQ,SAAS,YAAY;AACnC,YAAM,MAAM,MAAM;AAAA,MAAC,CAAC;AACpB,UAAI;AACF,eAAO,MAAM,QAAQ,KAAK;AAAA,UACxB;AAAA,UACA,IAAI,QAAc,CAAC,YAAY;AAC7B,4BAAgB,WAAW,MAAM;AAC/B,kBAAI,KAAK,iCAAiC,QAAQ,SAAS,IAAI;AAC/D,yBAAW;AAAA,gBACT,IAAI,MAAM,gCAAgC,QAAQ,SAAS,IAAI;AAAA,cACjE;AACA,sBAAQ,IAAI;AAAA,YACd,GAAG,QAAQ,SAAS;AAAA,UACtB,CAAC;AAAA,QACH,CAAC;AAAA,MACH,UAAE;AACA,YAAI,cAAe,cAAa,aAAa;AAC7C,gBAAQ,QAAQ,oBAAoB,SAAS,aAAa;AAAA,MAC5D;AAAA,IACF;AAEA,WAAO,MAAM,SAAS,OAAO;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,gBACJ,UACA,QACA,UAA8B,CAAC,GACZ;AACnB,UAAM,WAAW,MAAM,KAAK,wBAAwB,UAAU,QAAQ,OAAO;AAC7E,WAAO,UAAU,UAAU;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,wBACJ,UACA,QACA,UAA8B,CAAC,GAI/B;AACA,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,KAAK,eAAe,UAAU,OAAO;AAAA,IACxD,SAAS,KAAK;AAIZ,UAAI,QAAQ,QAAQ,QAAS,OAAM;AACnC,UAAI,KAAK,+DAA+D,GAAG;AAC3E,aAAO,EAAE,QAAQ,MAAM,eAAe,aAAa;AAAA,IACrD;AACA,QAAI,CAAC,UAAU,SAAS;AAKtB,YAAM,YACJ,KAAK;AAAA,QACH,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,EAAE,SAAS;AACb,aAAO,EAAE,QAAQ,MAAM,eAAe,YAAY,eAAe,YAAY;AAAA,IAC/E;AAEA,QAAI;AACF,YAAM,aAAa,sBAAsB,SAAS,OAAO;AACzD,iBAAW,KAAK,YAAY;AAC1B,YAAI;AACF,gBAAM,SAAS,KAAK,MAAM,CAAC;AAC3B,iBAAO,EAAE,QAAQ,OAAO,MAAM,MAAM,GAAG,WAAW,SAAS,UAAU;AAAA,QACvE,QAAQ;AAAA,QAER;AAAA,MACF;AACA,aAAO,EAAE,QAAQ,MAAM,eAAe,QAAQ;AAAA,IAChD,SAAS,KAAK;AACZ,UAAI,KAAK,oDAAoD,GAAG;AAChE,aAAO,EAAE,QAAQ,MAAM,eAAe,QAAQ;AAAA,IAChD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWQ,cACN,SACA,eACA,oBACA,8BAA8B,MAClB;AACZ,UAAM,QAAoB,CAAC;AAC3B,UAAM,YAAY,KAAK,eAAe,QAAQ,aAAa,CAAC;AAG5D,QAAI;AAEJ,QAAI,oBAAoB,SAAS;AAC/B,oBAAc;AACd,UAAI,MAAM,mDAAmD;AAAA,IAC/D,WAAW,oBAAoB;AAC7B,UAAI,KAAK,4EAA4E;AAAA,IACvF;AAEA,QAAI,CAAC,eAAe,SAAS;AAC3B,YAAM,UAAU,KAAK,eAAe,QAAQ,MAAM;AAAA,QAChD,CAAC,MAAM,EAAE,OAAO;AAAA,MAClB;AACA,UAAI,SAAS,OAAO;AAClB,sBAAc,QAAQ;AACtB,YAAI,MAAM,sCAAsC,OAAO,eAAe;AAAA,MACxE,OAAO;AACL,YAAI;AAAA,UACF,gCAAgC,OAAO;AAAA,QACzC;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,aAAa;AAChB,oBAAc,KAAK,eAAe,QAAQ,UAAU;AAAA,IACtD;AAGA,UAAM,eAAyB,CAAC;AAEhC,UAAM,iBAAiB,CAAC,UAAyB;AAC/C,UAAI,OAAO,UAAU,SAAU;AAC/B,YAAM,UAAU,MAAM,KAAK;AAC3B,UAAI,QAAQ,SAAS,KAAK,CAAC,aAAa,SAAS,OAAO,GAAG;AACzD,qBAAa,KAAK,OAAO;AAAA,MAC3B;AAAA,IACF;AAEA,mBAAe,aAAa;AAC5B,mBAAe,aAAa,OAAO;AAEnC,QAAI