@rubytech/create-maxy-code 0.1.568 → 0.1.570

package/payload/platform/scripts/lib/provision-account-dir.sh

@@ -70,151 +70,18 @@ provision_account_dir() {
   [ -d "$ACCOUNT_DIR/.git" ] || git init -q "$ACCOUNT_DIR"
 
   # --- project-level .claude/settings.json (hooks; no allowlist) -------------
+  # The hook set is data, not a heredoc: platform/templates/account-settings.json
+  # is copied verbatim (every $PLATFORM_ROOT in it is a literal Claude Code
+  # resolves at hook-run time, so no substitution is needed). Keeping it as a
+  # file is what lets account-settings-reconcile.sh converge accounts that
+  # already exist, which this writer alone never could — it runs at provision
+  # time, and the upgrade path re-provisions the house account and no other.
   local ACCOUNT_SETTINGS="$ACCOUNT_DIR/.claude/settings.json"
-  local HOOKS_PATH="\$PLATFORM_ROOT/plugins/admin/hooks"
-  cat > "$ACCOUNT_SETTINGS" << SETTINGS_EOF
-{
-  "permissions": {
-    "defaultMode": "bypassPermissions",
-    "allow": [],
-    "deny": []
-  },
-  "hooks": {
-    "PreToolUse": [
-      {
-        "matcher": "Write",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/fs-schema-guard.sh" }
-        ]
-      },
-      {
-        "matcher": "Edit",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/fs-schema-guard.sh" }
-        ]
-      },
-      {
-        "matcher": "NotebookEdit",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/fs-schema-guard.sh" }
-        ]
-      },
-      {
-        "matcher": "Bash",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/fs-schema-guard-bash-pre.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/quote-engine-gate.sh" }
-        ]
-      },
-      {
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/public-tool-surface.sh" }
-        ]
-      },
-      {
-        "matcher": "WebFetch",
-        "hooks": [
-          { "type": "command", "command": "node $HOOKS_PATH/webfetch-preflight.mjs" }
-        ]
-      },
-      {
-        "matcher": "AskUserQuestion",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/askuserquestion-investigate-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/askuserquestion-channel-carrier-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__plugin_browser_browser__browser-pdf-save",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/quote-render-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__plugin_browser_browser__browser-pdf-save",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/preference-consult-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__plugin_email_email__email-send|mcp__plugin_email_email__email-reply|mcp__plugin_email_email__email-draft-send|mcp__plugin_outlook_outlook__outlook-mail-send|mcp__plugin_outlook_outlook__outlook-mail-reply|mcp__plugin_outlook_outlook__outlook-draft-send|SendUserFile",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/preference-consult-gate.sh" }
-        ]
-      }
-    ],
-    "PostToolUse": [
-      {
-        "matcher": "Bash",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/fs-schema-guard-bash-post.sh" }
-        ]
-      },
-      {
-        "matcher": "Agent",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/post-tool-use-agent.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__plugin_browser_browser__browser-pdf-save",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/quote-render-pdf-conformance.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__.*__.*-(export|import)-parse$",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__.*",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/mcp-tool-missing.sh" }
-        ]
-      },
-      {
-        "matcher": "Write",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/admin-authoring-observer.sh" }
-        ]
-      },
-      {
-        "matcher": "Edit",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/admin-authoring-observer.sh" }
-        ]
-      }
-    ],
-    "UserPromptSubmit": [
-      {
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/prompt-optimiser-directive.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/datetime-inject.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/mailbox-inject.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/preference-consult-directive.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/public-tool-surface.sh" }
-        ]
-      }
-    ],
-    "Stop": [
-      {
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/prompt-optimiser-compliance.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/public-tool-surface.sh" }
-        ]
-      }
-    ]
-  }
-}
-SETTINGS_EOF
+  if [ -f "$TEMPLATES_DIR/account-settings.json" ]; then
+    cp "$TEMPLATES_DIR/account-settings.json" "$ACCOUNT_SETTINGS"
+  else
+    echo "  [acct-settings] WARNING: template missing at $TEMPLATES_DIR/account-settings.json — settings.json not written" >&2
+  fi
 
