@sapiom/harness 0.1.5 → 0.2.0

package/dist/core/rolling-summary.js

@@ -0,0 +1,227 @@
+/**
+ * Rolling session summary — the thing that makes rehydration good rather than
+ * merely possible.
+ *
+ * A resume brief built from the last N turns alone tells a fresh session what
+ * just happened; it cannot tell it what the session was *for*. So, opt-in, we
+ * periodically fold the whole record down to a ≤500-word summary and cache it
+ * at `<generated>/<harnessSessionId>/summary.md`. The brief
+ * (core/resume-brief.ts) picks it up when it's there and degrades cleanly to
+ * last-N-turns when it isn't — which is the default, since this is
+ * setting-gated (`HarnessSettings.rollingSummary`).
+ *
+ * NEVER BLOCKS A TURN. Everything here is fire-and-forget off the ingest path:
+ * `noteEvent` returns synchronously, the fold runs as a headless one-shot
+ * `TaskManager` job (a separate process, a cheap model, `--max-turns 1` — the
+ * bounded shape `HarnessAdapter.launchTask` exists for), and every failure
+ * mode short-circuits to "no summary". A user's session must never be slower,
+ * or fail, because a summary didn't happen.
+ *
+ * The task does not write the file itself. It is asked for the summary text
+ * and nothing else; we write `summary.md` from its `resultText` when it
+ * completes. Two reasons: the target lives under `<generated>/`, outside the
+ * session's cwd — which codex's `workspace-write` sandbox forbids and
+ * claude-code's `acceptEdits` shouldn't be asked to reach — and a task that
+ * writes its own output can half-write it, where a task that returns text
+ * either produces a whole summary or none.
+ *
+ * WHERE IT DOESN'T WORK: `launchTask` is optional on the adapter contract and
+ * codex has no non-interactive mode wired for it, so a codex session simply
+ * never produces a summary and its briefs are last-N-turns. That is a real
+ * gap, stated rather than papered over; the brief is honest either way.
+ */
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import { buildResumeBrief } from "./resume-brief.js";
+/** Filename under `<generated>/<harnessSessionId>/`. */
+export const ROLLING_SUMMARY_FILE = "summary.md";
+/** Completed turns that must accumulate before a re-fold is worth its cost. */
+export const ROLLING_SUMMARY_TURN_INTERVAL = 10;
+/** The contract stated in the prompt, and the clamp applied to what comes back. */
+export const ROLLING_SUMMARY_MAX_WORDS = 500;
+/**
+ * Model alias for the fold. A summary of text we already hold is the cheapest
+ * possible LLM job — pinning a small model here keeps an opt-in background
+ * feature from quietly costing what the user's own session does.
+ */
+export const ROLLING_SUMMARY_MODEL = "haiku";
+/** Hard turn cap: one turn in, one summary out. */
+export const ROLLING_SUMMARY_MAX_TURNS = 1;
+/** Macro id the task is registered under — also TaskManager's dedupe key, so
+ *  a session can never have two folds in flight at once. */
+export const ROLLING_SUMMARY_MACRO_ID = "rolling-summary";
+/**
+ * Token budget for the material handed to the fold. Larger than a brief's
+ * (this is throwaway input to a cheap model, not a system prompt competing
+ * with the user's own context) but still bounded, so a marathon session can't
+ * turn one fold into a huge request.
+ */
+export const ROLLING_SUMMARY_INPUT_MAX_TOKENS = 20000;
+/** Absolute path of a session's cached summary. */
+export function rollingSummaryPath(generatedRoot, harnessSessionId) {
+    return path.join(generatedRoot, harnessSessionId, ROLLING_SUMMARY_FILE);
+}
+/**
+ * The cached summary for a session, or null when there is none — never throws.
+ * A brief that fails to find a summary is a brief without one, not an error.
