@skaile/workspaces 0.22.0-beta.1 → 0.22.0

package/dist/chunk-SKXCTV55.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runner/src/logging-bootstrap.ts","../runner/src/markdown-stream.ts","../runner/src/context.ts","../runner/src/define-capability.ts","../runner/src/mixin-resolver.ts","../runner/src/composition/types.ts","../runner/src/composition/compile.ts","../runner/src/composition/resolve.ts","../runner/src/composition/bootstrap.ts","../runner/src/environment.ts","../runner/src/manifest.ts","../runner/src/recipe-resolver.ts","../runner/src/recipe-templating.ts","../runner/src/resources.ts","../runner/src/session-builder.ts","../runner/src/agent.ts","../runner/src/resource-handler.ts","../runner/src/ai-credential-refresh.ts","../runner/src/builtin-capabilities.ts","../runner/src/capability-registry.ts","../runner/src/capability-roundtrip.ts","../runner/src/compaction/strategy.ts","../runner/src/compaction/prompt.ts","../runner/src/compaction/orchestrator.ts","../runner/src/file-changed-rewriter.ts","../runner/src/refresh-flag-dispatcher.ts","../runner/src/runner-capabilities.ts","../runner/src/serve-credentials.ts","../runner/src/session-stimulus.ts","../runner/src/serve.ts","../runner/src/session.ts"],"names":["z","path","resolve","fs","content","createHash","z2","parseYaml","existsSync","recipeLog","resolvePath","readFileSync","readdirSync","join","statSync","z4","homedir","dirname","mkdirSync","writeFileSync","buildClientCapabilityHandler","secretProvider","wsConfig","_z","fsWatch"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCO,IAAM,kBAAN,MAAyC;AAAA,EAC7B,OAAmB,EAAC;AAAA,EACpB,GAAA;AAAA,EAEjB,WAAA,CAAY,MAAM,GAAA,EAAK;AACrB,IAAA,IAAA,CAAK,GAAA,GAAM,GAAA;AAAA,EACb;AAAA,EAEA,MAAM,KAAA,EAAuB;AAC3B,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,eAAA,CAAgB,KAAK,CAAC,CAAA;AAC3C,IAAA,IAAA,CAAK,IAAA,CAAK,KAAK,KAAK,CAAA;AACpB,IAAA,IAAI,KAAK,IAAA,CAAK,MAAA,GAAS,KAAK,GAAA,EAAK,IAAA,CAAK,KAAK,KAAA,EAAM;AAAA,EACnD;AAAA,EAEA,WAAW,OAAA,EAA2B;AACpC,IAAA,KAAA,MAAW,KAAA,IAAS,OAAA,EAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAAA,EAC/C;AAAA;AAAA,EAGA,MAAM,EAAA,EAA8B;AAClC,IAAA,OAAO,EAAE,OAAA,EAAS,IAAA,CAAK,IAAA,CAAK,OAAM,EAAE;AAAA,EACtC;AAAA;AAAA,EAGA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,KAAK,MAAA,GAAS,CAAA;AAAA,EACrB;AAAA;AAAA,EAGA,IAAA,GAAe;AACb,IAAA,OAAO,KAAK,IAAA,CAAK,MAAA;AAAA,EACnB;AAAA;AAAA,EAGA,OAAA,GAA+B;AAC7B,IAAA,OAAO,IAAA,CAAK,KAAK,KAAA,EAAM;AAAA,EACzB;AAAA;AAAA,EAGA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,KAAK,MAAA,GAAS,CAAA;AAAA,EACrB;AACF;AAEA,SAAS,gBAAgB,KAAA,EAAyB;AAChD,EAAA,MAAM,KAAK,KAAA,CAAM,SAAA,IAAA,iBAAa,IAAI,IAAA,IAAO,WAAA,EAAY;AACrD,EAAA,MAAM,QAAQ,CAAC,KAAA,CAAM,MAAA,EAAQ,IAAA,EAAM,MAAM,MAAA,EAAQ,OAAA,EAAS,KAAA,CAAM,MAAA,EAAQ,QAAQ,CAAA,CAC7E,MAAA,CAAO,OAAO,CAAA,CACd,KAAK,GAAG,CAAA;AACX,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,GAAO,CAAA,CAAA,EAAI,KAAK,SAAA,CAAU,KAAA,CAAM,IAAI,CAAC,CAAA,CAAA,GAAK,EAAA;AAChE,EAAA,OAAO,CAAA,CAAA,EAAI,EAAE,CAAA,GAAA,EAAM,KAAA,CAAM,KAAK,CAAA,GAAA,EAAM,KAAK,CAAA,EAAA,EAAK,KAAA,CAAM,OAAO,CAAA,EAAG,OAAO;AAAA,CAAA;AACvE;AAEA,IAAI,iBAAA,GAA4C,IAAA;AASzC,SAAS,sBAAA,CAAuB,MAAM,GAAA,EAAsB;AACjE,EAAA,IAAI,mBAAmB,OAAO,iBAAA;AAC9B,EAAA,iBAAA,GAAoB,IAAI,gBAAgB,GAAG,CAAA;AAC3C,EAAA,OAAO,iBAAA;AACT;AAGO,SAAS,kBAAA,GAA6C;AAC3D,EAAA,OAAO,iBAAA;AACT;AAGO,SAAS,oBAAA,GAA6B;AAC3C,EAAA,iBAAA,GAAoB,IAAA;AACtB;AAiCA,IAAI,gBAAA,GAAkC,IAAA;AAQ/B,SAAS,wBAAwB,IAAA,EAAyC;AAC/E,EAAA,MAAM,WAAW,WAAA,EAAY;AAC7B,EAAA,IAAI,QAAA,IAAY,gBAAA,KAAqB,IAAA,CAAK,SAAA,EAAW;AACnD,IAAA,OAAO,EAAE,KAAA,EAAO,QAAA,EAAU,SAAS,MAAM,YAAA,CAAa,QAAQ,CAAA,EAAE;AAAA,EAClE;AAEA,EAAA,MAAM,MAAM,qBAAA,CAAsB;AAAA,IAChC,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,eAAe,IAAA,CAAK,UAAA;AAAA;AAAA;AAAA,IAGpB,WAAW,IAAA,CAAK;AAAA,GACjB,CAAA;AACD,EAAA,MAAM,KAAA,GAAQ,yBAAyB,GAAG,CAAA;AAE1C,EAAA,IAAI,KAAK,KAAA,EAAO;AACd,IAAA,KAAA,CAAM,OAAA,CAAQ,IAAI,eAAA,CAAgB,IAAA,CAAK,KAAK,CAAC,CAAA;AAAA,EAC/C;AAEA,EAAA,IAAI,KAAK,aAAA,EAAe;AACtB,IAAA,KAAA,CAAM,OAAA,CAAQ,IAAI,SAAA,CAAU,EAAE,MAAM,IAAA,CAAK,aAAA,EAAe,CAAC,CAAA;AAAA,EAC3D;AAEA,EAAA,IAAI,QAAA,eAAuB,QAAQ,CAAA;AACnC,EAAA,gBAAA,CAAiB,KAAK,CAAA;AACtB,EAAA,gBAAA,GAAmB,IAAA,CAAK,SAAA;AAOxB,EAAA,MAAM,UAAU,kBAAA,EAAmB;AACnC,EAAA,IAAI,OAAA,UAAiB,KAAA,EAAM;AAE3B,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,SAAS,MAAM;AACb,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,gBAAA,GAAmB,IAAA;AAAA,IACrB;AAAA,GACF;AACF;AAOO,SAAS,mBAAA,GAA4B;AAC1C,EAAA,MAAM,IAAI,WAAA,EAAY;AACtB,EAAA,IAAI,CAAA,eAAgB,CAAC,CAAA;AACrB,EAAA,aAAA,EAAc;AACd,EAAA,gBAAA,GAAmB,IAAA;AACrB;AAEA,SAAS,aAAa,KAAA,EAAuB;AAC3C,EAAA,IAAI;AACF,IAAA,KAAA,CAAM,KAAA,EAAM;AACZ,IAAA,KAAA,CAAM,KAAA,EAAM;AAAA,EACd,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;ACpNA,IAAM,MAAA,GAAS,IAAI,MAAA,CAAO,cAAA,EAAgB,CAAA;AAWnC,IAAM,mBAAN,MAAuB;AAAA,EACpB,MAAA,GAAS,EAAA;AAAA,EACT,eAAA,GAAkB,EAAA;AAAA;AAAA,EAElB,eAAA,GAAkB,EAAA;AAAA,EAClB,MAAA;AAAA,EAER,WAAA,CAAY,MAAA,GAA6B,OAAA,CAAQ,MAAA,EAAQ;AACvD,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA,EAEA,MAAM,KAAA,EAAqB;AACzB,IAAA,IAAA,CAAK,MAAA,IAAU,KAAA;AACf,IAAA,IAAA,CAAK,KAAA,EAAM;AAAA,EACb;AAAA;AAAA,EAGA,GAAA,GAAY;AACV,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,MAAA,GAAS,IAAA,CAAK,gBAAgB,MAAA,EAAQ;AACpD,MAAA,MAAM,OAAO,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,IAAA,CAAK,gBAAgB,MAAM,CAAA;AAC1D,MAAA,IAAI,IAAA,CAAK,MAAK,EAAG;AACf,QAAA,MAAM,QAAA,GAAW,IAAA,CAAK,MAAA,CAAO,IAAI,CAAA;AACjC,QAAA,IAAA,CAAK,MAAA,CAAO,MAAM,QAAQ,CAAA;AAAA,MAC5B;AAAA,IACF;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,EAAA;AACd,IAAA,IAAA,CAAK,eAAA,GAAkB,EAAA;AACvB,IAAA,IAAA,CAAK,eAAA,GAAkB,EAAA;AAAA,EACzB;AAAA,EAEQ,KAAA,GAAc;AAGpB,IAAA,MAAM,cAAc,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,IAAA,CAAK,gBAAgB,MAAM,CAAA;AACjE,IAAA,MAAM,QAAA,GAAW,WAAA,CAAY,WAAA,CAAY,MAAM,CAAA;AAC/C,IAAA,IAAI,aAAa,EAAA,EAAI;AAErB,IAAA,MAAM,QAAA,GAAW,WAAA,CAAY,KAAA,CAAM,CAAA,EAAG,WAAW,CAAC,CAAA;AAClD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,MAAA,CAAO,QAAQ,CAAA;AACrC,IAAA,IAAA,CAAK,MAAA,CAAO,MAAM,QAAQ,CAAA;AAE1B,IAAA,IAAA,CAAK,eAAA,IAAmB,QAAA;AACxB,IAAA,IAAA,CAAK,eAAA,IAAmB,QAAA;AAAA,EAC1B;AAAA,EAEQ,OAAO,GAAA,EAAqB;AAClC,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,GAAG,CAAA;AAC/B,MAAA,IAAI,OAAO,MAAA,KAAW,QAAA,EAAU,OAAO,MAAA;AAGvC,MAAA,OAAO,OAAO,MAAM,CAAA;AAAA,IACtB,CAAA,CAAA,MAAQ;AAEN,MAAA,OAAO,GAAA;AAAA,IACT;AAAA,EACF;AACF;;;ACjEA,IAAM,qBAAA,GAAgD;AAAA,EACpD,MAAA,EACE;AACJ,CAAA;AAWO,SAAS,oBAAoB,OAAA,EAA6D;AAC/F,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,MAAM,MAAA,GACJ,QAAQ,QAAA,KAAa,MAAA,IACrB,QAAQ,UAAA,KAAe,MAAA,IACvB,QAAQ,aAAA,KAAkB,MAAA;AAC5B,EAAA,IAAI,CAAC,QAAQ,OAAO,MAAA;AAEpB,EAAA,MAAM,KAAA,GAAkB,CAAC,aAAA,EAAe,EAAE,CAAA;AAE1C,EAAA,IAAI,QAAQ,QAAA,EAAU;AACpB,IAAA,MAAM,WAAA,GAAc,qBAAA,CAAsB,OAAA,CAAQ,QAAQ,CAAA;AAC1D,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,KAAA,CAAM,KAAK,WAAW,CAAA;AAAA,IACxB,CAAA,MAAO;AACL,MAAA,KAAA,CAAM,IAAA,CAAK,CAAA,2BAAA,EAA8B,OAAA,CAAQ,QAAQ,CAAA,UAAA,CAAY,CAAA;AAAA,IACvE;AACA,IAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AAAA,EACf;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,IAAA,EAAM;AAC/B,IAAA,KAAA,CAAM,IAAA;AAAA,MACJ;AAAA,KACF;AACA,IAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AAAA,EACf,CAAA,MAAA,IAAW,OAAA,CAAQ,UAAA,KAAe,KAAA,EAAO;AACvC,IAAA,KAAA,CAAM,KAAK,gCAAgC,CAAA;AAC3C,IAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AAAA,EACf;AAEA,EAAA,IAAI,OAAA,CAAQ,kBAAkB,YAAA,EAAc;AAC1C,IAAA,KAAA,CAAM,IAAA;AAAA,MACJ;AAAA,KACF;AACA,IAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AAAA,EACf,CAAA,MAAA,IAAW,OAAA,CAAQ,aAAA,KAAkB,WAAA,EAAa;AAChD,IAAA,KAAA,CAAM,IAAA;AAAA,MACJ;AAAA,KACF;AACA,IAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AAAA,EACf;AAGA,EAAA,OAAO,KAAA,CAAM,MAAA,GAAS,CAAA,IAAK,KAAA,CAAM,KAAA,CAAM,SAAS,CAAC,CAAA,KAAM,EAAA,EAAI,KAAA,CAAM,GAAA,EAAI;AAErE,EAAA,OAAO,KAAA,CAAM,KAAK,IAAI,CAAA;AACxB;AC2GO,SAAS,iBAGd,IAAA,EAAqD;AACrD,EAAA,MAAM,WAAA,GAAgBA,EAAA,CAAA,YAAA,CAAa,IAAA,CAAK,KAAA,EAAO;AAAA,IAC7C,MAAA,EAAQ,UAAA;AAAA,IACR,EAAA,EAAI;AAAA,GACL,CAAA;AACD,EAAA,MAAM,YAAA,GAAe,IAAA,CAAK,MAAA,GACnBA,EAAA,CAAA,YAAA,CAAa,KAAK,MAAA,EAAQ;AAAA,IAC3B,MAAA,EAAQ,UAAA;AAAA,IACR,EAAA,EAAI;AAAA,GACL,CAAA,GACD,MAAA;AAEJ,EAAA,OAAO;AAAA,IACL,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,WAAA;AAAA,IACA,YAAA;AAAA,IACA,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,QAAQ,IAAA,CAAK,MAAA;AAAA,IACb,OAAO,IAAA,CAAK,KAAA;AAAA,IACZ,eAAe,IAAA,CAAK,aAAA;AAAA,IACpB,kBAAkB,IAAA,CAAK,gBAAA;AAAA,IACvB,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,eAAe,IAAA,CAAK,aAAA;AAAA,IACpB,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,gBAAgB,IAAA,CAAK,cAAA;AAAA,IACrB,eAAe,IAAA,CAAK,aAAA;AAAA,IACpB,QAAQ,IAAA,CAAK,MAAA;AAAA,IACb,UAAU,IAAA,CAAK,KAAA;AAAA,IACf,WAAW,IAAA,CAAK,MAAA;AAAA,IAChB,SAAS,IAAA,CAAK;AAAA,GAChB;AACF;ACjJA,eAAsB,YAAA,CACpB,GAAA,EACA,WAAA,EACA,QAAA,EACA,KAAA,EAC+B;AAE/B,EAAA,IAAI,IAAI,UAAA,CAAW,GAAG,KAAK,GAAA,CAAI,UAAA,CAAW,GAAG,CAAA,EAAG;AAC9C,IAAA,MAAM,OAAA,GAAU,IAAI,UAAA,CAAW,GAAG,IAAI,GAAA,GAAMC,KAAA,CAAK,IAAA,CAAK,QAAA,EAAU,GAAG,CAAA;AACnE,IAAA,IAAI,gBAAgB,WAAA,EAAa;AAC/B,MAAA,OAAO,iBAAiB,OAAO,CAAA;AAAA,IACjC;AACA,IAAA,MAAM,OAAA,GAAU,MAAM,YAAA,CAAa,OAAO,CAAA;AAC1C,IAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AACrB,IAAA,OAAO,EAAE,SAAS,gBAAA,CAAiB,OAAO,EAAE,IAAA,EAAK,EAAG,QAAQ,OAAA,EAAQ;AAAA,EACtE;AAGA,EAAA,MAAM,EAAE,IAAA,EAAM,IAAA,EAAM,eAAc,GAAI,QAAA,CAAS,KAAK,WAAW,CAAA;AAC/D,EAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,KAAA,EAAO,IAAA,EAAM,MAAM,aAAa,CAAA;AAC1D,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AAEnB,EAAA,IAAI,KAAA,CAAM,SAAS,WAAA,EAAa;AAE9B,IAAA,OAAO,gBAAA,CAAiBA,KAAA,CAAK,OAAA,CAAQ,KAAA,CAAM,MAAM,CAAC,CAAA;AAAA,EACpD;AAGA,EAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,KAAA,CAAM,MAAM,CAAA;AAC3C,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,EAAA,OAAO,EAAE,SAAS,gBAAA,CAAiB,GAAG,EAAE,IAAA,EAAK,EAAG,MAAA,EAAQ,KAAA,CAAM,MAAA,EAAO;AACvE;AAOA,eAAsB,kBAAA,CACpB,QAAA,EACA,QAAA,EACA,KAAA,EAC4B;AAC5B,EAAA,MAAMC,WAAU,CACd,IAAA,EACA,SAEA,OAAA,CAAQ,GAAA,CAAA,CAAK,QAAQ,EAAC,EAAG,GAAA,CAAI,CAAC,MAAM,YAAA,CAAa,CAAA,EAAG,MAAM,QAAA,EAAU,KAAK,CAAC,CAAC,CAAA;AAE7E,EAAA,MAAM,CAAC,cAAA,EAAgB,YAAA,EAAc,gBAAgB,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,IACzEA,QAAAA,CAAQ,QAAA,CAAS,OAAA,EAAS,SAAS,CAAA;AAAA,IACnCA,QAAAA,CAAQ,QAAA,CAAS,KAAA,EAAO,SAAS,CAAA;AAAA,IACjCA,QAAAA,CAAQ,QAAA,CAAS,SAAA,EAAW,WAAW;AAAA,GACxC,CAAA;AAED,EAAA,OAAO;AAAA,IACL,UAAU,cAAA,CAAe,MAAA,CAAO,CAAC,CAAA,KAA0B,MAAM,IAAI,CAAA;AAAA,IACrE,OAAO,YAAA,CAAa,MAAA,CAAO,CAAC,CAAA,KAA0B,MAAM,IAAI,CAAA;AAAA,IAChE,WAAW,gBAAA,CAAiB,MAAA,CAAO,CAAC,CAAA,KAA0B,MAAM,IAAI;AAAA,GAC1E;AACF;AAKA,eAAe,aAAa,QAAA,EAAmC;AAC7D,EAAA,IAAI;AACF,IAAA,OAAO,MAAMC,GAAA,CAAG,QAAA,CAAS,QAAA,EAAU,OAAO,CAAA;AAAA,EAC5C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAA;AAAA,EACT;AACF;AAGA,SAAS,iBAAiB,IAAA,EAAsB;AAC9C,EAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,8BAAA,EAAgC,EAAE,CAAA;AACxD;AAMA,SAAS,QAAA,CACP,KACA,WAAA,EACmE;AACnE,EAAA,IAAI,IAAA,GAAO,IAAI,IAAA,EAAK;AACpB,EAAA,IAAI,IAAA,GAAO,WAAA;AAGX,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AACjC,EAAA,IAAI,aAAa,EAAA,EAAI;AACnB,IAAA,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,QAAQ,EAAE,IAAA,EAAK;AACpC,IAAA,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,QAAA,GAAW,CAAC,EAAE,IAAA,EAAK;AAAA,EACvC;AAGA,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAChC,EAAA,IAAI,OAAA,KAAY,IAAI,IAAA,GAAO,IAAA,CAAK,MAAM,CAAA,EAAG,OAAO,EAAE,IAAA,EAAK;AAGvD,EAAA,IAAI,aAAA;AACJ,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC9B,EAAA,IAAI,UAAU,EAAA,EAAI;AAChB,IAAA,aAAA,GAAgB,KAAK,KAAA,CAAM,KAAA,GAAQ,CAAC,CAAA,CAAE,MAAK,IAAK,MAAA;AAChD,IAAA,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,EAAE,IAAA,EAAK;AAAA,EACnC;AAEA,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,aAAA,EAAc;AAC3C;AAGA,SAAS,WAAA,CACP,KAAA,EACA,IAAA,EACA,IAAA,EACA,aAAA,EAC0B;AAC1B,EAAA,MAAM,WAAA,GAAc,aAAA,GAChB,KAAA,CAAM,aAAa,IACjB,CAAC,KAAA,CAAM,aAAa,CAAC,CAAA,GACrB,EAAC,GACH,MAAA,CAAO,OAAO,KAAK,CAAA;AAEvB,EAAA,KAAA,MAAW,WAAW,WAAA,EAAa;AACjC,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,KAAM,EAAE,IAAA,KAAS,IAAA,IAAQ,CAAA,CAAE,IAAA,KAAS,IAAI,CAAA;AACpE,IAAA,IAAI,OAAO,OAAO,KAAA;AAAA,EACpB;AACA,EAAA,OAAO,MAAA;AACT;AAOA,eAAe,iBAAiB,GAAA,EAA4C;AAC1E,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,WAAA,CAAY,GAAG,CAAA,CAAE,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,CAAS,KAAK,CAAC,CAAA;AAAA,EAC5D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,MAAM,cAAsC,EAAC;AAC7C,EAAA,MAAM,eAAe,MAAM,YAAA,CAAaF,MAAK,IAAA,CAAK,GAAA,EAAK,YAAY,CAAC,CAAA;AACpE,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,MAAM,cAAc,CAAC,GAAG,YAAA,CAAa,QAAA,CAAS,gBAAgB,CAAC,CAAA;AAC/D,IAAA,MAAM,kBAAkB,CAAC,GAAG,YAAA,CAAa,QAAA,CAAS,oBAAoB,CAAC,CAAA;AACvE,IAAA,WAAA,CAAY,OAAA,CAAQ,CAAC,CAAA,EAAG,CAAA,KAAM;AAC5B,MAAA,MAAM,QAAA,GAAW,EAAE,CAAC,CAAA;AACpB,MAAA,IAAI,CAAC,QAAA,EAAU;AACf,MAAA,MAAM,QAAA,GAAW,eAAA,CAAgB,CAAC,CAAA,GAAI,QAAA,CAAS,eAAA,CAAgB,CAAC,CAAA,CAAE,CAAC,CAAA,IAAK,IAAA,EAAM,EAAE,CAAA,GAAI,EAAA;AACpF,MAAA,WAAA,CAAY,QAAQ,CAAA,GAAI,QAAA;AAAA,IAC1B,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,GAAA;AAAA,IACzB,OAAA,CAAQ,GAAA,CAAI,OAAO,QAAA,MAAc;AAAA,MAC/B,QAAA;AAAA,MACA,QAAA,EAAU,WAAA,CAAY,QAAQ,CAAA,IAAK,EAAA;AAAA,MACnC,OAAA,EAAA,CAAU,MAAM,YAAA,CAAaA,KAAA,CAAK,KAAK,GAAA,EAAK,QAAQ,CAAC,CAAA,EAAG,IAAA;AAAK,KAC/D,CAAE;AAAA,GACJ;AAEA,EAAA,MAAM,MAAA,GAAS,KACZ,MAAA,CAAO,CAAC,MAAM,CAAA,CAAE,OAAO,EACvB,IAAA,CAAK,CAAC,GAAG,CAAA,KAAM,CAAA,CAAE,WAAW,CAAA,CAAE,QAAA,IAAY,EAAE,QAAA,CAAS,aAAA,CAAc,CAAA,CAAE,QAAQ,CAAC,CAAA;AAEjF,EAAA,IAAI,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAEhC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,OAAO,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,OAAO,CAAA,CAAE,IAAA,CAAK,aAAa,CAAA;AAAA,IACxD,MAAA,EAAQ;AAAA,GACV;AACF;;;ACtNA,IAAM,qBAAA,GAAiD;AAAA,EACrD,IAAA,EAAM,iBAAA;AAAA,EACN,OAAA,EAAS,iBAAA;AAAA,EACT,OAAA,EAAS,aAAA;AAAA,EACT,KAAA,EAAO,cAAA;AAAA,EACP,SAAA,EAAW,cAAA;AAAA,EACX,SAAA,EAAW,cAAA;AAAA,EACX,KAAA,EAAO,cAAA;AAAA,EACP,MAAA,EAAQ,aAAA;AAAA,EACR,IAAA,EAAM,cAAA;AAAA,EACN,YAAA,EAAc,cAAA;AAAA,EACd,QAAA,EAAU;AACZ,CAAA;AAWO,SAAS,eAAe,IAAA,EAAiC;AAC9D,EAAA,IAAI,IAAA,CAAK,OAAA,EAAS,OAAO,IAAA,CAAK,OAAA;AAC9B,EAAA,OAAO,qBAAA,CAAsB,IAAA,CAAK,IAAI,CAAA,IAAK,cAAA;AAC7C;;;AC5BO,IAAM,yBAAA,GAA4B;AA4DzC,eAAsB,mBAAmB,IAAA,EAA2C;AAClF,EAAA,MAAM,EAAE,QAAA,EAAU,KAAA,EAAO,WAAA,EAAa,gBAAe,GAAI,IAAA;AACzD,EAAA,MAAM,YAAA,GAAeA,KAAAA,CAAK,IAAA,CAAK,QAAA,EAAU,yBAAyB,CAAA;AAClE,EAAA,MAAM,WAAqB,EAAC;AAG5B,EAAA,MAAM,QAAA,GAAW,MAAM,mBAAA,CAAoB,YAAY,CAAA;AACvD,EAAA,MAAM,WAAA,GAAA,CAAe,QAAA,EAAU,cAAA,IAAkB,CAAA,IAAK,CAAA;AAGtD,EAAA,MAAM,UAAkC,EAAC;AACzC,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,OAAA,GAAU,eAAe,IAAI,CAAA;AACnC,IAAA,MAAM,UAAU,MAAM,WAAA,CAAY,IAAA,CAAK,GAAA,EAAK,KAAK,IAAI,CAAA;AAErD,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,QAAA,CAAS,KAAK,CAAA,CAAA,EAAI,IAAA,CAAK,GAAG,CAAA,GAAA,EAAM,IAAA,CAAK,IAAI,CAAA,mCAAA,CAAgC,CAAA;AACzE,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,IAAA,GAAO,WAAW,QAAQ,CAAA,CAAE,OAAO,OAAO,CAAA,CAAE,OAAO,KAAK,CAAA;AAC9D,IAAA,MAAM,UAAU,cAAA,GAAiB,MAAM,cAAA,CAAe,IAAA,CAAK,GAAG,CAAA,GAAI,IAAA;AAElE,IAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,MACX,WAAW,IAAA,CAAK,GAAA;AAAA,MAChB,OAAA;AAAA,MACA,IAAA;AAAA,MACA,OAAA;AAAA,MACA,WAAA,EAAA,iBAAa,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,KACrC,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,QAAA,GAA4B;AAAA,IAChC,cAAA,EAAgB,CAAA;AAAA,IAChB,cAAA,EAAgB,WAAA;AAAA,IAChB,OAAA;AAAA,IACA,WAAA,EAAA,iBAAa,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,GACtC;AAGA,EAAA,MAAM,OAAA,GAAU,GAAG,YAAY,CAAA,IAAA,CAAA;AAC/B,EAAA,MAAME,GAAAA,CAAG,UAAU,OAAA,EAAS,CAAA,EAAG,KAAK,SAAA,CAAU,QAAA,EAAU,IAAA,EAAM,CAAC,CAAC;AAAA,CAAA,EAAM,OAAO,CAAA;AAC7E,EAAA,MAAMA,GAAAA,CAAG,MAAA,CAAO,OAAA,EAAS,YAAY,CAAA;AAErC,EAAA,OAAO;AAAA,IACL,QAAA;AAAA,IACA,YAAA;AAAA,IACA,eAAe,OAAA,CAAQ,MAAA;AAAA,IACvB;AAAA,GACF;AACF;AAaA,eAAsB,oBACpB,YAAA,EACsC;AACtC,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAMA,GAAAA,CAAG,QAAA,CAAS,cAAc,OAAO,CAAA;AACnD,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC7B,IAAA,IAAI,QAAQ,cAAA,KAAmB,CAAA,IAAK,OAAO,MAAA,CAAO,mBAAmB,QAAA,EAAU;AAC7E,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,OAAO,KAAA,CAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUA,eAAsB,2BACpB,QAAA,EACsC;AACtC,EAAA,OAAO,mBAAA,CAAoBF,KAAAA,CAAK,IAAA,CAAK,QAAA,EAAU,yBAAyB,CAAC,CAAA;AAC3E;AChHA,eAAsB,mBACpB,IAAA,EAC8B;AAC9B,EAAA,MAAM,EAAE,KAAA,EAAO,OAAA,EAAS,eAAA,EAAiB,aAAY,GAAI,IAAA;AACzD,EAAA,MAAM,MAAA,GAA8B;AAAA,IAClC,cAAc,EAAC;AAAA,IACf,qBAAqB,EAAC;AAAA,IACtB,UAAU;AAAC,GACb;AAEA,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,OAAA,GAAU,eAAe,IAAI,CAAA;AAEnC,IAAA,IAAI;AACF,MAAA,QAAQ,OAAA;AAAS,QACf,KAAK,iBAAA;AACH,UAAA,MAAM,qBAAA,CAAsB,IAAA,EAAM,OAAA,EAAS,eAAA,EAAiB,aAAa,MAAM,CAAA;AAC/E,UAAA;AAAA,QACF,KAAK,aAAA;AACH,UAAA,MAAM,iBAAA,CAAkB,IAAA,EAAM,OAAA,EAAS,WAAA,EAAa,MAAM,CAAA;AAC1D,UAAA;AAAA,QACF,KAAK,cAAA;AACH,UAAA,MAAM,mBAAA,CAAoB,IAAA,EAAM,OAAA,EAAS,WAAA,EAAa,MAAM,CAAA;AAC5D,UAAA;AAAA;AACJ,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,MAAA,CAAO,QAAA,CAAS,IAAA;AAAA,QACd,CAAA,mBAAA,EAAsB,IAAA,CAAK,GAAG,CAAA,GAAA,EAAM,IAAA,CAAK,IAAI,CAAA,GAAA,EAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,OACrG;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AAMA,eAAe,qBAAA,CACb,IAAA,EACA,OAAA,EACA,eAAA,EACA,aACA,MAAA,EACe;AAEf,EAAA,IAAI,eAAA,EAAiB;AACnB,IAAA,MAAM,KAAA,GAAQ,gBAAgB,OAAA,CAAQ,IAAA;AAAA,MACpC,CAAC,CAAA,KAAM,CAAA,CAAE,cAAc,IAAA,CAAK,GAAA,IAAO,EAAE,OAAA,KAAY;AAAA,KACnD;AACA,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,MAAMG,WAAU,MAAM,WAAA,CAAY,IAAA,CAAK,GAAA,EAAK,KAAK,IAAI,CAAA;AACrD,MAAA,IAAIA,QAAAA,EAAS;AAEX,QAAA,MAAM,IAAA,GAAOC,WAAW,QAAQ,CAAA,CAAE,OAAOD,QAAO,CAAA,CAAE,OAAO,KAAK,CAAA;AAC9D,QAAA,IAAI,IAAA,KAAS,MAAM,IAAA,EAAM;AACvB,UAAA,MAAA,CAAO,QAAA,CAAS,IAAA;AAAA,YACd,IAAI,IAAA,CAAK,GAAG,MAAM,IAAA,CAAK,IAAI,sDAAsD,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,YAAA,EAAU,KAAK,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,qDAAA;AAAA,WACnI;AAAA,QACF;AACA,QAAA,MAAA,CAAO,YAAA,CAAa,IAAA,CAAK,EAAE,GAAA,EAAK,IAAA,CAAK,GAAA,EAAK,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,OAAA,EAAAA,QAAAA,EAAS,OAAA,EAAS,CAAA;AAC7E,QAAA