,MAAM,QAAQ,aAAa,SAAS,GAAG;AACzC,iBAAW,MAAM,YAAY,WAAW;AACtC,uBAAe,EAAE;AAAA,MACnB;AAAA,IACF;AAGA,eAAW,eAAe,cAAc;AACtC,YAAM,WAAW,KAAK,iBAAiB,aAAa,SAAS;AAC7D,UAAI,UAAU;AACZ,cAAM,KAAK,QAAQ;AAAA,MACrB;AAAA,IACF;AASA,QAAI,+BAA+B,oBAAoB,WAAW,aAAa,SAAS,GAAG;AAIzF,YAAM,WAAW,KAAK,eAAe,QAAQ,UAAU;AACvD,YAAM,iBAA2B;AAAA,QAC/B,GAAI,OAAO,UAAU,YAAY,WAAW,CAAC,SAAS,OAAO,IAAI,CAAC;AAAA,QAClE,GAAI,MAAM,QAAQ,UAAU,SAAS,IAAI,SAAS,YAAY,CAAC;AAAA,MACjE;AACA,iBAAW,aAAa,gBAAgB;AACtC,YAAI,OAAO,cAAc,SAAU;AACnC,cAAM,UAAU,UAAU,KAAK;AAC/B,YAAI,QAAQ,WAAW,KAAK,aAAa,SAAS,OAAO,EAAG;AAC5D,cAAM,aAAa,KAAK,iBAAiB,SAAS,SAAS;AAC3D,YAAI,YAAY;AACd,gBAAM,KAAK,UAAU;AACrB,uBAAa,KAAK,OAAO;AACzB,cAAI;AAAA,YACF,iDAAiD,OAAO;AAAA,UAC1D;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKQ,iBACN,aACA,WACiB;AAEjB,UAAM,QAAQ,YAAY,MAAM,GAAG;AACnC,QAAI,MAAM,SAAS,GAAG;AACpB,UAAI,KAAK,uCAAuC,WAAW,EAAE;AAC7D,aAAO;AAAA,IACT;AAEA,UAAM,sBAAsB,MAAM,CAAC;AACnC,UAAM,UAAU,MAAM,MAAM,CAAC,EAAE,KAAK,GAAG;AAMvC,UAAM,mBAAmB,KAAK,sBAAsB,qBAAqB,SAAS;AAClF,UAAM,iBAAiB,kBAAkB;AACzC,QAAI,CAAC,gBAAgB;AACnB,UAAI;AAAA,QACF,qCAAqC,mBAAmB,YAC7C,KAAK,6BAA6B,mBAAmB,EAAE,KAAK,IAAI,CAAC;AAAA,MAC9E;AACA,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,MACL,YAAY,iBAAiB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,sBACN,YACA,WAC4D;AAC5D,UAAM,aAAa,KAAK,6BAA6B,UAAU;AAC/D,UAAM,kBAAkB,WAAW,OAAO,CAAC,cAAc,cAAc,UAAU;AACjF,UAAM,qBAAqB,oBAAoB,IAAI,UAAU,IACzD,CAAC,GAAG,iBAAiB,UAAU,IAC/B,CAAC,YAAY,GAAG,eAAe;AACnC,eAAW,aAAa,YAAY;AAClC,YAAM,SAAS,UAAU,SAAS;AAClC,UAAI,QAAQ;AACV,YAAI,cAAc,YAAY;AAC5B,cAAI,MAAM,2BAA2B,UAAU,yBAAyB,SAAS,GAAG;AAAA,QACtF;AACA,eAAO,EAAE,YAAY,WAAW,OAAO;AAAA,MACzC;AAAA,IACF;AACA,eAAW,aAAa,oBAAoB;AAC1C,YAAM,SAAS,KAAK,sBAAsB,SAAS;AACnD,UAAI,QAAQ;AACV,YAAI,cAAc,YAAY;AAC5B,cAAI,MAAM,2BAA2B,UAAU,qCAAqC,SAAS,GAAG;AAAA,QAClG;AACA,eAAO,EAAE,YAAY,WAAW,OAAO;AAAA,MACzC;AACA,YAAM,gBAAgB,4BAA4B,SAAS;AAC3D,UAAI,eAAe;AACjB,YAAI,cAAc,YAAY;AAC5B,cAAI,MAAM,2BAA2B,UAAU,mCAAmC;AAClF,iBAAO,EAAE,YAAY,QAAQ,cAAc;AAAA,QAC7C;AACA,YAAI,MAAM,2BAA2B,UAAU,kCAAkC,SAAS,GAAG;AAC7F,eAAO,EAAE,YAAY,WAAW,QAAQ,cAAc;AAAA,MACxD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,6BAA6B,YAA8B;AACjE,UAAM,aAAa,CAAC,YAAY,GAAI,iBAAiB,UAAU,KAAK,CAAC,CAAE;AACvE,WAAO,CAAC,GAAG,IAAI,IAAI,UAAU,CAAC;