   # --- agent identities + specialist plugin templates ------------------------
   cp "$TEMPLATES_DIR/agents/admin/IDENTITY.md" "$ACCOUNT_DIR/agents/admin/IDENTITY.md"

package/payload/platform/scripts/setup-account.sh

@@ -34,14 +34,6 @@ ACCOUNTS_DIR="$INSTALL_DIR/data/accounts"
 . "$SCRIPT_DIR/lib/resolve-account-dir.sh"
 # shellcheck source=lib/provision-account-dir.sh
 . "$SCRIPT_DIR/lib/provision-account-dir.sh"
-# shellcheck source=lib/account-settings-askgate.sh
-. "$SCRIPT_DIR/lib/account-settings-askgate.sh"
-# shellcheck source=lib/account-settings-pdf-conformance.sh
-. "$SCRIPT_DIR/lib/account-settings-pdf-conformance.sh"
-# shellcheck source=lib/account-settings-mailbox-inject.sh
-. "$SCRIPT_DIR/lib/account-settings-mailbox-inject.sh"
-# shellcheck source=lib/account-settings-public-surface.sh
-. "$SCRIPT_DIR/lib/account-settings-public-surface.sh"
 # shellcheck source=lib/read-brand-json.sh
 . "$SCRIPT_DIR/lib/read-brand-json.sh"
 # Resolve brand-aware persistent users.json path before the resolver runs.
@@ -73,49 +65,15 @@ provision_account_dir "$ACCOUNT_DIR" "$ACCOUNT_ID" "house"
 reconcile_all_accounts_owned_dirs "$ACCOUNTS_DIR"
 
 # ------------------------------------------------------------------
-# 4. Retrofit the AskUserQuestion carrier gate onto every existing account
+# 4. Converge the whole hook set on every account
 # ------------------------------------------------------------------
-# Standing check + durable backfill (Task 1683): provision_account_dir writes the
-# AskUserQuestion PreToolUse matcher (both gates) only at provision time, and this
-# script re-provisions only the house account — so a client sub-account created
-# before Task 1552 keeps a stale matcher with no channel-carrier gate and
-# re-wedges on a channel AskUserQuestion. Reconcile every account on every install
-# so the gate reaches pre-1552 accounts. Idempotent; logs one [backfill-1683] line
-# per account.
-reconcile_all_accounts_askgate "$ACCOUNTS_DIR"
-
-# ------------------------------------------------------------------
-# 5. Retrofit the quote-render PDF-conformance matcher onto every account
-# ------------------------------------------------------------------
-# Standing check + durable backfill (Task 1929): provision_account_dir writes the
-# PostToolUse browser-pdf-save matcher (quote-render-pdf-conformance.sh) only at
-# provision time, and this script re-provisions only the house account. An
-# account created before Task 1922 keeps a settings.json without the matcher and
-# never runs the PDF gate. Reconcile every account on every install so the gate
-# reaches pre-1922 accounts. Idempotent; logs one [backfill-1929] line per account.
-reconcile_all_accounts_pdf_conformance "$ACCOUNTS_DIR"
-
-# ------------------------------------------------------------------
-# 6. Retrofit the per-turn <mailboxes> injection hook onto every account
-# ------------------------------------------------------------------
-# Standing check + durable backfill (Task 2157): provision_account_dir writes the
-# UserPromptSubmit array only at provision time, and this script re-provisions
-# only the house account. A client sub-account created by the account-lifecycle
-# tool keeps a settings.json without mailbox-inject.sh and never gets the
-# standing mailbox list, so its sessions go on learning attachment state by
-# polling one mail plugin and reading that plugin's miss as an account-wide fact.
-# Reconcile every account on every install. Idempotent; logs one [backfill-2157]
-# line per account.
-reconcile_all_accounts_mailbox_inject "$ACCOUNTS_DIR"
-
-# ------------------------------------------------------------------
-# 7. Retrofit the realised-public-tool-surface hook onto every account
-# ------------------------------------------------------------------
-# Standing check + durable backfill (Task 2339): provision_account_dir writes the
-# matcher-less PreToolUse entry and the Stop entry only at provision time, and
-# this script re-provisions only the house account. Without this, the hook that
-# records what a public spawn's tools actually did would reach house accounts
-# only — including not reaching the account where five tools were seen running
-# under a one-tool allowlist. Reconcile every account on every install.
-# Idempotent; logs one [backfill-2339] line per account.
-reconcile_all_accounts_public_surface "$ACCOUNTS_DIR"
+# provision_account_dir writes the full hook set, but only at provision time,
+# and this script re-provisions the house account and no other — so an account
+# created before a hook landed would run a stale set indefinitely. This step
+# converges each account's settings against the shipped template instead, and
+# states the divergence count on every run including zero. It is the single
+# writer of account settings: a hook added to
+# platform/templates/account-settings.json needs no backfill of its own.
+# (Task 2475 retired the four one-hook backfill libs this replaced.)
+. "$SCRIPT_DIR/lib/account-settings-reconcile.sh"
+reconcile_all_accounts_settings "$ACCOUNTS_DIR"