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,EAAA,MAAM,UAAU,MAAM,WAAA,CAAY,IAAA,CAAK,GAAA,EAAK,KAAK,IAAI,CAAA;AACrD,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAA,CAAO,QAAA,CAAS,IAAA;AAAA,MACd,CAAA,CAAA,EAAI,IAAA,CAAK,GAAG,CAAA,GAAA,EAAM,KAAK,IAAI,CAAA,0HAAA;AAAA,KAC7B;AACA,IAAA,MAAA,CAAO,YAAA,CAAa,IAAA,CAAK,EAAE,GAAA,EAAK,IAAA,CAAK,GAAA,EAAK,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,CAAA;AAAA,EAC/E,CAAA,MAAO;AACL,IAAA,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,CAAA,EAAI,IAAA,CAAK,GAAG,CAAA,GAAA,EAAM,IAAA,CAAK,IAAI,CAAA,oBAAA,CAAsB,CAAA;AAAA,EACxE;AACF;AAEA,eAAe,iBAAA,CACb,IAAA,EACA,OAAA,EACA,WAAA,EACA,MAAA,EACe;AACf,EAAA,MAAM,UAAU,MAAM,WAAA,CAAY,IAAA,CAAK,GAAA,EAAK,KAAK,IAAI,CAAA;AACrD,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAA,CAAO,YAAA,CAAa,IAAA,CAAK,EAAE,GAAA,EAAK,IAAA,CAAK,GAAA,EAAK,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,CAAA;AAAA,EAC/E,CAAA,MAAO;AACL,IAAA,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,CAAA,EAAI,IAAA,CAAK,GAAG,CAAA,GAAA,EAAM,IAAA,CAAK,IAAI,CAAA,oBAAA,CAAsB,CAAA;AAAA,EACxE;AACF;AAEA,eAAe,mBAAA,CACb,IAAA,EACA,OAAA,EACA,WAAA,EACA,MAAA,EACe;AAEf,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,WAAA,CAAY,KAAK,GAAG,CAAA;AAGnD,EAAA,MAAM,IAAA,GAAO,cAAc,IAAI,CAAA;AAC/B,EAAA,MAAM,WAAA,GAAc,UAAU,WAAA,IAAe,CAAA,EAAG,KAAK,IAAI,CAAA,EAAA,EAAK,KAAK,GAAG,CAAA,CAAA;AAGtE,EAAA,MAAM,UAAU,MAAM,WAAA,CAAY,IAAA,CAAK,GAAA,EAAK,KAAK,IAAI,CAAA;AACrD,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAA,CAAO,oBAAoB,IAAA,CAAK;AAAA,MAC9B,KAAK,IAAA,CAAK,GAAA;AAAA,MACV,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,IAAA;AAAA,MACA,WAAA;AAAA,MACA;AAAA,KACD,CAAA;AAAA,EACH,CAAA,MAAO;AACL,IAAA,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,CAAA,EAAI,IAAA,CAAK,GAAG,CAAA,GAAA,EAAM,IAAA,CAAK,IAAI,CAAA,2CAAA,CAA6C,CAAA;AAAA,EAC/F;AACF;AAYA,SAAS,cAAc,IAAA,EAAgC;AAIrD,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,CAAI,WAAA,CAAY,GAAG,CAAA;AAC1C,EAAA,IAAI,YAAA;AACJ,EAAA,IAAI,cAAc,EAAA,EAAI;AACpB,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,KAAA,CAAM,YAAY,CAAC,CAAA;AAC/C,IAAA,MAAM,SAAA,GAAY,UAAA,CAAW,OAAA,CAAQ,GAAG,CAAA;AACxC,IAAA,YAAA,GAAe,SAAA,KAAc,EAAA,GAAK,IAAA,CAAK,GAAA,CAAI,KAAA,CAAM,GAAG,SAAA,GAAY,CAAA,GAAI,SAAS,CAAA,GAAI,IAAA,CAAK,GAAA;AAAA,EACxF,CAAA,MAAO;AAEL,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AACtC,IAAA,YAAA,GAAe,SAAA,KAAc,KAAK,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,EAAG,SAAS,IAAI,IAAA,CAAK,GAAA;AAAA,EACxE;AAEA,EAAA,MAAM,OAAA,GAAU,YAAA,CAAa,OAAA,CAAQ,IAAA,EAAM,EAAE,CAAA;AAE7C,EAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,IAAI,CAAA;AACpC;;;ACzIA,eAAsB,wBACpB,IAAA,EACqC;AACrC,EAAA,MAAM,EAAE,QAAA,EAAU,QAAA,EAAU,QAAQ,EAAC,EAAG,KAAI,GAAI,IAAA;AAEhD,EAAA,MAAM,QAAQ,QAAA,CAAS,QAAA;AACvB,EAAA,IAAI,CAAC,KAAA,IAAS,KAAA,CAAM,MAAA,KAAW,GAAG,OAAO,IAAA;AAGzC,EAAA,MAAM,eAAA,GAAkB,MAAM,0BAAA,CAA2B,QAAQ,CAAA;AAMjE,EAAA,MAAM,WAAA,GAAc,OAAO,GAAA,EAAa,IAAA,KAAyC;AAC/E,IAAA,IAAI;AACF,MAAA,MAAM,WAAW,MAAM,YAAA,CAAa,GAAA,EAAK,IAAA,EAAM,UAAU,KAAK,CAAA;AAC9D,MAAA,OAAO,UAAU,OAAA,IAAW,IAAA;AAAA,IAC9B,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF,CAAA;AAKA,EAAA,MAAM,OAAA,GAAU,MAAM,yBAAA,CAA0B,GAAG,CAAA;AAEnD,EAAA,MAAM,MAAA,GAAS,MAAM,kBAAA,CAAmB;AAAA,IACtC,KAAA;AAAA,IACA,OAAA;AAAA,IACA,eAAA;AAAA,IACA;AAAA,GACD,CAAA;AAGD,EAAA,IAAI,GAAA,IAAO,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,CAAA,EAAG;AACrC,IAAA,KAAA,MAAW,OAAA,IAAW,OAAO,QAAA,EAAU;AACrC,MAAA,GAAA,CAAI,KAAK,OAAO,CAAA;AAAA,IAClB;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AAqBO,SAAS,+BAAA,CACd,UACA,OAAA,EACM;AACN,EAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,IAAA,MAAM,MAAM,gBAAA,CAAiB;AAAA,MAC3B,MAAM,KAAA,CAAM,IAAA;AAAA,MACZ,aAAa,CAAA,EAAG,KAAA,CAAM,IAAI,CAAA,EAAA,EAAK,MAAM,GAAG,CAAA,CAAA;AAAA,MACxC,aAAa,KAAA,CAAM,WAAA;AAAA,MACnB,IAAA,EAAM,OAAA;AAAA,MACN,QAAQ,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,MAAM,GAAA,EAAI;AAAA,MAC5C,KAAA,EAAO,SAAA;AAAA,MACP,IAAA,EAAM,OAAA;AAAA,MACN,aAAA,EAAe,KAAA;AAAA,MACf,KAAA,EAASE,EAAA,CAAA,YAAA,CAAa,EAAE,CAAA;AAAA,MACxB,OAAA,EAAS,OAAO,KAAA,EAAO,GAAA,KAAQ;AAC7B,QAAA,GAAA,CAAI,GAAA,CAAI,KAAK,gCAAA,EAAkC;AAAA,UAC7C,KAAK,KAAA,CAAM,GAAA;AAAA,UACX,MAAM,KAAA,CAAM;AAAA,SACb,CAAA;AACD,QAAA,OAAO,EAAE,SAAS,KAAA,CAAM,OAAA,EAAS,KAAK,KAAA,CAAM,GAAA,EAAK,IAAA,EAAM,KAAA,CAAM,IAAA,EAAK;AAAA,MACpE;AAAA,KACD,CAAA;AACD,IAAA,QAAA,CAAS,QAAA,CAAS,KAAK,OAAO,CAAA;AAAA,EAChC;AACF;AAUA,IAAM,YAAA,GAA4B;AAAA,EAChC,aAAa,YAAY,IAAA;AAAA,EACzB,aAAA,EAAe,YAAY,EAAC;AAAA,EAC5B,cAAA,EAAgB,aAAa,EAAC,CAAA;AAAA,EAC9B,aAAa,YAAY,IAAA;AAAA,EACzB,aAAA,EAAe,YAAY,EAAC;AAAA,EAC5B,cAAA,EAAgB,aAAa,EAAC,CAAA;AAAA,EAC9B,gBAAgB,YAAY;AAAA,EAAC,CAAA;AAAA,EAC7B,SAAA,EAAW,aAAa,EAAC,CAAA;AAAA,EACzB,aAAa,YAAY;AAAA,EAAC,CAAA;AAAA,EAC1B,iBAAA,EAAmB,YAAY,EAAC;AAAA,EAChC,mBAAA,EAAqB,YAAY;AACnC,CAAA;AAOA,eAAe,0BAA0B,GAAA,EAAoC;AAK3E,EAAA,MAAM,SAAA,GAAY,QAAQ,GAAA,CAAI,iBAAA,IAAqB,KAAK,OAAA,EAAQ,EAAG,WAAW,UAAU,CAAA;AACxF,EAAA,MAAM,YAAA,GAAe,QAAQ,GAAA,CAAI,oBAAA,IAAwB,KAAK,OAAA,EAAQ,EAAG,WAAW,WAAW,CAAA;AAC/F,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,OAAA,EAAQ,EAAG,WAAW,SAAS,CAAA;AACvD,EAAA,MAAM,MAAA,GAAS;AAAA,IACb,SAAA;AAAA,IACA,IAAA,CAAK,cAAc,UAAU,CAAA;AAAA,IAC7B,IAAA,CAAK,cAAc,QAAQ,CAAA;AAAA,IAC3B,IAAA,CAAK,YAAY,QAAQ;AAAA,GAC3B;AAEA,EAAA,IAAI,CAAC,OAAO,IAAA,CAAK,CAAC,MAAM,UAAA,CAAW,CAAC,CAAC,CAAA,EAAG;AACtC,IAAA,OAAO,YAAA;AAAA,EACT;AAEA,EAAA,IAAI;AAGF,IAAA,MAAM,EAAE,UAAA,EAAW,GAAI,MAAM,OAAO,oBAA4B,CAAA;AAChE,IAAA,OAAO,IAAI,UAAA,EAAW;AAAA,EACxB,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,EAAK,MAAM,CAAA,6BAAA,EAAgC,SAAS,CAAA,EAAA,EAAM,GAAA,CAAc,OAAO,CAAA,CAAE,CAAA;AACjF,IAAA,OAAO,YAAA;AAAA,EACT;AACF;ACpNA,IAAM,aAAA,GAAgB,UAAU,QAAQ,CAAA;AAExC,IAAM,gBAAA,GAAmB,IAAA;AAUzB,IAAM,cAAA,GAAiC;AAAA,EACrC,EAAE,OAAO,QAAA,EAAU,GAAA,EAAK,WAAW,IAAA,EAAM,CAAC,WAAW,CAAA,EAAE;AAAA,EACvD,EAAE,OAAO,SAAA,EAAW,GAAA,EAAK,QAAQ,IAAA,EAAM,CAAC,WAAW,CAAA,EAAE;AAAA,EACrD,EAAE,OAAO,KAAA,EAAO,GAAA,EAAK,OAAO,IAAA,EAAM,CAAC,WAAW,CAAA,EAAE;AAAA,EAChD,EAAE,OAAO,KAAA,EAAO,GAAA,EAAK,OAAO,IAAA,EAAM,CAAC,WAAW,CAAA,EAAE;AAAA,EAChD,EAAE,OAAO,KAAA,EAAO,GAAA,EAAK,OAAO,IAAA,EAAM,CAAC,WAAW,CAAA,EAAE;AAAA,EAChD;AAAA,IACE,KAAA,EAAO,KAAA;AAAA,IACP,GAAA,EAAK,KAAA;AAAA,IACL,IAAA,EAAM,CAAC,WAAW,CAAA;AAAA,IAClB,OAAA,EAAS,CAAC,GAAA,KAAQ,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,CAAE,IAAA,CAAK,GAAG;AAAA;AAEzD,CAAA;AAEA,IAAM,kBAAkB,CAAC,MAAA,EAAQ,IAAA,EAAM,KAAA,EAAO,QAAQ,IAAI,CAAA;AAE1D,eAAe,QAAA,CAAS,KAAa,IAAA,EAAwC;AAC3E,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,aAAA,CAAc,KAAK,IAAA,EAAM,EAAE,OAAA,EAAS,gBAAA,EAAkB,CAAA;AAC/E,IAAA,OAAO,OAAO,IAAA,EAAK,CAAE,MAAM,IAAI,CAAA,CAAE,CAAC,CAAA,IAAK,IAAA;AAAA,EACzC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,eAAe,cAAc,GAAA,EAA+B;AAC1D,EAAA,IAAI;AACF,IAAA,MAAM,aAAA,CAAc,SAAS,CAAC,GAAG,GAAG,EAAE,OAAA,EAAS,kBAAkB,CAAA;AACjE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAcA,eAAsB,wBAAwB,UAAA,EAAiD;AAC7F,EAAA,MAAM,cAAA,GAAiB,MAAM,OAAA,CAAQ,UAAA;AAAA,IACnC,cAAA,CAAe,GAAA,CAAI,OAAO,KAAA,KAAU;AAClC,MAAA,MAAM,MAAM,MAAM,QAAA,CAAS,KAAA,CAAM,GAAA,EAAK,MAAM,IAAI,CAAA;AAChD,MAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,MAAA,MAAM,UAAU,KAAA,CAAM,OAAA,GAAU,KAAA,CAAM,OAAA,CAAQ,GAAG,CAAA,GAAI,GAAA;AACrD,MAAA,OAAO,EAAE,KAAA,EAAO,KAAA,CAAM,KAAA,EAAO,OAAA,EAAQ;AAAA,IACvC,CAAC;AAAA,GACH;AAEA,EAAA,MAAM,kBAAkB,MAAM,OAAA,CAAQ,WAAW,eAAA,CAAgB,GAAA,CAAI,aAAa,CAAC,CAAA;AAEnF,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,KAAA,MAAW,UAAU,cAAA,EAAgB;AACnC,IAAA,IAAI,MAAA,CAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,KAAA,EAAO;AACjD,MAAA,QAAA,CAAS,IAAA,CAAK,GAAG,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA,EAAA,EAAK,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA,CAAA,CAAG,CAAA;AAAA,IACjE;AAAA,EACF;AAEA,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,eAAA,CAAgB,QAAQ,CAAA,EAAA,EAAK;AAC/C,IAAA,MAAM,MAAA,GAAS,gBAAgB,CAAC,CAAA;AAChC,IAAA,IAAI,MAAA,EAAQ,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,KAAA,EAAO;AAClD,MAAA,KAAA,CAAM,IAAA,CAAK,eAAA,CAAgB,CAAC,CAAE,CAAA;AAAA,IAChC;AAAA,EACF;AAEA,EAAA,IAAI,SAAS,MAAA,KAAW,CAAA,IAAK,KAAA,CAAM,MAAA,KAAW,GAAG,OAAO,MAAA;AAExD,EAAA,MAAM,KAAA,GAAkB;AAAA,IACtB,gBAAA;AAAA,IACA,EAAA;AAAA,IACA,kFAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AACvB,IAAA,KAAA,CAAM,KAAK,eAAe,CAAA;AAC1B,IAAA,KAAA,MAAW,KAAK,QAAA,EAAU,KAAA,CAAM,IAAA,CAAK,CAAA,EAAA,EAAK,CAAC,CAAA,CAAE,CAAA;AAC7C,IAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AAAA,EACf;AAEA,EAAA,IAAI,KAAA,CAAM,SAAS,CAAA,EAAG;AACpB,IAAA,KAAA,CAAM,KAAK,CAAA,WAAA,EAAc,KAAA,CAAM,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAC3C,IAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AAAA,EACf;AAEA,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,KAAA,IAAS,IAAA;AACnC,EAAA,KAAA,CAAM,IAAA,CAAK,CAAA,WAAA,EAAc,KAAK,CAAA,CAAE,CAAA;AAChC,EAAA,KAAA,CAAM,IAAA,CAAK,CAAA,uBAAA,EAA0B,UAAU,CAAA,CAAE,CAAA;AAEjD,EAAA,OAAO,KAAA,CAAM,KAAK,IAAI,CAAA;AACxB;ACnGA,eAAsB,sBAAsB,QAAA,EAAoC;AAC9E,EAAA,IAAI;AACF,IAAA,MAAMH,IAAG,MAAA,CAAOF,KAAAA,CAAK,IAAA,CAAK,QAAA,EAAU,YAAY,CAAC,CAAA;AACjD,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAeA,eAAsB,kBAAkB,QAAA,EAAsD;AAC5F,EAAA,MAAM,aAAA,GAAgBA,KAAAA,CAAK,IAAA,CAAK,QAAA,EAAU,YAAY,CAAA;AACtD,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,MAAME,GAAAA,CAAG,QAAA,CAAS,aAAA,EAAe,OAAO,CAAA;AAAA,EACpD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,OAAA,CAAQ,IAAA,EAAK,EAAG,OAAO,MAAA;AAC5B,EAAA,IAAI;AACF,IAAA,OAAOI,MAAU,OAAO,CAAA;AAAA,EAC1B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AC7CO,IAAM,sBAAA,GAAN,cAAqC,KAAA,CAAM;AAAA,EAChD,WAAA,CACkB,QAAA,EACA,IAAA,EAChB,KAAA,EACA;AACA,IAAA,KAAA;AAAA,MACE,CAAA,oBAAA,EAAuB,QAAQ,CAAA,CAAA,EAAI,IAAI,CAAA,EAAG,KAAA,YAAiB,KAAA,GAAQ,CAAA,GAAA,EAAM,KAAA,CAAM,OAAO,CAAA,CAAA,GAAK,EAAE,CAAA;AAAA,KAC/F;AANgB,IAAA,IAAA,CAAA,QAAA,GAAA,QAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAMhB,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AAAA,EACd;AAAA,EARkB,QAAA;AAAA,EACA,IAAA;AAQpB,CAAA;AASO,SAAS,iBAAA,GAA2C;AACzD,EAAA,2BAAW,GAAA,EAAI;AACjB;AAEA,IAAM,uBAAA,GAA0B,iCAAA;AAGhC,SAAS,aAAA,GAAwB;AAC/B,EAAA,OAAO,OAAA,CAAQ,IAAI,qBAAA,IAAyB,uBAAA;AAC9C;AAQA,IAAI,aAAA,GAAsC,IAAA;AAgB1C,SAAS,aAAA,GAAgD;AACvD,EAAA,MAAMN,QAAO,aAAA,EAAc;AAE3B,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,QAAA,CAASA,KAAI,CAAA,CAAE,OAAA;AAAA,EAC3B,CAAA,CAAA,MAAQ;AAIN,IAAA,aAAA,GAAgB,EAAE,IAAA,EAAAA,KAAAA,EAAM,OAAA,EAAS,EAAA,EAAI,KAAK,IAAA,EAAK;AAC/C,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,iBAAiB,aAAA,CAAc,IAAA,KAASA,KAAAA,IAAQ,aAAA,CAAc,YAAY,OAAA,EAAS;AAErF,IAAA,OAAO,aAAA,CAAc,GAAA;AAAA,EACvB;AAEA,EAAA,IAAI,GAAA,GAAsC,IAAA;AAC1C,EAAA,IAAI;AACF,IAAA,MAAM,SAAkB,IAAA,CAAK,KAAA,CAAM,YAAA,CAAaA,KAAAA,EAAM,MAAM,CAAC,CAAA;AAC7D,IAAA,GAAA,GAAM,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,GAAY,MAAA,GAAqC,IAAA;AAAA,EACrF,SAAS,GAAA,EAAK;AAIZ,IAAA,YAAA,CAAa,EAAE,IAAA,EAAM,KAAA,EAAO,OAAA,EAAS,gBAAA,EAAkB,CAAA,CAAE,IAAA;AAAA,MACvD,2DAAA;AAAA,MACA,EAAE,IAAA,EAAAA,KAAAA,EAAM,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA;AAAE,KAClE;AACA,IAAA,GAAA,GAAM,IAAA;AAAA,EACR;AAEA,EAAA,aAAA,GAAgB,EAAE,IAAA,EAAAA,KAAAA,EAAM,OAAA,EAAS,GAAA,EAAI;AACrC,EAAA,OAAO,GAAA;AACT;AAMO,SAAS,iBAAA,CACd,QAAA,EACA,IAAA,EACA,KAAA,EACQ;AACR,EAAA,MAAM,GAAA,GAAM,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA;AAC/B,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAC5B,EAAA,IAAI,QAAQ,OAAO,MAAA;AAInB,EAAA,IAAI;AACF,IAAA,uBAAA,CAAwB,IAAI,CAAA;AAAA,EAC9B,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,IAAI,sBAAA;AAAA,MACR,QAAA;AAAA,MACA,IAAA;AAAA,MACA,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC;AAAA,KACpD;AAAA,EACF;AAEA,EAAA,MAAM,MAAM,YAAA,CAAa,EAAE,MAAM,KAAA,EAAO,OAAA,EAAS,kBAAkB,CAAA;AACnE,EAAA,GAAA,CAAI,KAAA,CAAM,kBAAA,EAAoB,EAAE,QAAA,EAAU,MAAM,CAAA;AAIhD,EAAA,MAAM,MAAM,aAAA,EAAc;AAC1B,EAAA,IAAI,GAAA,EAAK;AACP,IAAA,MAAM,GAAA,GAAM,IAAA,CACT,KAAA,CAAM,GAAG,CAAA,CACT,MAAA;AAAA,MACC,CAAC,GAAG,CAAA,KAAO,CAAA,IAAK,OAAO,CAAA,KAAM,QAAA,GAAY,CAAA,CAA8B,CAAC,CAAA,GAAI,MAAA;AAAA,MAC5E;AAAA,KACF;AACF,IAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,UAAA,CAAW,aAAa,CAAA,EAAG;AAC5D,MAAA,KAAA,CAAM,GAAA,CAAI,KAAK,GAAG,CAAA;AAClB,MAAA,GAAA,CAAI,KAAK,uBAAA,EAAyB,EAAE,UAAU,IAAA,EAAM,OAAA,EAAS,KAAK,CAAA;AAClE,MAAA,OAAO,GAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAAS,SAAA,CAAU,KAAA,EAAO,CAAC,WAAA,EAAa,WAAA,EAAa,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,IAAI,CAAA,CAAE,CAAA,EAAG;AAAA,IACjF,QAAA,EAAU;AAAA,GACX,CAAA;AACD,EAAA,IAAI,MAAA,CAAO,OAAO,MAAM,IAAI,uBAAuB,QAAA,EAAU,IAAA,EAAM,OAAO,KAAK,CAAA;AAC/E,EAAA,IAAI,MAAA,CAAO,WAAW,CAAA,EAAG;AACvB,IAAA,MAAM,IAAI,sBAAA;AAAA,MACR,QAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAI,KAAA,CAAM,CAAA,qBAAA,EAAwB,MAAA,CAAO,MAAM,KAAK,MAAA,CAAO,MAAA,CAAO,IAAA,EAAM,CAAA,CAAE;AAAA,KAC5E;AAAA,EACF;AACA,EAAA,MAAM,OAAA,GAAU,OAAO,MAAA,CAAO,IAAA,GAAO,KAAA,CAAM,IAAI,EAAE,CAAC,CAAA;AAClD,EAAA,IAAI,CAAC,OAAA,EAAS,UAAA,CAAW,aAAa,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,sBAAA;AAAA,MACR,QAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAI,KAAA,CAAM,CAAA,mBAAA,EAAsB,MAAA,CAAO,MAAM,CAAA,CAAE;AAAA,KACjD;AAAA,EACF;AACA,EAAA,KAAA,CAAM,GAAA,CAAI,KAAK,OAAO,CAAA;AACtB,EAAA,GAAA,CAAI,KAAK,iBAAA,EAAmB,EAAE,QAAA,EAAU,IAAA,EAAM,SAAS,CAAA;AACvD,EAAA,OAAO,OAAA;AACT;ACzJA,IAAM,aAAA,GAAgB,kDAAA;AAEf,SAAS,0BAAA,CACd,OACA,cAAA,EACQ;AACR,EAAA,OAAO,MAAM,OAAA,CAAQ,aAAA,EAAe,CAAC,MAAA,EAAQ,IAAY,GAAA,KAA4B;AACnF,IAAA,MAAM,OAAA,GAAU,cAAA,CAAe,GAAA,CAAI,EAAE,CAAA;AACrC,IAAA,IAAI,CAAC,OAAA,EAAS;AAIZ,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,IAAI,CAAC,GAAA,EAAK,OAAO,CAAA,EAAG,OAAO,CAAA,IAAA,CAAA;AAC3B,IAAA,OAAO,CAAA,EAAG,OAAO,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA;AAAA,EAC1B,CAAC,CAAA;AACH;AAEO,SAAS,mBAAA,CACd,KACA,cAAA,EACoC;AACpC,EAAA,IAAI,CAAC,KAAK,OAAO,GAAA;AACjB,EAAA,MAAM,MAA8B,EAAC;AACrC,EAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,EAAG;AACxC,IAAA,GAAA,CAAI,CAAC,CAAA,GAAI,0BAAA,CAA2B,CAAA,EAAG,cAAc,CAAA;AAAA,EACvD;AACA,EAAA,OAAO,GAAA;AACT;AAmBO,SAAS,wBAAA,CACd,SACA,IAAA,EAC0B;AAC1B,EAAA,MAAM,UAAoC,EAAC;AAE3C,EAAA,IAAI,SAAS,UAAA,CAAW,aAAa,KAAK,CAACO,UAAAA,CAAW,OAAO,CAAA,EAAG;AAC9D,IAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,MACX,KAAA,EAAO,SAAA;AAAA,MACP,IAAA,EAAM,OAAA;AAAA,MACN,KAAA,EAAO,iCAAiC,OAAO,CAAA;AAAA,KAChD,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,QAAA,GAAW,OAAO,CAAC,CAAA;AACzB,EAAA,IAAI,UAAU,UAAA,CAAW,aAAa,KAAK,CAACA,UAAAA,CAAW,QAAQ,CAAA,EAAG;AAChE,IAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,MACX,KAAA,EAAO,SAAA;AAAA,MACP,IAAA,EAAM,QAAA;AAAA,MACN,KAAA,EAAO,iCAAiC,QAAQ,CAAA;AAAA,KACjD,CAAA;AAAA,EACH;AAEA,EAAA,OAAO,OAAA;AACT;;;ACqCA,eAAsB,mBAAA,CACpB,YACA,UAAA,EACA,MAAA,EACA,OACA,cAAA,EACA,WAAA,EACA,eACA,gBAAA,EAC+B;AAC/B,EAAA,MAAM,SAAS,YAAA,CAAa;AAAA,IAC1B,IAAA,EAAM,QAAA;AAAA,IACN,OAAA,EAAS,WAAA;AAAA,IACT,QAAA,EAAU,aAAa,SAAA,IAAa;AAAA,GACrC,CAAA;AAKD,EAAA,MAAM,UAAA,GAAmC;AAAA,IACvC,eAAA,EAAiB,IAAA;AAAA,IACjB,qBAAA,EAAuB,EAAA;AAAA,IACvB,UAAA,EAAY,MAAA;AAAA,IACZ,aAAA,EAAe,IAAA;AAAA,IACf,SAAS,YAAY;AAAA,IAAC,CAAA;AAAA,IACtB,eAAe,MAAM;AAAA,IAAC;AAAA,GACxB;AAEA,EAAA,IAAI;AACF,IAAA,yBAAA,EAA0B;AAI1B,IAAA,MAAM,aAAA,GAAgB,MAAM,oBAAA,CAAqB,UAAU,CAAA;AAC3D,IAAA,KAAA,MAAW,CAAA,IAAK,cAAc,QAAA,EAAU;AACtC,MAAA,MAAA,CAAO,IAAA,CAAK,yBAAyB,EAAE,IAAA,EAAM,EAAE,IAAA,EAAM,OAAA,EAAS,CAAA,CAAE,OAAA,EAAS,CAAA;AAAA,IAC3E;AAMA,IAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,wBAAA,KAA6B,MAAA,EAAQ;AACnD,MAAA,MAAM,QAAA,GAAW,cAAc,eAAA,CAAgB,QAAA;AAC/C,MAAA,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AACvB,QAAA,MAAM,OAAA,GAAU,mBAAA,CAAoB,QAAA,EAAU,UAAU,CAAA;AACxD,QAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,UAAA,MAAA,CAAO,IAAA,CAAK,kCAAA,EAAoC,EAAE,QAAA,EAAU,SAAS,CAAA;AACrE,UAAA,MAAM,CAAA,GAAI,MAAM,kBAAA,CAAmB,OAAA,EAAS,UAAU,CAAA;AACtD,UAAA,IAAI,CAAC,CAAA,CAAE,OAAA,EAAS,MAAA,CAAO,KAAA,CAAM,oBAAA,EAAsB,KAAA,CAAA,EAAW,EAAE,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAQ,CAAA;AAAA,QACpF;AAAA,MACF;AAAA,IACF;AAMA,IAAA,MAAM,qBAAA,GAAwB,0BAA0B,UAAU,CAAA;AAClE,IAAA,IAAI,eAAA,GAA2C,IAAA;AAE/C,IAAA,IAAI,qBAAA,CAAsB,SAAS,CAAA,EAAG;AACpC,MAAA,eAAA,GAAkB,IAAI,iBAAiB,UAAA,EAAY;AAAA,QACjD,OAAA,EAAS,cAAA;AAAA,QACT,gBAAgB,aAAA,CAAc,cAAA;AAAA,QAC9B,aAAA;AAAA,QACA;AAAA,OACD,CAAA;AAKD,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,MAAM,eAAA,CAAgB,UAAA,CAAW,qBAAA,EAAuB;AAAA,UACrE,oBAAA,EAAsB;AAAA,SACvB,CAAA;AACD,QAAA,KAAA,MAAW,CAAA,IAAK,OAAO,OAAA,EAAS;AAC9B,UAAA,IAAI,EAAE,SAAA,EAAW;AACf,YAAA,MAAA,CAAO,IAAA,CAAK,gBAAgB,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,SAAA,EAAW,CAAA,CAAE,SAAA,EAAW,CAAA;AAAA,UAClE,CAAA,MAAO;AACL,YAAA,MAAA,CAAO,KAAA,CAAM,kBAAA,EAAoB,KAAA,CAAA,EAAW,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,KAAA,EAAO,CAAA,CAAE,KAAA,EAAO,CAAA;AAAA,UAC1E;AAAA,QACF;AAAA,MACF,SAAS,GAAA,EAAK;AAGZ,QAAA,IAAI,eAAe,qBAAA,EAAuB;AACxC,UAAA,KAAA,MAAW,CAAA,IAAK,GAAA,CAAI,MAAA,CAAO,OAAA,EAAS;AAClC,YAAA,IAAI,EAAE,SAAA,EAAW;AACf,cAAA,MAAA,CAAO,IAAA,CAAK,gBAAgB,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,SAAA,EAAW,CAAA,CAAE,SAAA,EAAW,CAAA;AAAA,YAClE,CAAA,MAAO;AACL,cAAA,MAAA,CAAO,KAAA,CAAM,kBAAA,EAAoB,KAAA,CAAA,EAAW,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,KAAA,EAAO,CAAA,CAAE,KAAA,EAAO,CAAA;AAAA,YAC1E;AAAA,UACF;AAAA,QACF;AACA,QAAA,MAAM,GAAA;AAAA,MACR;AAAA,IACF;AAGA,IAAA,MAAM,qBAAA,GAAwB,eAAA,GAC1B,2BAAA,CAA4B,eAAe,CAAA,GAC3C,EAAA;AAGJ,IAAA,MAAM,SAAS,YAAA,CAAa;AAAA,MAC1B,IAAA,EAAM,KAAA;AAAA,MACN,OAAA,EAAS,QAAA;AAAA,MACT,QAAA,EAAU,aAAa,SAAA,IAAa;AAAA,KACrC,CAAA;AAED,IAAA,IAAI,UAAA;AACJ,IAAA,IAAI,yBAAA,GAAkE,IAAA;AAEtE,IAAA,IAAI,eAAe,YAAA,EAAc;AAE/B,MAAA,IAAI,eAAA,EAAiB;AACnB,QAAA,MAAM,gBAAgB,YAAA,CAAa,EAAE,MAAM,KAAA,EAAO,OAAA,EAAS,qBAAqB,CAAA;AAChF,QAAA,IAAI;AACF,UAAA,MAAM,SAAS,MAAM,sBAAA,CAAuB,iBAAiB,EAAE,CAAA,EAAAR,GAAG,CAAA;AAClE,UAAA,IAAI,MAAA,EAAQ;AACV,YAAA,UAAA,GAAa,EAAE,qBAAqB,MAAA,EAAO;AAC3C,YAAA,aAAA,CAAc,KAAK,oBAAA,EAAsB;AAAA,cACvC,cAAA,EAAgB,eAAA,CAAgB,cAAA,EAAe,CAAE;AAAA,aAClD,CAAA;AAAA,UACH,CAAA,MAAO;AACL,YAAA,aAAA,CAAc,MAAM,qCAAqC,CAAA;AAAA,UAC3D;AAAA,QACF,SAAS,GAAA,EAAK;AACZ,UAAA,aAAA,CAAc,KAAA,CAAM,8BAA8B,GAAG,CAAA;AACrD,UAAA,MAAM,GAAA;AAAA,QACR;AAAA,MACF;AAOA,MAAA,MAAM,eAAA,GAAkB,IAAI,eAAA,CAAgB;AAAA,QAC1C,UAAA;AAAA,QACA,kBAAkB,eAAA,IAAmB,KAAA,CAAA;AAAA,QACrC,MAAA,EAAQ,UAAA;AAAA,QACR,UAAU,WAAA,EAAa,QAAA;AAAA,QACvB,OAAO,WAAA,EAAa;AAAA,OACrB,CAAA;AACD,MAAA,MAAM,QAAA,GAAW,MAAM,eAAA,CAAgB,uBAAA,EAAwB;AAC/D,MAAA,IAAI,QAAA,EAAU;AACZ,QAAA,UAAA,GAAa,EAAE,GAAI,UAAA,IAAc,EAAC,EAAI,oBAAoB,QAAA,EAAS;AAAA,MACrE;AACA,MAAA,yBAAA,GAA4B,eAAA;AAG5B,MAAA,MAAM,eAAA,GAAkB,0BAA0B,UAAU,CAAA;AAC5D,MAAA,MAAA,CAAO,MAAM,yBAAA,EAA2B,EAAE,KAAA,EAAO,eAAA,CAAgB,QAAQ,CAAA;AAIzE,MAAA,MAAM,cAAc,iBAAA,EAAkB;AACtC,MAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,GAAA,CAAI,oBAAA,IAAwB,mBAAA;AAExD,MAAA,KAAA,MAAW,QAAQ,eAAA,EAAiB;AAClC,QAAA,IAAI,uBAAA,CAAwB,GAAA,CAAI,IAAA,CAAK,EAAE,CAAA,EAAG;AACxC,UAAA,MAAA,CAAO,KAAK,iCAAA,EAAmC,EAAE,EAAA,EAAI,IAAA,CAAK,IAAI,CAAA;AAC9D,UAAA;AAAA,QACF;AAGA,QAAA,IAAI,YAAA,GAAe,IAAA;AACnB,QAAA,IAAI,KAAK,MAAA,EAAQ;AAIf,UAAA,MAAM,YAAA,GAAe,IAAA,CAAK,MAAA,CAAO,KAAA,GAC7B,EAAE,KAAA,EAAO,IAAA,CAAK,MAAA,CAAO,KAAA,EAAM,GAC3B,EAAE,IAAA,EAAM,IAAA,CAAK,OAAO,IAAA,EAAK;AAC7B,UAAA,IAAI;AASF,YAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,KAAA,GAC1B,CAAA,KAAA,EAAQ,IAAA,CAAK,EAAE,CAAA,CAAA,GACd,IAAA,CAAK,MAAA,CAAO,IAAA,IAAQ,CAAA,KAAA,EAAQ,KAAK,EAAE,CAAA,CAAA;AACxC,YAAA,MAAM,OAAA,GAAU,iBAAA,CAAkB,WAAA,EAAa,SAAA,EAAW,WAAW,CAAA;AAErE,YAAA,MAAM,QAAA,uBAA4C,GAAA,CAAI,CAAC,CAAC,IAAA,CAAK,EAAA,EAAI,OAAO,CAAC,CAAC,CAAA;AAE1E,YAAA,MAAM,eAAA,GAAkB,KAAK,OAAA,GACzB,0BAAA,CAA2B,KAAK,OAAA,EAAS,QAAQ,IACjD,IAAA,CAAK,OAAA;AACT,YAAA,MAAM,YAAA,GAAe,KAAK,IAAA,EAAM,GAAA,CAAI,CAAC,CAAA,KAAM,0BAAA,CAA2B,CAAA,EAAG,QAAQ,CAAC,CAAA;AAClF,YAAA,MAAM,WAAA,GAAc,mBAAA,CAAoB,IAAA,CAAK,GAAA,EAAK,QAAQ,CAAA;AAE1D,YAAA,YAAA,GAAe;AAAA,cACb,GAAG,IAAA;AAAA,cACH,OAAA,EAAS,eAAA;AAAA,cACT,IAAA,EAAM,YAAA;AAAA,cACN,GAAA,EAAK;AAAA,aACP;AAGA,YAAA,MAAM,WAAA,GAAc;AAAA,cAClB,eAAA,IAAmB,EAAA;AAAA,cACnB,GAAI,gBAAgB,EAAC;AAAA,cACrB,GAAG,MAAA,CAAO,MAAA,CAAO,WAAA,IAAe,EAAE;AAAA,aACpC;AACA,YAAA,KAAA,MAAW,KAAK,WAAA,EAAa;AAC3B,cAAA,IAAI,CAAA,CAAE,QAAA,CAAS,WAAW,CAAA,EAAG;AAC3B,gBAAA,MAAMS,aAAY,YAAA,CAAa;AAAA,kBAC7B,IAAA,EAAM,KAAA;AAAA,kBACN,SAAS,IAAA,CAAK,EAAA;AAAA,kBACd,QAAA,EAAU;AAAA,iBACX,CAAA;AACD,gBAAAA,UAAAA,CAAU,KAAK,6CAAA,EAA+C;AAAA,kBAC5D,KAAA,EAAO,CAAA;AAAA,kBACP,QAAQ,IAAA,CAAK;AAAA,iBACd,CAAA;AAAA,cACH;AAAA,YACF;AAGA,YAAA,MAAM,YAAA,GAAe,wBAAA,CAAyB,eAAA,EAAiB,YAAY,CAAA;AAC3E,YAAA,IAAI,YAAA,CAAa,SAAS,CAAA,EAAG;AAC3B,cAAA,MAAMA,aAAY,YAAA,CAAa;AAAA,gBAC7B,IAAA,EAAM,KAAA;AAAA,gBACN,SAAS,IAAA,CAAK,EAAA;AAAA,gBACd,QAAA,EAAU;AAAA,eACX,CAAA;AACD,cAAAA,UAAAA,CAAU,KAAA,CAAM,qDAAA,EAAuD,KAAA,CAAA,EAAW;AAAA,gBAChF,IAAI,IAAA,CAAK,EAAA;AAAA,gBACT,GAAG,YAAA;AAAA,gBACH,OAAA,EAAS;AAAA,eACV,CAAA;AACD,cAAA;AAAA,YACF;AAEA,YAAA,MAAM,YAAY,YAAA,CAAa;AAAA,cAC7B,IAAA,EAAM,KAAA;AAAA,cACN,SAAS,IAAA,CAAK,EAAA;AAAA,cACd,QAAA,EAAU;AAAA,aACX,CAAA;AACD,YAAA,SAAA,CAAU,KAAK,8BAAA,EAAgC;AAAA,cAC7C,GAAG,YAAA;AAAA,cACH;AAAA,aACD,CAAA;AAAA,UACH,SAAS,GAAA,EAAK;AAIZ,YAAA,MAAM,YAAY,YAAA,CAAa;AAAA,cAC7B,IAAA,EAAM,KAAA;AAAA,cACN,SAAS,IAAA,CAAK,EAAA;AAAA,cACd,QAAA,EAAU;AAAA,aACX,CAAA;AACD,YAAA,SAAA,CAAU,KAAA,CAAM,gDAAgD,GAAA,EAAK;AAAA,cACnE,IAAI,IAAA,CAAK,EAAA;AAAA,cACT,GAAG,YAAA;AAAA,cACH,QAAA,EAAU;AAAA,aACX,CAAA;AACD,YAAA;AAAA,UACF;AAAA,QACF;AAEA,QAAA,MAAM,YAAA,GAAe,oBAAA;AAAA,UACnB,YAAA;AAAA,UACA;AAAA,SACF;AACA,QAAA,IAAI,YAAA,EAAc;AAChB,UAAA,UAAA,GAAa,EAAE,GAAI,UAAA,IAAc,IAAK,CAAC,IAAA,CAAK,EAAE,GAAG,YAAA,EAAa;AAC9D,UAAA,MAAM,OAAA,GAAU,aAAa,EAAE,IAAA,EAAM,OAAO,OAAA,EAAS,IAAA,CAAK,IAAI,CAAA;AAC9D,UAAA,OAAA,CAAQ,KAAK,uBAAA,EAAyB;AAAA,YACpC,SAAA,EAAW,KAAK,SAAA,IAAa,OAAA;AAAA,YAC7B,GAAI,IAAA,CAAK,SAAA,KAAc,WAAW,CAAC,IAAA,CAAK,YACpC,EAAE,OAAA,EAAS,YAAA,CAAa,OAAA,EAAS,MAAM,YAAA,CAAa,IAAA,KACpD,EAAE,GAAA,EAAK,KAAK,GAAA;AAAI,WACrB,CAAA;AAAA,QACH,CAAA,MAAO;AACL,UAAA,MAAA,CAAO,KAAA,CAAM,yDAAyD,KAAA,CAAA,EAAW;AAAA,YAC/E,IAAI,IAAA,CAAK,EAAA;AAAA,YACT,WAAW,IAAA,CAAK;AAAA,WACjB,CAAA;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAIA,IAAA,IAAI,CAAC,eAAA,IAAmB,UAAA,KAAe,YAAA,EAAc,OAAO,UAAA;AAK5D,IAAA,MAAM,gBAAgB,MAAM;AAC1B,MAAA,IAAI,eAAA,IAAmB,OAAO,aAAA,EAAe;AAC3C,QAAA,MAAM,UAAA,GAAa,MAAM,UAAA,IAAc,GAAA;AACvC,QAAA,MAAM,eAAA,uBAAsB,GAAA,EAAoB;AAEhD,QAAA,eAAA,CAAgB,QAAA,CAAS,CAAC,WAAA,EAAqB,KAAA,KAAgC;AAC7E,UAAA,MAAM,QAAA,GAAW,CAAA,EAAG,WAAW,CAAA,CAAA,EAAI,MAAM,IAAI,CAAA,CAAA;AAC7C,UAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,UAAA,MAAM,QAAA,GAAW,eAAA,CAAgB,GAAA,CAAI,QAAQ,CAAA;AAC7C,UAAA,IAAI,QAAA,IAAY,GAAA,GAAM,QAAA,GAAW,UAAA,EAAY;AAC7C,UAAA,eAAA,CAAgB,GAAA,CAAI,UAAU,GAAG,CAAA;AAEjC,UAAA,IAAI,eAAA,CAAgB,OAAO,GAAA,EAAK;AAC9B,YAAA,KAAA,MAAW,CAAC,GAAA,EAAK,EAAE,CAAA,IAAK,eAAA,EAAiB;AACvC,cAAA,IAAI,GAAA,GAAM,EAAA,GAAK,UAAA,EAAY,eAAA,CAAgB,OAAO,GAAG,CAAA;AAAA,YACvD;AAAA,UACF;AAEA,UAAA,KAAA,CAAM,aAAA,CAAe,aAAa,KAAK,CAAA;AAAA,QACzC,CAAC,CAAA;AAAA,MACH;AAAA,IACF,CAAA;AAEA,IAAA,MAAM,UAAU,YAAY;AAC1B,MAAA,IAAI,yBAAA,EAA2B;AAC7B,QAAA,IAAI;AACF,UAAA,MAAM,0BAA0B,QAAA,EAAS;AAAA,QAC3C,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF;AACA,MAAA,IAAI;AACF,QAAA,MAAM,iBAAiB,aAAA,EAAc;AAAA,MACvC,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF,CAAA;AAEA,IAAA,OAAO;AAAA,MACL,eAAA;AAAA,MACA,qBAAA;AAAA,MACA,UAAA;AAAA,MACA,aAAA;AAAA,MACA,OAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF,CAAA,CAAA,MAAQ;AAEN,IAAA,OAAO,UAAA;AAAA,EACT;AACF;AAOA,IAAM,0CAA0B,IAAI,GAAA,CAAI,CAAC,mBAAA,EAAqB,kBAAkB,CAAC,CAAA;AAejF,SAAS,oBAAA,CACP,QACA,OAAA,EACwB;AACxB,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,MAAM,WAAmC,EAAC;AAC1C,EAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AAC3C,IAAA,QAAA,CAAS,CAAC,CAAA,GAAI,OAAA,CAAQ,OAAA,CAAQ,CAAC,CAAA,IAAK,CAAA;AAAA,EACtC;AACA,EAAA,OAAO,QAAA;AACT;AAYA,SAAS,oBAAA,CACP,MACA,OAAA,EACgC;AAChC,EAAA,MAAM,SAAA,GAAY,KAAK,SAAA,IAAa,OAAA;AAEpC,EAAA,IAAI,cAAc,OAAA,EAAS;AACzB,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,EAAS,OAAO,IAAA;AAC1B,IAAA,MAAM,MAA+B,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,OAAA,EAAQ;AAC5E,IAAA,IAAI,IAAA,CAAK,IAAA,EAAM,MAAA,EAAQ,GAAA,CAAI,OAAO,IAAA,CAAK,IAAA;AACvC,IAAA,IAAI,IAAA,CAAK,OAAO,MAAA,CAAO,IAAA,CAAK,KAAK,GAAG,CAAA,CAAE,SAAS,CAAA,EAAG;AAChD,MAAA,GAAA,CAAI,GAAA,GAAM,oBAAA,CAAqB,IAAA,CAAK,GAAA,EAAK,OAAO,CAAA;AAAA,IAClD;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AAEA,EAAA,IAAI,SAAA,KAAc,KAAA,IAAS,SAAA,KAAc,MAAA,EAAQ;AAC/C,IAAA,IAAI,CAAC,IAAA,CAAK,GAAA,EAAK,OAAO,IAAA;AACtB,IAAA,MAAM,MAA+B,EAAE,IAAA,EAAM,SAAA,EAAW,GAAA,EAAK,KAAK,GAAA,EAAI;AACtE,IAAA,IAAI,IAAA,CAAK,WAAW,MAAA,CAAO,IAAA,CAAK,KAAK,OAAO,CAAA,CAAE,SAAS,CAAA,EAAG;AACxD,MAAA,GAAA,CAAI,OAAA,GAAU,oBAAA,CAAqB,IAAA,CAAK,OAAA,EAAS,OAAO,CAAA;AAAA,IAC1D;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AAEA,EAAA,OAAO,IAAA;AACT;;;ACpTA,eAAsB,mBAAmB,MAAA,EAAmD;AAC1F,EAAA,MAAM;AAAA,IACJ,UAAA;AAAA,IACA,GAAA,EAAK,WAAA;AAAA,IACL,QAAA;AAAA,IACA,MAAA,EAAQ,cAAA;AAAA,IACR,KAAA,EAAO,aAAA;AAAA,IACP,QAAA,EAAU,gBAAA;AAAA,IACV,SAAA;AAAA,IACA,eAAA;AAAA,IACA,kBAAA;AAAA,IACA,QAAA,EAAU,gBAAA;AAAA,IACV,QAAA,EAAU,gBAAA;AAAA,IACV,KAAA;AAAA,IACA,cAAA;AAAA,IACA,KAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,GACF,GAAI,MAAA;AAGJ,EAAA,MAAM,WAAW,WAAA,IAAe,UAAA;AAEhC,EAAA,MAAM,aAAa,YAAA,CAAa;AAAA,IAC9B,IAAA,EAAM,QAAA;AAAA,IACN,OAAA,EAAS,SAAA;AAAA,IACT,UAAU,SAAA,IAAa;AAAA,GACxB,CAAA;AAGD,EAAA,MAAM,QAAA,GAAW,MAAM,eAAA,CAAgB,UAAA,EAAY;AAAA,IACjD,MAAA,EAAQ,cAAA;AAAA,IACR,QAAA,EAAU,gBAAA;AAAA,IACV,KAAA,EAAO;AAAA,GACR,CAAA;AACD,EAAA,MAAM,UAAA,GAAa,SAAS,MAAA,IAAU,KAAA;AACtC,EAAA,MAAM,WAAW,QAAA,CAAS,QAAA;AAC1B,EAAA,MAAM,QAAQ,QAAA,CAAS,KAAA;AAIvB,EAAA,MAAM,SAAS,MAAA,CAAO,MAAA,IAAU,aAAA,CAAc,QAAA,IAAY,aAAa,QAAQ,CAAA;AAG/E,EAAA,MAAM,QAAA,GAAW,QAAA,GAAW,MAAM,iBAAA,CAAkB,QAAQ,CAAA,GAAI,MAAA;AAGhE,EAAA,MAAM;AAAA,IACJ,eAAA;AAAA,IACA,qBAAA;AAAA,IACA,UAAA;AAAA,IACA,aAAA;AAAA,IACA,OAAA;AAAA,IACA;AAAA,MACE,MAAM,mBAAA;AAAA,IACR,UAAA;AAAA,IACA,UAAA;AAAA,IACA,KAAA;AAAA,IACA,KAAA;AAAA,IACA,cAAA;AAAA,IACA;AAAA,MACE,QAAA;AAAA,MACA,KAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,MAAA,CAAO,aAAA;AAAA,IACP,MAAA,CAAO;AAAA,GACT;AAGA,EAAA,MAAM,QAAA,GAAW,gBAAA,IAAoB,wBAAA,CAAyB,UAAU,CAAA;AACxE,EAAA,MAAM,cAAA,GAAiB,mBAAA,CAAoB,QAAA,CAAS,KAAA,EAAO,OAAO,CAAA;AAIlE,EAAA,MAAM,iBAAA,GAAoB,QAAA,CAAS,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAK;AACvD,EAAA,MAAM,kBAAA,GAAqB,MAAM,uBAAA,CAAwB,UAAU,CAAA;AACnE,EAAA,MAAM,gBAAA,GAAmB,oBAAA;AAAA,IACvB,QAAA,CAAS,QAAQ,mBAAmB,CAAA;AAAA,IACpC,UAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,IAAI,kBAAA,EAAoB;AACtB,IAAA,UAAA,CAAW,IAAA;AAAA,MACT;AAAA,KACF;AAAA,EACF;AAKA,EAAA,IAAI,WAAA,GAA0C,IAAA;AAC9C,EAAA,IAAI,QAAA,IAAY,QAAA,EAAU,QAAA,EAAU,MAAA,EAAQ;AAC1C,IAAA,WAAA,GAAc,MAAM,uBAAA,CAAwB;AAAA,MAC1C,QAAA;AAAA,MACA,QAAA;AAAA,MAEA,GAAA,EAAK;AAAA,KACN,CAAA;AAAA,EACH,CAAA,MAAA,IAAW,QAAA,EAAU,QAAA,EAAU,MAAA,IAAU,CAAC,QAAA,EAAU;AAClD,IAAA,UAAA,CAAW,MAAM,8DAAyD,CAAA;AAAA,EAC5E;AASA,EAAA,MAAM,iBAAA,GAAoB,WAAA,EAAa,YAAA,IAAgB,EAAC;AACxD,EAAA,MAAM,kBAAA,GAAqB,MAAA,CAAO,wBAAA,IAA4B,EAAC;AAK/D,EAAA,MAAM,uBAA8C,EAAC;AACrD,EAAA,IAAI,cAAA,uBAAqC,IAAA,CAAK,EAAE,OAAO,SAAA,EAAW,KAAA,EAAO,gBAAgB,CAAA;AACzF,EAAA,IAAI,iBAAA,uBAAwC,IAAA,CAAK,EAAE,OAAO,QAAA,EAAU,KAAA,EAAO,mBAAmB,CAAA;AAC9F,EAAA,IAAI,kBAAA;AACF,IAAA,oBAAA,CAAqB,KAAK,EAAE,KAAA,EAAO,aAAA,EAAe,KAAA,EAAO,oBAAoB,CAAA;AAC/E,EAAA,IAAI,qBAAA;AACF,IAAA,oBAAA,CAAqB,KAAK,EAAE,KAAA,EAAO,WAAA,EAAa,KAAA,EAAO,uBAAuB,CAAA;AAChF,EAAA,KAAA,MAAW,OAAO,gBAAA,EAAkB;AAClC,IAAA,oBAAA,CAAqB,IAAA,CAAK;AAAA,MACxB,KAAA,EAAO,mBAAA;AAAA,MACP,OAAO,GAAA,CAAI,KAAA;AAAA,MACX,QAAQ,GAAA,CAAI;AAAA,KACb,CAAA;AAAA,EACH;AACA,EAAA,KAAA,MAAW,SAAS,iBAAA,EAAmB;AAGrC,IAAA,oBAAA,CAAqB,IAAA,CAAK;AAAA,MACxB,KAAA,EAAO,aAAA;AAAA,MACP,OAAO,KAAA,CAAM,OAAA;AAAA,MACb,QAAQ,KAAA,CAAM;AAAA,KACf,CAAA;AAAA,EACH;AACA,EAAA,kBAAA,CAAmB,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AAGzC,IAAA,oBAAA,CAAqB,IAAA,CAAK;AAAA,MACxB,KAAA,EAAO,YAAA;AAAA,MACP,KAAA;AAAA,MACA,MAAA,EAAQ,cAAc,GAAG,CAAA,CAAA;AAAA,KAC1B,CAAA;AAAA,EACH,CAAC,CAAA;AAED,EAAA,MAAM,eAAe,oBAAA,CAAqB;AAAA,IACxC,cAAA;AAAA,IACA,iBAAA;AAAA,IACA,kBAAA;AAAA,IACA,qBAAA;AAAA,IACA,GAAG,gBAAA,CAAiB,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,KAAK,CAAA;AAAA,IACtC,GAAG,iBAAA,CAAkB,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,OAAO,CAAA;AAAA,IACzC,GAAG;AAAA,GACJ,CAAA;AAMD,EAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,wBAAA,KAA6B,GAAA,EAAK;AAChD,IAAA,MAAM,MAAA,GAAS,cAAc,MAAA,IAAU,CAAA;AACvC,IAAA,UAAA,CAAW,KAAA,CAAM,yBAAA,EAA2B,EAAE,MAAA,EAAQ,CAAA;AACtD,IAAA,UAAA,CAAW,MAAM,uBAAA,EAAyB,EAAE,OAAA,EAAS,YAAA,IAAgB,WAAW,CAAA;AAAA,EAClF;AAGA,EAAA,MAAM,QAAA,GACJ,MAAA,CAAO,QAAA,IAAa,QAAA,CAAS,cAAc,OAAA,EAAS,QAAA;AACtD,EAAA,MAAM,MAAA,GACJ,MAAA,CAAO,MAAA,IAAW,QAAA,CAAS,cAAc,OAAA,EAAS,MAAA;AAGpD,EAAA,MAAM,QAAA,GAAW,gBAAA,IAAoB,QAAA,EAAU,OAAA,EAAS,SAAA;AAIxD,EAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,UAAA,EAAY;AAAA,IAC5C,GAAA,EAAK,QAAA;AAAA,IACL,QAAA;AAAA,IACA,KAAA,EAAO,KAAA,IAAS,QAAA,EAAU,KAAA,EAAO,SAAA;AAAA,IACjC,QAAA;AAAA,IACA,OAAA,EAAS,SAAS,EAAE,CAAC,YAAY,WAAW,GAAG,QAAO,GAAI,MAAA;AAAA,IAC1D,YAAA;AAAA,IACA,OAAO,QAAA,EAAU,KAAA;AAAA,IACjB,GAAI,QAAA,GAAW,EAAE,QAAA,KAAa,EAAC;AAAA,IAC/B,GAAI,MAAA,GAAS,EAAE,MAAA,KAAW,EAAC;AAAA,IAC3B,GAAI,SAAA,GAAY,EAAE,SAAA,KAAc,EAAC;AAAA,IACjC,GAAI,eAAA,GAAkB,EAAE,eAAA,KAAoB,EAAC;AAAA,IAC7C,GAAI,UAAA,GAAa,EAAE,UAAA,KAAe,EAAC;AAAA;AAAA;AAAA;AAAA;AAAA,IAKnC,GAAI,OAAO,YAAA,GAAe,EAAE,cAAc,MAAA,CAAO,YAAA,KAAiB,EAAC;AAAA,IACnE,GAAI,OAAO,kBAAA,GAAqB,EAAE,oBAAoB,MAAA,CAAO,kBAAA,KAAuB,EAAC;AAAA,IACrF,GAAI,OAAO,WAAA,GAAc,EAAE,aAAa,MAAA,CAAO,WAAA,KAAgB,EAAC;AAAA;AAAA,IAEhE,GAAI,WAAW,EAAE,QAAA,EAAU,WAAW,QAAA,EAAU,IAAA,KAAS;AAAC,GAC3D,CAAA;AAGD,EAAA,IAAI,aAAa,KAAA,EAAO;AACtB,IAAA,MAAA,CAAO,YAAA,CAAa,WAAW,KAAK,CAAA;AAAA,EACtC;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,eAAA;AAAA,IACA,aAAA;AAAA,IACA,WAAA;AAAA,IACA,QAAA;AAAA,IACA,UAAA;AAAA,IACA,QAAA;AAAA,IACA,KAAA;AAAA,IACA,OAAA;AAAA,IACA,aAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,GACF;AACF;AAkBA,SAAS,oBAAA,CACP,KAAA,EACA,UAAA,EACA,GAAA,EACyB;AACzB,EAAA,IAAI,CAAC,KAAA,EAAO,MAAA,EAAQ,OAAO,EAAC;AAC5B,EAAA,MAAM,SAAkC,EAAC;AACzC,EAAA,KAAA,MAAW,WAAW,KAAA,EAAO;AAC3B,IAAA,MAAM,OAAA,GAAUC,OAAA,CAAY,UAAA,EAAY,OAAO,CAAA;AAC/C,IAAA,IAAI,CAACF,UAAAA,CAAW,OAAO,CAAA,EAAG;AACxB,MAAA,GAAA,CAAI,IAAA,CAAK,iCAAA,EAAmC,EAAE,OAAA,EAAS,CAAA;AACvD,MAAA;AAAA,IACF;AACA,IAAA,IAAI;AACF,MAAA,MAAM,OAAA,GAAUG,YAAAA,CAAa,OAAA,EAAS,OAAO,EAAE,IAAA,EAAK;AACpD,MAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,EAAE,KAAA,EAAO,OAAA,EAAS,MAAA,EAAQ,OAAA,EAAS,CAAA;AAAA,IACzE,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,KAAK,iCAAA,EAAmC;AAAA,QAC1C,OAAA;AAAA,QACA,OAAQ,GAAA,CAAc;AAAA,OACvB,CAAA;AAAA,IACH;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;;;ACtaA,IAAM,YAAA,GAAe,CAAA,EAAG,EAAA,CAAG,OAAA,CAAQ,EAAA,CAAG,IAAA,CAAK,OAAO,CAAC,CAAC,CAAA,CAAA,EAAI,EAAA,CAAG,GAAA,CAAI,QAAG,CAAC,CAAA,CAAA,CAAA;AAWnE,eAAsB,aAAa,IAAA,EAAuC;AACxE,EAAA,MAAM,YAAY,CAAA,KAAA,EAAQ,IAAA,CAAK,KAAI,CAAE,QAAA,CAAS,EAAE,CAAC,CAAA,CAAA;AACjD,EAAA,MAAM,EAAE,OAAA,EAAS,eAAA,EAAgB,GAAI,uBAAA,CAAwB;AAAA,IAC3D,SAAA;AAAA,IACA,YAAY,IAAA,CAAK,UAAA;AAAA,IACjB,OAAO,IAAA,CAAK;AAAA,GACb,CAAA;AACD,EAAA,MAAM,UAAU,YAAA,CAAa;AAAA,IAC3B,IAAA,EAAM,QAAA;AAAA,IACN,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU;AAAA,GACX,CAAA;AAID,EAAA,MAAM,YAAA,GAAe,MAAM,WAAA,CAAY,IAAI,CAAA;AAC3C,EAAA,MAAM,SAAS,YAAA,CAAa,MAAA;AAE5B,EAAA,MAAM,OAAO,KAAA,EAAM;AAEnB,EAAA,IAAI,UAAA,GAAa,IAAA;AACjB,EAAA,MAAM,QAAA,GAAW,IAAI,gBAAA,EAAiB;AACtC,EAAA,MAAA,CAAO,EAAA,CAAG,aAAA,EAAe,CAAC,KAAA,KAAsB;AAC9C,IAAA,IAAA,CAAK,UAAU,KAAK,CAAA;AACpB,IAAA,IAAI,KAAA,CAAM,SAAS,gBAAA,EAAkB;AACnC,MAAA,MAAM,QAAS,KAAA,CAAc,UAAA;AAC7B,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,IAAI,UAAA,EAAY;AACd,UAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,YAAY,CAAA;AACjC,UAAA,UAAA,GAAa,KAAA;AAAA,QACf;AACA,QAAA,QAAA,CAAS,MAAM,KAAK,CAAA;AAAA,MACtB;AAAA,IACF;AAAA,EACF,CAAC,CAAA;AAED,EAAA,IAAI,UAAU,IAAA,CAAK,OAAA;AACnB,EAAA,IAAI,KAAK,KAAA,EAAO;AACd,IAAA,OAAA,GAAU,CAAA,OAAA,EAAU,KAAK,KAAK;;AAAA,EAAO,OAAO,CAAA,CAAA;AAAA,EAC9C;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,IAAI,OAAA,CAAc,CAACT,QAAAA,EAAS,MAAA,KAAW;AAC3C,MAAA,MAAM,OAAA,GAAU,CAAC,KAAA,KAAsB;AACrC,QAAA,IAAI,KAAA,CAAM,SAAS,WAAA,EAAa;AAC9B,UAAA,MAAA,CAAO,GAAA,CAAI,eAAe,OAAO,CAAA;AACjC,UAAA,QAAA,CAAS,GAAA,EAAI;AACb,UAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,IAAI,CAAA;AACzB,UAAA,MAAA,CAAO,IAAA,EAAK;AACZ,UAAAA,QAAAA,EAAQ;AAAA,QACV,CAAA,MAAA,IAAW,KAAA,CAAM,IAAA,KAAS,OAAA,EAAS;AACjC,UAAA,MAAA,CAAO,GAAA,CAAI,eAAe,OAAO,CAAA;AACjC,UAAA,MAAM,MAAM,IAAI,KAAA,CAAM,MAAA,CAAQ,KAAA,CAAc,KAAK,CAAC,CAAA;AAClD,UAAA,OAAA,CAAQ,KAAA,CAAM,6BAA6B,GAAG,CAAA;AAC9C,UAAA,MAAA,CAAO,IAAA,EAAK;AACZ,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACZ;AAAA,MACF,CAAA;AACA,MAAA,MAAA,CAAO,EAAA,CAAG,eAAe,OAAO,CAAA;AAChC,MAAA,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA,CAAE,KAAA,CAAM,CAAC,GAAA,KAAe;AAC3C,QAAA,MAAA,CAAO,GAAA,CAAI,eAAe,OAAO,CAAA;AACjC,QAAA,OAAA,CAAQ,KAAA,CAAM,iBAAiB,GAAG,CAAA;AAClC,QAAA,MAAA,CAAO,IAAA,EAAK;AACZ,QAAA,MAAA,CAAO,GAAG,CAAA;AAAA,MACZ,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH,CAAA,SAAE;AACA,IAAA,MAAM,aAAa,OAAA,EAAQ;AAC3B,IAAA,eAAA,EAAgB;AAAA,EAClB;AACF;AASA,eAAe,YAAY,IAAA,EAA+C;AACxE,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,IAAY,eAAA,CAAgB,KAAK,UAAU,CAAA;AACjE,EAAA,OAAO,kBAAA,CAAmB;AAAA,IACxB,YAAY,IAAA,CAAK,UAAA;AAAA,IACjB,QAAA;AAAA,IACA,QAAQ,IAAA,CAAK,MAAA;AAAA,IACb,OAAO,IAAA,CAAK,KAAA;AAAA,IACZ,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,YAAY,IAAA,CAAK,UAAA;AAAA,IACjB,OAAO,IAAA,CAAK;AAAA,GACb,CAAA;AACH;AC9IA,eAAsB,qBAAA,CACpB,OAAA,EACA,OAAA,EACA,IAAA,EACe;AACf,EAAA,MAAM,EAAE,WAAW,WAAA,EAAa,SAAA,EAAW,MAAAD,KAAAA,EAAM,OAAA,EAAS,SAAQ,GAAI,OAAA;AAEtE,EAAA,IAAI;AACF,IAAA,IAAI,IAAA;AACJ,IAAA,QAAQ,SAAA;AAAW,MACjB,KAAK,MAAA;AACH,QAAA,IAAA,GAAO,MAAM,OAAA,CAAQ,IAAA;AAAA,UACnB,WAAA;AAAA,UACAA,KAAAA;AAAA,UACA;AAAA,SACF;AACA,QAAA;AAAA,MACF,KAAK,MAAA;AACH,QAAA,IAAA,GAAO,MAAM,OAAA,CAAQ,IAAA,CAAK,WAAA,EAAaA,KAAK,CAAA;AAC5C,QAAA;AAAA,MACF,KAAK,OAAA;AACH,QAAA,MAAM,OAAA,CAAQ,KAAA,CAAM,WAAA,EAAaA,KAAAA,EAAO,OAAQ,CAAA;AAChD,QAAA,IAAA,GAAO,IAAA;AACP,QAAA;AAAA,MACF,KAAK,QAAA;AACH,QAAA,IAAA,GAAO,MAAM,OAAA,CAAQ,MAAA,CAAO,WAAA,EAAaA,KAAK,CAAA;AAC9C,QAAA;AAAA,MACF,KAAK,QAAA;AACH,QAAA,IAAA,GAAO,MAAM,OAAA,CAAQ,MAAA;AAAA,UACnB,WAAA;AAAA,UACAA,KAAAA;AAAA,UACA;AAAA,SACF;AACA,QAAA;AAAA;AAEJ,IAAA,IAAA,CAAK,EAAE,MAAM,mBAAA,EAAqB,SAAA,EAAW,YAAY,WAAA,EAAa,SAAA,EAAW,MAAM,CAAA;AAAA,EACzF,SAAS,GAAA,EAAK;AACZ,IAAA,IAAA,CAAK;AAAA,MACH,IAAA,EAAM,mBAAA;AAAA,MACN,SAAA;AAAA,MACA,UAAA,EAAY,WAAA;AAAA,MACZ,SAAA;AAAA,MACA,OAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACvD,CAAA;AAAA,EACH;AACF;AAQA,SAAS,YAAY,QAAA,EAA0B;AAC7C,EAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,QAAQ,CAAA,IAAK,0BAAA;AACnC;AAQA,SAAS,aAAa,QAAA,EAA2B;AAC/C,EAAA,IAAI;AACF,IAAA,MAAM,EAAA,GAAK,QAAA,CAAS,QAAA,EAAU,GAAG,CAAA;AACjC,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAC7B,IAAA,MAAM,YAAY,QAAA,CAAS,EAAA,EAAI,GAAA,EAAK,CAAA,EAAG,MAAM,CAAC,CAAA;AAC9C,IAAA,SAAA,CAAU,EAAE,CAAA;AACZ,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,SAAA,EAAW,CAAA,EAAA,EAAK;AAClC,MAAA,IAAI,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAG,OAAO,IAAA;AAAA,IAC3B;AACA,IAAA,OAAO,KAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAOO,SAAS,0BAAA,CACd,OAAA,EACA,OAAA,EACA,IAAA,EACM;AACN,EAAA,MAAM,EAAE,WAAW,WAAA,EAAa,OAAA,EAAS,WAAW,IAAA,EAAM,OAAA,EAAS,SAAQ,GAAI,OAAA;AAE/E,EAAA,IAAI;AACF,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA;AACjC,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,SAAA;AAC/B,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,WAAA,EAAc,OAAO,CAAA,kCAAA,CAAoC,CAAA;AAAA,IAC3E;AACA,IAAA,MAAM,UAAA,GAAa,OAAA,GAAU,OAAA,CAAQ,SAAA,EAAW,OAAO,CAAA,GAAI,SAAA;AAG3D,IAAA,IAAI,CAAC,UAAA,CAAW,UAAA,CAAW,SAAS,CAAA,EAAG;AACrC,MAAA,MAAM,IAAI,MAAM,8BAA8B,CAAA;AAAA,IAChD;AAEA,IAAA,IAAI,IAAA;AACJ,IAAA,QAAQ,SAAA;AAAW,MACjB,KAAK,MAAA,EAAQ;AACX,QAAA,MAAM,UAAUW,WAAAA,CAAY,UAAA,EAAY,EAAE,aAAA,EAAe,MAAM,CAAA;AAC/D,QAAA,IAAA,GAAO,OAAA,CACJ,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,IAAA,CAAK,UAAA,CAAW,GAAG,CAAC,CAAA,CACrC,GAAA,CAAI,CAAC,CAAA,KAAM;AACV,UAAA,MAAM,YAAY,OAAA,GAAUC,IAAAA,CAAK,SAAS,CAAA,CAAE,IAAI,IAAI,CAAA,CAAE,IAAA;AACtD,UAAA,MAAM,MAAA,GAAkC;AAAA,YACtC,MAAM,CAAA,CAAE,IAAA;AAAA,YACR,IAAA,EAAM,SAAA;AAAA,YACN,IAAA,EAAM,CAAA,CAAE,WAAA,EAAY,GAAI,WAAA,GAAc;AAAA,WACxC;AACA,UAAA,IAAI,CAAC,CAAA,CAAE,WAAA,EAAY,EAAG;AACpB,YAAA,IAAI;AACF,cAAA,MAAA,CAAO,OAAOC,QAAAA,CAASD,IAAAA,CAAK,YAAY,CAAA,CAAE,IAAI,CAAC,CAAA,CAAE,IAAA;AAAA,YACnD,CAAA,CAAA,MAAQ;AAAA,YAER;AAAA,UACF;AACA,UAAA,OAAO,MAAA;AAAA,QACT,CAAC,CAAA;AACH,QAAA;AAAA,MACF;AAAA,MACA,KAAK,MAAA,EAAQ;AACX,QAAA,MAAM,WAAA,GAAc,WAAA,CAAY,QAAA,CAAS,UAAU,CAAC,CAAA;AACpD,QAAA,IAAI,YAAA,CAAa,UAAU,CAAA,EAAG;AAC5B,UAAA,MAAM,GAAA,GAAMF,aAAa,UAAU,CAAA;AACnC,UAAA,IAAA,GAAO;AAAA,YACL,IAAA,EAAM,GAAA,CAAI,QAAA,CAAS,QAAQ,CAAA;AAAA,YAC3B,WAAA;AAAA,YACA,QAAA,EAAU;AAAA,WACZ;AAAA,QACF,CAAA,MAAO;AACL,UAAA,IAAA,GAAO;AAAA,YACL,IAAA,EAAMA,YAAAA,CAAa,UAAA,EAAY,OAAO,CAAA;AAAA,YACtC,WAAA;AAAA,YACA,QAAA,EAAU;AAAA,WACZ;AAAA,QACF;AACA,QAAA;AAAA,MACF;AAAA,MACA,KAAK,OAAA,EAAS;AACZ,QAAA,SAAA,CAAU,QAAQ,UAAU,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAClD,QAAA,MAAM,eACJ,OAAO,OAAA,KAAY,QAAA,GACf,OAAA,GACE,SAA0C,IAAA,IAAQ,EAAA;AAC1D,QAAA,MAAM,QAAA,GACJ,OAAO,OAAA,KAAY,QAAA,GACf,SACC,OAAA,EAA0C,QAAA;AACjD,QAAA,IAAI,aAAa,QAAA,EAAU;AACzB,UAAA,aAAA,CAAc,UAAA,EAAY,MAAA,CAAO,IAAA,CAAK,YAAA,EAAc,QAAQ,CAAC,CAAA;AAAA,QAC/D,CAAA,MAAO;AACL,UAAA,aAAA,CAAc,UAAA,EAAY,cAAc,OAAO,CAAA;AAAA,QACjD;AACA,QAAA,IAAA,GAAO,IAAA;AACP,QAAA;AAAA,MACF;AAAA,MACA,KAAK,QAAA,EAAU;AACb,QAAA,UAAA,CAAW,UAAU,CAAA;AACrB,QAAA,IAAA,GAAO,IAAA;AACP,QAAA;AAAA,MACF;AAAA,MACA;AACE,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,iCAAA,EAAoC,SAAS,CAAA,CAAE,CAAA;AAAA;AAEnE,IAAA,IAAA,CAAK,EAAE,MAAM,mBAAA,EAAqB,SAAA,EAAW,YAAY,OAAA,EAAS,SAAA,EAAW,MAAM,CAAA;AAAA,EACrF,SAAS,GAAA,EAAK;AACZ,IAAA,IAAA,CAAK;AAAA,MACH,IAAA,EAAM,mBAAA;AAAA,MACN,SAAA;AAAA,MACA,UAAA,EAAY,OAAA;AAAA,MACZ,SAAA;AAAA,MACA,OAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACvD,CAAA;AAAA,EACH;AACF;;;ACjMO,IAAM,8BAAA,GAAiC,IAAI,EAAA,GAAK,GAAA;AA6ChD,SAAS,mCACd,IAAA,EAC8B;AAC9B,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,GAAA,KAAQ,MAAM,KAAK,GAAA,EAAI,CAAA;AACxC,EAAA,MAAM,cAAA,GACJ,IAAA,CAAK,cAAA,KACJ,CAAC,SAAqB,EAAA,KAAe;AACpC,IAAA,MAAM,MAAA,GAAS,UAAA,CAAW,OAAA,EAAS,EAAE,CAAA;AAGrC,IAAA,OAAO,MAAA;AAAA,EACT,CAAA,CAAA;AACF,EAAA,MAAM,gBAAA,GACJ,IAAA,CAAK,gBAAA,KACJ,CAAC,MAAA,KAAmC;AACnC,IAAA,YAAA,CAAa,MAAkD,CAAA;AAAA,EACjE,CAAA,CAAA;AACF,EAAA,MAAM,QAAA,GAAW,KAAK,QAAA,IAAY,8BAAA;AAElC,EAAA,IAAI,KAAA,GAAuC,IAAA;AAE3C,EAAA,SAAS,MAAA,GAAe;AACtB,IAAA,IAAI,UAAU,IAAA,EAAM;AAClB,MAAA,gBAAA,CAAiB,KAAK,CAAA;AACtB,MAAA,KAAA,GAAQ,IAAA;AAAA,IACV;AAAA,EACF;AAEA,EAAA,eAAe,IAAA,GAAsB;AACnC,IAAA,KAAA,GAAQ,IAAA;AACR,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AACF,MAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAAA,IAC5B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAA,CAAK,GAAA;AAAA,QACH,0CAA0C,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,yCAAA;AAAA,OAC5F;AACA,MAAA;AAAA,IACF;AACA,IAAA,IAAI,SAAS,MAAA,EAAW;AACtB,MAAA,IAAA,CAAK,GAAA;AAAA,QACH;AAAA,OACF;AACA,MAAA;AAAA,IACF;AACA,IAAA,QAAA,CAAS,IAAI,CAAA;AAAA,EACf;AAEA,EAAA,SAAS,SAAS,YAAA,EAA+C;AAC/D,IAAA,MAAA,EAAO;AACP,IAAA,IAAI,CAAC,YAAA,EAAc;AAEjB,MAAA;AAAA,IACF;AACA,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,KAAA,CAAM,YAAY,CAAA;AAC3C,IAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,WAAW,CAAA,EAAG;AACnC,IAAA,MAAM,OAAA,GAAU,WAAA,GAAc,GAAA,EAAI,GAAI,QAAA;AACtC,IAAA,IAAI,WAAW,CAAA,EAAG;AAChB,MAAA,IAAA,CAAK,GAAA;AAAA,QACH,CAAA,qCAAA,EAAwC,WAAW,GAAI,CAAA,2BAAA;AAAA,OACzD;AACA,MAAA,KAAA,GAAQ,eAAe,MAAM;AAC3B,QAAA,KAAK,IAAA,EAAK;AAAA,MACZ,GAAG,CAAC,CAAA;AAAA,IACN,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,GAAA;AAAA,QACH,wCAAwC,IAAA,CAAK,KAAA,CAAM,UAAU,GAAI,CAAC,gBAAgB,YAAY,CAAA,CAAA;AAAA,OAChG;AACA,MAAA,KAAA,GAAQ,eAAe,MAAM;AAC3B,QAAA,KAAK,IAAA,EAAK;AAAA,MACZ,GAAG,OAAO,CAAA;AAAA,IACZ;AACA,IAAA,KAAA,CAAM,KAAA,IAAQ;AAAA,EAChB;AAEA,EAAA,OAAO;AAAA,IACL,QAAA;AAAA,IACA,MAAA;AAAA,IACA,SAAA,EAAW,MAAM,KAAA,KAAU;AAAA,GAC7B;AACF;AClIA,SAAS,aAAA,CAAc,YAAA,EAA4B,KAAA,EAAe,KAAA,EAA6B;AAC7F,EAAA,MAAM,MAAA,GAAS,KAAA,CACZ,WAAA,EAAY,CACZ,KAAA,CAAM,KAAK,CAAA,CACX,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,GAAS,CAAC,CAAA;AAC7B,EAAA,IAAI,OAAO,MAAA,KAAW,CAAA,SAAU,YAAA,CAAa,KAAA,CAAM,GAAG,KAAK,CAAA;AAE3D,EAAA,MAAM,MAAA,GAAS,YAAA,CACZ,GAAA,CAAI,CAAC,GAAA,KAAQ;AACZ,IAAA,MAAM,QAAA,GAAW,CAAC,GAAA,CAAI,IAAA,EAAM,GAAA,CAAI,WAAA,EAAa,GAAA,CAAI,cAAA,IAAkB,EAAE,CAAA,CAClE,IAAA,CAAK,GAAG,EACR,WAAA,EAAY;AACf,IAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,IAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,MAAA,IAAI,QAAA,CAAS,QAAA,CAAS,KAAK,CAAA,EAAG,KAAA,IAAS,CAAA;AAAA,IACzC;AACA,IAAA,OAAO,EAAE,KAAK,KAAA,EAAM;AAAA,EACtB,CAAC,CAAA,CACA,MAAA,CAAO,CAAC,CAAA,KAAM,EAAE,KAAA,GAAQ,CAAC,CAAA,CACzB,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,KAAA,GAAQ,EAAE,KAAK,CAAA;AAEnC,EAAA,OAAO,MAAA,CAAO,MAAM,CAAA,EAAG,KAAK,EAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,GAAG,CAAA;AAChD;AAWO,SAAS,oBAAoB,QAAA,EAAmD;AACrF,EAAA,MAAM,mBAAqBI,EAAA,CAAA,YAAA,CAAa;AAAA,IACtC,MAAQA,EAAA,CAAA,IAAA,CAAK,CAAC,UAAU,OAAO,CAAC,EAAE,QAAA,EAAS;AAAA,IAC3C,UAAA,EACGA,EAAA,CAAA,IAAA,CAAK,CAAC,WAAA,EAAa,QAAA,EAAU,OAAA,EAAS,MAAA,EAAQ,OAAA,EAAS,KAAA,EAAO,WAAA,EAAa,OAAO,CAAC,EACnF,QAAA,EAAS;AAAA,IACZ,OAASA,EAAA,CAAA,IAAA,CAAK,CAAC,WAAW,MAAM,CAAC,EAAE,QAAA;AAAS,GAC7C,CAAA;AACD,EAAA,OAAO;AAAA,IACL,gBAAA,CAAiB;AAAA,MACf,IAAA,EAAM,qBAAA;AAAA,MACN,WAAA,EAAa,mBAAA;AAAA,MACb,WAAA,EACE,gGAAA;AAAA,MACF,IAAA,EAAM,OAAA;AAAA,MACN,MAAA,EAAQ,EAAE,IAAA,EAAM,WAAA,EAAY;AAAA,MAC5B,IAAA,EAAM,OAAA;AAAA,MACN,aAAA,EAAe,KAAA;AAAA,MACf,KAAA,EAAO,gBAAA;AAAA,MACP,OAAA,EAAS,OAAO,IAAA,KACd,QAAA,CAAS,IAAA,CAAK;AAAA,QACZ,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,QAAQ,IAAA,CAAK,UAAA;AAAA,QACb,OAAO,IAAA,CAAK;AAAA,OACb;AAAA,KACJ,CAAA;AAAA,IACD,gBAAA,CAAiB;AAAA,MACf,IAAA,EAAM,uBAAA;AAAA,MACN,WAAA,EAAa,qBAAA;AAAA,MACb,WAAA,EACE,uIAAA;AAAA,MACF,IAAA,EAAM,OAAA;AAAA,MACN,MAAA,EAAQ,EAAE,IAAA,EAAM,WAAA,EAAY;AAAA,MAC5B,IAAA,EAAM,OAAA;AAAA,MACN,aAAA,EAAe,KAAA;AAAA,MACf,OAASA,EAAA,CAAA,YAAA,CAAa;AAAA,QACpB,OAASA,EAAA,CAAA,MAAA,EAAO;AAAA,QAChB,OAASA,EAAA,CAAA,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,GAAW,QAAA;AAAS,OAC7C,CAAA;AAAA,MACD,OAAA,EAAS,OAAO,EAAE,KAAA,EAAO,KAAA,EAAM,KAAM,aAAA,CAAc,QAAA,CAAS,IAAA,EAAK,EAAG,KAAA,EAAO,KAAA,IAAS,EAAE;AAAA,KACvF,CAAA;AAAA,IACD,gBAAA,CAAiB;AAAA,MACf,IAAA,EAAM,yBAAA;AAAA,MACN,WAAA,EAAa,qBAAA;AAAA,MACb,WAAA,EAAa,wEAAA;AAAA,MACb,IAAA,EAAM,OAAA;AAAA,MACN,MAAA,EAAQ,EAAE,IAAA,EAAM,WAAA,EAAY;AAAA,MAC5B,IAAA,EAAM,OAAA;AAAA,MACN,aAAA,EAAe,KAAA;AAAA,MACf,OAASA,EAAA,CAAA,YAAA,CAAa,EAAE,IAAA,EAAQA,EAAA,CAAA,MAAA,IAAU,CAAA;AAAA,MAC1C,OAAA,EAAS,OAAO,EAAE,IAAA,EAAK,KAAM;AAC3B,QAAA,MAAM,GAAA,GAAM,QAAA,CAAS,OAAA,CAAQ,IAAI,CAAA;AACjC,QAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AAGjB,QAAA,MAAM,IAAA,GAAO,SAAS,IAAA,EAAK,CAAE,KAAK,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,KAAS,IAAI,CAAA;AACxD,QAAA,OAAO,IAAA,IAAQ,IAAA;AAAA,MACjB;AAAA,KACD;AAAA,GACH;AACF;AAWO,SAAS,4BAA4B,QAAA,EAAoC;AAC9E,EAAA,KAAA,MAAW,GAAA,IAAO,mBAAA,CAAoB,QAAQ,CAAA,EAAG;AAC/C,IAAA,QAAA,CAAS,QAAA,CAAS,KAAK,OAAO,CAAA;AAAA,EAChC;AACF;ACvFA,IAAM,gBAAA,GAAkD,CAAC,KAAA,EAAO,MAAM,CAAA;AAEtE,SAAS,WAAW,GAAA,EAAgD;AAClE,EAAA,OAAO,IAAI,QAAA,IAAY,gBAAA;AACzB;AAEA,SAAS,WAAA,CAAY,KAAiB,MAAA,EAAqC;AACzE,EAAA,OAAO,UAAA,CAAW,GAAG,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA;AACxC;AAqEA,IAAM,mBAAA,GAAkD;AAAA,EACtD,WAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA,KAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF,CAAA;AAWO,IAAM,qBAAN,MAAyB;AAAA,EACb,MAAA,uBAAa,GAAA,EAA+B;AAAA,EAC5C,MAAA;AAAA,EACT,aAAA;AAAA,EAER,YAAY,MAAA,EAAiB;AAC3B,IAAA,IAAA,CAAK,MAAA,GAAS,UAAU,YAAA,CAAa,EAAE,MAAM,QAAA,EAAU,OAAA,EAAS,uBAAuB,CAAA;AAAA,EACzF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,iBAAiB,OAAA,EAAoD;AACnE,IAAA,IAAA,CAAK,aAAA,GAAgB,OAAA;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,YAAA,CAAa,IAAA,EAAc,KAAA,EAAkC;AACjE,IAAA,IAAI,CAAC,KAAK,aAAA,EAAe;AACvB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,eAAe,IAAI,CAAA,iHAAA;AAAA,OAErB;AAAA,IACF;AACA,IAAA,OAAO,IAAA,CAAK,aAAA,CAAc,IAAA,EAAM,KAAK,CAAA;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,QAAA,CAAS,KAAwB,MAAA,EAA8B;AAC7D,IAAA,IAAI,CAAC,IAAA,CAAK,eAAA,CAAgB,MAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,EAAG;AAC7C,MAAA,IAAA,CAAK,MAAA,CAAO,KAAK,oDAAA,EAAsD;AAAA,QACrE,MAAM,GAAA,CAAI,IAAA;AAAA,QACV,MAAA;AAAA,QACA,UAAA,EAAY,IAAI,MAAA,CAAO;AAAA,OACxB,CAAA;AACD,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAA,CAAI,IAAA,EAAM,GAAG,CAAA;AAC7B,IAAA,IAAA,CAAK,MAAA,CAAO,KAAK,uBAAA,EAAyB;AAAA,MACxC,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,UAAA,EAAY,IAAI,MAAA,CAAO;AAAA,KACxB,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAW,IAAA,EAAoB;AAC7B,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,MAAA,CAAO,IAAI,CAAA,EAAG;AAC5B,MAAA,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,yBAAA,EAA2B,EAAE,MAAM,CAAA;AAAA,IACtD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,KAAK,MAAA,EAA6C;AAChD,IAAA,MAAM,MAAM,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,QAAQ,CAAA;AAC3C,IAAA,MAAM,QAAA,GAAW,SACb,GAAA,CAAI,MAAA;AAAA,MACF,CAAC,OACE,MAAA,CAAO,IAAA,KAAS,UAAa,CAAA,CAAE,IAAA,KAAS,MAAA,CAAO,IAAA,MAC/C,MAAA,CAAO,MAAA,KAAW,UAAa,CAAA,CAAE,MAAA,CAAO,SAAS,MAAA,CAAO,MAAA,CAAA,KACxD,OAAO,KAAA,KAAU,MAAA,IAAa,CAAA,CAAE,KAAA,KAAU,MAAA,CAAO,KAAA;AAAA,KACtD,GACA,GAAA;AACJ,IAAA,OAAO,SAAS,GAAA,CAAI,CAAC,MAAM,IAAA,CAAK,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,QAAQ,IAAA,EAAwC;AAC9C,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,IAAI,CAAA,IAAK,IAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,eAAA,GAA6B;AAC3B,IAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,CAAA,CACnC,MAAA,CAAO,CAAC,CAAA,KAAM,YAAY,CAAA,EAAG,KAAK,CAAC,CAAA,CACnC,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MACX,MAAM,CAAA,CAAE,IAAA;AAAA,MACR,aAAa,CAAA,CAAE,WAAA;AAAA,MACf,YAAY,CAAA,CAAE;AAAA,KAChB,CAAE,CAAA;AAAA,EACN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,oBAAA,GAA+B;AAC7B,IAAA,MAAM,MAAA,uBAAa,GAAA,EAAwC;AAC3D,IAAA,KAAA,MAAW,GAAA,IAAO,IAAA,CAAK,MAAA,CAAO,MAAA,EAAO,EAAG;AACtC,MAAA,IAAI,CAAC,IAAI,cAAA,EAAgB;AACzB,MAAA,IAAI,CAAC,WAAA,CAAY,GAAA,EAAK,KAAK,CAAA,EAAG;AAC9B,MAAA,MAAM,MAAM,MAAA,CAAO,GAAA,CAAI,IAAI,MAAA,CAAO,IAAI,KAAK,EAAC;AAC5C,MAAA,GAAA,CAAI,IAAA,CAAK,IAAI,cAAc,CAAA;AAC3B,MAAA,MAAA,CAAO,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,IAAA,EAAM,GAAG,CAAA;AAAA,IACjC;AACA,IAAA,MAAM,QAAkB,EAAC;AACzB,IAAA,KAAA,MAAW,QAAQ,mBAAA,EAAqB;AACtC,MAAA,MAAM,SAAA,GAAY,MAAA,CAAO,GAAA,CAAI,IAAI,CAAA;AACjC,MAAA,IAAI,CAAC,WAAW,MAAA,EAAQ;AACxB,MAAA,KAAA,MAAW,YAAY,SAAA,EAAW;AAChC,QAAA,KAAA,CAAM,KAAK,QAAQ,CAAA;AAAA,MACrB;AAAA,IACF;AACA,IAAA,OAAO,KAAA,CAAM,KAAK,MAAM,CAAA;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,SAAA,GAA0B;AACxB,IAAA,OAAO,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,IAAA,CAAK,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACnE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,QAAQ,QAAA,EAA8B;AACpC,IAAA,KAAA,MAAW,OAAO,QAAA,EAAU;AAC1B,MAAA,IAAI,GAAA,CAAI,MAAA,CAAO,IAAA,KAAS,QAAA,EAAU;AAClC,MAAA,MAAM,IAAA,GAA0B;AAAA,QAC9B,GAAG,GAAA;AAAA,QACH,QAAA,EAAU,wBAAA;AAAA,QACV,SAAA,EAAW,MAAA;AAAA,QACX,OAAA,EAAS;AAAA,OACX;AACA,MAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAA,CAAI,IAAA,EAAM,IAAI,CAAA;AAAA,IAChC;AACA,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,8BAAA,EAAgC,EAAE,KAAA,EAAO,QAAA,CAAS,QAAQ,CAAA;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,MAAA,CACJ,IAAA,EACA,KAAA,EACA,OAAA,EACkB;AAClB,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA;AAC7B,IAAA,IAAI,CAAC,GAAA,EAAK;AACR,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,IAAI,CAAA,CAAE,CAAA;AAAA,IAC/C;AACA,IAAA,MAAM,MAAM,YAAA,CAAa;AAAA,MACvB,IAAA,EAAM,YAAA;AAAA,MACN,OAAA,EAAS,IAAI,MAAA,CAAO,IAAA;AAAA,MACpB,UAAU,GAAA,CAAI;AAAA,KACf,CAAA;AACD,IAAA,GAAA,CAAI,IAAA,CAAK,UAAA,EAAY,EAAE,KAAA,EAAO,CAAA;AAC9B,IAAA,IAAI;AACF,MAAA,MAAM,SAAA,GAAY,GAAA,CAAI,QAAA,CAAS,KAAA,CAAM,KAAK,CAAA;AAC1C,MAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAI,OAAA,CAAQ,WAAW,EAAE,GAAG,OAAA,EAAS,GAAA,EAAK,CAAA;AAC/D,MAAA,GAAA,CAAI,IAAA,CAAK,IAAA,EAAM,EAAE,MAAA,EAAQ,QAAQ,CAAA;AACjC,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,KAAA,CAAM,UAAU,GAAG,CAAA;AACvB,MAAA,MAAM,GAAA;AAAA,IACR;AAAA,EACF;AAAA;AAAA,EAGQ,eAAA,CAAgB,QAAwB,MAAA,EAAmC;AACjF,IAAA,IAAI,WAAW,QAAA,EAAU;AACvB,MAAA,OAAO,OAAO,IAAA,KAAS,QAAA;AAAA,IACzB;AAEA,IAAA,OAAO,OAAO,IAAA,KAAS,QAAA;AAAA,EACzB;AAAA;AAAA,EAGQ,OAAO,GAAA,EAAoC;AACjD,IAAA,OAAO;AAAA,MACL,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,aAAa,GAAA,CAAI,WAAA;AAAA,MACjB,aAAa,GAAA,CAAI,WAAA;AAAA,MACjB,aAAa,GAAA,CAAI,WAAA;AAAA,MACjB,cAAc,GAAA,CAAI,YAAA;AAAA,MAClB,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,QAAQ,GAAA,CAAI,MAAA;AAAA,MACZ,OAAO,GAAA,CAAI,KAAA;AAAA,MACX,eAAe,GAAA,CAAI,aAAA;AAAA,MACnB,kBAAkB,GAAA,CAAI,gBAAA;AAAA,MACtB,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,eAAe,GAAA,CAAI,aAAA;AAAA,MACnB,UAAU,GAAA,CAAI,QAAA;AAAA,MACd,gBAAgB,GAAA,CAAI,cAAA;AAAA,MACpB,eAAe,GAAA,CAAI,aAAA;AAAA,MACnB,QAAQ,GAAA,CAAI;AAAA,KACd;AAAA,EACF;AACF;AA0BO,SAAS,2BAA2B,IAAA,EAAqC;AAC9E,EAAA,MAAM,YAAY,IAAA,CACf,KAAA,EAAM,CACN,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,IAAA,CAAK,cAAc,CAAA,CAAE,IAAI,CAAC,CAAA,CAC3C,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,IACX,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,MAAA,EAAQ,EAAE,MAAA,CAAO,IAAA;AAAA,IACjB,YAAA,EAAc,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,WAAA,IAAe,EAAE,CAAC;AAAA,GAC1D,CAAE,CAAA;AACJ,EAAA,OAAO,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,SAAS,CAAC,CAAA;AACzC;AAEA,SAAS,OAAO,KAAA,EAAuB;AACrC,EAAA,OAAOV,WAAW,QAAQ,CAAA,CAAE,OAAO,KAAK,CAAA,CAAE,OAAO,KAAK,CAAA;AACxD;AAMA,IAAM,wBAAA,GAAqD;AAAA,EACzD,KAAA,EAAO,CAAC,CAAA,KAAe;AAAA;AAAA;AAAA;AAIzB,CAAA;AAEA,IAAM,0BAA0B,YAA4B;AAC1D,EAAA,MAAM,IAAI,KAAA;AAAA,IACR;AAAA,GACF;AACF,CAAA;;;AC5ZO,IAAM,kCAAA,GAAqC;AAmB3C,SAAS,8BAAA,CACd,KACA,iBAAA,EACQ;AACR,EAAA,IAAI,OAAO,GAAA,CAAI,aAAA,KAAkB,QAAA,SAAiB,GAAA,CAAI,aAAA;AACtD,EAAA,IAAI,GAAA,CAAI,kBAAkB,OAAO,iBAAA;AACjC,EAAA,OAAO,kCAAA;AACT;AAWO,SAAS,6BAA6B,IAAA,EAOJ;AACvC,EAAA,MAAM,SAAA,GAAY,KAAK,SAAA,IAAa,kCAAA;AACpC,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,cAAA,KAAmB,MAAM,OAAO,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA,EAAI,KAAK,KAAA,CAAM,IAAA,CAAK,MAAA,EAAO,GAAI,GAAG,CAAC,CAAA,CAAA,CAAA;AAC9F,EAAA,OAAO,OAAO,KAAA,KAAmB;AAC/B,IAAA,MAAM,SAAS,GAAA,EAAI;AACnB,IAAA,IAAI,IAAA,CAAK,KAAK,aAAA,EAAe;AAC3B,MAAA,IAAA,CAAK,IAAA,CAAK;AAAA,QACR,IAAA,EAAM,oBAAA;AAAA,QACN,MAAA;AAAA,QACA,IAAA,EAAM,KAAK,IAAA,CAAK,IAAA;AAAA,QAChB,KAAA;AAAA,QACA,SAAA,EAAW;AAAA,OACZ,CAAA;AACD,MAAA,OAAO,EAAC;AAAA,IACV;AACA,IAAA,OAAO,IAAI,OAAA,CAAiB,CAACH,QAAAA,EAAS,MAAA,KAAW;AAC/C,MAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC7B,QAAA,IAAA,CAAK,OAAA,CAAQ,OAAO,MAAM,CAAA;AAC1B,QAAA,MAAA;AAAA,UACE,IAAI,KAAA;AAAA,YACF,cAAc,IAAA,CAAK,IAAA,CAAK,IAAI,CAAA,SAAA,EAAY,MAAM,qBAAqB,SAAS,CAAA,EAAA;AAAA;AAC9E,SACF;AAAA,MACF,GAAG,SAAS,CAAA;AACZ,MAAA,IAAA,CAAK,OAAA,CAAQ,IAAI,MAAA,EAAQ,EAAE,SAAAA,QAAAA,EAAS,MAAA,EAAQ,OAAO,CAAA;AACnD,MAAA,IAAA,CAAK,IAAA,CAAK;AAAA,QACR,IAAA,EAAM,oBAAA;AAAA,QACN,MAAA;AAAA,QACA,IAAA,EAAM,KAAK,IAAA,CAAK,IAAA;AAAA,QAChB,KAAA;AAAA,QACA,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH,CAAA;AACF;AAQO,SAAS,uBAAA,CACd,SACA,GAAA,EACS;AACT,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,GAAA,CAAI,MAAM,CAAA;AACpC,EAAA,IAAI,CAAC,OAAO,OAAO,KAAA;AACnB,EAAA,YAAA,CAAa,MAAM,KAAK,CAAA;AACxB,EAAA,OAAA,CAAQ,MAAA,CAAO,IAAI,MAAM,CAAA;AACzB,EAAA,MAAM,SAAS,GAAA,CAAI,MAAA;AACnB,EAAA,IAAI,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,IAAY,WAAW,MAAA,EAAQ;AAC7D,IAAA,KAAA,CAAM,OAAO,IAAI,KAAA,CAAM,OAAQ,MAAA,CAA8B,KAAK,CAAC,CAAC,CAAA;AAAA,EACtE,CAAA,MAAO;AACL,IAAA,KAAA,CAAM,QAAQ,MAAM,CAAA;AAAA,EACtB;AACA,EAAA,OAAO,IAAA;AACT;AAwBO,SAAS,8BAAA,CACd,OAAA,EACA,MAAA,EACA,QAAA,EACS;AACT,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,MAAM,CAAA;AAChC,EAAA,IAAI,CAAC,OAAO,OAAO,KAAA;AACnB,EAAA,YAAA,CAAa,MAAM,KAAK,CAAA;AACxB,EAAA,OAAA,CAAQ,OAAO,MAAM,CAAA;AACrB,EAAA,KAAA,CAAM,MAAA,CAAO,IAAI,KAAA,CAAM,QAAA,IAAY,kBAAkB,CAAC,CAAA;AACtD,EAAA,OAAO,IAAA;AACT;;;AClJO,IAAM,yBAAN,MAA2D;AAAA,EAC/C,gBAAA;AAAA,EACA,aAAA;AAAA,EAEjB,YAAY,IAAA,EAA2D;AACrE,IAAA,IAAA,CAAK,mBAAmB,IAAA,CAAK,gBAAA;AAC7B,IAAA,IAAA,CAAK,gBAAgB,IAAA,CAAK,aAAA;AAAA,EAC5B;AAAA,EAEA,cAAc,OAAA,EAAqC;AACjD,IAAA,MAAM,WAAA,GAAe,OAAA,CAAQ,eAAA,GAAkB,OAAA,CAAQ,aAAA,GAAiB,GAAA;AACxE,IAAA,IAAI,WAAA,GAAc,IAAA,CAAK,gBAAA,EAAkB,OAAO,KAAA;AAGhD,IAAA,IACE,QAAQ,uBAAA,KAA4B,IAAA,IACpC,OAAA,CAAQ,uBAAA,GAA0B,KAAK,aAAA,EACvC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AACF,CAAA;;;ACxDA,IAAM,yBAAA,GAA4B,CAAA;AAAA;AAAA;AAAA;;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA,uEAAA,CAAA;AAiE3B,SAAS,sBAAsB,IAAA,EAK3B;AACT,EAAA,MAAM,IAAA,GAAO,KAAK,WAAA,IAAe,yBAAA;AACjC,EAAA,MAAM,KAAA,GAAQ,CAAC,IAAI,CAAA;AAEnB,EAAA,MAAM,aAAA,GAAgB,CAAC,GAAI,IAAA,CAAK,eAAA,IAAmB,EAAC,EAAI,GAAI,IAAA,CAAK,aAAA,IAAiB,EAAG,CAAA;AAErF,EAAA,IAAI,aAAA,CAAc,SAAS,CAAA,EAAG;AAC5B,IAAA,KAAA,CAAM,IAAA;AAAA,MACJ;;AAAA;AAAA,EAA4C,aAAA,CAAc,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAA,EAAK,CAAC,CAAA,CAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KAC3F;AAAA,EACF;AAEA,EAAA,IAAI,KAAK,KAAA,EAAO;AACd,IAAA,KAAA,CAAM,IAAA,CAAK;;AAAA;AAAA,EAAiB,IAAA,CAAK,KAAK,CAAA,CAAE,CAAA;AAAA,EAC1C;AAEA,EAAA,OAAO,KAAA,CAAM,KAAK,EAAE,CAAA;AACtB;;;ACtEA,IAAM,iBAAA,GAAoB,GAAA;AAM1B,IAAM,qBAAA,GAAwB,GAAA;AAQ9B,IAAM,yBAAA,GAA4B,IAAA;AASlC,IAAM,wBAAA,GAAqC;AAAA,EACzC,8CAAA;AAAA,EACA,kDAAA;AAAA,EACA,uCAAA;AAAA,EACA,oCAAA;AAAA,EACA,iCAAA;AAAA,EACA,2BAAA;AAAA,EACA;AACF,CAAA;AAcO,SAAS,yBAAyB,IAAA,EAAuB;AAC9D,EAAA,IAAI,IAAA,CAAK,MAAA,GAAS,yBAAA,EAA2B,OAAO,KAAA;AACpD,EAAA,OAAO,yBAAyB,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA;AAC1D;AAkBO,SAAS,wBAAA,CACd,IAAA,EACA,YAAA,EACA,WAAA,EACiD;AACjD,EAAA,IAAI,CAAC,KAAK,IAAA,EAAK,SAAU,EAAE,EAAA,EAAI,KAAA,EAAO,SAAA,EAAW,OAAA,EAAQ;AACzD,EAAA,IAAI,wBAAA,CAAyB,IAAI,CAAA,EAAG,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,WAAW,YAAA,EAAa;AAChF,EAAA,IAAI,IAAA,CAAK,SAAS,iBAAA,EAAmB,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,WAAW,WAAA,EAAY;AAChF,EAAA,IAAI,YAAA,GAAe,CAAA,IAAK,WAAA,GAAc,YAAA,GAAe,qBAAA,EAAuB;AAC1E,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,SAAA,EAAW,YAAA,EAAa;AAAA,EAC9C;AACA,EAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AACpB;AA6CO,IAAM,yBAAN,MAA6B;AAAA,EACjB,MAAA;AAAA,EACA,QAAA;AAAA,EACA,MAAA;AAAA,EACA,IAAA;AAAA,EAET,aAAA,GAAgB,KAAA;AAAA,EAChB,iBAAA,GAAmC,IAAA;AAAA,EACnC,kBAAA,GAAoC,IAAA;AAAA,EACpC,UAAA,GAAa,CAAA;AAAA,EACb,uBAAA,GAA0B,CAAA;AAAA,EAElC,YAAY,IAAA,EAAqC;AAC/C,IAAA,IAAA,CAAK,SAAS,IAAA,CAAK,MAAA;AACnB,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,SAAS,EAAE,GAAG,mBAAA,EAAqB,GAAG,KAAK,MAAA,EAAO;AACvD,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,sBAAA,CAAuB;AAAA,MACzC,gBAAA,EAAkB,KAAK,MAAA,CAAO,gBAAA;AAAA,MAC9B,aAAA,EAAe,KAAK,MAAA,CAAO;AAAA,KAC5B,CAAA;AAAA,EACH;AAAA,EAEA,IAAI,6BAAA,GAAyC;AAC3C,IAAA,OAAO,KAAK,uBAAA,GAA0B,CAAA;AAAA,EACxC;AAAA,EAEA,aAAa,GAAA,EAAmB;AAC9B,IAAA,IAAA,CAAK,UAAA,GAAa,GAAA;AAClB,IAAA,IAAA,CAAK,uBAAA,EAAA;AAAA,EACP;AAAA,EAEA,aAAA,GAAyB;AACvB,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,OAAA,EAAS,OAAO,KAAA;AACjC,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,MAAA,CAAO,aAAA,EAAc;AACxC,IAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,MAAA,CAAO,gBAAA,EAAiB;AACnD,IAAA,IAAI,CAAC,KAAA,IAAS,CAAC,iBAAiB,KAAA,CAAM,WAAA,KAAgB,QAAW,OAAO,KAAA;AAExE,IAAA,OAAO,IAAA,CAAK,SAAS,aAAA,CAAc;AAAA,MACjC,iBAAiB,KAAA,CAAM,WAAA;AAAA,MACvB,aAAA;AAAA,MACA,cAAc,IAAA,CAAK,uBAAA;AAAA,MACnB,mBAAmB,IAAA,CAAK,iBAAA;AAAA,MACxB,uBAAA,EACE,KAAK,kBAAA,KAAuB,IAAA,GAAO,KAAK,GAAA,EAAI,GAAI,KAAK,kBAAA,GAAqB;AAAA,KAC7E,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,OAAA,CAAQ,OAAA,EAA4B,KAAA,EAA+C;AACvF,IAAA,IAAI,IAAA,CAAK,eAAe,OAAO,IAAA;AAC/B,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAA;AACrB,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,IAAA,CAAK,UAAA,CAAW,OAAA,EAAS,KAAK,CAAA;AAAA,IAC7C,CAAA,SAAE;AACA,MAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,IACvB;AAAA,EACF;AAAA,EAEA,MAAc,UAAA,CACZ,OAAA,EACA,KAAA,EAC+B;AAC/B,IAAA,MAAM,YAAA,GAAe,IAAA,CAAK,MAAA,CAAO,aAAA,IAAiB,WAAA,IAAe,CAAA;AACjE,IAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,MAAA,CAAO,gBAAA,IAAoB,IAAA;AACxD,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,MAAA,CAAO,QAAA,EAAS,IAAK,IAAA;AAC9C,IAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,MAAA,CAAO,UAAA,EAAY,EAAA,IAAM,IAAA;AACrD,IAAA,MAAM,aAAA,GAAgB,KAAK,iBAAA,IAAqB,CAAA;AAIhD,IAAA,MAAM,+BAAA,GAAkC,IAAA,CAAK,IAAA,CAAK,6BAAA,IAAgC,IAAK,IAAA;AAEvF,IAAA,IAAA,CAAK,IAAA,CAAK,oBAAoB,OAAO,CAAA;AACrC,IAAA,IAAA,CAAK,KAAK,KAAA,GAAQ,CAAA,+BAAA,EAAkC,OAAO,CAAA,SAAA,EAAY,YAAY,CAAA,CAAA,CAAG,CAAA;AAEtF,IAAA,MAAM,SAAS,qBAAA,CAAsB;AAAA,MACnC,WAAA,EAAa,KAAK,IAAA,CAAK,qBAAA;AAAA,MACvB,eAAA,EAAiB,KAAK,IAAA,CAAK,eAAA;AAAA,MAC3B,aAAA,EAAe,KAAK,IAAA,CAAK,aAAA;AAAA,MACzB;AAAA,KACD,CAAA;AAED,IAAA,IAAI,WAAA,GAAc,EAAA;AAKlB,IAAA,MAAM,cAAA,GAAiB,CAAC,GAAA,KAAiB;AACvC,MAAA,MAAM,KAAA,GAAQ,GAAA;AAEd,MAAA,IAAI,KAAA,CAAM,SAAS,MAAA,EAAQ;AACzB,QAAA,WAAA,IAAgB,MAAM,OAAA,IAAsB,EAAA;AAC5C,QAAA;AAAA,MACF;AAGA,MAAA,IAAI,KAAA,CAAM,SAAS,gBAAA,EAAkB;AACnC,QAAA,MAAM,QAAQ,KAAA,CAAM,UAAA;AACpB,QAAA,IAAI,OAAO,WAAA,IAAe,KAAA;AAC1B,QAAA;AAAA,MACF;AAGA,MAAA,IAAI,KAAA,CAAM,IAAA,KAAS,eAAA,IAAmB,KAAA,CAAM,SAAS,aAAA,EAAe;AAClE,QAAA,MAAM,MAAM,KAAA,CAAM,OAAA;AAClB,QAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACnB,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA,GAAI,GAAA,CAAI,UAAU,EAAC;AAC3D,QAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,UAAA,IAAI,EAAE,IAAA,KAAS,MAAA,IAAU,CAAA,CAAE,IAAA,iBAAqB,CAAA,CAAE,IAAA;AAAA,QACpD;AAAA,MACF;AAAA,IACF,CAAA;AAEA,IAAA,IAAI,WAAA,GAAuB,IAAA;AAC3B,IAAA,IAAI;AACF,MAAA,IAAA,CAAK,MAAA,CAAO,EAAA,CAAG,aAAA,EAAe,cAAc,CAAA;AAC5C,MAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA;AAAA,IACjC,SAAS,GAAA,EAAK;AACZ,MAAA,WAAA,GAAc,GAAA;AAAA,IAChB,CAAA,SAAE;AACA,MAAA,IAAA,CAAK,MAAA,CAAO,cAAA,CAAe,aAAA,EAAe,cAAc,CAAA;AAAA,IAC1D;AAGA,IAAA,IAAI,gBAAgB,IAAA,EAAM;AACxB,MAAA,MAAM,UAAA,GAAa,sBAAA;AAAA,QACjB,WAAA,YAAuB,KAAA,GAAQ,WAAA,CAAY,OAAA,GAAU,OAAO,WAAW;AAAA,OACzE;AAKA,MAAA,MAAM,YACJ,UAAA,CAAW,QAAA,KAAa,YAAA,GACpB,YAAA,GACA,WAAW,QAAA,KAAa,MAAA,GACtB,MAAA,GACA,UAAA,CAAW,aAAa,SAAA,GACtB,SAAA,GACA,WAAW,QAAA,KAAa,YAAA,GACtB,gBACA,UAAA,CAAW,QAAA;AAEvB,MAAA,IAAA,CAAK,KAAK,KAAA,GAAQ,CAAA,qBAAA,EAAwB,WAAW,OAAO,CAAA,EAAA,EAAK,SAAS,CAAA,CAAA,CAAG,CAAA;AAC7E,MAAA,IAAA,CAAK,KAAK,mBAAA,GAAsB;AAAA,QAC9B,IAAA,EAAM,oBAAA;AAAA,QACN,MAAA,EAAQ,QAAA;AAAA,QACR,SAAA;AAAA,QACA,OAAA;AAAA,QACA,OAAA,EAAS,EAAA;AAAA,QACT,KAAA,EAAO,WAAA;AAAA,QACP,QAAA,EAAU,cAAA;AAAA,QACV,WAAA,EAAa,YAAA;AAAA,QACb,YAAA,EAAc,CAAA;AAAA,QACd,aAAA;AAAA,QACA,aAAa,IAAA,CAAK,UAAA;AAAA,QAClB,2BAAA,EAA6B,eAAA;AAAA,QAC7B,iBAAA,EAAmB,WAAA;AAAA,QACnB,+BAAA;AAAA,QACA,WAAA,EAAa;AAAA,OACd,CAAA;AACD,MAAA,IAAA,CAAK,KAAK,eAAA,IAAkB;AAC5B,MAAA,OAAO,IAAA;AAAA,IACT;AAIA,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,MAAA,CAAO,aAAA,EAAc;AAC9C,IAAA,MAAM,cAAc,WAAA,EAAa,YAAA,IAAgB,KAAK,IAAA,CAAK,WAAA,CAAY,SAAS,CAAC,CAAA;AAEjF,IAAA,MAAM,UAAA,GAAa,wBAAA,CAAyB,WAAA,EAAa,YAAA,EAAc,WAAW,CAAA;AAClF,IAAA,IAAI,CAAC,WAAW,EAAA,EAAI;AAClB,MAAA,IAAA,CAAK,IAAA,CAAK,KAAA;AAAA,QACR,CAAA,uCAAA,EAA0C,WAAW,SAAS,CAAA,2BAAA;AAAA,OAChE;AACA,MAAA,IAAA,CAAK,KAAK,mBAAA,GAAsB;AAAA,QAC9B,IAAA,EAAM,oBAAA;AAAA,QACN,MAAA,EAAQ,QAAA;AAAA,QACR,WAAW,UAAA,CAAW,SAAA;AAAA,QACtB,OAAA;AAAA,QACA,OAAA,EAAS,EAAA;AAAA,QACT,KAAA,EAAO,WAAA;AAAA,QACP,QAAA,EAAU,cAAA;AAAA,QACV,WAAA,EAAa,YAAA;AAAA,QACb,YAAA,EAAc,WAAA;AAAA,QACd,aAAA;AAAA,QACA,aAAa,IAAA,CAAK,UAAA;AAAA,QAClB,2BAAA,EAA6B,eAAA;AAAA,QAC7B,iBAAA,EAAmB,WAAA;AAAA,QACnB,+BAAA;AAAA,QACA,WAAA,EAAa;AAAA,OACd,CAAA;AACD,MAAA,IAAA,CAAK,KAAK,eAAA,IAAkB;AAC5B,MAAA,OAAO,IAAA;AAAA,IACT;AAGA,IAAA,MAAM,WAAA,GAAA,iBAAc,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAE3C,IAAA,MAAM,QAAA,GAA0B;AAAA,MAC9B,IAAA,EAAM,UAAA;AAAA,MACN,OAAA,EAAS,WAAA;AAAA,MACT,OAAA;AAAA,MACA,aAAA;AAAA,MACA,aAAa,IAAA,CAAK,UAAA;AAAA,MAClB,YAAA;AAAA,MACA;AAAA,KACF;AAIA,IAAA,IAAA,CAAK,KAAK,mBAAA,GAAsB;AAAA,MAC9B,IAAA,EAAM,oBAAA;AAAA,MACN,MAAA,EAAQ,SAAA;AAAA,MACR,SAAA,EAAW,IAAA;AAAA,MACX,OAAA;AAAA,MACA,OAAA,EAAS,WAAA;AAAA,MACT,KAAA,EAAO,WAAA;AAAA,MACP,QAAA,EAAU,cAAA;AAAA,MACV,WAAA,EAAa,YAAA;AAAA,MACb,YAAA,EAAc,WAAA;AAAA,MACd,aAAA;AAAA,MACA,aAAa,IAAA,CAAK,UAAA;AAAA,MAClB,2BAAA,EAA6B,eAAA;AAAA,MAC7B,iBAAA,EAAmB,WAAA;AAAA,MACnB,+BAAA;AAAA,MACA;AAAA,KACD,CAAA;AACD,IAAA,IAAA,CAAK,IAAA,CAAK,aAAa,QAAQ,CAAA;AAG/B,IAAA,IAAA,CAAK,iBAAA,GAAoB,KAAK,UAAA,GAAa,CAAA;AAC3C,IAAA,IAAA,CAAK,kBAAA,GAAqB,KAAK,GAAA,EAAI;AACnC,IAAA,IAAA,CAAK,uBAAA,GAA0B,CAAA;AAG/B,IAAA,IAAA,CAAK,KAAK,eAAA,IAAkB;AAG5B,IAAA,IAAI,YAAY,WAAA,EAAa;AAC3B,MAAA,IAAA,CAAK,IAAA,CAAK,QAAQ,uCAAuC,CAAA;AACzD,MAAA,MAAM,IAAA,CAAK,OAAO,YAAA,EAAa;AAC/B,MAAA,MAAM,KAAK,MAAA,CAAO,MAAA;AAAA,QAChB,CAAA;AAAA,EAAuB,WAAW;AAAA;;AAAA,sIAAA;AAAA,OACpC;AAAA,IACF;AAGA,IAAA,IAAA,CAAK,IAAA,CAAK,KAAA;AAAA,MACR,CAAA,uBAAA,EAA0B,YAAY,CAAA,IAAA,EAAO,WAAW,mBAAoB,WAAA,GAAc,IAAA,CAAK,GAAA,CAAI,YAAA,EAAc,CAAC,CAAA,GAAK,GAAA,EAAK,OAAA,CAAQ,CAAC,CAAC,CAAA,EAAA;AAAA,KACxI;AACA,IAAA,OAAO,QAAA;AAAA,EACT;AAAA,EAEA,gBAAA,CAAiB,iBAAyB,gBAAA,EAAgC;AACxE,IAAA,IAAA,CAAK,iBAAA,GAAoB,eAAA;AACzB,IAAA,IAAA,CAAK,kBAAA,GAAqB,gBAAA;AAC1B,IAAA,IAAA,CAAK,uBAAA,GAA0B,CAAA;AAAA,EACjC;AACF,CAAA;ACzWO,SAAS,sBAAA,CACd,KAAA,EACA,GAAA,EACA,MAAA,EACY;AACZ,EAAA,IAAI,KAAA,CAAM,IAAA,KAAS,cAAA,EAAgB,OAAO,KAAA;AAC1C,EAAA,IAAK,KAAA,CAA+B,SAAS,OAAO,KAAA;AACpD,EAAA,MAAM,UAAU,KAAA,CAAM,IAAA;AACtB,EAAA,IAAI,CAAC,SAAS,OAAO,KAAA;AAErB,EAAA,MAAM,OAAA,GAAUA,OAAAA,CAAQ,GAAA,EAAK,OAAO,CAAA;AACpC,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,MAAM,GAAA,GAAM,QAAA,CAAS,KAAA,CAAM,SAAA,EAAW,OAAO,CAAA;AAI7C,IAAA,IAAI,GAAA,KAAQ,MAAM,GAAA,CAAI,UAAA,CAAW,IAAI,CAAA,IAAK,GAAA,CAAI,UAAA,CAAW,GAAG,CAAA,EAAG;AAC/D,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAM,GAAA,EAAK,OAAA,EAAS,MAAM,EAAA,EAAG;AAAA,EAClD;AACA,EAAA,OAAO,KAAA;AACT;;;ACFA,eAAsB,iCAAA,CACpB,SACA,GAAA,EACe;AACf,EAAA,IAAI,CAAC,OAAA,EAAS;AAEd,EAAA,IAAI,aAAA;AACJ,EAAA,IAAI;AACF,IAAA,aAAA,GAAgB,QAAQ,iBAAA,EAAkB;AAAA,EAC5C,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,CAAI,KAAK,uDAAA,EAAyD;AAAA,MAChE,OAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACvD,CAAA;AACD,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,WAAW,aAAA,CAAc,MAAA;AAAA,IAC7B,CAAC,CAAA,KAAM,CAAA,CAAE,iBAAA,KAAsB,IAAA,IAAQ,EAAE,IAAA,KAAS;AAAA,GACpD;AACA,EAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AACzB,IAAA,GAAA,CAAI,MAAM,0EAA0E,CAAA;AACpF,IAAA;AAAA,EACF;AAEA,EAAA,GAAA,CAAI,KAAK,qDAAA,EAAuD;AAAA,IAC9D,cAAc,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,EAAE;AAAA,GACvC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,GAAA;AAAA,IACZ,QAAA,CAAS,GAAA,CAAI,OAAO,CAAA,KAAM;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,CAAA,CAAE,EAAE,CAAA;AAC9B,QAAA,IAAI,OAAO,KAAA,CAAM,SAAA,CAAU,wBAAA,KAA6B,UAAA,EAAY;AAClE,UAAA,GAAA,CAAI,MAAM,sDAAA,EAAwD;AAAA,YAChE,aAAa,CAAA,CAAE;AAAA,WAChB,CAAA;AACD,UAAA;AAAA,QACF;AACA,QAAA,MAAM,MAAM,SAAA,CAAU,wBAAA,CAAyB,CAAA,CAAE,EAAA,EAAI,MAAM,MAAM,CAAA;AAAA,MACnE,SAAS,GAAA,EAAK;AACZ,QAAA,GAAA,CAAI,KAAK,4CAAA,EAA8C;AAAA,UACrD,aAAa,CAAA,CAAE,EAAA;AAAA,UACf,OAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,SACvD,CAAA;AAAA,MACH;AAAA,IACF,CAAC;AAAA,GACH;AACF;ACJA,IAAM,iBAAA,GAAoB,EAAE,IAAA,EAAM,WAAA,EAAY;AAQ9C,SAAS,eAAe,IAAA,EAAuE;AAC7F,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,KAAA;AAAA,IACJ,IAAA,EAAM,iBAAA;AAAA,IACN,OAAA,EAAS,GAAG,IAAI,CAAA,uBAAA;AAAA,GAClB;AACF;AAOA,IAAM,eAAA,GAAoB,EAAA,CAAA,OAAA,EAAQ,CAAE,MAAA,CAAO,MAAM,IAAI,CAAA;AAErD,IAAM,uBACH,EAAA,CAAA,MAAA,CAAO;AAAA,EACN,OAAS,EAAA,CAAA,MAAA,EAAO;AAAA,EAChB,SAAA,EAAa,EAAA,CAAA,MAAA,EAAO,CAAE,QAAA,GAAW,QAAA;AACnC,CAAC,EACA,QAAA,EAAS;AAEZ,IAAM,wBAA0B,EAAA,CAAA,YAAA,CAAa;AAAA,EAC3C,WAAA,EAAa,eAAA;AAAA,EACb,cAAA,EAAgB;AAClB,CAAC,CAAA;AAED,IAAM,4BAA8B,EAAA,CAAA,YAAA,CAAa;AAAA,EAC/C,WAAA,EAAa,eAAA;AAAA,EACb,cAAA,EAAgB;AAClB,CAAC,CAAA;AAED,IAAM,sBAAwB,EAAA,CAAA,YAAA,CAAa;AAAA,EACzC,IAAM,EAAA,CAAA,MAAA;AACR,CAAC,CAAA;AAED,IAAM,wBAA0B,EAAA,CAAA,YAAA,CAAa;AAAA,EAC3C,IAAA,EAAQ,EAAA,CAAA,IAAA,CAAK,CAAC,OAAA,EAAS,WAAW,CAAC,CAAA;AAAA,EACnC,IAAM,EAAA,CAAA,MAAA,EAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKb,IAAA,EAAM;AACR,CAAC,CAAA;AAED,IAAM,mBAAqB,EAAA,CAAA,YAAA,CAAa;AAAA,EACtC,KAAA,EAAS,QAAK,CAAC,QAAA,EAAU,SAAS,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,OAAO,CAAC;AACrE,CAAC,CAAA;AAED,IAAM,gBAAkB,EAAA,CAAA,YAAA,CAAa;AAAA,EACnC,OAAS,EAAA,CAAA,MAAA,EAAO;AAAA,EAChB,KAAO,EAAA,CAAA,MAAA,EAAO;AAAA,EACd,KAAA,EAAO;AACT,CAAC,CAAA;AAED,IAAM,iBAAmB,EAAA,CAAA,YAAA,CAAa;AAAA,EACpC,QAAU,EAAA,CAAA,IAAA,CAAK,CAAC,WAAA,EAAa,OAAA,EAAS,UAAU,CAAC;AACnD,CAAC,CAAA;AAGD,IAAM,sBAAA,uBAA6B,GAAA,CAAc,CAAC,SAAS,MAAA,EAAQ,MAAA,EAAQ,OAAO,CAAC,CAAA;AAY5E,SAAS,wBAAwB,QAAA,EAAyD;AAC/F,EAAA,OAAO;AAAA,IACL,gBAAA,CAAiB;AAAA,MACf,IAAA,EAAM,kBAAA;AAAA,MACN,WAAA,EAAa,WAAA;AAAA,MACb,WAAA,EACE,gGAAA;AAAA,MACF,IAAA,EAAM,OAAA;AAAA,MACN,MAAA,EAAQ,iBAAA;AAAA,MACR,QAAA,EAAU,CAAC,SAAS,CAAA;AAAA,MACpB,IAAA,EAAM,QAAA;AAAA,MACN,KAAA,EAAO,qBAAA;AAAA,MACP,OAAA,EAAS,OAAO,KAAA,KAAU;AACxB,QAAA,IAAI,CAAC,QAAA,CAAS,QAAA,EAAU,OAAO,eAAe,kBAAkB,CAAA;AAChE,QAAA,OAAO,SAAS,QAAA,CAAS;AAAA,UACvB,aAAa,KAAA,CAAM,WAAA;AAAA,UACnB,gBAAgB,KAAA,CAAM;AAAA,SACvB,CAAA;AAAA,MACH;AAAA,KACD,CAAA;AAAA,IACD,gBAAA,CAAiB;AAAA,MACf,IAAA,EAAM,sBAAA;AAAA,MACN,WAAA,EAAa,eAAA;AAAA,MACb,WAAA,EACE,6HAAA;AAAA,MACF,IAAA,EAAM,OAAA;AAAA,MACN,MAAA,EAAQ,iBAAA;AAAA,MACR,QAAA,EAAU,CAAC,SAAS,CAAA;AAAA,MACpB,IAAA,EAAM,QAAA;AAAA,MACN,KAAA,EAAO,yBAAA;AAAA,MACP,OAAA,EAAS,OAAO,KAAA,KAAU;AACxB,QAAA,IAAI,CAAC,QAAA,CAAS,YAAA,EAAc,OAAO,eAAe,sBAAsB,CAAA;AACxE,QAAA,OAAO,SAAS,YAAA,CAAa;AAAA,UAC3B,aAAa,KAAA,CAAM,WAAA;AAAA,UACnB,gBAAgB,KAAA,CAAM;AAAA,SACvB,CAAA;AAAA,MACH;AAAA,KACD,CAAA;AAAA,IACD,gBAAA,CAAiB;AAAA,MACf,IAAA,EAAM,wBAAA;AAAA,MACN,WAAA,EAAa,iBAAA;AAAA,MACb,WAAA,EACE,kFAAA;AAAA,MACF,IAAA,EAAM,OAAA;AAAA,MACN,MAAA,EAAQ,iBAAA;AAAA,MACR,QAAA,EAAU,CAAC,SAAS,CAAA;AAAA,MACpB,IAAA,EAAM,QAAA;AAAA,MACN,KAAA,EAAO,mBAAA;AAAA,MACP,OAAA,EAAS,OAAO,KAAA,KAAU;AACxB,QAAA,IAAI,CAAC,QAAA,CAAS,cAAA,EAAgB,OAAO,eAAe,wBAAwB,CAAA;AAC5E,QAAA,OAAO,QAAA,CAAS,eAAe,KAAK,CAAA;AAAA,MACtC;AAAA,KACD,CAAA;AAAA,IACD,gBAAA,CAAiB;AAAA,MACf,IAAA,EAAM,0BAAA;AAAA,MACN,WAAA,EAAa,mBAAA;AAAA,MACb,WAAA,EACE,qHAAA;AAAA,MACF,IAAA,EAAM,OAAA;AAAA,MACN,MAAA,EAAQ,iBAAA;AAAA,MACR,QAAA,EAAU,CAAC,SAAS,CAAA;AAAA,MACpB,IAAA,EAAM,QAAA;AAAA,MACN,KAAA,EAAO,qBAAA;AAAA,MACP,OAAA,EAAS,OAAO,KAAA,KAAU;AACxB,QAAA,IAAI,CAAC,QAAA,CAAS,gBAAA,EAAkB,OAAO,eAAe,0BAA0B,CAAA;AAChF,QAAA,OAAO,SAAS,gBAAA,CAAiB;AAAA,UAC/B,MAAM,KAAA,CAAM,IAAA;AAAA,UACZ,IAAI,KAAA,CAAM,EAAA;AAAA,UACV,MAAM,KAAA,CAAM;AAAA,SACb,CAAA;AAAA,MACH;AAAA,KACD,CAAA;AAAA,IACD,gBAAA,CAAiB;AAAA,MACf,IAAA,EAAM,sBAAA;AAAA,MACN,WAAA,EAAa,eAAA;AAAA,MACb,WAAA,EACE,qFAAA;AAAA,MACF,IAAA,EAAM,OAAA;AAAA,MACN,MAAA,EAAQ,iBAAA;AAAA,MACR,QAAA,EAAU,CAAC,SAAS,CAAA;AAAA,MACpB,IAAA,EAAM,QAAA;AAAA,MACN,KAAA,EAAO,gBAAA;AAAA,MACP,OAAA,EAAS,OAAO,KAAA,KAAU;AACxB,QAAA,IAAI,SAAS,WAAA,EAAa;AACxB,UAAA,OAAO,QAAA,CAAS,YAAY,KAAK,CAAA;AAAA,QACnC;AAMA,QAAA,MAAM,YAAY,KAAA,CAAM,KAAA;AACxB,QAAA,IAAI,sBAAA,CAAuB,GAAA,CAAI,SAAS,CAAA,EAAG;AACzC,UAAA,WAAA,EAAY,EAAG,SAAS,SAAS,CAAA;AAAA,QACnC;AACA,QAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AAAA,MACpB;AAAA,KACD,CAAA;AAAA,IACD,gBAAA,CAAiB;AAAA,MACf,IAAA,EAAM,kBAAA;AAAA,MACN,WAAA,EAAa,WAAA;AAAA,MACb,WAAA,EACE,gGAAA;AAAA,MACF,IAAA,EAAM,OAAA;AAAA,MACN,MAAA,EAAQ,iBAAA;AAAA,MACR,QAAA,EAAU,CAAC,SAAS,CAAA;AAAA,MACpB,IAAA,EAAM,QAAA;AAAA,MACN,KAAA,EAAO,aAAA;AAAA,MACP,OAAA,EAAS,OAAO,KAAA,KAAU;AACxB,QAAA,IAAI,CAAC,SAAS,QAAA,EAAU;AAKtB,UAAA,OAAO,eAAe,kBAAkB,CAAA;AAAA,QAC1C;AACA,QAAA,OAAO,SAAS,QAAA,CAAS;AAAA,UACvB,OAAO,KAAA,CAAM,KAAA;AAAA,UACb,KAAK,KAAA,CAAM,GAAA;AAAA,UACX,OAAO,KAAA,CAAM;AAAA,SACd,CAAA;AAAA,MACH;AAAA,KACD,CAAA;AAAA,IACD,gBAAA,CAAiB;AAAA,MACf,IAAA,EAAM,kBAAA;AAAA,MACN,WAAA,EAAa,mBAAA;AAAA,MACb,WAAA,EACE,sGAAA;AAAA,MACF,IAAA,EAAM,OAAA;AAAA,MACN,MAAA,EAAQ,iBAAA;AAAA,MACR,QAAA,EAAU,CAAC,SAAS,CAAA;AAAA,MACpB,IAAA,EAAM,QAAA;AAAA,MACN,KAAA,EAAO,cAAA;AAAA,MACP,OAAA,EAAS,OAAO,KAAA,KAAU;AACxB,QAAA,IAAI,CAAC,SAAS,SAAA,EAAW;AACvB,UAAA,OAAO,eAAe,kBAAkB,CAAA;AAAA,QAC1C;AACA,QAAA,OAAO,QAAA,CAAS,UAAU,KAAK,CAAA;AAAA,MACjC;AAAA,KACD;AAAA,GACH;AACF;AC3SO,IAAM,2BAAA,GAA8B;AAa3C,eAAsB,8BAAA,CAA+B,MAAc,IAAA,EAA+B;AAChG,EAAA,MAAM,SAAA,GAAYW,IAAAA,CAAK,IAAA,EAAM,SAAS,CAAA;AACtC,EAAA,MAAM,MAAM,SAAA,EAAW,EAAE,WAAW,IAAA,EAAM,IAAA,EAAM,KAAO,CAAA;AACvD,EAAA,MAAM,SAAA,GAAYA,IAAAA,CAAK,SAAA,EAAW,mBAAmB,CAAA;AACrD,EAAA,MAAM,UAAU,CAAA,EAAG,SAAS,QAAQ,OAAA,CAAQ,GAAG,IAAI,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA,EAAI,IAAA,CAAK,QAAO,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AACpG,EAAA,MAAM,UAAU,OAAA,EAAS,IAAA,EAAM,EAAE,IAAA,EAAM,KAAO,CAAA;AAC9C,EAAA,MAAM,MAAA,CAAO,SAAS,SAAS,CAAA;AAC/B,EAAA,OAAO,SAAA;AACT;AAqBA,eAAsB,8BAAA,CACpB,IAAA,EACA,WAAA,EACA,SAAA,EACiB;AACjB,EAAA,MAAM,QAAA,GAAWA,IAAAA,CAAK,IAAA,EAAM,SAAA,EAAW,mBAAmB,CAAA;AAC1D,EAAA,IAAI,SAAkC,EAAC;AACvC,EAAA,IAAIL,UAAAA,CAAW,QAAQ,CAAA,EAAG;AACxB,IAAA,IAAI;AACF,MAAA,MAAA,GAAS,IAAA,CAAK,KAAA,CAAMG,YAAAA,CAAa,QAAA,EAAU,OAAO,CAAC,CAAA;AAAA,IACrD,CAAA,CAAA,MAAQ;AACN,MAAA,MAAA,GAAS,EAAC;AAAA,IACZ;AAAA,EACF;AACA,EAAA,MAAM,UAAA,GAAe,MAAA,CAAuD,aAAA,IAC1E,EAAC;AACH,EAAA,UAAA,CAAW,WAAA,GAAc,WAAA;AACzB,EAAA,IAAI,SAAA,aAAsB,SAAA,GAAY,SAAA;AACtC,EAAC,OAAuD,aAAA,GAAgB,UAAA;AAExE,EAAC,OAAoC,WAAA,GAAc,WAAA;AACnD,EAAA,OAAO,8BAAA,CAA+B,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA;AACpE;AAsBO,SAAS,8BAA8B,IAAA,EAA6B;AACzE,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EAC1B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,UAAU,OAAO,IAAA;AAClD,EAAA,MAAM,GAAA,GAAM,MAAA;AACZ,EAAA,MAAM,QAAQ,GAAA,CAAI,aAAA;AAClB,EAAA,MAAM,GAAA,GAAM,KAAA,EAAO,SAAA,IAAa,GAAA,CAAI,SAAA;AACpC,EAAA,IAAI,GAAA,IAAO,MAAM,OAAO,IAAA;AACxB,EAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC3B,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AACxB,IAAA,OAAO,MAAA,CAAO,SAAS,CAAC,CAAA,GAAI,IAAI,IAAA,CAAK,CAAC,CAAA,CAAE,WAAA,EAAY,GAAI,IAAA;AAAA,EAC1D;AACA,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,MAAA,CAAO,QAAA,CAAS,GAAG,CAAA,EAAG;AAEnD,IAAA,OAAO,IAAI,IAAA,CAAK,GAAG,CAAA,CAAE,WAAA,EAAY;AAAA,EACnC;AACA,EAAA,OAAO,IAAA;AACT;;;AChDO,IAAM,mBAAA,GAAsB;AA0B5B,SAAS,yBAAyB,IAAA,EAAoD;AAC3F,EAAA,MAAM,EAAE,SAAA,EAAW,iBAAA,GAAoB,mBAAA,EAAqB,KAAI,GAAI,IAAA;AACpE,EAAA,MAAM,MAAA,uBAAa,GAAA,EAA4B;AAE/C,EAAA,SAAS,SAAS,WAAA,EAAqC;AACrD,IAAA,IAAI,CAAA,GAAI,MAAA,CAAO,GAAA,CAAI,WAAW,CAAA;AAC9B,IAAA,IAAI,CAAC,CAAA,EAAG;AACN,MAAA,CAAA,GAAI,EAAE,OAAA,EAAS,IAAI,KAAA,EAAO,IAAA,EAAM,UAAU,KAAA,EAAM;AAChD,MAAA,MAAA,CAAO,GAAA,CAAI,aAAa,CAAC,CAAA;AAAA,IAC3B;AACA,IAAA,OAAO,CAAA;AAAA,EACT;AAEA,EAAA,SAAS,kBAAA,CAAmB,WAAA,EAAqB,CAAA,EAAmB,UAAA,EAAoB;AACtF,IAAA,IAAI,CAAA,CAAE,SAAS,IAAA,EAAM;AACrB,IAAA,IAAI,EAAE,QAAA,EAAU;AAChB,IAAA,CAAA,CAAE,KAAA,GAAQ,WAAW,MAAM;AACzB,MAAA,CAAA,CAAE,KAAA,GAAQ,IAAA;AACV,MAAA,KAAK,UAAA,CAAW,aAAa,CAAC,CAAA;AAAA,IAChC,GAAG,UAAU,CAAA;AAAA,EACf;AAEA,EAAA,eAAe,UAAA,CAAW,aAAqB,CAAA,EAAkC;AAC/E,IAAA,IAAI,CAAA,CAAE,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG;AAC5B,IAAA,MAAM,QAAQ,CAAA,CAAE,OAAA;AAChB,IAAA,CAAA,CAAE,UAAU,EAAC;AACb,IAAA,CAAA,CAAE,QAAA,GAAW,IAAA;AAEb,IAAA,MAAM,YAAY,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,cAAc,CAAA;AAC1D,IAAA,MAAM,KAAA,GAAQ,KAAA,CACX,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,CAAO,IAAI,CAAA,CACxB,MAAA,CAAO,CAAC,CAAA,KAAoC,MAAM,MAAS,CAAA;AAC9D,IAAA,MAAM,MAAA,GAAS,SAAA,CAAU,IAAA,CAAK,MAAM,CAAA;AAEpC,IAAA,GAAA,EAAK,MAAM,cAAA,EAAgB;AAAA,MACzB,WAAA;AAAA,MACA,OAAO,KAAA,CAAM,MAAA;AAAA,MACb,gBAAgB,MAAA,CAAO;AAAA,KACxB,CAAA;AAED,IAAA,IAAI;AACF,MAAA,MAAM,SAAA,CAAU,QAAQ,KAAK,CAAA;AAC7B,MAAA,GAAA,EAAK,MAAM,cAAA,EAAgB;AAAA,QACzB,WAAA;AAAA,QACA,OAAO,KAAA,CAAM,MAAA;AAAA,QACb,gBAAgB,MAAA,CAAO;AAAA,OACxB,CAAA;AACD,MAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,KAAA,CAAM,OAAA,EAAQ;AAAA,IAC3C,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,EAAK,MAAM,aAAA,EAAe;AAAA,QACxB,WAAA;AAAA,QACA,OAAO,KAAA,CAAM,MAAA;AAAA,QACb,gBAAgB,MAAA,CAAO,MAAA;AAAA,QACvB,OAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,OACvD,CAAA;AACD,MAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,KAAA,CAAM,MAAA,CAAO,GAAG,CAAA;AAAA,IAC7C,CAAA,SAAE;AACA,MAAA,CAAA,CAAE,QAAA,GAAW,KAAA;AAGb,MAAA,IAAI,CAAA,CAAE,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG;AAIxB,QAAA,MAAM,UAAA,GAAa,EAAE,OAAA,CAAQ,CAAA,CAAE,QAAQ,MAAA,GAAS,CAAC,CAAA,EAAG,MAAA,CAAO,UAAA,IAAc,iBAAA;AACzE,QAAA,kBAAA,CAAmB,WAAA,EAAa,GAAG,UAAU,CAAA;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,CAAO,aAAqB,GAAA,EAAoC;AAC9D,MAAA,MAAM,UAAA,GAAa,IAAI,UAAA,IAAc,iBAAA;AACrC,MAAA,GAAA,EAAK,MAAM,mBAAA,EAAqB;AAAA,QAC9B,WAAA;AAAA,QACA,cAAA,EAAgB,IAAI,cAAA,CAAe;AAAA,OACpC,CAAA;AACD,MAAA,OAAO,IAAI,OAAA,CAAc,CAACT,QAAAA,EAAS,MAAA,KAAW;AAC5C,QAAA,MAAM,CAAA,GAAI,SAAS,WAAW,CAAA;AAC9B,QAAA,CAAA,CAAE,OAAA,CAAQ,KAAK,EAAE,MAAA,EAAQ,KAAK,OAAA,EAAAA,QAAAA,EAAS,QAAQ,CAAA;AAC/C,QAAA,kBAAA,CAAmB,WAAA,EAAa,GAAG,UAAU,CAAA;AAAA,MAC/C,CAAC,CAAA;AAAA,IACH;AAAA,GACF;AACF;;;AChEA,SAAS,yBAAyB,OAAA,EAAmD;AACnF,EAAA,OAAO,OAAA,EAAS,aAAA,EAAe,cAAA,IAAkB,EAAC;AACpD;AAkBO,SAAS,wBAAA,CACd,cACA,SAAA,EACM;AACN,EAAA,SAAA,CAAU;AAAA,IACR,IAAA,EAAM,wBAAA;AAAA,IACN,UAAU,YAAA,CAAa,oBAAA;AAAA,IACvB,UAAA,EAAA,iBAAY,