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,sBAAsB,YAAgD;AAC5E,UAAM,eAAe,wBAAwB;AAC7C,UAAM,SAAS,aAAa,UAAU;AACtC,QAAI,QAAQ;AACV,UAAI,MAAM,oCAAoC,UAAU,4BAA4B,OAAO,OAAO,SAAS,GAAG;AAC9G,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAc,SACZ,OACA,UACA,SAC2E;AAG3E,UAAM,cAAc,MAAM,eAAe,QAAQ,cAC7C,OACA,MAAM,KAAK,mBAAmB,KAAK;AACvC,UAAM,mBAAmB,aAAa,WAAW,MAAM,eAAe;AACtE,UAAM,iBAAiB,aAAa,WAEhC,MAAM,eAAe,QAAQ,eAAe,MAAM,eAAe,WAAW,SACxE,SACA,MAAM,KAAK,sBAAsB,KAAK;AAK9C,UAAM,SAAS,MAAM,eAAe;AACpC,UAAM,kBAAkB,WAAW,uBAC7B,OAAO,WAAW,YAAY,WAAW;AAC/C,QAAI,mBAAmB,CAAC,gBAAgB;AACtC,YAAM,IAAI,MAAM,yBAAyB,MAAM,UAAU,yCAAyC;AAAA,IACpG;AAEA,UAAM,kBAAuC;AAAA,MAC3C,GAAG,MAAM;AAAA,MACT,SAAS;AAAA,MACT,GAAI,iBAAiB,EAAE,QAAQ,eAAe,IAAI,CAAC;AAAA,IACrD;AAEA,QAAI,MAAM,eAAe,QAAQ,sBAAsB;AACrD,aAAO,MAAM,KAAK,cAAc,iBAAiB,MAAM,SAAS,UAAU,OAAO;AAAA,IACnF;AAEA,QAAI,MAAM,eAAe,QAAQ,aAAa;AAG5C,8CAAwC;AACxC,aAAO,MAAM;AAAA,QACX;AAAA,QACA,MAAM;AAAA,QACN;AAAA,QACA,EAAE,WAAW,QAAQ,WAAW,QAAQ,QAAQ,OAAO;AAAA,MACzD;AAAA,IACF;AAEA,QAAI,MAAM,eAAe,QAAQ,eAAe;AAC9C,aAAO,MAAM,KAAK,eAAe,iBAAiB,MAAM,SAAS,UAAU,OAAO;AAAA,IACpF;AAEA,QACE,MAAM,eAAe,QAAQ,sBAC7B,MAAM,eAAe,QAAQ,4BAC7B,MAAM,eAAe,QAAQ,0BAC7B;AACA,aAAO,MAAM,KAAK;AAAA,QAChB;AAAA,QACA,MAAM;AAAA,QACN;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAMA,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,kCAAkC,gBAAgB,OAAO;AAAA,IAC3D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,mBACZ,OACuD;AACvD,QAAI;AACF,YAAM,iBAAiB,MAAM,8BAA8B;AAAA,QACzD,wBAAwB,KAAK,eAAe;AAAA,MAC9C,CAAC;AACD,UAAI,CAAC,eAAgB,QAAO;AAE5B,YAAM,SAAS,MAAM,eAAe;AAAA,QAClC,OAAO;AAAA,UACL,UAAU,MAAM;AAAA,UAChB,IAAI,MAAM;AAAA,UACV,KAAK,MAAM,eAAe;AAAA,UAC1B,SAAS,MAAM,eAAe;AAAA,QAChC;AAAA,QACA,KAAK,KAAK;AAAA,QACV,cAAc,KAAK,eAAe;AAAA,MACpC,CAAC;AAED,UAAI,QAAQ,UAAU,QAAQ,SAAS;AACrC,YAAI;AAAA,UACF,4CAA4C,MAAM,WAAW,cAAc,OAAO,UAAU,SAAS,WAAW,OAAO,QAAQ,SAAS;AAAA,QAC1I;AACA,eAAO,EAAE,QAAQ,OAAO,QAAQ,SAAS,OAAO,QAAQ;AAAA,MAC1D;AAAA,IACF,SAAS,KAAK;AACZ,UAAI;AAAA,QACF,kDAAkD,MAAM,WAAW,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,MAC3H;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,sBAAsB,OAA8C;AAChF,WAAO;AAAA,MACL,MAAM;AAAA,MACN,MAAM,eAAe;AAAA,MACrB,KAAK;AAAA,MACL,KAAK,eAAe;AAAA,MACpB;AAAA,QACE,0BAA0B,KAAK,eAAe;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