package/payload/platform/services/claude-session-manager/dist/account-agent-registry.d.ts

@@ -10,6 +10,26 @@
  *  into `op=account-agent-registry error`. Exported for its own unit test: the
  *  propagation half cannot be provoked through the filesystem from outside. */
 export declare function ignoringRaceWith(code: 'EEXIST' | 'ENOENT', act: () => void): void;
+/** What the CLI will be able to dispatch from the registry we just wrote.
+ *
+ *  Task 2469 — the mirror is keyed on filename and dispatch is keyed on the
+ *  frontmatter `name`, so `synced=<N>` cannot answer "can this be reached?".
+ *  A card with no name, and two cards claiming one name, both mirror cleanly
+ *  and neither dispatches; a specialist that is never dispatched never fails,
+ *  so no transition log anywhere carries it. Only a state reconcile sees it.
+ *
+ *  Measured over the registry rather than the source directory, because the
+ *  registry is the directory the CLI reads: where an operator's own regular
+ *  file sits at a card's name, that file is what resolves, and it is that file
+ *  this must report on.
+ *
+ *  Exported for its own unit test and for callers that want the state without
+ *  re-running a sync. */
+export declare function resolveRegistryNames(registryDir: string): {
+    resolvable: number;
+    unnamed: string[];
+    dupeNames: string[];
+};
 /** Mirror `<accountDir>/specialists/agents/*.md` into
  *  `<accountDir>/.claude/agents/` as symlinks, and remove every registry
  *  symlink the source no longer has. Emits exactly one line:

package/payload/platform/services/claude-session-manager/dist/account-agent-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-agent-registry.d.ts","sourceRoot":"","sources":["../src/account-agent-registry.ts"],"names":[],"mappings":"AA6BA;;;;;;;;;;+EAU+E;AAC/E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,EAAE,GAAG,EAAE,MAAM,IAAI,GAAG,IAAI,CAOjF;AAED;;;;+EAI+E;AAC/E,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAmF9F"}
+{"version":3,"file":"account-agent-registry.d.ts","sourceRoot":"","sources":["../src/account-agent-registry.ts"],"names":[],"mappings":"AA6BA;;;;;;;;;;+EAU+E;AAC/E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,EAAE,GAAG,EAAE,MAAM,IAAI,GAAG,IAAI,CAOjF;AA6BD;;;;;;;;;;;;;;yBAcyB;AACzB,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG;IACzD,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,CAsBA;AAED;;;;+EAI+E;AAC/E,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAgG9F"}

package/payload/platform/services/claude-session-manager/dist/account-agent-registry.js