+ */
+export async function readRollingSummary(generatedRoot, harnessSessionId) {
+    try {
+        const text = await fs.readFile(rollingSummaryPath(generatedRoot, harnessSessionId), "utf8");
+        const trimmed = text.trim();
+        return trimmed.length > 0 ? trimmed : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Trim `text` to at most `maxWords` words, marking the cut. */
+export function clampToWords(text, maxWords = ROLLING_SUMMARY_MAX_WORDS) {
+    const words = text.trim().split(/\s+/);
+    if (words.length <= maxWords)
+        return text.trim();
+    return `${words.slice(0, maxWords).join(" ")} …[summary truncated]`;
+}
+/**
+ * The one-shot prompt handed to `launchTask`. The material is the record
+ * rendered by {@link buildResumeBrief} at a larger budget — deliberately the
+ * same renderer the brief uses, so the fold reads exactly the shape a future
+ * brief will present, and there is one place where "what a record looks like
+ * as text" is defined.
+ *
+ * `previous` is folded back in rather than discarded: the record itself is
+ * capped at the input budget, so on a long session the earliest turns are
+ * already gone from the material, and the last summary is the only surviving
+ * account of them.
+ */
+export function buildRollingSummaryPrompt(record, previous) {
+    const material = buildResumeBrief(record, {
+        summary: previous,
+        maxTokens: ROLLING_SUMMARY_INPUT_MAX_TOKENS,
+        maxTurns: Number.MAX_SAFE_INTEGER,
+    });
+    return [
+        `Summarize the coding session described below in at most ${ROLLING_SUMMARY_MAX_WORDS} words.`,
+        "",
+        "The summary is read by a FRESH agent session that has none of this context,",
+        "so write for someone picking the work up cold. Cover, in this order and only",
+        "where the material actually supports it:",
+        "",
+        "1. What the session was trying to accomplish.",
+        "2. What was decided, and why — decisions are the part a transcript replay",
+        "   cannot reconstruct.",
+        "3. What was actually changed (files, behaviour).",
+        "4. What is unfinished, blocked, or known-broken.",
+        "",
+        "Rules:",
+        "- Output ONLY the summary as markdown prose. No preamble, no sign-off, no",
+        "  code fences around the whole thing.",
+        "- Do not invent anything the material does not state. If something is",
+        "  unclear or was never recorded, say so or leave it out — a confident",
+        "  summary of a gap is the single worst outcome here.",
+        "- Do not use any tools. Everything you need is in this prompt.",
+        "",
+        "--- SESSION MATERIAL ---",
+        "",
+        material,
+    ].join("\n");
+}
+export function createRollingSummarizer(deps) {
+    const turnInterval = deps.turnInterval ?? ROLLING_SUMMARY_TURN_INTERVAL;
+    const onError = deps.onError ?? ((err) => console.error("[harness] rolling summary failed:", err));
+    /** Completed turns seen for a session since its last fold was *started*. */
+    const turnsSinceFold = new Map();
+    /** Fold task id → the session it summarizes, so a completion can be routed
+     *  back. Only ids this summarizer started are ever in here, which is what
+     *  keeps it from writing summary.md for some other background task. */
+    const foldTargets = new Map();
+    /** In-flight promises, awaited by `idle()`. */
+    const pending = new Set();
+    const track = (work) => {
+        const tracked = work.catch(onError).finally(() => pending.delete(tracked));
+        pending.add(tracked);
+    };
+    async function fold(harnessSessionId) {
+        if (!(await deps.enabled()))
+            return;
+        const session = deps.getSession(harnessSessionId);
+        // Gone from the registry (swept, or a task's own id leaking through the
+        // ingest path) — there is nothing to run the fold as.