,WACZ,QACA,SACA,UACA,SACA,cAC2E;AAC3E,UAAM,OAAO,OAAO,QAAQ,QAAQ,OAAO,EAAE;AAC7C,UAAM,MAAM,KAAK,SAAS,KAAK,IAC3B,GAAG,IAAI,sBACP,GAAG,IAAI;AAEX,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,GAAG,OAAO;AAAA,IACZ;AAGA,QAAI,OAAO,UAAU,OAAO,OAAO,WAAW,UAAU;AACtD,UAAI,OAAO,eAAe,OAAO;AAC/B,gBAAQ,eAAe,IAAI,UAAU,OAAO,MAAM;AAAA,MACpD;AAAA,IACF;AAEA,UAAM,OAAO;AAAA,MACX,OAAO;AAAA,MACP;AAAA,MACA,GAAG,+BAA+B,SAAS,QAAQ,eAAe,KAAK;AAAA,QACrE;AAAA,MACF,CAAC;AAAA,MACD,GAAG,8BAA8B,SAAS,QAAQ,aAAa,MAAM;AAAA,QACnE;AAAA,MACF,CAAC;AAAA,MACD,GAAI,QAAQ,aACR;AAAA,QACE,iBAAiB;AAAA,UACf,MAAM;AAAA,UACN,aAAa;AAAA,YACX,MAAM,QAAQ,WAAW;AAAA,YACzB,QAAQ,QAAQ,WAAW,UAAU;AAAA,YACrC,QAAQ,QAAQ,WAAW;AAAA,UAC7B;AAAA,QACF;AAAA,MACF,IACA,CAAC;AAAA,IACP;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,YAAM,IAAI,MAAM,qBAAqB,SAAS,MAAM,IAAI,KAAK,EAAE;AAAA,IACjE;AAEA,UAAM,OAAQ,MAAM,SAAS,KAAK;AAalC,UAAM,UAAU,KAAK,UAAU,CAAC,GAAG,SAAS;AAC5C,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,MAAM,gCAAgC;AAAA,IAClD;AAEA,WAAO;AAAA,MACL;AAAA,MACA,OAAO,KAAK,QACR;AAAA,QACE,aAAa,KAAK,MAAM;AAAA,QACxB,cAAc,KAAK,MAAM;AAAA,QACzB,aAAa,KAAK,MAAM;AAAA,MAC1B,IACA;AAAA,IACN;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,eACZ,QACA,SACA,UACA,SAC2E;AAC3E,UAAM,OAAO,OAAO,QAAQ,QAAQ,OAAO,EAAE;AAC7C,UAAM,MAAM,KAAK,SAAS,MAAM,IAAI,GAAG,IAAI,UAAU,GAAG,IAAI;AAC5D,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,GAAG,OAAO;AAAA,IACZ;AACA,QAAI,OAAO,UAAU,OAAO,OAAO,WAAW,YAAY,OAAO,eAAe,OAAO;AACrF,cAAQ,gBAAgB,UAAU,OAAO,MAAM;AAAA,IACjD;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB,MAAM,KAAK,UAAU;AAAA,QACnB,OAAO;AAAA,QACP;AAAA,QACA,QAAQ;AAAA,QACR,GAAI,OAAO,kBAAkB,EAAE,OAAO,MAAM,IAAI,CAAC;AAAA,QACjD,SAAS;AAAA,UACP,aAAa,QAAQ,eAAe;AAAA,UACpC,aAAa,QAAQ,aAAa;AAAA,QACpC;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,YAAM,IAAI,MAAM,qBAAqB,SAAS,MAAM,IAAI,KAAK,EAAE;AAAA,IACjE;AAEA,UAAM,OAAQ,MAAM,SAAS,KAAK;AAMlC,UAAM,UAAU,KAAK,SAAS,WAAW,KAAK;AAC9C,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,MAAM,gCAAgC;AAAA,IAClD;AAEA,UAAM,cAAc,KAAK,qBAAqB;AAC9C,UAAM,eAAe,KAAK,cAAc;AACxC,WAAO;AAAA,MACL;AAAA,MACA,OAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,aAAa,cAAc;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,oBACZ,QACA,SACA,UACA,SAC2E;AAC3E,UAAM,OAAO,OAAO,