@@ -23,7 +23,7 @@
 // It never throws. A registry that cannot be written is a specialist that
 // cannot be dispatched, which is the state before this module existed; a spawn
 // that dies instead is strictly worse.
-import { existsSync, lstatSync, mkdirSync, readdirSync, readlinkSync, symlinkSync, unlinkSync } from 'node:fs';
+import { existsSync, lstatSync, mkdirSync, readdirSync, readFileSync, readlinkSync, symlinkSync, unlinkSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
 /** Two spawns in the same account sync concurrently — an admin session and a
  *  channel session are routine — and they write identical content. Whoever
@@ -46,6 +46,72 @@ export function ignoringRaceWith(code, act) {
         throw err;
     }
 }
+/** The `name:` value from a card's frontmatter, or null. CRLF-tolerant and
+ *  quote-stripping, matching the reader in `specialist-roster.ts` and the one
+ *  in the roster census, so every surface agrees on what a card is called. A
+ *  card that cannot be read — a dangling link, a directory at a `.md` path,
+ *  EACCES — yields null rather than throwing, because "we could not tell" and
+ *  "it does not resolve" are the same answer to the dispatcher. */
+function readFrontmatterName(file) {
+    let raw;
+    try {
+        raw = readFileSync(file, 'utf8');
+    }
+    catch {
+        return null;
+    }
+    const fm = raw.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+    if (!fm)
+        return null;
+    const m = fm[1].match(/^name:\s*(.*?)\r?$/m);
+    if (!m)
+        return null;
+    let value = m[1].trim();
+    if ((value.startsWith('"') && value.endsWith('"')) ||
+        (value.startsWith("'") && value.endsWith("'"))) {
+        value = value.slice(1, -1);
+    }
+    return value || null;
+}
+/** What the CLI will be able to dispatch from the registry we just wrote.
+ *
+ *  Task 2469 — the mirror is keyed on filename and dispatch is keyed on the
+ *  frontmatter `name`, so `synced=<N>` cannot answer "can this be reached?".
+ *  A card with no name, and two cards claiming one name, both mirror cleanly
+ *  and neither dispatches; a specialist that is never dispatched never fails,
+ *  so no transition log anywhere carries it. Only a state reconcile sees it.
+ *
+ *  Measured over the registry rather than the source directory, because the
+ *  registry is the directory the CLI reads: where an operator's own regular
+ *  file sits at a card's name, that file is what resolves, and it is that file
+ *  this must report on.
+ *
+ *  Exported for its own unit test and for callers that want the state without
+ *  re-running a sync. */
+export function resolveRegistryNames(registryDir) {
+    let entries;
+    try {
+        entries = readdirSync(registryDir).filter((n) => n.endsWith('.md')).sort();
+    }
+    catch {
+        return { resolvable: 0, unnamed: [], dupeNames: [] };
+    }
+    const claims = new Map();
+    const unnamed = [];
+    for (const file of entries) {
+        const name = readFrontmatterName(join(registryDir, file));
+        if (name === null) {
+            unnamed.push(file);
+            continue;
+        }
+        claims.set(name, (claims.get(name) ?? 0) + 1);
+    }
+    const dupeNames = Array.from(claims.entries())
+        .filter(([, n]) => n > 1)
+        .map(([name]) => name)
+        .sort();
+    return { resolvable: claims.size, unnamed, dupeNames };
+}
 /** Mirror `<accountDir>/specialists/agents/*.md` into
  *  `<accountDir>/.claude/agents/` as symlinks, and remove every registry
  *  symlink the source no longer has. Emits exactly one line:
@@ -138,6 +204,17 @@ export function syncAccountAgentRegistry(accountDir, log) {
             pruned++;
         }
         log(`op=account-agent-registry synced=${synced} pruned=${pruned} collisions=${collisions.join(',')}`);
+        // Task 2469 — a second line, not three more fields on the first. That one
+        // is a transition record: what this spawn changed. This is a state
+        // reconcile: what is reachable now. Emitted every spawn including zero, so
+        // an account with no specialists is distinguishable from a reconcile that
+        // did not run. On the error path below it is deliberately absent — after a
+        // failed sync the reachable set is unknown, and reporting zero would assert
+        // something this never measured.
+        const resolution = resolveRegistryNames(registryDir);
+        log(`op=agent-registry-resolution resolvable=${resolution.resolvable}` +
+            ` unnamed=${resolution.unnamed.join(',')}` +
+            ` dupeNames=${resolution.dupeNames.join(',')}`);
     }
     catch (err) {
         log(`op=account-agent-registry error reason=${err instanceof Error ? err.message : String(err)}`);