+        if (!session)
+            return;
+        const record = await deps.readRecord(harnessSessionId);
+        if (!record || record.turns.length === 0)
+            return;
+        const previous = await readRollingSummary(deps.generatedRoot, harnessSessionId);
+        const task = await deps.runTask({
+            macroId: ROLLING_SUMMARY_MACRO_ID,
+            label: "Session summary",
+            harnessSessionId,
+            harness: session.harness,
+            cwd: session.cwd,
+            prompt: buildRollingSummaryPrompt(record, previous),
+            model: ROLLING_SUMMARY_MODEL,
+            maxTurns: ROLLING_SUMMARY_MAX_TURNS,
+        });
+        foldTargets.set(task.id, harnessSessionId);
+    }
+    async function writeSummary(harnessSessionId, text) {
+        const clamped = clampToWords(text.trim());
+        if (clamped.length === 0)
+            return;
+        const filePath = rollingSummaryPath(deps.generatedRoot, harnessSessionId);
+        await fs.mkdir(path.dirname(filePath), { recursive: true });
+        await fs.writeFile(filePath, `${clamped}\n`, "utf8");
+    }
+    return {
+        noteEvent(event) {
+            const sessionId = event.harnessSessionId;
+            if (event.type === "turn.completed") {
+                const count = (turnsSinceFold.get(sessionId) ?? 0) + 1;
+                if (count < turnInterval) {
+                    turnsSinceFold.set(sessionId, count);
+                    return;
+                }
+                // Reset BEFORE the fold rather than after it completes: the counter
+                // paces how often folds are *started*, and resetting on completion
+                // would let a slow fold queue up a second one the moment it lands.
+                turnsSinceFold.set(sessionId, 0);
+                track(fold(sessionId));
+                return;
+            }
+            if (event.type === "session.end") {
+                // Always fold at session end when anything at all happened since the
+                // last one — this is the summary a future rehydration will actually
+                // read, so it must not be `turnInterval - 1` turns stale.
+                const pendingTurns = turnsSinceFold.get(sessionId) ?? 0;
+                turnsSinceFold.delete(sessionId);
+                if (pendingTurns > 0)
+                    track(fold(sessionId));
+            }
+        },
+        noteTaskStatus(task) {
+            const harnessSessionId = foldTargets.get(task.id);
+            if (harnessSessionId === undefined)
+                return;
+            if (task.status === "running")
+                return;
+            foldTargets.delete(task.id);
+            if (task.status === "failed" || !task.resultText) {
+                // A failed fold leaves the previous summary in place — a stale summary
+                // is strictly better than none, and the brief labels its own age via
+                // the record's own timestamps either way.
+                if (task.status === "failed")
+                    onError(new Error(task.errorTail ?? "rolling summary task failed"));
+                return;
+            }
+            track(writeSummary(harnessSessionId, task.resultText));
+        },
+        async idle() {
+            // Re-read the set each pass: writing a summary is itself tracked work
+            // started by an earlier tracked promise.
+            while (pending.size > 0)
+                await Promise.all([...pending]);
+        },
+    };
+}
+//# sourceMappingURL=rolling-summary.js.map

package/dist/core/rolling-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rolling-summary.js","sourceRoot":"","sources":["../../src/core/rolling-summary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,wDAAwD;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC;AACjD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAChD,mFAAmF;AACnF,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAC7C;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAC7C,mDAAmD;AACnD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAC3C;4DAC4D;AAC5D,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC;AAC1D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,KAAM,CAAC;AAEvD,mDAAmD;AACnD,MAAM,UAAU,kBAAkB,CAAC,aAAqB,EAAE,gBAAwB;IAChF,