QAAQ,QAAQ,OAAO,EAAE;AAC7C,UAAM,MAAM,KAAK,SAAS,KAAK,IAC3B,GAAG,IAAI,eACP,GAAG,IAAI;AAEX,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,GAAG,OAAO;AAAA,IACZ;AAEA,QAAI,OAAO,UAAU,OAAO,OAAO,WAAW,YAAY,OAAO,eAAe,OAAO;AACrF,cAAQ,eAAe,IAAI,UAAU,OAAO,MAAM;AAAA,IACpD;AAEA,UAAM,eAAe,SAClB,OAAO,CAAC,YAAY,QAAQ,SAAS,QAAQ,EAC7C,IAAI,CAAC,YAAY,QAAQ,OAAO,EAChC,KAAK,MAAM,EACX,KAAK;AACR,UAAM,QAAQ,SACX,OAAO,CAAC,YAAY,QAAQ,SAAS,QAAQ,EAC7C,IAAI,CAAC,aAAa;AAAA,MACjB,MAAM,QAAQ;AAAA,MACd,SAAS,CAAC;AAAA,QACR,MAAM,QAAQ,SAAS,cAAc,gBAAgB;AAAA,QACrD,MAAM,QAAQ;AAAA,MAChB,CAAC;AAAA,IACH,EAAE;AAEJ,UAAM,OAAgC;AAAA,MACpC,OAAO;AAAA,MACP;AAAA,MACA,mBAAmB,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,aAAa,IAAI,CAAC;AAAA,MACpE,GAAG,+BAA+B,SAAS,QAAQ,eAAe,KAAK;AAAA,QACrE,cAAc,kCAAkC,OAAO,OAAO;AAAA,MAChE,CAAC;AAAA,MACD,GAAI,QAAQ,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;AAAA,MAC9D,GAAI,QAAQ,cAAc,QAAQ,sBAC9B;AAAA,QACE,MAAM;AAAA,UACJ,QAAQ;AAAA,YACN,MAAM;AAAA,YACN,OAAO,QAAQ,cAAc,QAAQ,qBAAsB;AAAA,YAC3D,QAAS,QAAQ,YAAY,WAAW,QAAQ,sBAAsB,OAAO;AAAA,YAC7E,SAAS,QAAQ,cAAc,QAAQ,qBAAsB;AAAA,UAC/D;AAAA,QACF;AAAA,MACF,IACA,CAAC;AAAA,IACP;AACA,QAAI,aAAa,SAAS,GAAG;AAC3B,WAAK,eAAe;AAAA,IACtB;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,YAAM,IAAI,MAAM,+BAA+B,SAAS,MAAM,IAAI,KAAK,EAAE;AAAA,IAC3E;AAEA,UAAM,OAAQ,MAAM,SAAS,KAAK;AAiBlC,UAAM,aAAa,2BAA2B,IAAI;AAClD,QAAI,CAAC,YAAY;AACf,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC5D;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,KAAK,QACR;AAAA,QACE,aAAa,KAAK,MAAM;AAAA,QACxB,cAAc,KAAK,MAAM;AAAA,QACzB,aAAa,KAAK,MAAM;AAAA,MAC1B,IACA;AAAA,IACN;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,cACZ,QACA,SACA,UACA,SAC2E;AAC3E,UAAM,OAAO,OAAO,QAAQ,QAAQ,OAAO,EAAE;AAC7C,UAAM,MAAM,KAAK,SAAS,KAAK,IAC3B,GAAG,IAAI,cACP,GAAG,IAAI;AAEX,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,qBAAqB;AAAA,MACrB,GAAG,OAAO;AAAA,IACZ;AAGA,QAAI,OAAO,UAAU,OAAO,OAAO,WAAW,UAAU;AACtD,cAAQ,WAAW,IAAI,OAAO;AAAA,IAChC;AAGA,UAAM,gBAAgB,SAAS,KAAK,CAAC,MAAM,EAAE,SAAS,QAAQ,GAAG;AACjE,UAAM,oBAAoB,SAAS,OAAO,CAAC,MAAM,EAAE,SAAS,QAAQ;AAGpE,UAAM,oBAAoB,kBAAkB,IAAI,CAAC,OAAO;AAAA,MACtD,MAAM,EAAE;AAAA,MACR,SAAS,EAAE;AAAA,IACb,EAAE;AAEF,UAAM,OAAgC;AAAA,MACpC,OAAO;AAAA,MACP,UAAU;AAAA,MACV,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