package/payload/platform/services/claude-session-manager/dist/account-agent-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-agent-registry.js","sourceRoot":"","sources":["../src/account-agent-registry.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,uEAAuE;AACvE,gFAAgF;AAChF,0EAA0E;AAC1E,6EAA6E;AAC7E,EAAE;AACF,+DAA+D;AAC/D,6EAA6E;AAC7E,gFAAgF;AAChF,sDAAsD;AACtD,EAAE;AACF,gFAAgF;AAChF,sEAAsE;AACtE,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,uDAAuD;AACvD,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,uCAAuC;AAEvC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAC9G,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAElD;;;;;;;;;;+EAU+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,IAAyB,EAAE,GAAe;IACzE,IAAI,CAAC;QACH,GAAG,EAAE,CAAA;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,IAAI;YAAE,OAAM;QACxD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;+EAI+E;AAC/E,MAAM,UAAU,wBAAwB,CAAC,UAAkB,EAAE,GAA2B;IACtF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAA;IAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IACzD,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,IAAI,CAAC;QACH,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,uEAAuE;QACvE,yEAAyE;QACzE,0DAA0D;QAC1D,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC;YACnC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YAChE,CAAC,CAAC,EAAE,CAAA;QACN,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;YACxC,IAAI,IAAI,GAAwC,IAAI,CAAA;YACpD,IAAI,CAAC;gBACH,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAA;YACjE,CAAC;YACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,uEAAuE;gBACvE,wEAAwE;gBACxE,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;gBAClE,MAAM,EAAE,CAAA;gBACR,SAAQ;YACV,CAAC;YACD,yEAAyE;YACzE,0EAA0E;YAC1E,mEAAmE;YACnE,wBAAwB;YACxB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACrB,SAAQ;YACV,CAAC;YACD,IAAI,OAAe,CAAA;YACnB,IAAI,CAAC;gBACH,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,EAAE,CAAA;YACd,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,oEAAoE;gBACpE,uEAAuE;gBACvE,qEAAqE;gBACrE,oDAAoD;gBACpD,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;gBACtD,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;YACpE,CAAC;YACD,MAAM,EAAE,CAAA;QACV,CAAC;QACD,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,yEAAyE;QACzE,oEAAoE;QACpE,cAAc;QACd,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;QAClC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAQ;YACpC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAQ;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YACzC,IAAI,IAAkC,CAAA;YACtC,IAAI,CAAC;gBACH,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,yEAAyE;YACzE,uDAAuD;YACvD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;gBAAE,SAAQ;YACpC,0EAA0E;YAC1E,oEAAoE;YACpE,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;YACtD,MAAM,EAAE,CAAA;QACV,CAAC;QACD,GAAG,CAAC,oCAAoC,MAAM,WAAW,MAAM,eAAe,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACvG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACnG,CAAC;AACH,CAAC"}
+{"version":3,"file":"account-agent-registry.js","sourceRoot":"","sources":["../src/account-agent-registry.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,uEAAuE;AACvE,gFAAgF;AAChF,0EAA0E;AAC1E,6EAA6E;AAC7E,EAAE;AACF,+DAA+D;AAC/D,6EAA6E;AAC7E,gFAAgF;AAChF,sDAAsD;AACtD,EAAE;AACF,gFAAgF;AAChF,sEAAsE;AACtE,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,uDAAuD;AACvD,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,uCAAuC;AAEvC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAC5H,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAElD;;;;;;;;;;+EAU+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,IAAyB,EAAE,GAAe;IACzE,IAAI,CAAC;QACH,GAAG,EAAE,CAAA;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,IAAI;YAAE,OAAM;QACxD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;mEAKmE;AACnE,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAA;IACnD,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAA;IACpB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAC5C,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnB,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACvB,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;QACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC5B,CAAC;IACD,OAAO,KAAK,IAAI,IAAI,CAAA;AACtB,CAAC;AAED;;;;;;;;;;;;;;yBAcyB;AACzB,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IAKtD,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IACtD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;IACxC,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAA;QACzD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAClB,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/C,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;SAC3C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;SACrB,IAAI,EAAE,CAAA;IACT,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;AACxD,CAAC;AAED;;;;+EAI+E;AAC/E,MAAM,UAAU,wBAAwB,CAAC,UAAkB,EAAE,GAA2B;IACtF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAA;IAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IACzD,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,IAAI,CAAC;QACH,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,uEAAuE;QACvE,yEAAyE;QACzE,0DAA0D;QAC1D,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC;YACnC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YAChE,CAAC,CAAC,EAAE,CAAA;QACN,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;YACxC,IAAI,IAAI,GAAwC,IAAI,CAAA;YACpD,IAAI,CAAC;gBACH,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAA;YACjE,CAAC;YACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,uEAAuE;gBACvE,wEAAwE;gBACxE,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;gBAClE,MAAM,EAAE,CAAA;gBACR,SAAQ;YACV,CAAC;YACD,yEAAyE;YACzE,0EAA0E;YAC1E,mEAAmE;YACnE,wBAAwB;YACxB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACrB,SAAQ;YACV,CAAC;YACD,IAAI,OAAe,CAAA;YACnB,IAAI,CAAC;gBACH,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,EAAE,CAAA;YACd,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,oEAAoE;gBACpE,uEAAuE;gBACvE,qEAAqE;gBACrE,oDAAoD;gBACpD,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;gBACtD,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;YACpE,CAAC;YACD,MAAM,EAAE,CAAA;QACV,CAAC;QACD,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,yEAAyE;QACzE,oEAAoE;QACpE,cAAc;QACd,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;QAClC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAQ;YACpC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAQ;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YACzC,IAAI,IAAkC,CAAA;YACtC,IAAI,CAAC;gBACH,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,yEAAyE;YACzE,uDAAuD;YACvD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;gBAAE,SAAQ;YACpC,0EAA0E;YAC1E,oEAAoE;YACpE,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;YACtD,MAAM,EAAE,CAAA;QACV,CAAC;QACD,GAAG,CAAC,oCAAoC,MAAM,WAAW,MAAM,eAAe,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACrG,0EAA0E;QAC1E,mEAAmE;QACnE,2EAA2E;QAC3E,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,iCAAiC;QACjC,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAA;QACpD,GAAG,CACD,2CAA2C,UAAU,CAAC,UAAU,EAAE;YAClE,YAAY,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YAC1C,cAAc,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC/C,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACnG,CAAC;AACH,CAAC"}