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,gBAAwB;IAExB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,aAAa,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,WAAmB,yBAAyB;IACrF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAqB,EAAE,QAAuB;IACtF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,EAAE;QACxC,OAAO,EAAE,QAAQ;QACjB,SAAS,EAAE,gCAAgC;QAC3C,QAAQ,EAAE,MAAM,CAAC,gBAAgB;KAClC,CAAC,CAAC;IACH,OAAO;QACL,2DAA2D,yBAAyB,SAAS;QAC7F,EAAE;QACF,6EAA6E;QAC7E,8EAA8E;QAC9E,0CAA0C;QAC1C,EAAE;QACF,+CAA+C;QAC/C,2EAA2E;QAC3E,wBAAwB;QACxB,kDAAkD;QAClD,kDAAkD;QAClD,EAAE;QACF,QAAQ;QACR,2EAA2E;QAC3E,uCAAuC;QACvC,uEAAuE;QACvE,uEAAuE;QACvE,sDAAsD;QACtD,gEAAgE;QAChE,EAAE;QACF,0BAA0B;QAC1B,EAAE;QACF,QAAQ;KACT,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAkDD,MAAM,UAAU,uBAAuB,CAAC,IAA2B;IACjE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,6BAA6B,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC,CAAC;IAE5G,4EAA4E;IAC5E,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD;;2EAEuE;IACvE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,+CAA+C;IAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IAEzC,MAAM,KAAK,GAAG,CAAC,IAAmB,EAAQ,EAAE;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC,CAAC;IAEF,KAAK,UAAU,IAAI,CAAC,gBAAwB;QAC1C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAClD,wEAAwE;QACxE,sDAAsD;QACtD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAC9B,OAAO,EAAE,wBAAwB;YACjC,KAAK,EAAE,iBAAiB;YACxB,gBAAgB;YAChB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE,yBAAyB,CAAC,MAAM,EAAE,QAAQ,CAAC;YACnD,KAAK,EAAE,qBAAqB;YAC5B,QAAQ,EAAE,yBAAyB;SACpC,CAAC,CAAC;QACH,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,gBAAwB,EAAE,IAAY;QAChE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACjC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QAC1E,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,OAAO,IAAI,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,OAAO;QACL,SAAS,CAAC,KAAqB;YAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,gBAAgB,CAAC;YACzC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACpC,MAAM,KAAK,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBACvD,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;oBACzB,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;oBACrC,OAAO;gBACT,CAAC;gBACD,oEAAoE;gBACpE,mEAAmE;gBACnE,mEAAmE;gBACnE,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;gBACjC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACjC,qEAAqE;gBACrE,oEAAoE;gBACpE,0DAA0D;gBAC1D,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACxD,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACjC,IAAI,YAAY,GAAG,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,cAAc,CAAC,IAAoB;YACjC,MAAM,gBAAgB,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClD,IAAI,gBAAgB,KAAK,SAAS;gBAAE,OAAO;YAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO;YACtC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjD,uEAAuE;gBACvE,qEAAqE;gBACrE,0CAA0C;gBAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;oBAAE,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,6BAA6B,CAAC,CAAC,CAAC;gBAClG,OAAO;YACT,CAAC;YACD,KAAK,CAAC,YAAY,CAAC,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,KAAK,CAAC,IAAI;YACR,sEAAsE;YACtE,yCAAyC;YACzC,OAAO,OAAO,CAAC,IAAI,GAAG,CAAC;gBAAE,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;QAC3D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/run-local-bootstrap.d.ts

@@ -0,0 +1,93 @@
+/**
+ * run-local bootstrap — the child-process entrypoint behind
+ * `POST /api/runs/local`.
+ *
+ * It runs an agent entirely in-process against stub capabilities
+ * (`runLocalFromDir` from @sapiom/agent-core) and writes the result as an
+ * NDJSON stream to stdout: one line per {@link LocalStepTrace}, then a single
+ * terminal summary line `{ outcome, output, error, unusedStubs, stubWarnings }`.
+ * Fully offline and zero-cost — run-local resolves every `ctx.sapiom.*` call
+ * from stubs and never touches the network.
+ *
+ * Why a separate child process (not an in-process import):
+ *  1. `runLocalFromDir` esbuild-bundles and dynamically `import()`s a workflow
+ *     project the harness doesn't control, so a stray top-level side effect,
+ *     infinite loop, or crash in someone else's step body is bounded to this
+ *     one child instead of taking the long-lived harness server down.