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,GACpC,CAAA;AACH;AAGA,IAAM,kBAAA,GAAqB;AAAA,EACzB,2BAAA;AAAA,EACA,2BAAA;AAAA,EACA,yBAAA;AAAA,EACA,0BAAA;AAAA,EACA,gCAAA;AAAA,EACA,+BAAA;AAAA,EACA,6BAAA;AAAA,EACA,8BAAA;AAAA,EACA;AACF,CAAA;AAEA,IAAI,kBAAA,GAAoD,IAAA;AACxD,SAAS,oBAAA,GAA+C;AACtD,EAAA,IAAI,oBAAoB,OAAO,kBAAA;AAC/B,EAAA,MAAM,WAAmC,EAAC;AAC1C,EAAA,KAAA,MAAW,OAAO,kBAAA,EAAoB;AACpC,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,SAAA,CAAQ,OAAA,CAAQ,CAAA,EAAG,GAAG,CAAA,aAAA,CAAe,CAAA;AACpD,MAAA,MAAM,KAAK,IAAA,CAAK,KAAA,CAAMS,YAAAA,CAAa,MAAA,EAAQ,OAAO,CAAC,CAAA;AACnD,MAAA,QAAA,CAAS,IAAI,OAAA,CAAQ,UAAA,EAAY,EAAE,CAAC,IAAI,EAAA,CAAG,OAAA;AAAA,IAC7C,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACA,EAAA,kBAAA,GAAqB,QAAA;AACrB,EAAA,OAAO,QAAA;AACT;AAcA,SAAS,uBAAuB,OAAA,EAG9B;AACA,EAAA,MAAM,SAAsB,EAAC;AAC7B,EAAA,MAAM,aAA8B,EAAC;AACrC,EAAA,IAAI,CAAC,OAAA,EAAS,OAAO,EAAE,QAAQ,UAAA,EAAW;AAC1C,EAAA,KAAA,MAAW,CAAA,IAAK,OAAA,CAAQ,cAAA,EAAe,EAAG;AACxC,IAAA,IAAI,OAAO,CAAA,CAAE,SAAA,KAAc,QAAA,EAAU;AACnC,MAAA,IAAI,MAAA,GAAS,EAAA;AACb,MAAA,IAAI;AACF,QAAA,MAAA,GAAS,QAAQ,GAAA,CAAI,CAAA,CAAE,EAAE,CAAA,CAAE,WAAA,CAAY,OAAO,MAAA,IAAU,EAAA;AAAA,MAC1D,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,MAAA,CAAO,IAAA,CAAK;AAAA,QACV,IAAI,CAAA,CAAE,EAAA;AAAA,QACN,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,OAAA,EAAS,IAAA;AAAA,QACT;AAAA,OACD,CAAA;AAAA,IACH,CAAA,MAAO;AACL,MAAA,UAAA,CAAW,IAAA,CAAK;AAAA,QACd,IAAI,CAAA,CAAE,EAAA;AAAA,QACN,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,UAAA,EAAY,OAAA,CAAQ,aAAA,CAAc,CAAA,CAAE,EAAE,EAAE,GAAA,CAAI,CAAC,EAAA,KAAO,EAAA,CAAG,IAAI;AAAA,OAC5D,CAAA;AAAA,IACH;AAAA,EACF;AACA,EAAA,OAAO,EAAE,QAAQ,UAAA,EAAW;AAC9B;AAGA,SAAS,iBAAiB,QAAA,EAAiC;AACzD,EAAA,IAAI,GAAA,GAAM,QAAA;AACV,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,MAAM,SAAA,GAAYE,IAAAA,CAAK,GAAA,EAAK,WAAW,CAAA;AACvC,IAAA,IAAIL,UAAAA,CAAW,SAAS,CAAA,EAAG,OAAO,SAAA;AAClC,IAAA,GAAA,GAAMK,IAAAA,CAAK,KAAK,IAAI,CAAA;AAAA,EACtB;AACA,EAAA,OAAO,IAAA;AACT;AA2BO,SAAS,uBAAuB,oBAAA,EAAoC;AACzE,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,GAAA,CAAI,IAAA,IAAQG,OAAAA,EAAQ;AACzC,EAAA,IAAI,CAAC,IAAA,EAAM;AACX,EAAA,MAAM,aAAA,GAAgBH,IAAAA,CAAK,IAAA,EAAM,YAAY,CAAA;AAC7C,EAAA,IAAI,QAAA,GAAW,EAAA;AACf,EAAA,IAAI;AACF,IAAA,QAAA,GAAWF,YAAAA,CAAa,eAAe,OAAO,CAAA;AAAA,EAChD,CAAA,CAAA,MAAQ;AAAA,EAER;AAMA,EAAA,MAAM,SAAA,GAAY,uCAAA;AAClB,EAAA,MAAM,SAAA,GAAY,0BAAA;AAClB,EAAA,IAAI,cAAA,GAAgC,IAAA;AACpC,EAAA,KAAA,MAAW,IAAA,IAAQ,QAAA,CAAS,KAAA,CAAM,OAAO,CAAA,EAAG;AAC1C,IAAA,MAAM,YAAA,GAAe,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AACzC,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,cAAA,GAAiB,YAAA,CAAa,CAAC,CAAA,EAAG,WAAA,EAAY,IAAK,IAAA;AACnD,MAAA;AAAA,IACF;AACA,IAAA,IAAI,cAAA,KAAmB,SAAA,IAAa,cAAA,KAAmB,WAAA,EAAa;AACpE,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AACtC,IAAA,IAAI,SAAA,GAAY,CAAC,CAAA,KAAM,oBAAA,EAAsB;AAAA,EAC/C;AACA,EAAA,IAAI,CAACH,UAAAA,CAAWS,OAAAA,CAAQ,aAAa,CAAC,CAAA,EAAG;AACvC,IAAAC,UAAUD,OAAAA,CAAQ,aAAa,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAAA,EACvD;AACA,EAAA,MAAM,KAAA,GACJ,CAAA,EAAG,QAAA,CAAS,OAAA,EAAS;AAAA;AAAA;AAAA,QAAA,EAEE,oBAAoB;AAAA,CAAA;AAC7C,EAAAE,cAAc,aAAA,EAAe,KAAA,EAAO,EAAE,IAAA,EAAM,KAAO,CAAA;AACrD;AAsGA,eAAsB,iBAAiB,IAAA,EAAmC;AACxE,EAAA,MAAM,IAAA,GAAO,KAAK,IAAA,IAAQ,IAAA;AAC1B,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,IAAa,OAAA,CAAQ,IAAI,iBAAA,IAAqB,iBAAA;AACrE,EAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,eAAA,IAAmB,OAAA,CAAQ,GAAA,CAAI,wBAAA;AAG5D,EAAA,MAAM,QAAA,GAAW,wBAAA,CAAyB,IAAA,CAAK,UAAU,CAAA;AAKzD,EAAA,MAAM,EAAE,KAAA,EAAO,QAAA,EAAU,OAAA,EAAS,eAAA,KAAoB,uBAAA,CAAwB;AAAA,IAC5E,SAAA;AAAA,IACA,YAAY,IAAA,CAAK,UAAA;AAAA,IACjB,WAAY,QAAA,CAAmC,OAAA;AAAA,IAC/C,OAAO,IAAA,CAAK;AAAA,GACb,CAAA;AACD,EAAA,MAAM,YAAY,YAAA,CAAa;AAAA,IAC7B,IAAA,EAAM,QAAA;AAAA,IACN,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU;AAAA,GACX,CAAA;AAGD,EAAA,MAAM,GAAA,GAAM,CAAC,IAAA,KAAiB,SAAA,CAAU,KAAK,IAAI,CAAA;AACjD,EAAA,MAAM,OAAA,GAAU,SAAS,YAAA,EAAc,OAAA;AACvC,EAAA,MAAM,QAAA,GACJ,QAAA,CAAS,KAAA,EAAO,WAAA,EAAa,aAC3B,OAAA,EAAiD,SAAA;AAkBrD,EAAA,MAAM,oBAAA,GAAuBN,IAAAA,CAAK,IAAA,CAAK,UAAA,EAAY,WAAW,mBAAmB,CAAA;AACjF,EAAA,OAAA,CAAQ,IAAI,iBAAA,GAAoB,oBAAA;AAChC,EAAA,IAAI;AACF,IAAA,sBAAA,CAAuB,oBAAoB,CAAA;AAAA,EAC7C,SAAS,GAAA,EAAK;AACZ,IAAA,SAAA,CAAU,KAAK,iEAAA,EAA8D;AAAA,MAC3E,OAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACvD,CAAA;AAAA,EACH;AAKA,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,IAAY,eAAA,CAAgB,KAAK,UAAU,CAAA;AACjE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,SAAA,CAAU,IAAA,CAAK,oBAAA,EAAsB,EAAE,QAAA,EAAU,CAAA;AAAA,EACnD,CAAA,MAAO;AACL,IAAA,SAAA,CAAU,KAAK,0CAA0C,CAAA;AAAA,EAC3D;AAMA,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,IAAa,OAAA,CAAQ,GAAA,CAAI,oBAAA;AAChD,EAAA,MAAM,YACJ,IAAA,CAAK,SAAA,IACL,IAAI,wBAAA,CAAyB,EAAE,IAAA,EAAM,KAAA,EAAO,GAAA,EAAK,GAAI,YAAY,EAAE,SAAA,EAAU,GAAI,IAAK,CAAA;AAMxF,EAAA,QAAA,CAAS,OAAA;AAAA,IACP,IAAI,SAAA,CAAU;AAAA,MACZ,IAAA,EAAM,CAAC,KAAA,KAAU;AACf,QAAA,IAAI,SAAA,CAAU,SAAA,EAAW,SAAA,CAAU,IAAA,CAAK,KAAK,CAAA;AAAA,MAC/C;AAAA,KACD;AAAA,GACH;AAGA,EAAA,SAAS,UAAU,KAAA,EAAmB;AACpC,IAAA,IAAI,UAAU,SAAA,EAAW;AACvB,MAAA,SAAA,CAAU,KAAK,KAAK,CAAA;AAAA,IACtB;AAAA,EACF;AAeA,EAAA,MAAM,qBAAqB,IAAI,kBAAA;AAAA,IAC7B,YAAA,CAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,OAAA,EAAS,qBAAA;AAAA,MACT,QAAA,EAAU;AAAA,KACX;AAAA,GACH;AACA,EAAA,2BAAA,CAA4B,kBAAkB,CAAA;AAa9C,EAAA,MAAM,sBAAA,uBAA6B,GAAA,EAA8B;AAajE,EAAA,MAAM,uBAAA,GAA0B,CAAC,IAAA,EAAc,KAAA,KAAqC;AAClF,IAAA,MAAM,SACJ,OAAO,MAAA,EAAQ,eAAe,UAAA,GAC1B,MAAA,CAAO,YAAW,GAClB,CAAA,KAAA,EAAQ,KAAK,GAAA,EAAK,IAAI,IAAA,CAAK,KAAA,CAAM,KAAK,MAAA,EAAO,GAAI,GAAG,CAAC,CAAA,CAAA;AAC3D,IAAA,OAAO,IAAI,OAAA,CAAiB,CAACX,QAAAA,EAAS,MAAA,KAAW;AAC/C,MAAA,IAAI,CAAC,UAAU,SAAA,EAAW;AACxB,QAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,wDAAA,EAA2D,IAAI,EAAE,CAAC,CAAA;AACnF,QAAA;AAAA,MACF;AACA,MAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC7B,QAAA,sBAAA,CAAuB,OAAO,MAAM,CAAA;AACpC,QAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,kBAAA,EAAqB,IAAI,CAAA,SAAA,EAAY,MAAM,aAAa,CAAC,CAAA;AAAA,MAC5E,GAAG,kCAAkC,CAAA;AACrC,MAAA,sBAAA,CAAuB,IAAI,MAAA,EAAQ,EAAE,SAAAA,QAAAA,EAAS,MAAA,EAAQ,OAAO,CAAA;AAC7D,MAAA,SAAA,CAAU,IAAA,CAAK;AAAA,QACb,IAAA,EAAM,oBAAA;AAAA,QACN,MAAA;AAAA,QACA,IAAA;AAAA,QACA,KAAA;AAAA,QACA,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH,CAAA;AAYA,EAAA,IAAI,kBAAA;AAgBJ,EAAA,eAAe,2BAA2B,IAAA,EAGqB;AAC7D,IAAA,IAAI,CAAC,SAAA,CAAU,SAAA,IAAa,kBAAA,KAAuB,MAAA,EAAW;AAC5D,MAAA,OAAO;AAAA,QACL,EAAA,EAAI,KAAA;AAAA,QACJ,IAAA,EAAM,gBAAA;AAAA,QACN,OAAA,EAAS;AAAA,OACX;AAAA,IACF;AACA,IAAA,MAAM,cAAA,GAAiB,KAAK,QAAA,IAAY,kBAAA;AACxC,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAU,MAAM,kBAAA,CAAmB,YAAA,CAAa,yBAAA,EAA2B;AAAA,QAC/E,IAAA,EAAM,gBAAA;AAAA,QACN,EAAA,EAAI,cAAA;AAAA,QACJ,QAAQ,IAAA,CAAK;AAAA,OACd,CAAA;AACD,MAAA,IAAI,CAAC,QAAQ,EAAA,EAAI;AACf,QAAA,OAAO,UAAU,EAAE,EAAA,EAAI,OAAO,IAAA,EAAM,eAAA,EAAiB,SAAS,qBAAA,EAAsB;AAAA,MACtF;AACA,MAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,GAAA,CAAI,IAAA,IAAQc,OAAAA,EAAQ;AACzC,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,OAAO;AAAA,UACL,EAAA,EAAI,KAAA;AAAA,UACJ,IAAA,EAAM,eAAA;AAAA,UACN,OAAA,EAAS;AAAA,SACX;AAAA,MACF;AACA,MAAA,MAAM,+BAA+B,IAAA,EAAM,MAAA,CAAO,KAAA,EAAO,MAAA,CAAO,aAAa,IAAI,CAAA;AAIjF,MAAA,4BAAA,CAA6B,QAAA,CAAS,MAAA,CAAO,SAAA,IAAa,IAAI,CAAA;AAC9D,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC9D,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,IAAA,EAAM,eAAA,EAAiB,SAAS,MAAA,EAAO;AAAA,IAC7D;AAAA,EACF;AAmBA,EAAA,MAAM,+BAA+B,kCAAA,CAAmC;AAAA,IACtE,SAAS,YAAY;AACnB,MAAA,MAAM,SAAS,MAAM,0BAAA,CAA2B,EAAE,MAAA,EAAQ,WAAW,CAAA;AACrE,MAAA,IAAI,CAAC,OAAO,EAAA,EAAI;AACd,QAAA,GAAA;AAAA,UACE,CAAA,0CAAA,EAA6C,OAAO,IAAI,CAAA,oCAAA;AAAA,SAC1D;AACA,QAAA,OAAO,MAAA;AAAA,MACT;AACA,MAAA,OAAO,OAAO,SAAA,IAAa,IAAA;AAAA,IAC7B,CAAA;AAAA,IACA;AAAA,GACD,CAAA;AAsCD,EAAA,MAAM,WAAA,GAAc,OAAO,IAAA,KAEuC;AAChE,IAAA,GAAA,CAAI,iEAAiE,CAAA;AACrE,IAAA,MAAM,MAAA,GAAS,MAAM,0BAAA,CAA2B;AAAA,MAC9C,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,MAAA,EAAQ;AAAA,KACT,CAAA;AACD,IAAA,IAAI,CAAC,OAAO,EAAA,EAAI;AACd,MAAA,GAAA,CAAI,CAAA,sCAAA,EAAyC,MAAA,CAAO,IAAI,CAAA,YAAA,CAAc,CAAA;AAAA,IACxE,CAAA,MAAO;AACL,MAAA,GAAA,CAAI,yEAAyE,CAAA;AAAA,IAC/E;AACA,IAAA,OAAO,MAAA;AAAA,EACT,CAAA;AAUA,EAAA,MAAM,uCAAA,GAA0C,KAAK,EAAA,GAAK,GAAA;AAE1D,EAAA,SAASI,8BACP,IAAA,EACsC;AAItC,IAAA,MAAM,SAAA,GAAY,8BAAA,CAA+B,IAAA,EAAM,uCAAuC,CAAA;AAC9F,IAAA,OAAO,4BAAA,CAAsC;AAAA,MAC3C,IAAA;AAAA,MACA,OAAA,EAAS,sBAAA;AAAA,MACT,IAAA,EAAM,CAAC,KAAA,KAAU,SAAA,CAAU,KAAK,CAAA;AAAA,MAChC;AAAA,KACD,CAAA;AAAA,EACH;AAUA,EAAA,SAAS,oBAAA,GAAkF;AACzF,IAAA,OAAO;AAAA,MACL,SAAA;AAAA,MACA,YAAA,EAAc,MAAM,kBAAA,CAAmB,eAAA,EAAgB;AAAA,MACvD,OAAA,EAAS,CAAC,IAAA,KAAS;AACjB,QAAA,MAAM,GAAA,GAAM,kBAAA,CAAmB,OAAA,CAAQ,IAAI,CAAA;AAC3C,QAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AAEjB,QAAA,OAAO,kBAAA,CAAmB,MAAK,CAAE,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,KAAS,IAAI,CAAA,IAAK,IAAA;AAAA,MACnE,CAAA;AAAA,MACA,MAAA,EAAQ,CAAC,IAAA,EAAM,KAAA,KAAU,kBAAA,CAAmB,OAAO,IAAA,EAAM,KAAA,EAAO,EAAE,SAAA,EAAW,CAAA;AAAA,MAC7E,UAAA,EAAY,CAAC,KAAA,KAAU,SAAA,CAAU,KAAK,CAAA;AAAA,MACtC,QAAA,EAAU,CAAC,IAAA,KACT,SAAA,CAAU;AAAA,QACR,IAAA,EAAM,MAAA;AAAA,QACN,OAAA,EAAS;AAAA,OACV;AAAA,KACL;AAAA,EACF;AAWA,EAAA,SAAS,2BAA2B,OAAA,EAA6B;AAC/D,IAAA,IAAI,OAAA,CAAQ,WAAA,EAAa,mBAAA,CAAoB,MAAA,EAAQ;AACnD,MAAA,+BAAA,CAAgC,kBAAA,EAAoB,OAAA,CAAQ,WAAA,CAAY,mBAAmB,CAAA;AAC3F,MAAA,GAAA;AAAA,QACE,CAAA,mBAAA,EAAsB,OAAA,CAAQ,WAAA,CAAY,mBAAA,CAAoB,MAAM,CAAA,yBAAA;AAAA,OACtE;AAAA,IACF;AAAA,EACF;AAMA,EAAA,MAAM,WAAA,GAAc,QAAA,CAAS,OAAA,EAAS,QAAA,IAAY,KAAA;AAClD,EAAyB,QAAA,CAAS,OAAA,EAAS,SAAA,IAAa;AAGxD,EAAA,SAAS,kBAAA,CAAmBC,iBAA0B,MAAA,EAAqC;AACzF,IAAA,OAAO;AAAA,MACL,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,QAAA;AAAA,MACA,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,SAAA;AAAA,MACA,eAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAA;AAAA,MACA,kBAAA,EAAoB,QAAQ,GAAA,CAAI,yBAAA;AAAA,MAChC,cAAA,EAAAA,eAAAA;AAAA,MACA,WAAA;AAAA,MACA,GAAI,MAAA,GAAS,EAAE,MAAA,KAAW,EAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAM3B,2BAA2B,MAAM;AAC/B,QAAA,MAAM,WAAqB,EAAC;AAC5B,QAAA,MAAM,UAAA,GAAa,+BAA+B,kBAAkB,CAAA;AACpE,QAAA,IAAI,UAAA,EAAY,QAAA,CAAS,IAAA,CAAK,UAAU,CAAA;AACxC,QAAA,OAAO,QAAA,CAAS,MAAA,GAAS,CAAA,GAAI,QAAA,GAAW,MAAA;AAAA,MAC1C,CAAA,GAAG;AAAA,MACH,KAAA,EAAO;AAAA,QACL,YAAA,EAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AACjC,UAAA,SAAA,CAAU;AAAA,YACR,IAAA,EAAM,aAAA;AAAA,YACN,OAAA;AAAA,YACA,GAAG,MAAA;AAAA,YACH,OAAO,MAAA,CAAO;AAAA,WAMf,CAAA;AACD,UAAA,IAAI,MAAA,CAAO,UAAU,aAAA,EAAe;AAClC,YAAA,GAAA;AAAA,cACE,WAAW,OAAO,CAAA,mBAAA,EAAsB,OAAO,UAAU,CAAA,QAAA,EAAW,OAAO,SAAS,CAAA,OAAA;AAAA,aACtF;AAAA,UACF,CAAA,MAAA,IAAW,MAAA,CAAO,KAAA,KAAU,uBAAA,EAAyB;AACnD,YAAA,GAAA;AAAA,cACE,WAAW,OAAO,CAAA,iBAAA,EAAoB,OAAO,eAAe,CAAA,CAAA,EAAI,OAAO,UAAU,CAAA,YAAA;AAAA,aACnF;AAAA,UACF;AAAA,QACF,CAAA;AAAA,QACA,aAAA,EAAe,CAAC,WAAA,EAAa,KAAA,KAAU;AACrC,UAAA,SAAA,CAAU;AAAA,YACR,IAAA,EAAM,cAAA;AAAA,YACN,MAAM,KAAA,CAAM,IAAA;AAAA,YACZ,QAAQ,KAAA,CAAM,MAAA;AAAA,YACd,OAAA,EAAS;AAAA,WACV,CAAA;AAAA,QACH;AAAA,OACF;AAAA,MACA,OAAO,CAAC,IAAA,KAAS,GAAA,CAAI,CAAA,QAAA,EAAW,IAAI,CAAA,CAAE,CAAA;AAAA,MACtC,cAAc,oBAAA,EAAqB;AAAA;AAAA;AAAA;AAAA;AAAA,MAKnC,GAAI,gBAAA,GAAmB,EAAE,gBAAA,KAAqB,EAAC;AAAA,MAC/C,GAAI,kBAAA,GAAqB,EAAE,kBAAA,KAAuB;AAAC,KACrD;AAAA,EACF;AAMA,EAAA,IAAI,mBAAA;AACJ,EAAA,IAAI,kBAAA;AACJ,EAAA,MAAM,YAAA,GAAe,IAAI,OAAA,CAAc,CAACnB,UAAS,MAAA,KAAW;AAC1D,IAAA,mBAAA,GAAsBA,QAAAA;AACtB,IAAA,kBAAA,GAAqB,MAAA;AAAA,EACvB,CAAC,CAAA;AAID,EAAA,IAAI,aAAA;AACJ,EAAA,IAAI,YAAA;AACJ,EAAA,IAAI,cAAA;AAKJ,EAAA,IAAI,eAAA;AAOJ,EAAA,IAAI,gBAAA;AAEJ,EAAA,IAAI,gBAAgB,aAAA,EAAe;AACjC,IAAA,GAAA,CAAI,gFAA2E,CAAA;AAAA,EACjF,CAAA,MAAO;AACL,IAAA,aAAA,GAAgB,kBAAA,EAAmB;AACnC,IAAA,YAAA,GAAe,MAAM,mBAAmB,aAAa,CAAA;AACrD,IAAA,wBAAA,CAAyB,cAAc,SAAS,CAAA;AAEhD,IAAA,0BAAA,CAA2B,YAAY,CAAA;AACvC,IAAA,mBAAA,EAAoB;AAAA,EACtB;AAGA,EAAA,IAAI,eAAA,GAA8B,WAAA,KAAgB,KAAA,GAAQ,YAAA,CAAc,eAAA,GAAkB,IAAA;AAE1F,EAAA,IAAI,gBAAgB,KAAA,EAAO;AACzB,IAAA,IAAI,CAAC,aAAc,QAAA,EAAU;AAC3B,MAAA,GAAA;AAAA,QACE,CAAA,sCAAA,EAAyC,YAAA,CAAc,QAAA,IAAY,WAAW,CAAA,6BAAA;AAAA,OAChF;AACA,MAAA,GAAA,CAAI,CAAA,0EAAA,CAA4E,CAAA;AAAA,IAClF;AAEA,IAAA,IAAI,eAAA,EAAiB;AACnB,MAAA,MAAM,OAAA,GAAoB,eAAA,CAAgB,gBAAA,IAAoB,EAAC;AAC/D,MAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,QAAA,GAAA,CAAI,CAAA,iBAAA,EAAoB,QAAQ,MAAM,CAAA,cAAA,EAAiB,QAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,MAC7E;AAAA,IACF;AAAA,EACF;AAQA,EAAA,IAAI,WAAA,KAAgB,KAAA,IAAS,YAAA,CAAc,aAAA,EAAe;AACxD,IAAA,KAAA,MAAW,CAAA,IAAK,YAAA,CAAc,aAAA,CAAc,QAAA,EAAU;AACpD,MAAA,MAAM,QACJ,CAAA,CAAE,IAAA,KAAS,gBAAA,IAAoB,CAAA,CAAE,gBAC7B,CAAA,EAAG,CAAA,CAAE,aAAa,CAAA,QAAA,EAAM,EAAE,IAAA,IAAQ,SAAS,CAAA,CAAA,GAC1C,CAAA,CAAE,QAAQ,CAAA,CAAE,IAAA;AACnB,MAAA,GAAA,CAAI,+BAA+B,CAAA,CAAE,IAAI,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AACzD,MAAA,SAAA,CAAU;AAAA,QACR,IAAA,EAAM,oBAAA;AAAA,QACN,KAAA;AAAA,QACA,QAAQ,CAAA,CAAE,IAAA;AAAA,QACV,YAAY,CAAA,CAAE;AAAA,OACf,CAAA;AAAA,IACH;AAAA,EACF;AAKA,EAAA,IAAI;AACF,IAAA,MAAMoB,SAAAA,GAAW,wBAAA,CAAyB,IAAA,CAAK,UAAU,CAAA;AACzD,IAAA,KAAA,MAAW,GAAA,IAAOA,SAAAA,CAAS,YAAA,IAAgB,EAAC,EAAG;AAC7C,MAAA,IAAI,GAAA;AACJ,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,cAAc,GAAG,CAAA;AAChC,QAAA,IAAI,MAAA,CAAO,SAAS,OAAA,EAAS;AAC7B,QAAA,GAAA,GAAM,MAAA,CAAO,IAAA;AAAA,MACf,CAAA,CAAA,MAAQ;AACN,QAAA;AAAA,MACF;AACA,MAAA,MAAM,WAAWT,IAAAA,CAAK,IAAA,CAAK,UAAA,EAAY,SAAA,EAAW,UAAU,GAAG,CAAA;AAC/D,MAAA,IAAI,CAACL,UAAAA,CAAW,QAAQ,CAAA,EAAG;AACzB,QAAA,GAAA,CAAI,CAAA,wCAAA,EAA2C,GAAG,CAAA,wCAAA,CAAqC,CAAA;AACvF,QAAA,SAAA,CAAU;AAAA,UACR,IAAA,EAAM,oBAAA;AAAA,UACN,KAAA,EAAO,GAAA;AAAA,UACP,MAAA,EAAQ,WAAA;AAAA,UACR,UAAA,EAAY;AAAA,SACb,CAAA;AAAA,MACH;AAAA,IACF;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AAKA,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AAevC,EAAA,SAAS,uBAAuB,KAAA,EAAyB;AAIvD,IAAA,IAAI,UAAA,EAAY;AAGhB,IAAA,MAAM,WAAA,GACJ,KAAA,CAAM,IAAA,KAAS,QAAA,IACf,MAAM,IAAA,KAAS,aAAA,IACf,KAAA,CAAM,IAAA,KAAS,qBAAA,IACf,KAAA,CAAM,IAAA,KAAS,mBAAA,IACf,MAAM,IAAA,KAAS,oBAAA;AACjB,IAAA,IAAI,CAAC,WAAA,EAAa;AAChB,MAAA,QAAA,EAAA;AACA,MAAA,sBAAA,EAAwB,aAAa,QAAQ,CAAA;AAAA,IAC/C;AAEA,IAAA,IAAI,KAAA,CAAM,SAAS,UAAA,EAAY;AAE7B,MAAA,IAAI,CAAC,UAAA,IAAc,sBAAA,EAAwB,aAAA,EAAc,EAAG;AAC1D,QAAA,sBAAA,CAAuB,OAAA,CAAQ,WAAW,CAAA,CAAE,KAAA,CAAM,CAAC,GAAA,KAAiB;AAClE,UAAA,GAAA;AAAA,YACE,mCAAmC,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,WACrF;AAAA,QACF,CAAC,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,MAAA,SAAA,CAAU,KAAK,CAAA;AACf,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,MAAA,GACJ,eAAA,CAAgB,cAAA,EAAe,CAE9B,OAAO,CAAC,IAAA,KAAS,OAAO,IAAA,CAAK,SAAA,KAAc,QAAQ,CAAA,CACnD,GAAA,CAAI,CAAC,IAAA,MAAU;AAAA,MACd,IAAI,IAAA,CAAK,EAAA;AAAA,MACT,WAAW,IAAA,CAAK;AAAA,KAClB,CAAE,CAAA;AACJ,IAAA,SAAA,CAAU,sBAAA,CAAuB,KAAA,EAAO,IAAA,CAAK,UAAA,EAAY,MAAM,CAAC,CAAA;AAAA,EAClE;AACA,EAAA,IAAI,aAAA,GAAgB,KAAA;AACpB,EAAA,IAAI,MAAA,GAAS,WAAA,KAAgB,KAAA,GAAQ,YAAA,CAAc,MAAA,GAAU,MAAA;AAC7D,EAAA,IAAI,qBAAqB,WAAA,KAAgB,KAAA;AAOzC,EAAA,IAAI,QAAA,GAAW,CAAA;AAEf,EAAA,IAAI,UAAA,GAAa,KAAA;AACjB,EAAA,IAAI,sBAAA,GAAwD,IAAA;AAE5D,EAAA,MAAM,mBAAmB,QAAA,CAAS,UAAA;AAGlC,EAAA,SAAS,6BAAA,GAAsC;AAC7C,IAAA,IAAI,CAAC,MAAA,EAAQ;AACb,IAAA,sBAAA,GAAyB,IAAI,sBAAA,CAAuB;AAAA,MAClD,MAAA;AAAA,MACA,MAAA,EAAQ,gBAAA;AAAA,MACR,iBAAA,EAAmB,CAAC,OAAA,KAAY;AAC9B,QAAA,UAAA,GAAa,IAAA;AACb,QAAA,SAAA,CAAU,EAAE,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,cAA4B,CAAA;AAC/D,QAAA,GAAA,CAAI,CAAA,oCAAA,EAAuC,OAAO,CAAA,CAAA,CAAG,CAAA;AAAA,MACvD,CAAA;AAAA,MACA,UAAA,EAAY,CAAC,QAAA,KAAa;AACxB,QAAA,SAAA,CAAU,QAAsB,CAAA;AAAA,MAClC,CAAA;AAAA,MACA,mBAAA,EAAqB,CAAC,KAAA,KAAU;AAC9B,QAAA,SAAA,CAAU,KAAmB,CAAA;AAAA,MAC/B,CAAA;AAAA,MACA,iBAAiB,MAAM;AACrB,QAAA,UAAA,GAAa,KAAA;AACb,QAAA,SAAA,CAAU,EAAE,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,QAAsB,CAAA;AAAA,MAC3D,CAAA;AAAA,MACA,OAAO,CAAC,IAAA,KAAS,GAAA,CAAI,CAAA,QAAA,EAAW,IAAI,CAAA,CAAE,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAKtC,6BAAA,EAA+B,MAAM,0BAAA,CAA2B,kBAAA,CAAmB,MAAM;AAAA,KAC1F,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,WAAA,KAAgB,SAAS,MAAA,EAAQ;AACnC,IAAA,6BAAA,EAA8B;AAAA,EAChC;AAsBA,EAAA,MAAM,WAAA,uBAAkB,GAAA,EAAwB;AAQhD,EAAA,IAAI,WAAA,GAAyC,IAAA;AAE7C,EAAA,MAAM,oBAAA,GAAuB,CAAA,GAAI,EAAA,GAAK,EAAA,GAAK,GAAA;AAG3C,EAAA,SAAS,iBAAA,GAAuC;AAC9C,IAAA,MAAM,IAAA,GAAO,WAAA,CAAY,MAAA,EAAO,CAAE,IAAA,EAAK;AACvC,IAAA,OAAO,IAAA,CAAK,IAAA,GAAO,IAAA,GAAO,IAAA,CAAK,KAAA;AAAA,EACjC;AAeA,EAAA,SAAS,sBAAA,GAA6C;AACpD,IAAA,IAAI,aAAa,OAAO,WAAA;AACxB,IAAA,WAAA,GAAc,wBAAA,CAAyB;AAAA,MACrC,SAAA,EAAW,OAAO,cAAA,EAAwB,KAAA,KAA0C;AAKlF,QAAA,MAAM,WAAW,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,KAAK,EAAC;AAC7C,QAAA,MAAM,QAAQ,OAAO,QAAA,CAAS,KAAA,KAAU,QAAA,GAAW,SAAS,KAAA,GAAQ,IAAA;AACpE,QAAA,MAAM,QAAQ,KAAA,GAAQ,WAAA,CAAY,GAAA,CAAI,KAAK,IAAI,iBAAA,EAAkB;AACjE,QAAA,IAAI,CAAC,KAAA,EAAO;AACV,UAAA,SAAA,CAAU,IAAA,CAAK,qCAAA,EAAuC,EAAE,KAAA,EAAO,CAAA;AAC/D,UAAA;AAAA,QACF;AAMA,QAAA,MAAM,WAAW,QAAA,CAAS,IAAA;AAC1B,QAAA,IAAI,QAAA;AACJ,QAAA,IAAI,aAAa,cAAA,EAAgB;AAC/B,UAAA,QAAA,GAAW,EAAE,MAAM,cAAA,EAAe;AAAA,QACpC,WAAW,QAAA,KAAa,cAAA,IAAkB,OAAO,QAAA,CAAS,SAAS,QAAA,EAAU;AAC3E,UAAA,QAAA,GAAW;AAAA,YACT,IAAA,EAAM,cAAA;AAAA,YACN,IAAA,EAAM,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA;AAAA,YAC1B,QAAA,EAAU,MAAA,CAAO,QAAA,CAAS,QAAA,IAAY,MAAM;AAAA,WAC9C;AAAA,QACF,CAAA,MAAO;AACL,UAAA,QAAA,GAAW,EAAE,MAAM,eAAA,EAAgB;AAAA,QACrC;AAMA,QAAA,MAAM,UAAA,GAAa,uBAAA;AAAA,UACjB,KAAA,CAAM,OAAA;AAAA,UACN,KAAA,CAAM,OAAA,CAAQ,YAAA,CAAa,KAAA,CAAM,MAAM,CAAA;AAAA,UACvC;AAAA,SACF;AAEA,QAAA,IAAI,CAAC,aAAA,EAAe;AAClB,UAAA,MAAM,OAAO,KAAA,EAAM;AACnB,UAAA,aAAA,GAAgB,IAAA;AAChB,UAAA,MAAA,CAAO,EAAA,CAAG,aAAA,EAAe,CAAC,KAAA,KAAmB;AAC3C,YAAA,MAAM,UAAA,GAAa,UAAA,CAAW,SAAA,CAAU,KAAc,CAAA;AACtD,YAAA,KAAA,MAAW,CAAA,IAAK,UAAA,EAAY,sBAAA,CAAuB,CAAC,CAAA;AAAA,UACtD,CAAC,CAAA;AACD,UAAA,MAAA,CAAO,EAAA,CAAG,OAAA,EAAS,CAAC,GAAA,KAAe;AACjC,YAAA,GAAA,CAAI,CAAA,sBAAA,EAAyB,GAAA,CAAI,OAAO,CAAA,CAAE,CAAA;AAC1C,YAAA,SAAA,CAAU,EAAE,MAAM,OAAA,EAAS,OAAA,EAAS,IAAI,OAAA,EAAS,KAAA,EAAO,MAAM,CAAA;AAAA,UAChE,CAAC,CAAA;AAAA,QACH;AAEA,QAAA,MAAM,iBAAA,CAAkB,YAAY,oBAAoB,CAAA;AAAA,MAC1D,CAAA;AAAA,MACA,GAAA,EAAK;AAAA,KACN,CAAA;AACD,IAAA,OAAO,WAAA;AAAA,EACT;AASA,EAAA,SAAS,iBAAA,CAAkB,QAAgB,SAAA,EAAkC;AAC3E,IAAA,OAAO,IAAI,OAAA,CAAc,CAACN,QAAAA,EAAS,MAAA,KAAW;AAC5C,MAAA,IAAI,OAAA,GAAU,KAAA;AACd,MAAA,MAAM,OAAA,GAAU,CAAC,KAAA,KAA4B;AAC3C,QAAA,IAAI,KAAA,CAAM,IAAA,KAAS,WAAA,EAAa,IAAA,EAAK;AAAA,aAAA,IAC5B,KAAA,CAAM,SAAS,OAAA,EAAS;AAC/B,UAAA,MAAM,GAAA,GACH,KAAA,CAA+C,KAAA,IAC/C,KAAA,CAA+B,OAAA,IAChC,aAAA;AACF,UAAA,IAAA,CAAK,IAAI,KAAA,CAAM,GAAG,CAAC,CAAA;AAAA,QACrB;AAAA,MACF,CAAA;AACA,MAAA,MAAM,IAAA,GAAO,CAAC,GAAA,KAAgB;AAC5B,QAAA,IAAI,OAAA,EAAS;AACb,QAAA,OAAA,GAAU,IAAA;AACV,QAAA,YAAA,CAAa,KAAK,CAAA;AAGlB,QAAC,MAAA,CAAuE,GAAA;AAAA,UACtE,aAAA;AAAA,UACA;AAAA,SACF,IAEI,MAAA,CAGA,cAAA,CAAe,aAAA,EAAe,OAA+C,CAAA;AACjF,QAAA,IAAI,GAAA,SAAY,GAAG,CAAA;AAAA,aACdA,QAAAA,EAAQ;AAAA,MACf,CAAA;AACA,MAAA,MAAM,KAAA,GAAQ,UAAA;AAAA,QACZ,MAAM,KAAK,IAAI,KAAA,CAAM,6BAA6B,SAAA,GAAY,GAAI,GAAG,CAAC,CAAA;AAAA,QACtE;AAAA,OACF;AACA,MAAA,MAAA,CAAO,EAAA,CAAG,eAAe,OAAO,CAAA;AAChC,MAAA,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,CAAE,KAAA,CAAM,IAAI,CAAA;AAAA,IAClC,CAAC,CAAA;AAAA,EACH;AAQA,EAAA,eAAe,gBAAA,CACb,SACA,eAAA,EAGqB;AACrB,IAAA,IAAI,CAAC,eAAA,EAAiB;AAIpB,MAAA,yBAAA,EAA0B;AAC1B,MAAA,eAAA,GAAkB,IAAI,gBAAA,CAAiB,IAAA,CAAK,UAAA,EAAY;AAAA,QACtD,cAAA,EAAgB,yBAAyB,YAAY;AAAA,OACtD,CAAA;AACD,MAAA,GAAA,CAAI,oFAAoF,CAAA;AAAA,IAC1F;AAEA,IAAA,MAAM,MAAM,sBAAA,EAAuB;AACnC,IAAA,MAAM,WAAA,GAAc;AAAA,MAClB,WAAA,EAAa,GAAA;AAAA,MACb,iBAAA,EAAmB;AAAA,KACrB;AACA,IAAA,MAAM,UACJ,WAAA,IAAe,eAAA,GACX,EAAE,IAAA,EAAM,OAAA,EAAS,WAAW,eAAA,CAAgB,SAAA,EAAW,GAAG,WAAA,EAAY,GACtE,EAAE,IAAA,EAAM,OAAA,EAAS,MAAM,eAAA,CAAgB,IAAA,EAAM,GAAG,WAAA,EAAY;AAClE,IAAA,MAAM,YACJ,WAAA,IAAe,eAAA,GAAkB,gBAAgB,SAAA,CAAU,KAAA,GAAQ,gBAAgB,IAAA,CAAK,KAAA;AAC1F,IAAA,MAAM,WAAA,GAAc,QAAQ,SAAS,CAAA,CAAA;AAMrC,IAAA,MAAM,MAAA,GAAS,MAAM,eAAA,CAAgB,OAAA,CAAQ;AAAA,MAC3C,EAAA,EAAI,WAAA;AAAA,MACJ,MAAA,EAAQ,MAAA;AAAA,MACR,MAAA,EAAQ,YAAA;AAAA,MACR;AAAA,KACD,CAAA;AACD,IAAA,MAAM,OAAA,GAAU,eAAA,CAAgB,GAAA,CAAI,WAAW,CAAA,CAAE,SAAA;AAEjD,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,YAAA,CAAa,MAAM,CAAA,CAAE,KAAA;AAG3C,IAAA,OAAA,CAAQ,aAAA,CAAc,MAAA,EAAQ,CAAC,KAAA,KAAU;AACvC,MAAA,SAAA,CAAU;AAAA,QACR,IAAA,EAAM,eAAA;AAAA,QACN,KAAA,EAAO,CAAA,KAAA,EAAQ,KAAA,CAAM,KAAK,CAAA,CAAA;AAAA,QAC1B;AAAA,OACD,CAAA;AAAA,IACH,CAAC,CAAA;AAQD,IAAA,IAAI,YAAA,EAAc,eAAe,YAAA,EAAc;AAC7C,MAAA,IAAI;AACF,QAAA,MAAM,SAAS,MAAM,sBAAA,CAAuB,iBAAiB,EAAE,CAAA,EAAGqB,GAAI,CAAA;AACtE,QAAA,IAAI,MAAA,EAAQ;AACV,UAAA,IAAI,aAAA,EAAe;AACjB,YAAA,MAAM,gBAAgB,MAAA,CAAO,gBAAA;AAC7B,YAAA,GAAA;AAAA,cACE,CAAA,mEAAA,EAAsE,iBAAiB,MAAM,CAAA,CAAA;AAAA,aAC/F;AACA,YAAA,MAAM,aAAa,OAAA,EAAQ;AAC3B,YAAA,YAAA,GAAe,MAAM,kBAAA,CAAmB;AAAA,cACtC,GAAG,aAAA;AAAA,cACH,eAAA,EAAiB;AAAA,aAClB,CAAA;AACD,YAAA,wBAAA,CAAyB,cAAc,SAAS,CAAA;AAChD,YAAA,MAAA,GAAS,YAAA,CAAa,MAAA;AACtB,YAAA,UAAA,CAAW,KAAA,EAAM;AACjB,YAAA,aAAA,GAAgB,KAAA;AAChB,YAAA,6BAAA,EAA8B;AAAA,UAChC;AACA,UAAC,MAAA,CAAe,MAAA,CAAO,UAAA,GAAa,EAAE,qBAAqB,MAAA,EAAO;AAClE,UAAA,GAAA,CAAI,CAAA,6CAAA,EAAgD,WAAW,CAAA,CAAE,CAAA;AAAA,QACnE,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,CAAA,sDAAA,EAAyD,WAAW,CAAA,CAAE,CAAA;AAAA,QAC5E;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC9D,QAAA,GAAA,CAAI,CAAA,8CAAA,EAAiD,MAAM,CAAA,CAAE,CAAA;AAAA,MAC/D;AAAA,IACF;AAEA,IAAA,MAAM,QAAoB,EAAE,KAAA,EAAO,OAAA,EAAS,OAAA,EAAS,QAAQ,WAAA,EAAY;AACzE,IAAA,WAAA,CAAY,GAAA,CAAI,OAAO,KAAK,CAAA;AAC5B,IAAA,OAAO,KAAA;AAAA,EACT;AA8BA,EAAA,MAAM,eAAA,GAAkBV,IAAAA,CAAK,IAAA,CAAK,UAAA,EAAY,WAAW,iBAAiB,CAAA;AAC1E,EAAA,IAAI;AACF,IAAAK,SAAAA,CAAUL,KAAK,IAAA,CAAK,UAAA,EAAY,SAAS,CAAA,EAAG,EAAE,SAAA,EAAW,IAAA,EAAM,CAAA;AAC/D,IAAA,IAAI,CAACL,UAAAA,CAAW,eAAe,CAAA,EAAG;AAChC,MAAAW,aAAAA,CAAc,iBAAiB,EAAA,EAAI,EAAE,MAAM,GAAA,EAAO,IAAA,EAAM,KAAK,CAAA;AAAA,IAC/D;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,SAAA,CAAU,KAAK,gEAAA,EAA6D;AAAA,MAC1E,OAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACvD,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,aAAA,GAAgB,CAAA;AACpB,EAAA,MAAM,mBAAA,GAAsB,GAAA;AAE5B,EAAA,IAAI,kBAAA,GAAuC,IAAA;AAC3C,EAAA,IAAI;AACF,IAAA,kBAAA,GAAqBK,KAAA,CAAQ,eAAA,EAAiB,CAAC,KAAA,KAAU;AACvD,MAAA,IAAI,UAAU,QAAA,EAAU;AACxB,MAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,MAAA,IAAI,GAAA,GAAM,gBAAgB,mBAAA,EAAqB;AAC/C,MAAA,aAAA,GAAgB,GAAA;AAGhB,MAAA,KAAK,iCAAA,CAAkC,iBAAiB,SAAS,CAAA;AAAA,IACnE,CAAC,CAAA;AAAA,EACH,SAAS,GAAA,EAAK;AACZ,IAAA,SAAA,CAAU,KAAK,8DAAA,EAA2D;AAAA,MACxE,OAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACvD,CAAA;AAAA,EACH;AAMA,EAAA,eAAe,OAAA,GAAU;AAIvB,IAAA,IAAI;AACF,MAAA,MAAM,QAAQ,IAAA,CAAK;AAAA,QACjB,YAAA;AAAA,QACA,IAAI,OAAA,CAAc,CAACtB,QAAAA,KAAY;AAC7B,UAAA,MAAM,CAAA,GAAI,UAAA,CAAWA,QAAAA,EAAS,GAAI,CAAA;AAClC,UAAA,CAAA,CAAE,KAAA,IAAQ;AAAA,QACZ,CAAC;AAAA,OACF,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,IAAI;AACF,MAAA,MAAA,EAAQ,IAAA,EAAK;AAAA,IACf,CAAA,CAAA,MAAQ;AAAA,IAAC;AACT,IAAA,4BAAA,CAA6B,MAAA,EAAO;AAGpC,IAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,OAAO,CAAA,IAAK,sBAAA,EAAwB;AACtD,MAAA,YAAA,CAAa,QAAQ,KAAK,CAAA;AAC1B,MAAA,OAAA,CAAQ,OAAO,IAAI,KAAA,CAAM,CAAA,oDAAA,EAAuD,MAAM,GAAG,CAAC,CAAA;AAAA,IAC5F;AACA,IAAA,sBAAA,CAAuB,KAAA,EAAM;AAC7B,IAAA,IAAI;AACF,MAAA,kBAAA,EAAoB,KAAA,EAAM;AAAA,IAC5B,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,kBAAA,GAAqB,IAAA;AACrB,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,IAAI;AACF,QAAA,MAAM,aAAa,OAAA,EAAQ;AAAA,MAC7B,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAMA,EAAA,eAAe,cACb,GAAA,EACA;AAMA,IAAA,QAAQ,IAAI,IAAA;AAAM,MAChB,KAAK,cAAA,EAAgB;AAUnB,QAAA,IAAI,GAAA,CAAI,eAAA,CAAgB,KAAA,KAAU,gBAAA,CAAiB,KAAA,EAAO;AACxD,UAAA,GAAA;AAAA,YACE,wCAAwC,gBAAA,CAAiB,KAAK,CAAA,UAAA,EAAa,GAAA,CAAI,gBAAgB,KAAK,CAAA;AAAA,WACtG;AACA,UAAA,SAAA,CAAU;AAAA,YACR,IAAA,EAAM,uBAAA;AAAA,YACN,YAAA,EAAc,gBAAA;AAAA,YACd,iBAAiB,GAAA,CAAI;AAAA,WACtB,CAAA;AACD,UAAA,MAAM,OAAA,EAAQ;AACd,UAAA,eAAA,EAAgB;AAChB,UAAA;AAAA,QACF;AAIA,QAAA,IAAI,eAAA,IAAmB,eAAA,CAAgB,WAAA,KAAgB,GAAA,CAAI,SAAS,WAAA,EAAa;AAC/E,UAAA,GAAA;AAAA,YACE,2CAA2C,eAAA,CAAgB,WAAW,CAAA,UAAA,EAAa,GAAA,CAAI,SAAS,WAAW,CAAA;AAAA,WAC7G;AACA,UAAA,SAAA,CAAU;AAAA,YACR,IAAA,EAAM,uBAAA;AAAA,YACN,qBAAqB,eAAA,CAAgB,WAAA;AAAA,YACrC,mBAAA,EAAqB,IAAI,QAAA,CAAS;AAAA,WACnC,CAAA;AACD,UAAA,MAAM,OAAA,EAAQ;AACd,UAAA,eAAA,EAAgB;AAChB,UAAA;AAAA,QACF;AACA,QAAA,eAAA,GAAkB,GAAA,CAAI,QAAA;AAGtB,QAAA,MAAM,QAAA,GAAW,GAAA,CAAI,YAAA,IAAgB,EAAC;AACtC,QAAA,KAAA,MAAW,QAAQ,QAAA,EAAU;AAK3B,UAAA,IAAI,IAAA,CAAK,QAAA,IAAY,CAAC,IAAA,CAAK,QAAA,CAAS,QAAA,CAAS,KAAK,CAAA,IAAK,CAAC,IAAA,CAAK,QAAA,CAAS,QAAA,CAAS,MAAM,CAAA,EAAG;AAItF,YAAA;AAAA,UACF;AACA,UAAA,MAAM,IAAA,GAAO;AAAA,YACX,GAAG,IAAA;AAAA,YACH,QAAA,EAAU,EAAE,KAAA,EAAO,CAAC,MAAe,CAAA,EAAE;AAAA,YACrC,SAAA,EAAW,MAAA;AAAA,YACX,OAAA,EAASkB,8BAA6B,IAAI;AAAA,WAC5C;AACA,UAAA,kBAAA,CAAmB,QAAA,CAAS,MAAM,QAAQ,CAAA;AAAA,QAC5C;AACA,QAAA,SAAA,CAAU,EAAE,IAAA,EAAM,eAAA,EAAiB,OAAA,EAAS,kBAAkB,CAAA;AAG9D,QAAA,gBAAA,GAAmB,IAAI,uBAAA,CAAwB,GAAA,CAAI,WAAW,CAAA;AAK9D,QAAA,IAAI,4BAAA,GAA8C,IAAA;AAClD,QAAA,IAAI,IAAI,OAAA,EAAS;AACf,UAAA,MAAM,QAAA,GAAW,GAAA,CAAI,OAAA,CAAQ,2BAA2B,CAAA;AACxD,UAAA,IAAI,QAAA,EAAU;AACZ,YAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,GAAA,CAAI,IAAA,IAAQJ,OAAAA,EAAQ;AACzC,YAAA,IAAI,IAAA,EAAM;AACR,cAAA,IAAI;AACF,gBAAA,MAAM,8BAAA,CAA+B,MAAM,QAAQ,CAAA;AACnD,gBAAA,GAAA;AAAA,kBACE,iDAAiD,IAAI,CAAA,sCAAA;AAAA,iBACvD;AAAA,cACF,SAAS,GAAA,EAAK;AACZ,gBAAA,MAAM,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC9D,gBAAA,GAAA,CAAI,CAAA,sDAAA,EAAyD,MAAM,CAAA,CAAE,CAAA;AAAA,cACvE;AAAA,YACF;AAIA,YAAA,4BAAA,GAA+B,8BAA8B,QAAQ,CAAA;AAAA,UACvE;AACA,UAAA,MAAM,eAAe,MAAA,CAAO,WAAA;AAAA,YAC1B,MAAA,CAAO,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA,CAAE,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA,KAAM,CAAA,KAAM,2BAA2B;AAAA,WAC/E;AACA,UAAA,MAAM,QAAA,GAAW,IAAI,sBAAA,EAAuB;AAC5C,UAAA,QAAA,CAAS,UAAU,YAAY,CAAA;AAC/B,UAAA,cAAA,GAAiB,QAAA;AACjB,UAAA,kBAAA,GAAqB,IAAA;AAAA,QACvB;AAIA,QAAA,IAAI;AACF,UAAA,MAAM,iBAAA,GAAoB,KAAK,QAAA,IAAY,WAAA;AAC3C,UAAA,MAAM,MAAA,GAAS,eAAe,iBAAiB,CAAA;AAC/C,UAAA,MAAM,iBAAA,GAAoB,GAAA,CAAI,OAAA,GAAU,MAAM,CAAA;AAC9C,UAAA,aAAA,GAAgB,kBAAA,CAAmB,gBAAgB,iBAAiB,CAAA;AACpE,UAAA,IAAI,CAAC,YAAA,EAAc;AACjB,YAAA,YAAA,GAAe,MAAM,mBAAmB,aAAa,CAAA;AACrD,YAAA,wBAAA,CAAyB,cAAc,SAAS,CAAA;AAChD,YAAA,eAAA,GAAkB,YAAA,CAAa,eAAA;AAC/B,YAAA,MAAA,GAAS,YAAA,CAAa,MAAA;AACtB,YAAA,6BAAA,EAA8B;AAC9B,YAAA,0BAAA,CAA2B,YAAY,CAAA;AACvC,YAAA,SAAA,CAAU;AAAA,cACR,IAAA,EAAM,qBAAA;AAAA,cACN,GAAG,uBAAuB,eAAe;AAAA,aAC1C,CAAA;AACD,YAAA,YAAA,CAAa,aAAA,EAAc;AAO3B,YAAA,kBAAA,CAAmB,iBAAiB,uBAAuB,CAAA;AAO3D,YAAA,MAAM,aAAa,uBAAA,CAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,aAO1C,CAAA;AACD,YAAA,KAAA,MAAW,OAAO,UAAA,EAAY;AAC5B,cAAA,kBAAA,CAAmB,QAAA,CAAS,KAAK,OAAO,CAAA;AAAA,YAC1C;AAEA,YAAA,mBAAA,EAAoB;AACpB,YAAA,GAAA,CAAI,kDAAkD,CAAA;AAAA,UACxD;AAAA,QACF,SAAS,GAAA,EAAK;AACZ,UAAA,MAAM,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC9D,UAAA,GAAA,CAAI,CAAA,8CAAA,EAAiD,MAAM,CAAA,CAAE,CAAA;AAC7D,UAAA,SAAA,CAAU,EAAE,IAAA,EAAM,OAAA,EAAS,SAAS,MAAA,EAAQ,KAAA,EAAO,MAAM,CAAA;AACzD,UAAA,kBAAA,CAAmB,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAM,CAAC,CAAA;AAAA,QACnE;AAGA,QAAA,IAAI,GAAA,CAAI,eAAe,kBAAA,EAAoB;AACzC,UAAA,kBAAA,GAAqB,IAAI,cAAA,CAAe,kBAAA;AACxC,UAAA,GAAA,CAAI,CAAA,mCAAA,EAAsC,kBAAkB,CAAA,CAAE,CAAA;AAAA,QAChE;AAOA,QAAA,IAAI,sBAAsB,4BAAA,EAA8B;AACtD,UAAA,4BAAA,CAA6B,SAAS,4BAA4B,CAAA;AAAA,QACpE;AAGA,QAAA,MAAM,GAAA,GAAM;AAAA,UACV,WAAA,EAAa,IAAI,cAAA,CAAe,WAAA;AAAA,UAChC,SAAA,EAAW,IAAI,cAAA,CAAe,SAAA;AAAA,UAC9B,aAAa,GAAA,CAAI,WAAA;AAAA,UACjB,eAAA,EAAiB,IAAI,MAAA,EAAQ,SAAA;AAAA,UAC7B,2BAAA,EAA6B,IAAI,MAAA,EAAQ,2BAAA;AAAA,UACzC,kBAAA,EAAoB,IAAI,cAAA,CAAe;AAAA,SACzC;AACA,QAAA,GAAA;AAAA,UACE,8BAA8B,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,aAAA,EAAgB,GAAA,CAAI,WAAA,GAAc,IAAI,WAAA,CAAY,MAAA,GAAS,WAAW,CAAA,iBAAA,EAAoB,eAAA,GAAkB,QAAQ,MAAM,CAAA;AAAA,SACpL;AA2BA,QAAA,IAAI,sBAAA;AACJ,QAAA,MAAM,qBAAqB,GAAA,CAAI,eAAA;AAC/B,QAAA,MAAM,iBAAiB,GAAA,CAAI,2BAAA;AAC3B,QAAA,IAAI,kBAAA,EAAoB;AACtB,UAAA,MAAM,UAAA,GAAa,0BAAA,CAA2B,kBAAA,CAAmB,IAAA,EAAM,CAAA;AACvE,UAAA,IAAI,cAAA,IAAkB,mBAAmB,UAAA,EAAY;AACnD,YAAA,GAAA;AAAA,cACE,CAAA,6DAAA,EAAgE,cAAA,CAAe,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,SAAA,EAAY,UAAA,CAAW,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA;AAAA,aAChI;AACA,YAAA,SAAA,CAAU;AAAA,cACR,IAAA,EAAM,eAAA;AAAA,cACN,eAAA,EAAiB,kBAAA;AAAA,cACjB,MAAA,EAAQ;AAAA,aACT,CAAA;AAAA,UACH,CAAA,MAAO;AACL,YAAA,GAAA,CAAI,CAAA,iDAAA,EAAoD,kBAAkB,CAAA,CAAE,CAAA;AAC5E,YAAA,SAAA,CAAU;AAAA,cACR,IAAA,EAAM,kBAAA;AAAA,cACN,eAAA,EAAiB,kBAAA;AAAA,cACjB,mBAAA,EAAqB;AAAA,aACtB,CAAA;AACD,YAAA,sBAAA,GAAyB,kBAAA;AAAA,UAC3B;AAAA,QACF;AAUA,QAAA,IAAI,sBAAA,IAA0B,IAAI,SAAA,EAAW;AAC3C,UAAA,MAAM,aAAa,OAAA,EAAQ;AAC3B,UAAA,YAAA,GAAe,MAAM,kBAAA,CAAmB;AAAA,YACtC,GAAG,aAAA;AAAA,YACH,GAAI,kBAAA,GAAqB,EAAE,kBAAA,KAAuB,EAAC;AAAA,YACnD,GAAI,sBAAA,GAAyB,EAAE,eAAA,EAAiB,sBAAA,KAA2B;AAAC,WAC7E,CAAA;AACD,UAAA,wBAAA,CAAyB,cAAc,SAAS,CAAA;AAChD,UAAA,MAAA,GAAS,YAAA,CAAa,MAAA;AACtB,UAAA,UAAA,CAAW,KAAA,EAAM;AACjB,UAAA,aAAA,GAAgB,KAAA;AAChB,UAAA,6BAAA,EAA8B;AAAA,QAChC;AACA,QAAA,IAAI,IAAI,WAAA,EAAa;AAInB,UAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,YAAA,IAAI;AACF,cAAA,yBAAA,EAA0B;AAC1B,cAAA,eAAA,GAAkB,IAAI,gBAAA,CAAiB,IAAA,CAAK,UAAA,EAAY;AAAA,gBACtD,cAAA,EAAgB,yBAAyB,YAAY;AAAA,eACtD,CAAA;AACD,cAAA,GAAA,CAAI,gFAAgF,CAAA;AAAA,YACtF,SAAS,GAAA,EAAK;AACZ,cAAA,MAAM,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC9D,cAAA,GAAA,CAAI,CAAA,2CAAA,EAA8C,MAAM,CAAA,CAAE,CAAA;AAC1D,cAAA,SAAA,CAAU,EAAE,IAAA,EAAM,YAAA,EAAc,CAAA;AAChC,cAAA;AAAA,YACF;AAAA,UACF;AAGA,UAAA,IAAI,gBAAA,GAAmB,CAAA;AACvB,UAAA,KAAA,MAAW,WAAA,IAAe,IAAI,WAAA,EAAa;AACzC,YAAA,IAAI;AACF,cAAA,IAAI,eAAA,CAAgB,GAAA,CAAI,WAAA,CAAY,EAAE,CAAA,EAAG;AAGvC,gBAAA,IAAI;AACF,kBAAA,MAAM,QAAA,GAAW,MAAM,eAAA,CAAgB,SAAA,CAAU,YAAY,EAAA,EAAI,KAAA,EAAO,EAAE,CAAA;AAC1E,kBAAA,MAAM,QAAQ,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,QAAQ,IAAI,EAAC;AACjD,kBAAA,SAAA,CAAU;AAAA,oBACR,IAAA,EAAM,eAAA;AAAA,oBACN,OAAO,WAAA,CAAY,EAAA;AAAA,oBACnB;AAAA,mBACD,CAAA;AACD,kBAAA,GAAA;AAAA,oBACE,CAAA,oBAAA,EAAuB,YAAY,EAAE,CAAA,mDAAA;AAAA,mBACvC;AAAA,gBACF,CAAA,CAAA,MAAQ;AACN,kBAAA,GAAA;AAAA,oBACE,CAAA,oBAAA,EAAuB,YAAY,EAAE,CAAA,0DAAA;AAAA,mBACvC;AAAA,gBACF;AACA,gBAAA;AAAA,cACF;AACA,cAAA,MAAM,MAAA,GAAS,MAAM,eAAA,CAAgB,OAAA,CAAQ;AAAA,gBAC3C,IAAI,WAAA,CAAY,EAAA;AAAA,gBAChB,QAAQ,WAAA,CAAY,OAAA;AAAA,gBACpB,MAAA,EAAQ,YAAA;AAAA,gBACR,OAAA,EAAS;AAAA,kBACP,GAAK,WAAA,CAAY,UAAA,IAAsD,EAAC;AAAA,kBACxE,OAAA,EAAS,WAAA,CAAY,YAAA,IAAgB;AAAC;AACxC,eACD,CAAA;AAED,cAAA,MAAM,KAAA,GAAQ,eAAA,CAAgB,GAAA,CAAI,WAAA,CAAY,EAAE,CAAA;AAChD,cAAA,IAAI,OAAO,KAAA,CAAM,SAAA,CAAU,aAAA,KAAkB,UAAA,EAAY;AACvD,gBAAA,KAAA,CAAM,SAAA,CAAU,aAAA,CAAc,MAAA,EAAQ,CAAC,QAAA,KAAsC;AAC3E,kBAAA,SAAA,CAAU;AAAA,oBACR,IAAA,EAAM,eAAA;AAAA,oBACN,OAAO,WAAA,CAAY,EAAA;AAAA,oBACnB,KAAA,EAAO;AAAA,mBACR,CAAA;AAAA,gBACH,CAAC,CAAA;AAAA,cACH;AACA,cAAA,GAAA,CAAI,mCAAmC,WAAA,CAAY,EAAE,CAAA,EAAA,EAAK,WAAA,CAAY,OAAO,CAAA,CAAA,CAAG,CAAA;AAChF,cAAA,gBAAA,EAAA;AAEA,cAAA,SAAA,CAAU;AAAA,gBACR,IAAA,EAAM,eAAA;AAAA,gBACN,OAAO,WAAA,CAAY,EAAA;AAAA,gBACnB,KAAA,EAAO,WAAA,CAAY,YAAA,IAAgB;AAAC,eACrC,CAAA;AAAA,YACH,SAAS,GAAA,EAAK;AACZ,cAAA,MAAM,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC9D,cAAA,GAAA,CAAI,CAAA,4CAAA,EAA+C,WAAA,CAAY,EAAE,CAAA,EAAA,EAAK,MAAM,CAAA,CAAE,CAAA;AAC9E,cAAA,SAAA,CAAU;AAAA,gBACR,IAAA,EAAM,OAAA;AAAA,gBACN,OAAA,EAAS,CAAA,YAAA,EAAe,WAAA,CAAY,EAAE,KAAK,MAAM,CAAA,CAAA;AAAA,gBACjD,KAAA,EAAO;AAAA,eACR,CAAA;AAAA,YACH;AAAA,UACF;AAIA,UAAA,IAAI,mBAAmB,CAAA,IAAK,CAAC,aAAA,IAAiB,YAAA,EAAc,eAAe,YAAA,EAAc;AACvF,YAAA,IAAI;AACF,cAAA,MAAM,SAAS,MAAM,sBAAA,CAAuB,iBAAiB,EAAE,CAAA,EAAGO,GAAI,CAAA;AACtE,cAAA,IAAI,MAAA,EAAQ;AACV,gBAAC,MAAA,CAAe,MAAA,CAAO,UAAA,GAAa,EAAE,qBAAqB,MAAA,EAAO;AAClE,gBAAA,GAAA,CAAI,CAAA,qCAAA,EAAwC,gBAAgB,CAAA,cAAA,CAAgB,CAAA;AAAA,cAC9E,CAAA,MAAO;AACL,gBAAA,GAAA,CAAI,CAAA,4CAAA,CAA8C,CAAA;AAAA,cACpD;AAAA,YACF,SAAS,GAAA,EAAK;AACZ,cAAA,MAAM,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC9D,cAAA,GAAA,CAAI,CAAA,qCAAA,EAAwC,MAAM,CAAA,CAAE,CAAA;AAAA,YACtD;AAAA,UACF;AAAA,QACF;AAQA,QAAA,IAAI,IAAI,WAAA,EAAa;AACnB,UAAA,MAAM,iBAAiB,GAAA,CAAI,WAAA,CAAY,OAAO,CAAC,CAAA,KAAM,EAAE,MAAM,CAAA;AAC7D,UAAA,IAAI,cAAA,CAAe,SAAS,CAAA,EAAG;AAC7B,YAAA,GAAA,CAAI,CAAA,qCAAA,EAAwC,cAAA,CAAe,MAAM,CAAA,CAAE,CAAA;AACnE,YAAA,IAAI;AACF,cAAA,MAAM,SAAA,GAAYV,IAAAA;AAAA,gBAChB,aAAA,CAAc,UAAA,IAAc,OAAA,CAAQ,GAAA,EAAI;AAAA,gBACxC,SAAA;AAAA,gBACA;AAAA,eACF;AAGA,cAAA,MAAM,UAAA,GACJ,OAAA,CAAQ,GAAA,CAAI,kBAAA,IACZ,gBAAA,CAAiB,cAAc,UAAA,IAAc,OAAA,CAAQ,GAAA,EAAK,CAAA,IAC1D,gBAAA;AAEF,cAAA,KAAA,MAAW,OAAO,cAAA,EAAgB;AAChC,gBAAA,IAAI,GAAA,CAAI,MAAA,KAAW,KAAA,IAAS,GAAA,CAAI,KAAA,EAAO;AACrC,kBAAA,MAAM,QAAQ,GAAA,CAAI,KAAA;AAClB,kBAAA,MAAM,MAAA,GAAS,mBAAmB,KAAA,EAAc;AAAA,oBAC9C,UAAA;AAAA,oBACA,SAAA;AAAA,oBACA,SAAS,GAAA,CAAI;AAAA,mBACd,CAAA;AACD,kBAAA,IAAI,OAAO,OAAA,EAAS;AAClB,oBAAA,GAAA,CAAI,CAAA,wBAAA,EAA4B,KAAA,CAAM,IAAA,IAAmB,GAAA,CAAI,IAAI,CAAA,CAAE,CAAA;AAAA,kBACrE,CAAA,MAAO;AACL,oBAAA,GAAA;AAAA,sBACE,kCAAmC,KAAA,CAAM,IAAA,IAAmB,IAAI,IAAI,CAAA,EAAA,EAAK,OAAO,KAAK,CAAA;AAAA,qBACvF;AAAA,kBACF;AAAA,gBACF,CAAA,MAAA,IAAW,GAAA,CAAI,MAAA,KAAW,QAAA,EAAU;AAClC,kBAAA,MAAM,OAAA,GAAU,oBAAA,CAAqB,GAAA,CAAI,IAAA,EAAM,SAAS,CAAA;AACxD,kBAAA,GAAA,CAAI,WAAW,OAAA,GAAU,SAAA,GAAY,WAAW,CAAA,QAAA,EAAW,GAAA,CAAI,IAAI,CAAA,CAAE,CAAA;AAAA,gBACvE;AAAA,cACF;AAIA,cAAA,IAAI,aAAA,EAAe;AACjB,gBAAA,MAAM,gBAAgB,MAAA,CAAO,gBAAA;AAC7B,gBAAA,GAAA;AAAA,kBACE,CAAA,2DAAA,EAA8D,iBAAiB,MAAM,CAAA,CAAA;AAAA,iBACvF;AACA,gBAAA,MAAM,aAAa,OAAA,EAAQ;AAC3B,gBAAA,YAAA,GAAe,MAAM,kBAAA,CAAmB;AAAA,kBACtC,GAAG,aAAA;AAAA,kBACH,eAAA,EAAiB;AAAA,iBAClB,CAAA;AACD,gBAAA,wBAAA,CAAyB,cAAc,SAAS,CAAA;AAChD,gBAAA,MAAA,GAAS,YAAA,CAAa,MAAA;AACtB,gBAAA,UAAA,CAAW,KAAA,EAAM;AACjB,gBAAA,aAAA,GAAgB,KAAA;AAChB,gBAAA,6BAAA,EAA8B;AAE9B,gBAAA,SAAA,CAAU;AAAA,kBACR,IAAA,EAAM,gBAAA;AAAA,kBACN,MAAA,EAAQ,cAAA,CAAe,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,oBACjC,IAAA,EAAQ,CAAA,CAAE,KAAA,EAAmC,IAAA,IAAmB,CAAA,CAAE,IAAA;AAAA,oBAClE,MAAA,EAAQ,EAAE,MAAA,IAAU;AAAA,mBACtB,CAAE;AAAA,iBACH,CAAA;AAAA,cACH,CAAA,MAAO;AACL,gBAAA,GAAA;AAAA,kBACE;AAAA,iBACF;AAAA,cACF;AAAA,YACF,SAAS,GAAA,EAAK;AACZ,cAAA,MAAM,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC9D,cAAA,GAAA,CAAI,CAAA,qCAAA,EAAwC,MAAM,CAAA,CAAE,CAAA;AACpD,cAAA,SAAA,CAAU;AAAA,gBACR,IAAA,EAAM,OAAA;AAAA,gBACN,OAAA,EAAS,gBAAgB,MAAM,CAAA,CAAA;AAAA,gBAC/B,KAAA,EAAO;AAAA,eACR,CAAA;AAAA,YACH;AAAA,UACF;AAAA,QACF;AAIA,QAAA,SAAA,CAAU;AAAA,UACR,IAAA,EAAM,kBAAA;AAAA,UACN,mBAAA,EAAqB,0BAAA,CAA2B,kBAAA,CAAmB,IAAA,EAAM;AAAA,SAC1E,CAAA;AACD,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,QAAA,EAAU;AACb,QAAA,IAAI;AACF,UAAA,MAAM,YAAA;AAAA,QACR,SAAS,GAAA,EAAK;AACZ,UAAA,SAAA,CAAU;AAAA,YACR,IAAA,EAAM,OAAA;AAAA,YACN,OAAA,EAAS,CAAA,uBAAA,EAA2B,GAAA,CAAc,OAAO,CAAA,CAAA;AAAA,YACzD,KAAA,EAAO;AAAA,WACR,CAAA;AACD,UAAA;AAAA,QACF;AACA,QAAA,IAAI,CAAC,kBAAA,EAAoB;AACvB,UAAA,GAAA,CAAI,qEAAgE,CAAA;AACpE,UAAA,SAAA,CAAU;AAAA,YACR,IAAA,EAAM,OAAA;AAAA,YACN,OAAA,EAAS,iEAAA;AAAA,YACT,KAAA,EAAO;AAAA,WACR,CAAA;AACD,UAAA;AAAA,QACF;AACA,QAAA,GAAA,CAAI,mBAAmB,GAAA,CAAI,MAAA,CAAO,MAAM,CAAA,EAAG,EAAE,CAAC,CAAA,GAAA,CAAK,CAAA;AASnD,QAAA,MAAM,aAAa,iBAAA,EAAkB;AACrC,QAAA,IAAI,UAAA,EAAY;AACd,UAAA,SAAA,CAAU,EAAE,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,YAAY,CAAA;AAC/C,UAAA,IAAI;AACF,YAAA,MAAM,MAAM,sBAAA,EAAuB;AACnC,YAAA,MAAM,YAAA,GAA6B;AAAA,cACjC,IAAA,EAAM,cAAA;AAAA,cACN,MAAM,GAAA,CAAI,MAAA;AAAA,cACV,QAAA,EAAU;AAAA,aACZ;AACA,YAAA,MAAM,GAAA,CAAI,MAAA,CAAO,UAAA,CAAW,WAAA,EAAa;AAAA,cACvC,cAAA,EAAgB,qBAAqB,YAAY,CAAA;AAAA,cACjD,IAAA,EAAM;AAAA,gBACJ,IAAA,EAAM,cAAA;AAAA,gBACN,OAAO,UAAA,CAAW,KAAA;AAAA,gBAClB,MAAM,GAAA,CAAI,MAAA;AAAA,gBACV,QAAA,EAAU;AAAA;AACZ,aACD,CAAA;AAAA,UACH,SAAS,GAAA,EAAK;AACZ,YAAA,MAAM,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC9D,YAAA,GAAA,CAAI,CAAA,uCAAA,EAA0C,MAAM,CAAA,CAAE,CAAA;AACtD,YAAA,SAAA,CAAU,EAAE,MAAM,OAAA,EAAS,OAAA,EAAS,qBAAqB,MAAM,CAAA,CAAA,EAAI,KAAA,EAAO,KAAA,EAAO,CAAA;AAAA,UACnF;AACA,UAAA;AAAA,QACF;AAEA,QAAA,IAAI,CAAC,aAAA,EAAe;AAClB,UAAA,IAAI;AACF,YAAA,MAAM,OAAO,KAAA,EAAM;AACnB,YAAA,aAAA,GAAgB,IAAA;AAAA,UAClB,SAAS,GAAA,EAAK;AACZ,YAAA,MAAM,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC9D,YAAA,GAAA,CAAI,CAAA,6BAAA,EAAgC,MAAM,CAAA,CAAE,CAAA;AAC5C,YAAA,SAAA,CAAU,EAAE,MAAM,OAAA,EAAS,OAAA,EAAS,wBAAwB,MAAM,CAAA,CAAA,EAAI,KAAA,EAAO,IAAA,EAAM,CAAA;AACnF,YAAA;AAAA,UACF;AAIA,UAAA,MAAA,CAAO,EAAA,CAAG,aAAA,EAAe,CAAC,KAAA,KAAe;AACvC,YAAA,MAAM,UAAA,GAAa,UAAA,CAAW,SAAA,CAAU,KAAK,CAAA;AAC7C,YAAA,KAAA,MAAW,KAAK,UAAA,EAAY;AAC1B,cAAA,sBAAA,CAAuB,CAAC,CAAA;AAAA,YAC1B;AAAA,UACF,CAAC,CAAA;AAED,UAAA,MAAA,CAAO,EAAA,CAAG,OAAA,EAAS,CAAC,GAAA,KAAe;AACjC,YAAA,GAAA,CAAI,CAAA,sBAAA,EAAyB,GAAA,CAAI