package/payload/platform/services/claude-session-manager/dist/blocked-tool-census.d.ts

@@ -0,0 +1,129 @@
+import type { Logger } from './types.js';
+export declare const TAG = "[blocked-tool]";
+export interface ToolUseRecord {
+    id: string;
+    name: string;
+}
+/** One transcript's scan result. `agentId` is `—` for the session's own
+ *  transcript and `agent-<id>` for a subagent's — the field that distinguishes
+ *  a card the operator CAN see in the session UI from one they cannot. */
+export interface TranscriptScan {
+    agentId: string;
+    path: string;
+    mtimeMs: number;
+    unmatched: ToolUseRecord[];
+}
+export interface BlockedCall {
+    sessionId: string;
+    agentId: string;
+    toolUseId: string;
+    tool: string;
+    blockedForMs: number;
+}
+export interface BlockedCensusSnapshot {
+    /** Transcripts read this tick, across every live session. */
+    scanned: number;
+    blocked: BlockedCall[];
+    /** The session ids that were live this tick. A previously-blocked call whose
+     *  session is no longer here did not resolve — the session went away — and
+     *  reporting that as `op=cleared` would tell the operator the block lifted. */
+    liveSessionIds: string[];
+}
+/** PURE. Every `tool_use` id in these lines with no matching `tool_result`.
+ *  Order is first-sighting order. Malformed lines are skipped, not thrown on:
+ *  a JSONL read can land mid-append. A `tool_use` carrying no `name` is
+ *  reported as `unknown` rather than dropped — an unnamed blocked call is
+ *  still a blocked call. */
+export declare function unmatchedToolUses(lines: readonly string[]): ToolUseRecord[];
+/** PURE. Which unmatched calls are blocked. Blocked means unmatched AND the
+ *  transcript has not advanced for `staleMs`. Without the staleness term every
+ *  in-flight call would be reported, which would make the signal useless. */
+export declare function blockedFromScans(sessionId: string, scans: readonly TranscriptScan[], nowMs: number, staleMs: number): BlockedCall[];
+/** PURE. Emitted every tick INCLUDING zero, so a census that stopped ticking is
+ *  distinguishable from one that found nothing. `sessions` is separate from
+ *  `scanned` on purpose: `sessions=3 scanned=0` is a census that could not
+ *  resolve a transcript for any live session, which without the first field
+ *  reads exactly like a quiet box. */
+export declare function formatBlockedCensus(s: BlockedCensusSnapshot): string;
+/** PURE. */
+export declare function formatBlocked(c: BlockedCall): string;
+/** PURE. Same ids as its `op=blocked` twin, so the pair is greppable. Emitted
+ *  ONLY when the session is still live and the result landed. */
+export declare function formatCleared(c: BlockedCall): string;
+/** PURE. The other way a blocked call leaves the reported set: its session
+ *  stopped being live. The call did NOT resolve, and saying `op=cleared` here
+ *  would tell the operator the block lifted when the session actually went
+ *  away with the card still unanswered. */
+export declare function formatSessionGone(c: BlockedCall): string;
+export declare const DEFAULT_STALE_MS = 120000;
+export declare const DEFAULT_NOTIFY_AFTER_MS = 180000;
+/** A `tool_result` always follows its `tool_use` in the same file, so a