+ *  2. It sidesteps a Vite/Vitest limitation: the dynamic `import(\`file://…\`)`
+ *     inside the loader gets intercepted by the SSR dynamic-import-vars
+ *     transform when pulled into a Vitest module graph, and mishandles the
+ *     tmpdir `file://` URL on darwin. A plain child `node` process never goes
+ *     through that transform. (Mirrors the reasoning in canvas-manifest-check.)
+ *
+ * Contract with the route ({@link createActionsRouter}):
+ *  - Request arrives as one JSON object on **stdin**: `{ sourceDir, input?,
+ *    stubs?, maxAttemptsPerStep? }`.
+ *  - Output is line-oriented JSON on **stdout** — the route forwards each line
+ *    through unchanged, so the shapes here ARE the wire shapes the SPA parses.
+ *  - Diagnostics go to **stderr**; the route keeps a bounded tail for failures.
+ *  - Exit 0 once the terminal line is written (even for a failed run — a failed
+ *    *run* is a successful *invocation*); exit 1 only when no run happened
+ *    (bad request, load error) after writing a terminal `error` line.
+ */
+import { type LocalRunOutcome, type StubFile } from "@sapiom/agent-core";
+/** The request shape the route writes to this child's stdin. */
+export interface RunLocalRequest {
+    /** Absolute path to the agent project directory (contains `index.ts`). */
+    sourceDir: string;
+    /** The workflow's entry-step input (optional; agent-core defaults it). */
+    input?: unknown;
+    /** Explicit stub overrides. When omitted the project's committed
+     *  `.sapiom-dev/stubs.json` is used (agent-core's own precedence). */
+    stubs?: StubFile;
+    /** Per-step attempt cap (optional; agent-core defaults it). */
+    maxAttemptsPerStep?: number;
+}
+/**
+ * The terminal NDJSON line, written after every per-step trace line. Carries
+ * the run-level outcome and the two stub-hygiene signals the inspector surfaces
+ * (WB15-2): `unusedStubs` (supplied keys that matched no capability call) and
+ * `stubWarnings` (keys that matched but carried the wrong shape).
+ *
+ * `kind: "summary"` discriminates it from a step-trace line so a consumer never
+ * has to guess which line is terminal.
+ */
+export interface RunLocalSummaryLine {
+    kind: "summary";
+    outcome: LocalRunOutcome;
+    output?: unknown;
+    error?: unknown;
+    unusedStubs: Array<{
+        step: string;
+        key: string;
+    }>;
+    stubWarnings: string[];
+}
+/**
+ * The terminal line written when the run could not be *invoked* at all — a
+ * malformed request, an unreadable stub file, a project that fails to load.
+ * `outcome` is always `"failed"`; the child then exits non-zero. Distinct from
+ * a `summary` line, which represents a run that actually executed (even if that
+ * run's own outcome was `failed`).
+ */
+export interface RunLocalErrorLine {
+    kind: "error";
+    outcome: "failed";
+    error: string;
+}
+/**
+ * Parse the stdin payload into a {@link RunLocalRequest}. Throws a plain Error
+ * with a caller-safe message (no key material, no provider names) on anything
+ * that isn't a JSON object carrying a non-empty string `sourceDir`.
+ */
+export declare function parseRunLocalRequest(raw: string): RunLocalRequest;
+/**
+ * Run the request and emit its NDJSON stream to `out`. Returns the process exit
+ * code: 0 when a run executed (any outcome), 1 when the run could not be
+ * invoked (a terminal `error` line is emitted first). Never throws — every
+ * failure becomes an in-band terminal line, because a half-written stream with
+ * a thrown stack on stderr is far harder for the route to reason about than a
+ * clean terminal line plus an exit code.