,eAAe;AAAA,IACtC;AAEA,QAAI,eAAe;AACjB,WAAK,SAAS;AAAA,IAChB;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,YAAM,IAAI,MAAM,wBAAwB,SAAS,MAAM,IAAI,KAAK,EAAE;AAAA,IACpE;AAEA,UAAM,OAAQ,MAAM,SAAS,KAAK;AAWlC,UAAM,UAAU,KAAK,UAAU,CAAC,GAAG;AACnC,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,MAAM,mCAAmC;AAAA,IACrD;AAEA,WAAO;AAAA,MACL;AAAA,MACA,OAAO,KAAK,QACR;AAAA,QACE,aAAa,KAAK,MAAM;AAAA,QACxB,cAAc,KAAK,MAAM;AAAA,QACzB,cAAc,KAAK,MAAM,gBAAgB,MAAM,KAAK,MAAM,iBAAiB;AAAA,MAC7E,IACA;AAAA,IACN;AAAA,EACF;AACF;AAEA,SAAS,YAAY,QAAwC;AAC3D,QAAM,SAAS,QAAQ;AACvB,SAAO,kBAAkB,QAAQ,SAAS,IAAI,MAAM,8BAA8B;AACpF;AAEA,SAAS,qBAAqB,OAAoC;AAChE,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,IAAI,gBAAgB,OAAO,IAAI;AACzD;AAEA,SAAS,wBAAwB,eAA8D;AAC7F,MAAI,CAAC,iBAAiB,OAAO,kBAAkB,SAAU,QAAO;AAChE,QAAM,MAAM;AACZ,SACE,qBAAqB,IAAI,YAAY,KACrC,qBAAqB,IAAI,aAAa,KACtC,qBAAqB,IAAI,SAAS;AAEtC;AAEA,SAAS,8BAAsC;AAC7C,SAAOC,MAAK,KAAK,eAAe,GAAG,aAAa,WAAW;AAC7D;AAEA,SAAS,2BAA2B,MAUlB;AAChB,MAAI,OAAO,KAAK,gBAAgB,YAAY,KAAK,YAAY,KAAK,EAAE,SAAS,GAAG;AAC9E,WAAO,KAAK;AAAA,EACd;AAEA,QAAM,SAAmB,CAAC;AAC1B,aAAW,QAAQ,KAAK,UAAU,CAAC,GAAG;AACpC,QAAI,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,KAAK,EAAE,SAAS,GAAG;AAChE,aAAO,KAAK,KAAK,IAAI;AAAA,IACvB;AACA,eAAW,QAAQ,KAAK,WAAW,CAAC,GAAG;AACrC,WACG,KAAK,SAAS,iBAAiB,KAAK,SAAS,WAC9C,OAAO,KAAK,SAAS,YACrB,KAAK,KAAK,KAAK,EAAE,SAAS,GAC1B;AACA,eAAO,KAAK,KAAK,IAAI;AAAA,MACvB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAS,OAAO,KAAK,IAAI,EAAE,KAAK;AACtC,SAAO,OAAO,SAAS,IAAI,SAAS;AACtC;","names":["path","path"]}

package/dist/{chunk-RC5DXXWC.js → chunk-YM7YN37H.js}

@@ -1,6 +1,6 @@
 import {
   composeMemoryEnvelope
-} from "./chunk-3QQTXYZ6.js";
+} from "./chunk-LSLCFCCQ.js";
 import {
   log
 } from "./chunk-3WCASNQZ.js";
@@ -17,4 +17,4 @@ function composeSalvagedEnvelope(label, input, ctx) {
 export {
   composeSalvagedEnvelope
 };
-//# sourceMappingURL=chunk-RC5DXXWC.js.map
+//# sourceMappingURL=chunk-YM7YN37H.js.map

package/dist/{chunk-VLXBE57O.js → chunk-YVGXH72Y.js}

@@ -1,7 +1,7 @@
 import {
   projectTagProjectId,
   resolveGitContext
-} from "./chunk-NZXEK3UF.js";
+} from "./chunk-3Q3N35W7.js";
 
 // src/access-coding-context-resolution.ts
 async function resolveCodingContextFromOptions(options) {