+ *  contiguous tail containing the use contains its result too — unless one
+ *  result exceeds this window, in which case that one call reads as unmatched.
+ *  1 MB is a chosen bound, not a measured one; the failure mode it admits is a
+ *  false `op=blocked` on a call whose result was larger than the window. */
+export declare const TAIL_BYTES: number;
+export interface BlockedCensusIo {
+    listSessionIds(): string[];
+    /** The session's own transcript (`agentId: '—'`) followed by every
+     *  `<sessionId>/subagents/agent-*.jsonl`. */
+    listTranscripts(sessionId: string): Array<{
+        agentId: string;
+        path: string;
+    }>;
+    /** Last `maxBytes` of the file split into lines, plus its mtime. Null when
+     *  the file cannot be read. The first line is dropped when the read started
+     *  mid-record. */
+    readTail(path: string, maxBytes: number): {
+        lines: string[];
+        mtimeMs: number;
+    } | null;
+    now(): number;
+}
+/** IMPURE. `scanned` counts transcripts actually READ, so a session whose
+ *  files vanished does not inflate the count into looking like coverage. */
+export declare function collectBlockedCensus(io: BlockedCensusIo, staleMs: number, tailBytes: number): BlockedCensusSnapshot;
+/** `claudeConfigDir` is the state root (`CLAUDE_CONFIG_DIR`), NOT a spawn cwd.
+ *  Task 1490 re-points the manager's `spawnCwd` per sub-account spawn, so a
+ *  client session's transcript is filed under a slug derived from the
+ *  sub-account directory rather than the house cwd (http-server.ts:815 states
+ *  this: reading `deps.spawnCwd` "would always miss the file"). Keying this
+ *  census on one cwd would make it blind to exactly the sub-account sessions it
+ *  was written for, so it resolves each session through the all-slug scan
+ *  instead. */
+export declare function defaultBlockedCensusIo(claudeConfigDir: string): BlockedCensusIo;
+export interface BlockedToolCensusDeps {
+    /** State root (`CLAUDE_CONFIG_DIR`), not a spawn cwd. See
+     *  defaultBlockedCensusIo for why a cwd cannot be used here. */
+    claudeConfigDir: string;
+    intervalMs: number;
+    staleMs?: number;
+    notifyAfterMs?: number;
+    logger: Logger;
+    /** Injected in tests; production uses defaultBlockedCensusIo(claudeConfigDir). */
+    io?: BlockedCensusIo;
+    /** The loopback POST to the UI's notification route. Absent means log-only. */
+    notify?: (c: BlockedCall) => Promise<{
+        delivered: boolean;
+        channel: string;
+    }>;
+}
+export interface BlockedToolCensus {
+    tickOnce(): BlockedCensusSnapshot;
+    latest(): BlockedCensusSnapshot | null;
+    start(): void;
+    stop(): void;
+}
+export declare function createBlockedToolCensus(deps: BlockedToolCensusDeps): BlockedToolCensus;
+/** Production notifier. POSTs to the brand UI's loopback route, the same
+ *  transport `postLogLineViaFetch` uses. A throw or a non-200 resolves to
+ *  `delivered:false` rather than rejecting: the census logs the outcome either
+ *  way, and a send that failed silently is the blind spot this task closes. */
+export declare function postBlockedNotifyViaFetch(opts: {
+    uiPort: string;
+    logger: Logger;
+}): (c: BlockedCall) => Promise<{
+    delivered: boolean;
+    channel: string;
+}>;
+//# sourceMappingURL=blocked-tool-census.d.ts.map