+ */
+export declare function runBootstrap(request: RunLocalRequest, out: NodeJS.WritableStream): Promise<number>;
+//# sourceMappingURL=run-local-bootstrap.d.ts.map

package/dist/core/run-local-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-local-bootstrap.d.ts","sourceRoot":"","sources":["../../src/core/run-local-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,QAAQ,EACd,MAAM,oBAAoB,CAAC;AAE5B,gEAAgE;AAChE,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;0EACsE;IACtE,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,+DAA+D;IAC/D,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,eAAe,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,QAAQ,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAWD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAwBjE;AAYD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,MAAM,CAAC,cAAc,GACzB,OAAO,CAAC,MAAM,CAAC,CAkCjB"}

package/dist/core/run-local-bootstrap.js

@@ -0,0 +1,155 @@
+/**
+ * run-local bootstrap — the child-process entrypoint behind
+ * `POST /api/runs/local`.
+ *
+ * It runs an agent entirely in-process against stub capabilities
+ * (`runLocalFromDir` from @sapiom/agent-core) and writes the result as an
+ * NDJSON stream to stdout: one line per {@link LocalStepTrace}, then a single
+ * terminal summary line `{ outcome, output, error, unusedStubs, stubWarnings }`.
+ * Fully offline and zero-cost — run-local resolves every `ctx.sapiom.*` call
+ * from stubs and never touches the network.
+ *
+ * Why a separate child process (not an in-process import):
+ *  1. `runLocalFromDir` esbuild-bundles and dynamically `import()`s a workflow
+ *     project the harness doesn't control, so a stray top-level side effect,
+ *     infinite loop, or crash in someone else's step body is bounded to this
+ *     one child instead of taking the long-lived harness server down.
+ *  2. It sidesteps a Vite/Vitest limitation: the dynamic `import(\`file://…\`)`
+ *     inside the loader gets intercepted by the SSR dynamic-import-vars
+ *     transform when pulled into a Vitest module graph, and mishandles the
+ *     tmpdir `file://` URL on darwin. A plain child `node` process never goes
+ *     through that transform. (Mirrors the reasoning in canvas-manifest-check.)
+ *
+ * Contract with the route ({@link createActionsRouter}):
+ *  - Request arrives as one JSON object on **stdin**: `{ sourceDir, input?,
+ *    stubs?, maxAttemptsPerStep? }`.
+ *  - Output is line-oriented JSON on **stdout** — the route forwards each line
+ *    through unchanged, so the shapes here ARE the wire shapes the SPA parses.
+ *  - Diagnostics go to **stderr**; the route keeps a bounded tail for failures.
+ *  - Exit 0 once the terminal line is written (even for a failed run — a failed
+ *    *run* is a successful *invocation*); exit 1 only when no run happened
+ *    (bad request, load error) after writing a terminal `error` line.
+ */
+import { runLocalFromDir, } from "@sapiom/agent-core";
+/** Read the entire request payload from a readable stream as one UTF-8 string. */
+async function readAll(stream) {
+    const chunks = [];
+    for await (const chunk of stream) {
+        chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
+    }
+    return Buffer.concat(chunks).toString("utf8");
+}
+/**
+ * Parse the stdin payload into a {@link RunLocalRequest}. Throws a plain Error
+ * with a caller-safe message (no key material, no provider names) on anything
+ * that isn't a JSON object carrying a non-empty string `sourceDir`.