@@ -33,4 +33,4 @@ async function resolveCodingContextFromOptions(options) {
 export {
   resolveCodingContextFromOptions
 };
-//# sourceMappingURL=chunk-VLXBE57O.js.map
+//# sourceMappingURL=chunk-YVGXH72Y.js.map

package/dist/{chunk-YQAXP5AC.js → chunk-YXLUTALO.js}

@@ -1,6 +1,6 @@
 import {
   getVerdictKind
-} from "./chunk-JT3EB7ZL.js";
+} from "./chunk-BNGHPYZU.js";
 import {
   scoreImportance
 } from "./chunk-UOBPK2OS.js";
@@ -31,13 +31,13 @@ import {
   resolveSpeaker,
   serializeDayTranscript
 } from "./chunk-UHVXE24Y.js";
-import {
-  composeMemoryEnvelope
-} from "./chunk-3QQTXYZ6.js";
 import {
   countRecallTokenOverlap,
   normalizeRecallTokens
 } from "./chunk-YCVB7X56.js";
+import {
+  composeMemoryEnvelope
+} from "./chunk-LSLCFCCQ.js";
 import {
   log
 } from "./chunk-3WCASNQZ.js";
@@ -1320,4 +1320,4 @@ export {
   syncWearableSource,
   defaultTimezone
 };
-//# sourceMappingURL=chunk-YQAXP5AC.js.map
+//# sourceMappingURL=chunk-YXLUTALO.js.map

package/dist/{chunk-565C6ZFO.js → chunk-Z7YDVHDI.js}

@@ -1,7 +1,7 @@
 import {
   resolveDefaultNamespaceRoot,
   resolveNamespaceStorageRoot
-} from "./chunk-ROKKIMON.js";
+} from "./chunk-EJIEQOPB.js";
 import {
   MutationSerializer,
   withHeldFileLock
@@ -1473,4 +1473,4 @@ export {
   isNamespaceKind,
   NamespaceCatalog
 };
-//# sourceMappingURL=chunk-565C6ZFO.js.map
+//# sourceMappingURL=chunk-Z7YDVHDI.js.map

package/dist/{chunk-O75CRYGF.js → chunk-ZEFVK7XC.js}

@@ -12,4 +12,4 @@ export {
   launchProcess,
   launchProcessSync
 };
-//# sourceMappingURL=chunk-O75CRYGF.js.map
+//# sourceMappingURL=chunk-ZEFVK7XC.js.map

package/dist/chunk-ZEFVK7XC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/runtime/child-process.ts"],"sourcesContent":["import crossSpawn from \"cross-spawn\";\n\ntype ProcessOptions = Record<string, unknown>;\ntype ProcessStream = {\n  destroyed?: boolean;\n  destroy: () => void;\n  end: (chunk?: string | Buffer, callback?: (error?: Error | null) => void) => void;\n  on: (event: string, listener: (...args: any[]) => void) => ProcessStream;\n  once: (event: string, listener: (...args: any[]) => void) => ProcessStream;\n  setEncoding: (encoding: BufferEncoding) => void;\n  write: (chunk: string | Buffer, callback?: (error?: Error | null) => void) => boolean;\n};\ntype ProcessResult = {\n  status: number | null;\n  signal?: NodeJS.Signals | null;\n  error?: Error;\n  stdout?: string;\n  stderr?: string;\n};\n\ntype SpawnApi = {\n  (command: string, args?: readonly string[], options?: ProcessOptions): CommandChildProcess;\n  sync: (command: string, args: readonly string[], options: ProcessOptions) => ProcessResult;\n};\n\nconst spawnApi = crossSpawn as unknown as SpawnApi;\n\nexport type CommandChildProcess = {\n  exitCode?: number | null;\n  killed?: boolean;\n  pid?: number;\n  stderr?: ProcessStream | null;\n  stdin?: ProcessStream | null;\n  stdout?: ProcessStream | null;\n  kill: (signal?: NodeJS.Signals | number) => boolean;\n  on: (event: string, listener: (...args: any[]) => void) => CommandChildProcess;\n  once: (event: string, listener: (...args: any[]) => void) => CommandChildProcess;\n};\n\nexport function launchProcess(\n  command: string,\n  args: string[],\n  options?: ProcessOptions,\n): CommandChildProcess {\n  return spawnApi(command, args, options);\n}\n\nexport function launchProcessSync(\n  command: string,\n  args: string[],\n  options: ProcessOptions,\n): ProcessResult {\n  return spawnApi.sync(command, args, options);\n}\n"],"mappings":";AAAA,OAAO,gBAAgB;AAyBvB,IAAM,WAAW;AAcV,SAAS,cACd,SACA,MACA,SACqB;AACrB,SAAO,SAAS,SAAS,MAAM,OAAO;AACxC;AAEO,SAAS,kBACd,SACA,MACA,SACe;AACf,SAAO,SAAS,KAAK,SAAS,MAAM,OAAO;AAC7C;","names":[]}

package/dist/{chunk-XUE46UYW.js → chunk-ZLN7AROH.js}

@@ -2,14 +2,14 @@ import {
   buildExplicitCaptureDedupKey,
   isTombstoneBlockedCaptureWriteLockBusy,
   normalizeExplicitCaptureContent
-} from "./chunk-H272ZPQ3.js";
+} from "./chunk-SHEHQBCG.js";
+import {
+  isSupportPassportPrivateMemory
+} from "./chunk-PWPIERBM.js";
 import {
   TAG_LIMITS,
   composeMemoryEnvelope
-} from "./chunk-3QQTXYZ6.js";
-import {
-  isSupportPassportPrivateMemory
-} from "./chunk-EEOUMG3J.js";
+} from "./chunk-LSLCFCCQ.js";
 import {
   sanitizeMemoryContent
 } from "./chunk-5GKPFL3S.js";
@@ -787,4 +787,4 @@ export {
   shouldProcessInlineExplicitCapture,
   InlineExplicitCaptureProcessor
 };
-//# sourceMappingURL=chunk-XUE46UYW.js.map
+//# sourceMappingURL=chunk-ZLN7AROH.js.map