package/payload/platform/services/claude-session-manager/dist/blocked-tool-census.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocked-tool-census.d.ts","sourceRoot":"","sources":["../src/blocked-tool-census.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAIxC,eAAO,MAAM,GAAG,mBAAmB,CAAA;AAEnC,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;0EAE0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,aAAa,EAAE,CAAA;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,WAAW,EAAE,CAAA;IACtB;;mFAE+E;IAC/E,cAAc,EAAE,MAAM,EAAE,CAAA;CACzB;AAqBD;;;;4BAI4B;AAC5B,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,aAAa,EAAE,CAkB3E;AAED;;6EAE6E;AAC7E,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,SAAS,cAAc,EAAE,EAChC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,WAAW,EAAE,CAUf;AAMD;;;;sCAIsC;AACtC,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,qBAAqB,GAAG,MAAM,CAEpE;AAED,YAAY;AACZ,wBAAgB,aAAa,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAEpD;AAED;iEACiE;AACjE,wBAAgB,aAAa,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAEpD;AAED;;;2CAG2C;AAC3C,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAExD;AAED,eAAO,MAAM,gBAAgB,SAAU,CAAA;AACvC,eAAO,MAAM,uBAAuB,SAAU,CAAA;AAC9C;;;;4EAI4E;AAC5E,eAAO,MAAM,UAAU,QAAc,CAAA;AAErC,MAAM,WAAW,eAAe;IAC9B,cAAc,IAAI,MAAM,EAAE,CAAA;IAC1B;iDAC6C;IAC7C,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC5E;;sBAEkB;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IACrF,GAAG,IAAI,MAAM,CAAA;CACd;AAED;4EAC4E;AAC5E,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,eAAe,EACnB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB,qBAAqB,CAoBvB;AAED;;;;;;;eAOe;AACf,wBAAgB,sBAAsB,CAAC,eAAe,EAAE,MAAM,GAAG,eAAe,CAyD/E;AAED,MAAM,WAAW,qBAAqB;IACpC;oEACgE;IAChE,eAAe,EAAE,MAAM,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,kFAAkF;IAClF,EAAE,CAAC,EAAE,eAAe,CAAA;IACpB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC9E;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,IAAI,qBAAqB,CAAA;IACjC,MAAM,IAAI,qBAAqB,GAAG,IAAI,CAAA;IACtC,KAAK,IAAI,IAAI,CAAA;IACb,IAAI,IAAI,IAAI,CAAA;CACb;AAOD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,GAAG,iBAAiB,CA4EtF;AAED;;;+EAG+E;AAC/E,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,GAAG,CAAC,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CA+BvE"}