+ */
+export function parseRunLocalRequest(raw) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new Error("run-local request is not valid JSON");
+    }
+    if (typeof parsed !== "object" || parsed === null) {
+        throw new Error("run-local request must be a JSON object");
+    }
+    const body = parsed;
+    const sourceDir = body.sourceDir;
+    if (typeof sourceDir !== "string" || sourceDir.trim() === "") {
+        throw new Error("run-local request requires a non-empty sourceDir");
+    }
+    return {
+        sourceDir,
+        input: body.input,
+        stubs: body.stubs,
+        maxAttemptsPerStep: typeof body.maxAttemptsPerStep === "number"
+            ? body.maxAttemptsPerStep
+            : undefined,
+    };
+}
+/** Serialize one step trace as a single NDJSON line (newline-terminated). */
+function traceLine(step) {
+    return JSON.stringify(step) + "\n";
+}
+/** Serialize the terminal summary as a single NDJSON line. */
+function summaryLine(line) {
+    return JSON.stringify(line) + "\n";
+}
+/**
+ * Run the request and emit its NDJSON stream to `out`. Returns the process exit
+ * code: 0 when a run executed (any outcome), 1 when the run could not be
+ * invoked (a terminal `error` line is emitted first). Never throws — every
+ * failure becomes an in-band terminal line, because a half-written stream with
+ * a thrown stack on stderr is far harder for the route to reason about than a
+ * clean terminal line plus an exit code.
+ */
+export async function runBootstrap(request, out) {
+    try {
+        const result = await runLocalFromDir({
+            sourceDir: request.sourceDir,
+            input: request.input,
+            stubs: request.stubs,
+            maxAttemptsPerStep: request.maxAttemptsPerStep,
+        });
+        // One line per step-attempt, in execution order — the consumer parses them
+        // incrementally rather than buffering the whole trace as a single blob.
+        for (const step of result.steps) {
+            out.write(traceLine(step));
+        }
+        const summary = {
+            kind: "summary",
+            outcome: result.outcome,
+            output: result.output,
+            error: result.error,
+            unusedStubs: result.unusedStubs,
+            stubWarnings: result.stubWarnings,
+        };
+        out.write(summaryLine(summary));
+        return 0;
+    }
+    catch (err) {
+        const errorLine = {
+            kind: "error",
+            outcome: "failed",
+            error: err instanceof Error ? err.message : String(err),
+        };
+        out.write(JSON.stringify(errorLine) + "\n");
+        return 1;
+    }
+}
+/**
+ * Entrypoint: read the request from stdin, run it, exit with the run's code.
+ * A stdin/read failure (or a request that can't be parsed) also degrades to a
+ * terminal `error` line + exit 1 — the route always sees a well-formed final
+ * line regardless of how the child failed.
+ */
+async function main() {
+    let request;
+    try {
+        request = parseRunLocalRequest(await readAll(process.stdin));
+    }
+    catch (err) {
+        const errorLine = {
+            kind: "error",
+            outcome: "failed",
+            error: err instanceof Error ? err.message : String(err),
+        };
+        process.stdout.write(JSON.stringify(errorLine) + "\n");
+        process.exitCode = 1;
+        return;
+    }
+    process.exitCode = await runBootstrap(request, process.stdout);
+}
+// Only self-invoke when run as the child entrypoint, never when imported by a
+// unit test (which drives runBootstrap / parseRunLocalRequest directly). The
+// built entry is dist/core/run-local-bootstrap.js; import.meta.url ends with
+// this module's own file, and process.argv[1] is the script node was told to
+// run — they share a basename only for the real child launch.
+const invokedAsScript = typeof process.argv[1] === "string" &&
+    import.meta.url === new URL(`file://${process.argv[1]}`).href;
+if (invokedAsScript) {
+    void main();
+}
+//# sourceMappingURL=run-local-bootstrap.js.map

package/dist/core/run-local-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-local-bootstrap.js","sourceRoot":"","sources":["../../src/core/run-local-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,EACL,eAAe,GAIhB,MAAM,oBAAoB,CAAC;AA8C5B,kFAAkF;AAClF,KAAK,UAAU,OAAO,CAAC,MAA6B;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,GAAG,MAAiC,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO;QACL,SAAS;QACT,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,IAAI,CAAC,KAA6B;QACzC,kBAAkB,EAChB,OAAO,IAAI,CAAC,kBAAkB,KAAK,QAAQ;YACzC,CAAC,CAAC,IAAI,CAAC,kBAAkB;YACzB,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAS,SAAS,CAAC,IAAoB;IACrC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACrC,CAAC;AAED,8DAA8D;AAC9D,SAAS,WAAW,CAAC,IAAyB;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACrC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAwB,EACxB,GAA0B;IAE1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;SAC/C,CAAC,CAAC;QAEH,2EAA2E;QAC3E,wEAAwE;QACxE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,OAAO,GAAwB;YACnC,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;QACF,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QAChC,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,SAAS,GAAsB;YACnC,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;QACF,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5C,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,IAAI;IACjB,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,oBAAoB,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,SAAS,GAAsB;YACnC,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;QACvD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,OAAO,CAAC,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,8DAA8D;AAC9D,MAAM,eAAe,GACnB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;IACnC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,GAAG,CAAC,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;AAChE,IAAI,eAAe,EAAE,CAAC;IACpB,KAAK,IAAI,EAAE,CAAC;AACd,CAAC"}

package/dist/core/run-state.d.ts

@@ -16,6 +16,7 @@
  * elsewhere in the harness; consolidate into one shared helper when convenient.
  */
 import type { RunView } from "../shared/types.js";
+import { type ApiKeyProvider } from "./api-key-provider.js";
 /** Resolve the agents surface base URL from the environment. */
 export declare function resolveAgentsBaseUrl(): string;
 export type RunStateResult = {
@@ -27,7 +28,12 @@ export type RunStateResult = {
     error: string;
 };
 export interface RunStateFetcherOpts {
-    apiKey: string | null;
+    /**
+     * Sapiom API key. Accepts either a plain `string | null` (the boot-time key)
+     * or an {@link ApiKeyProvider} — pass a provider to get the refresh-on-401
+     * recovery path. A bare string never refreshes.
+     */
+    apiKey: string | null | ApiKeyProvider;
     baseUrl?: string;
     /** Injectable fetch implementation — defaults to global fetch. Test seam. */
     fetchImpl?: typeof fetch;
@@ -35,11 +41,20 @@ export interface RunStateFetcherOpts {
 export interface RunStateFetcher {
     fetch(executionId: string): Promise<RunStateResult>;
 }
+/** Upstream statuses that mean "the API key was rejected" — worth one refresh
+ *  + retry before we give up. 401 is the common case; 403 covers a key that
+ *  authenticated but lost authorization (e.g. rotated to a new org). */
+export declare function isAuthRejection(status: number): boolean;
 /**
  * Create a fetcher that resolves an execution's current render state from the
  * agents surface. The fetcher is intentionally non-throwing: all error paths
  * return a typed {@link RunStateResult} with `ok: false` so the router can
  * forward the appropriate HTTP status without a try/catch at the call site.
+ *
+ * When constructed with an {@link ApiKeyProvider}, a 401/403 from the upstream
+ * call triggers exactly one credential refresh + retry: if the shared store has
+ * a newer key (e.g. the user re-logged-in), the retry uses it and the Studio
+ * recovers in place instead of surfacing a dead-end auth error.
  */
 export declare function createRunStateFetcher(opts: RunStateFetcherOpts): RunStateFetcher;
 //# sourceMappingURL=run-state.d.ts.map

package/dist/core/run-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-state.d.ts","sourceRoot":"","sources":["../../src/core/run-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAGlD,gEAAgE;AAChE,wBAAgB,oBAAoB,IAAI,MAAM,CAM7C;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAC9B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACrD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,mBAAmB,GACxB,eAAe,CA6CjB"}
+{"version":3,"file":"run-state.d.ts","sourceRoot":"","sources":["../../src/core/run-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EACL,KAAK,cAAc,EAEpB,MAAM,uBAAuB,CAAC;AAgB/B,gEAAgE;AAChE,wBAAgB,oBAAoB,IAAI,MAAM,CAM7C;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAC9B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,cAAc,CAAC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACrD;AAED;;wEAEwE;AACxE,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,mBAAmB,GACxB,eAAe,CA4EjB"}