,OAAO,CAAA,CAAE,CAAA;AAC1C,YAAA,SAAA,CAAU,EAAE,MAAM,OAAA,EAAS,OAAA,EAAS,IAAI,OAAA,EAAS,KAAA,EAAO,MAAM,CAAA;AAAA,UAChE,CAAC,CAAA;AAAA,QACH;AAEA,QAAA,SAAA,CAAU,EAAE,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,YAAY,CAAA;AAE/C,QAAA,IAAI;AACF,UAAA,MAAM,MAAA,CAAO,MAAA,CAAO,GAAA,CAAI,MAAM,CAAA;AAAA,QAChC,SAAS,GAAA,EAAK;AACZ,UAAA,MAAM,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC9D,UAAA,GAAA,CAAI,CAAA,uBAAA,EAA0B,MAAM,CAAA,CAAE,CAAA;AACtC,UAAA,SAAA,CAAU,EAAE,MAAM,OAAA,EAAS,OAAA,EAAS,kBAAkB,MAAM,CAAA,CAAA,EAAI,KAAA,EAAO,IAAA,EAAM,CAAA;AAAA,QAC/E;AACA,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,OAAA,EAAS;AACZ,QAAA,IAAI;AACF,UAAA,MAAM,YAAA;AAAA,QACR,SAAS,GAAA,EAAK;AACZ,UAAA,SAAA,CAAU;AAAA,YACR,IAAA,EAAM,OAAA;AAAA,YACN,OAAA,EAAS,CAAA,uBAAA,EAA2B,GAAA,CAAc,OAAO,CAAA,CAAA;AAAA,YACzD,KAAA,EAAO;AAAA,WACR,CAAA;AACD,UAAA;AAAA,QACF;AACA,QAAA,GAAA,CAAI,kBAAkB,GAAA,CAAI,MAAA,CAAO,MAAM,CAAA,EAAG,EAAE,CAAC,CAAA,GAAA,CAAK,CAAA;AAClD,QAAA,IAAI;AACF,UAAA,MAAM,MAAA,CAAO,MAAA,CAAO,GAAA,CAAI,MAAM,CAAA;AAAA,QAChC,SAAS,GAAA,EAAK;AACZ,UAAA,SAAA,CAAU;AAAA,YACR,IAAA,EAAM,OAAA;AAAA,YACN,OAAA,EAAS,iBAAiB,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAA;AAAA,YAC1E,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH;AACA,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,QAAA,EAAU;AACb,QAAA,IAAI;AACF,UAAA,MAAM,YAAA;AAAA,QACR,SAAS,GAAA,EAAK;AACZ,UAAA,SAAA,CAAU;AAAA,YACR,IAAA,EAAM,OAAA;AAAA,YACN,OAAA,EAAS,CAAA,uBAAA,EAA2B,GAAA,CAAc,OAAO,CAAA,CAAA;AAAA,YACzD,KAAA,EAAO;AAAA,WACR,CAAA;AACD,UAAA;AAAA,QACF;AACA,QAAA,GAAA,CAAI,gBAAgB,CAAA;AACpB,QAAA,IAAI;AACF,UAAA,MAAM,OAAO,KAAA,EAAM;AAAA,QACrB,SAAS,GAAA,EAAK;AACZ,UAAA,GAAA,CAAI,CAAA,uBAAA,EAA0B,GAAG,CAAA,CAAE,CAAA;AAAA,QACrC;AACA,QAAA;AAAA,MACF;AAAA;AAAA;AAAA,MAKA,KAAK,kBAAA,EAAoB;AACvB,QAAA,IAAI;AACF,UAAA,MAAM,YAAA;AAAA,QACR,SAAS,GAAA,EAAK;AACZ,UAAA,SAAA,CAAU;AAAA,YACR,IAAA,EAAM,OAAA;AAAA,YACN,OAAA,EAAS,CAAA,uBAAA,EAA2B,GAAA,CAAc,OAAO,CAAA,CAAA;AAAA,YACzD,KAAA,EAAO;AAAA,WACR,CAAA;AACD,UAAA;AAAA,QACF;AAEA,QAAA,IAAI,eAAA,EAAiB,GAAA,CAAI,GAAA,CAAI,WAAW,CAAA,EAAG;AACzC,UAAA,0BAAA,CAA2B,GAAA,EAAK,iBAAiB,SAAS,CAAA;AAC1D,UAAA;AAAA,QACF;AACA,QAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,UAAA,SAAA,CAAU;AAAA,YACR,IAAA,EAAM,mBAAA;AAAA,YACN,WAAW,GAAA,CAAI,SAAA;AAAA,YACf,YAAY,GAAA,CAAI,WAAA;AAAA,YAChB,WAAW,GAAA,CAAI,SAAA;AAAA,YACf,KAAA,EAAO;AAAA,WACR,CAAA;AACD,UAAA;AAAA,QACF;AACA,QAAA,KAAK,qBAAA,CAAsB,GAAA,EAAK,eAAA,EAAiB,SAAS,CAAA;AAC1D,QAAA;AAAA,MACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAWA,KAAK,kBAAA,EAAoB;AACvB,QAAA,IAAI;AACF,UAAA,IAAI,CAAC,eAAA,EAAiB,MAAM,IAAI,MAAM,yCAAyC,CAAA;AAkB/E,UAAA,MAAM,WAAA,GAAc,eAAA,CAAgB,GAAA,GAAM,GAAA,CAAI,EAAE,IAAI,eAAA,CAAgB,GAAA,CAAI,GAAA,CAAI,EAAE,CAAA,GAAI,IAAA;AAClF,UAAA,MAAM,cAAA,GACH,WAAA,EAAa,SAAA,EAA6C,IAAA,KAAS,MAAA;AACtE,UAAA,MAAM,YAAA,GAAe,IAAI,EAAA,KAAO,MAAA;AAChC,UAAA,IAAI,GAAA,CAAI,OAAO,OAAA,EAAS;AACtB,YAAA,IAAI,kBAAkB,YAAA,EAAc;AAClC,cAAA,MAAM,OAAA,GAAW,GAAA,CAAI,OAAA,IAAW,EAAC;AACjC,cAAA,MAAM,UAAU,OAAA,CAAQ,IAAA;AACxB,cAAA,MAAM,OAAO,OAAA,CAAQ,IAAA;AAGrB,cAAA,IAAI,OAAA,EAAS,EAAA,IAAM,IAAA,EAAM,KAAA,IAAS,MAAM,SAAA,EAAW;AACjD,gBAAA,IAAI,WAAA,CAAY,OAAO,CAAA,EAAG;AACxB,kBAAA,SAAA,CAAU,KAAK,0DAAA,EAA4D;AAAA,oBACzE,YAAA,EAAc,KAAA,CAAM,IAAA,CAAK,WAAA,CAAY,MAAM;AAAA,mBAC5C,CAAA;AACD,kBAAA;AAAA,gBACF;AACA,gBAAA,MAAM,QAAQ,MAAM,gBAAA,CAAiB,OAAA,EAAS,EAAE,MAAM,CAAA;AACtD,gBAAA,SAAA,CAAU,KAAK,6BAAA,EAA+B;AAAA,kBAC5C,OAAO,KAAA,CAAM,KAAA;AAAA,kBACb,QAAQ,OAAA,CAAQ;AAAA,iBACjB,CAAA;AACD,gBAAA;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAIA,UAAA,IAAI,aAAa,GAAA,CAAI,EAAA;AACrB,UAAA,IAAI,CAAC,eAAe,YAAA,EAAc;AAChC,YAAA,MAAM,aAAa,iBAAA,EAAkB;AACrC,YAAA,IAAI,UAAA,EAAY;AACd,cAAA,UAAA,GAAa,UAAA,CAAW,WAAA;AAAA,YAC1B;AAAA,UACF;AACA,UAAA,MAAM,eAAA,CAAgB,UAAU,UAAA,EAAY,GAAA,CAAI,IAAI,GAAA,CAAI,OAAA,IAAW,EAAE,CAAA;AAAA,QACvE,SAAS,GAAA,EAAK;AACZ,UAAA,SAAA,CAAU,KAAK,yBAAA,EAA2B;AAAA,YACxC,IAAI,GAAA,CAAI,EAAA;AAAA,YACR,IAAI,GAAA,CAAI,EAAA;AAAA,YACR,OAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,WACvD,CAAA;AAAA,QACH;AACA,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,iBAAA,EAAmB;AACtB,QAAA,IAAI,EAAA,GAAK,IAAA;AACT,QAAA,IAAI,MAAA;AACJ,QAAA,IAAI,KAAA;AACJ,QAAA,IAAI;AACF,UAAA,IAAI,CAAC,eAAA,EAAiB,MAAM,IAAI,MAAM,wCAAwC,CAAA;AAI9E,UAAA,IAAI,aAAa,GAAA,CAAI,EAAA;AACrB,UAAA,IAAI,CAAC,gBAAgB,GAAA,GAAM,GAAA,CAAI,EAAE,CAAA,IAAK,GAAA,CAAI,OAAO,MAAA,EAAQ;AACvD,YAAA,MAAM,aAAa,iBAAA,EAAkB;AACrC,YAAA,IAAI,UAAA,EAAY;AACd,cAAA,UAAA,GAAa,UAAA,CAAW,WAAA;AAAA,YAC1B;AAAA,UACF;AACA,UAAA,MAAA,GAAS,MAAM,gBAAgB,SAAA,CAAU,UAAA,EAAY,IAAI,EAAA,EAAI,GAAA,CAAI,OAAA,IAAW,EAAE,CAAA;AAAA,QAChF,SAAS,GAAA,EAAK;AACZ,UAAA,EAAA,GAAK,KAAA;AACL,UAAA,KAAA,GAAQ,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAAA,QACzD;AACA,QAAA,SAAA,CAAU;AAAA,UACR,IAAA,EAAM,0BAAA;AAAA,UACN,WAAW,GAAA,CAAI,SAAA;AAAA,UACf,EAAA;AAAA,UACA,GAAI,MAAA,KAAW,MAAA,GAAY,EAAE,MAAA,KAAW,EAAC;AAAA,UACzC,GAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,KAAU;AAAC,SACxC,CAAA;AACD,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,OAAA,EAAS;AACZ,QAAA,IAAI;AACF,UAAA,MAAM,YAAA;AAAA,QACR,SAAS,GAAA,EAAK;AACZ,UAAA,SAAA,CAAU;AAAA,YACR,IAAA,EAAM,OAAA;AAAA,YACN,OAAA,EAAS,CAAA,uBAAA,EAA2B,GAAA,CAAc,OAAO,CAAA,CAAA;AAAA,YACzD,KAAA,EAAO;AAAA,WACR,CAAA;AACD,UAAA;AAAA,QACF;AACA,QAAA,GAAA,CAAI,CAAA,oBAAA,EAAuB,GAAA,CAAI,KAAK,CAAA,CAAE,CAAA;AACtC,QAAA,IAAI,MAAA;AACJ,QAAA,IAAI;AACF,UAAA,QAAQ,IAAI,KAAA;AAAO,YACjB,KAAK,OAAA,EAAS;AACZ,cAAA,MAAM,aAAa,MAAA,CAAO,IAAA,CAAM,QAAgB,MAAA,EAAQ,UAAA,IAAc,EAAE,CAAA;AACxE,cAAA,MAAM,YAAA,GAAgB,MAAA,EAAgB,MAAA,EAAQ,YAAA,IAAgB,IAAA;AAC9D,cAAA,MAAA,GAAS,EAAE,UAAA,EAAY,YAAA,EAAc,aAAA,EAAc;AACnD,cAAA;AAAA,YACF;AAAA,YACA,KAAK,YAAA,EAAc;AACjB,cAAA,MAAA,GAAS,eAAA,EAAiB,cAAA,IAAiB,IAAK,EAAC;AACjD,cAAA;AAAA,YACF;AAAA,YACA,KAAK,KAAA,EAAO;AACV,cAAA,MAAM,OAAA,GAAU,OAAO,OAAA,CAAS,MAAA,EAAgB,QAAQ,UAAA,IAAc,EAAE,CAAA,CAAE,GAAA;AAAA,gBACxE,CAAC,CAAC,IAAI,CAAA,MAAO,EAAE,IAAA,EAAK;AAAA,eACtB;AACA,cAAA,MAAA,GAAS,EAAE,OAAA,EAAQ;AACnB,cAAA;AAAA,YACF;AAAA,YACA,KAAK,QAAA,EAAU;AAGb,cAAA,MAAM,SAAA,GAAY,MAAA,EAAQ,QAAA,EAAS,IAAK,YAAA,EAAc,KAAA;AACtD,cAAA,MAAA,GAAS;AAAA,gBACP,QAAQ,YAAA,EAAc,UAAA;AAAA,gBACtB,KAAA,EAAO,SAAA;AAAA,gBACP,UAAU,YAAA,EAAc,QAAA;AAAA,gBACxB,QAAA;AAAA,gBACA,WAAA;AAAA,gBACA,aAAA;AAAA,gBACA,YAAY,IAAA,CAAK,UAAA;AAAA,gBACjB,UAAU,oBAAA;AAAqB,eACjC;AACA,cAAA;AAAA,YACF;AAAA,YACA,KAAK,OAAA,EAAS;AACZ,cAAA,MAAM,OAAA,GAAU,IAAI,IAAA,EAAM,KAAA;AAC1B,cAAA,IAAI,OAAA,EAAS;AACX,gBAAA,IAAI;AACF,kBAAA,MAAM,WAAW,MAAM,eAAA,EAAiB,UAAU,OAAA,EAAS,KAAA,EAAO,EAAE,CAAA;AACpE,kBAAA,MAAA,GAAS,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,QAAQ,CAAA,GAAI,IAAA;AAAA,gBAC7C,SAAS,GAAA,EAAK;AACZ,kBAAA,MAAA,GAAS,EAAE,OAAO,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAE;AAAA,gBACrE;AAAA,cACF,CAAA,MAAO;AACL,gBAAA,MAAM,GAAA,GAAM,eAAA,EAAiB,cAAA,IAAiB,IAAK,EAAC;AACpD,gBAAA,MAAA,GAAS,EAAE,QAAQ,GAAA,CAAI,GAAA,CAAI,CAAC,CAAA,KAAsB,CAAA,CAAE,EAAE,CAAA,EAAE;AAAA,cAC1D;AACA,cAAA;AAAA,YACF;AAAA,YACA,KAAK,UAAA,EAAY;AACf,cAAA,MAAM,QAAA,GAAW,MAAA,EAAQ,gBAAA,IAAmB,IAAK,EAAC;AAClD,cAAA,MAAA,GAAS,EAAE,QAAA,EAAU,UAAA,EAAY,YAAA,EAAc,UAAA,EAAW;AAC1D,cAAA;AAAA,YACF;AAAA,YACA;AACE,cAAA,MAAA,GAAS,EAAE,KAAA,EAAO,CAAA,qBAAA,EAAyB,GAAA,CAAY,KAAK,CAAA,CAAA,EAAG;AAAA;AACnE,QACF,SAAS,GAAA,EAAK;AACZ,UAAA,MAAA,GAAS,EAAE,OAAO,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAE;AAAA,QACrE;AACA,QAAA,SAAA,CAAU,EAAE,MAAM,cAAA,EAAgB,KAAA,EAAO,IAAI,KAAA,EAAO,IAAA,EAAM,QAAQ,CAAA;AAClE,QAAA;AAAA,MACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAYA,KAAK,UAAA,EAAY;AACf,QAAA,GAAA,CAAI,4BAA4B,CAAA;AAChC,QAAA,MAAM,OAAA,EAAQ;AACd,QAAA,IAAI,qBAAqB,wBAAA,EAA0B;AACjD,UAAA,MAAM,UAAU,KAAA,EAAM;AAAA,QACxB;AACA,QAAA,eAAA,EAAgB;AAChB,QAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AACd,QAAA;AAAA,MACF;AAAA;AAAA,MAGA,KAAK,mBAAA,EAAqB;AACxB,QAAA,MAAM,OAAA,GAAU,uBAAA,CAAwB,sBAAA,EAAwB,GAAG,CAAA;AACnE,QAAA,IAAI,CAAC,OAAA,EAAS;AACZ,UAAA,GAAA;AAAA,YACE,CAAA,6CAAA,EAAgD,IAAI,MAAM,CAAA,0CAAA;AAAA,WAC5D;AAAA,QACF;AACA,QAAA;AAAA,MACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOA,KAAK,qBAAA,EAAuB;AAC1B,QAAA,KAAA,MAAW,GAAA,IAAO,IAAI,YAAA,EAAc;AAClC,UAAA,MAAM,IAAA,GAAO,GAAA;AACb,UAAA,kBAAA,CAAmB,QAAA;AAAA,YACjB;AAAA,cACE,GAAG,IAAA;AAAA,cACH,QAAA,EAAU,EAAE,KAAA,EAAO,CAAC,MAAe,CAAA,EAAE;AAAA,cACrC,SAAA,EAAW,MAAA;AAAA,cACX,OAAA,EAASO,8BAA6B,IAAI;AAAA,aAC5C;AAAA,YACA;AAAA,WACF;AAAA,QACF;AACA,QAAA;AAAA,MACF;AAAA,MACA,KAAK,uBAAA,EAAyB;AAC5B,QAAA,KAAA,MAAW,IAAA,IAAQ,IAAI,KAAA,EAAO;AAC5B,UAAA,kBAAA,CAAmB,WAAW,IAAI,CAAA;AAAA,QACpC;AACA,QAAA;AAAA,MACF;AAAA,MACA,KAAK,oBAAA,EAAsB;AAazB,QAAA,IAAI,GAAA,CAAI,aAAa,UAAA,EAAY;AAC/B,UAAA,MAAM,OAAA,GAAU,8BAAA;AAAA,YACd,sBAAA;AAAA,YACA,GAAA,CAAI,MAAA;AAAA,YACJ,GAAA,CAAI;AAAA,WACN;AACA,UAAA,IAAI,CAAC,OAAA,EAAS;AACZ,YAAA,GAAA;AAAA,cACE,CAAA,wDAAA,EAA2D,IAAI,MAAM,CAAA,0CAAA;AAAA,aACvE;AAAA,UACF,CAAA,MAAO;AACL,YAAA,GAAA;AAAA,cACE,+CAA+C,GAAA,CAAI,MAAM,CAAA,WAAA,EAAc,GAAA,CAAI,SAAS,CAAA,EAAG,GAAA,CAAI,QAAA,GAAW,CAAA,UAAA,EAAa,KAAK,SAAA,CAAU,GAAA,CAAI,QAAQ,CAAC,KAAK,EAAE,CAAA;AAAA,aACxJ;AAAA,UACF;AAAA,QACF,CAAA,MAAO;AACL,UAAA,GAAA;AAAA,YACE,CAAA,4CAAA,EAA+C,GAAA,CAAI,MAAM,CAAA,WAAA,EAAc,IAAI,SAAS,CAAA,6BAAA;AAAA,WACtF;AAAA,QACF;AACA,QAAA;AAAA,MACF;AAAA;AACF,EACF;AAGA,EAAA,SAAA,CAAU,SAAA,CAAU,CAAC,GAAA,KAAQ;AAC3B,IAAA,KAAK,cAAc,GAAG,CAAA;AAAA,EACxB,CAAC,CAAA;AAGD,EAAA,IAAI,qBAAqB,wBAAA,EAA0B;AACjD,IAAA,MAAM,UAAU,MAAA,EAAO;AAAA,EACzB;AAKA,EAAA,IAAI,WAAA,KAAgB,SAAS,YAAA,EAAe;AAC1C,IAAA,YAAA,CAAc,aAAA,EAAc;AAAA,EAC9B;AAIA,EAAA,IAAI,qBAAqB,wBAAA,EAA0B;AACjD,IAAA,SAAA,CAAU,UAAU,MAAM;AACxB,MAAA,IAAI,eAAA,EAAiB;AACnB,QAAA,MAAM,IAAA,GAAO,uBAAuB,eAAe,CAAA;AACnD,QAAA,GAAA;AAAA,UACE,yCAAyC,IAAA,CAAK,MAAA,CAAO,MAAM,CAAA,WAAA,EAAc,IAAA,CAAK,WAAW,MAAM,CAAA,aAAA;AAAA,SACjG;AACA,QAAA,SAAA,CAAU,EAAE,IAAA,EAAM,qBAAA,EAAuB,GAAG,MAAM,CAAA;AAAA,MACpD;AAEA,MAAA,MAAM,QAAA,GAAW,MAAA,EAAQ,gBAAA,IAAmB,IAAK,EAAC;AAClD,MAAA,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AACvB,QAAA,GAAA,CAAI,CAAA,qCAAA,EAAwC,QAAA,CAAS,MAAM,CAAA,WAAA,CAAa,CAAA;AACxE,QAAA,SAAA,CAAU,EAAE,IAAA,EAAM,oBAAA,EAAsB,QAAA,EAAU,CAAA;AAAA,MACpD;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,gBAAgB,KAAA,EAAO;AACzB,IAAA,GAAA;AAAA,MACE,CAAA,eAAA,EAAkB,YAAA,CAAc,UAAU,CAAA,OAAA,EAAU,YAAA,CAAc,KAAA,IAAS,WAAW,CAAA,UAAA,EAAa,YAAA,CAAc,QAAA,IAAY,WAAW,CAAA,UAAA,EAAa,YAAY,WAAW,CAAA;AAAA,KAC9K;AAAA,EACF,CAAA,MAAO;AACL,IAAA,GAAA,CAAI,CAAA,kFAAA,CAA+E,CAAA;AAAA,EACrF;AACA,EAAA,GAAA,CAAI,CAAA,gBAAA,EAAmB,IAAA,CAAK,UAAU,CAAA,CAAE,CAAA;AAIxC,EAAA,OAAA,CAAQ,EAAA,CAAG,mBAAA,EAAqB,CAAC,GAAA,KAAQ;AACvC,IAAA,GAAA;AAAA,MACE,CAAA,uCAAA,EAA0C,eAAe,KAAA,GAAS,GAAA,CAAI,SAAS,GAAA,CAAI,OAAA,GAAW,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,KAC3G;AAAA,EACF,CAAC,CAAA;AACD,EAAA,OAAA,CAAQ,EAAA,CAAG,oBAAA,EAAsB,CAAC,MAAA,KAAW;AAC3C,IAAA,GAAA;AAAA,MACE,CAAA,wCAAA,EAA2C,kBAAkB,KAAA,GAAS,MAAA,CAAO,SAAS,MAAA,CAAO,OAAA,GAAW,MAAA,CAAO,MAAM,CAAC,CAAA;AAAA,KACxH;AAAA,EACF,CAAC,CAAA;AAQD,EAAA,MAAM,4BAAA,GAA+B,GAAA;AACrC,EAAA,IAAI,YAAA,GAAe,KAAA;AAEnB,EAAA,eAAe,iBAAiB,MAAA,EAA6C;AAC3E,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,GAAA,CAAI,CAAA,QAAA,EAAW,MAAM,CAAA,mCAAA,CAAgC,CAAA;AACrD,MAAA,OAAA,CAAQ,KAAK,GAAG,CAAA;AAAA,IAClB;AACA,IAAA,YAAA,GAAe,IAAA;AACf,IAAA,GAAA,CAAI,CAAA,QAAA,EAAW,MAAM,CAAA,4DAAA,CAAyD,CAAA;AAE9E,IAAA,MAAM,cAAA,GAAiB,WAAW,MAAM;AACtC,MAAA,GAAA,CAAI,CAAA,mCAAA,EAAsC,4BAA4B,CAAA,sBAAA,CAAmB,CAAA;AACzF,MAAA,OAAA,CAAQ,KAAK,GAAG,CAAA;AAAA,IAClB,GAAG,4BAA4B,CAAA;AAC/B,IAAA,cAAA,CAAe,KAAA,IAAQ;AAEvB,IAAA,IAAI;AACF,MAAA,MAAM,OAAA,EAAQ;AAAA,IAChB,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,CAAA,uBAAA,EAA2B,GAAA,CAAc,OAAO,CAAA,CAAE,CAAA;AAAA,IACxD;AACA,IAAA,IAAI;AACF,MAAA,IAAI,qBAAqB,wBAAA,EAA0B;AACjD,QAAA,MAAM,UAAU,KAAA,EAAM;AAAA,MACxB;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,CAAA,+BAAA,EAAmC,GAAA,CAAc,OAAO,CAAA,CAAE,CAAA;AAAA,IAChE;AAEA,IAAA,YAAA,CAAa,cAAc,CAAA;AAC3B,IAAA,GAAA,CAAI,2BAA2B,CAAA;AAC/B,IAAA,eAAA,EAAgB;AAChB,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAEA,EAAA,OAAA,CAAQ,EAAA,CAAG,WAAW,MAAM;AAC1B,IAAA,KAAK,iBAAiB,SAAS,CAAA;AAAA,EACjC,CAAC,CAAA;AACD,EAAA,OAAA,CAAQ,EAAA,CAAG,UAAU,MAAM;AACzB,IAAA,KAAK,iBAAiB,QAAQ,CAAA;AAAA,EAChC,CAAC,CAAA;AACH;ACh7EA,IAAM,WAAA,GAAc,SAAA;AACpB,IAAM,eAAA,GAAkB,UAAA;AACxB,IAAM,YAAA,GAAe,SAAA;AACrB,IAAM,WAAA,GAAc,cAAA;AAmDpB,SAAS,YAAY,UAAA,EAA4B;AAC/C,EAAA,OAAOnB,KAAAA,CAAK,IAAA,CAAK,UAAA,EAAY,WAAA,EAAa,eAAe,CAAA;AAC3D;AAEA,SAAS,eAAA,CAAgB,YAAoB,KAAA,EAAuB;AAClE,EAAA,OAAOA,MAAK,IAAA,CAAK,WAAA,CAAY,UAAU,CAAA,EAAG,CAAA,EAAG,KAAK,CAAA,KAAA,CAAO,CAAA;AAC3D;AAEA,SAAS,mBAAmB,UAAA,EAA4B;AACtD,EAAA,OAAOA,KAAAA,CAAK,IAAA,CAAK,UAAA,EAAY,WAAA,EAAa,YAAY,CAAA;AACxD;AAEA,SAAS,kBAAkB,UAAA,EAA4B;AACrD,EAAA,OAAOA,KAAAA,CAAK,IAAA,CAAK,UAAA,EAAY,WAAA,EAAa,WAAW,CAAA;AACvD;AAUA,eAAe,qBAAqB,UAAA,EAAmC;AACrE,EAAA,MAAM,UAAA,GAAa,kBAAkB,UAAU,CAAA;AAC/C,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAME,GAAAA,CAAG,QAAA,CAAS,YAAY,OAAO,CAAA;AACjD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAE5B,IAAA,MAAMA,GAAAA,CAAG,MAAM,WAAA,CAAY,UAAU,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC3D,IAAA,MAAMA,GAAAA,CAAG,SAAA;AAAA,MACP,eAAA,CAAgB,UAAA,EAAY,KAAA,CAAM,KAAK,CAAA;AAAA,MACvC,IAAA,CAAK,SAAA,CAAU,KAAA,EAAO,IAAA,EAAM,CAAC,CAAA;AAAA,MAC7B;AAAA,KACF;AAEA,IAAA,MAAMA,IAAG,SAAA,CAAU,kBAAA,CAAmB,UAAU,CAAA,EAAG,KAAA,CAAM,OAAO,OAAO,CAAA;AAEvE,IAAA,MAAMA,GAAAA,CAAG,GAAG,UAAU,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAiBA,eAAsB,YAAY,UAAA,EAAkD;AAClF,EAAA,MAAM,qBAAqB,UAAU,CAAA;AACrC,EAAA,IAAI;AACF,IAAA,MAAM,KAAA,GAAA,CAAS,MAAMA,GAAAA,CAAG,QAAA,CAAS,mBAAmB,UAAU,CAAA,EAAG,OAAO,CAAA,EAAG,IAAA,EAAK;AAChF,IAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,IAAA,OAAO,MAAM,eAAA,CAAgB,UAAA,EAAY,KAAK,CAAA;AAAA,EAChD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAUA,eAAsB,eAAA,CACpB,YACA,KAAA,EAC8B;AAC9B,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAMA,GAAAA,CAAG,QAAA,CAAS,gBAAgB,UAAA,EAAY,KAAK,GAAG,OAAO,CAAA;AACzE,IAAA,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,EACvB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAYA,eAAsB,aAAa,UAAA,EAA6C;AAC9E,EAAA,MAAM,qBAAqB,UAAU,CAAA;AACrC,EAAA,MAAM,GAAA,GAAM,YAAY,UAAU,CAAA;AAClC,EAAA,IAAI;AACF,IAAA,MAAM,KAAA,GAAQ,MAAMA,GAAAA,CAAG,OAAA,CAAQ,GAAG,CAAA;AAClC,IAAA,MAAM,WAA2B,EAAC;AAClC,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,OAAO,CAAA,EAAG;AAC7B,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,GAAM,MAAMA,GAAAA,CAAG,QAAA,CAASF,MAAK,IAAA,CAAK,GAAA,EAAK,IAAI,CAAA,EAAG,OAAO,CAAA;AAC3D,QAAA,QAAA,CAAS,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,GAAG,CAAiB,CAAA;AAAA,MAC/C,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AACA,IAAA,OAAO,QAAA,CAAS,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,EAAE,SAAA,CAAU,aAAA,CAAc,CAAA,CAAE,SAAS,CAAC,CAAA;AAAA,EACvE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AAWA,eAAsB,WAAA,CACpB,UAAA,EACA,KAAA,EACA,UAAA,GAAa,IAAA,EACE;AACf,EAAA,MAAME,GAAAA,CAAG,MAAM,WAAA,CAAY,UAAU,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC3D,EAAA,MAAMA,GAAAA,CAAG,SAAA;AAAA,IACP,eAAA,CAAgB,UAAA,EAAY,KAAA,CAAM,KAAK,CAAA;AAAA,IACvC,IAAA,CAAK,SAAA,CAAU,KAAA,EAAO,IAAA,EAAM,CAAC,CAAA;AAAA,IAC7B;AAAA,GACF;AACA,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,MAAMA,IAAG,SAAA,CAAU,kBAAA,CAAmB,UAAU,CAAA,EAAG,KAAA,CAAM,OAAO,OAAO,CAAA;AAAA,EACzE;AACF;AAUA,eAAsB,iBAAA,CAAkB,YAAoB,KAAA,EAA8B;AACxF,EAAA,MAAM,MAAA,GAAS,MAAM,eAAA,CAAgB,UAAA,EAAY,KAAK,CAAA;AACtD,EAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,KAAA,CAAM,CAAA,mBAAA,EAAsB,KAAK,CAAA,CAAE,CAAA;AAC1D,EAAA,MAAMA,GAAAA,CAAG,KAAA,CAAMF,KAAAA,CAAK,IAAA,CAAK,UAAA,EAAY,WAAW,CAAA,EAAG,EAAE,SAAA,EAAW,IAAA,EAAM,CAAA;AACtE,EAAA,MAAME,IAAG,SAAA,CAAU,kBAAA,CAAmB,UAAU,CAAA,EAAG,OAAO,OAAO,CAAA;AACnE;AAYA,eAAsB,aAAA,CAAc,YAAoB,KAAA,EAA8B;AACpF,EAAA,IAAI;AACF,IAAA,MAAMA,GAAAA,CAAG,EAAA,CAAG,eAAA,CAAgB,UAAA,EAAY,KAAK,CAAC,CAAA;AAAA,EAChD,CAAA,CAAA,MAAQ;AAAA,EAER;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAA,CAAW,MAAMA,GAAAA,CAAG,QAAA,CAAS,mBAAmB,UAAU,CAAA,EAAG,OAAO,CAAA,EAAG,IAAA,EAAK;AAClF,IAAA,IAAI,YAAY,KAAA,EAAO;AACrB,MAAA,MAAMA,GAAAA,CAAG,EAAA,CAAG,kBAAA,CAAmB,UAAU,CAAC,CAAA;AAAA,IAC5C;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAWA,eAAsB,aAAa,UAAA,EAAmC;AACpE,EAAA,IAAI;AACF,IAAA,MAAMA,GAAAA,CAAG,EAAA,CAAG,kBAAA,CAAmB,UAAU,CAAC,CAAA;AAAA,EAC5C,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAcO,SAAS,WACd,IAAA,EACc;AACd,EAAA,MAAM,GAAA,GAAA,iBAAM,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AACnC,EAAA,OAAO,EAAE,GAAG,IAAA,EAAM,KAAA,EAAO,UAAA,EAAW,EAAG,SAAA,EAAW,GAAA,EAAK,SAAA,EAAW,GAAA,EAAK,MAAA,EAAQ,SAAA,EAAU;AAC3F;AAUO,SAAS,aAAa,KAAA,EAAmC;AAC9D,EAAA,OAAO,EAAE,GAAG,KAAA,EAAO,SAAA,EAAA,qBAAe,IAAA,EAAK,EAAE,aAAY,EAAE;AACzD","file":"chunk-SKXCTV55.js","sourcesContent":["import {\n  type LogStore,\n  OnLogBridgeSink,\n  WsLogSink,\n  createLogStoreFromConfig,\n  getLogStore,\n  registerLogStore,\n  resetLogStore,\n  resolveLogStoreConfig,\n} from \"@skaile/workspaces/core/logging\";\nimport type {\n  LogEntry,\n  LogEntryEvent,\n  LogSink,\n  LogQuery,\n  LogQueryResult,\n} from \"@skaile/workspaces/types\";\n\n/**\n * Pre-init log sink. Active before the LogStore boots — i.e. during the\n * window between process start and `session_init` processing.\n *\n * Writes every entry to `process.stdout` (so early-boot operators / container\n * log shippers still see it). Entries are also captured in a bounded\n * in-memory ring (default cap 200 entries) so that, once the LogStore boots,\n * subscribers can read them via {@link entries} for diagnostic purposes.\n *\n * NOTE: backfilling the buffered entries into the LogStore's SQLite trail is\n * not done in v3.0 because `LogStore.record()` re-stamps id/timestamp/\n * sessionId, which would corrupt the original entries. A follow-up\n * (`AF-PV3 / F-LOG-BACKFILL`) will add a `replay()` API to LogStore so the\n * boot logs land in the persistent trail alongside the live stream.\n *\n * Spec: `_devlog/specs/2026-05-10-deterministic-session-bootstrap.md` §\n * Pre-init logging.\n */\nexport class PreInitRingSink implements LogSink {\n  private readonly ring: LogEntry[] = [];\n  private readonly cap: number;\n\n  constructor(cap = 200) {\n    this.cap = cap;\n  }\n\n  write(entry: LogEntry): void {\n    process.stdout.write(formatForStdout(entry));\n    this.ring.push(entry);\n    if (this.ring.length > this.cap) this.ring.shift();\n  }\n\n  writeBatch(entries: LogEntry[]): void {\n    for (const entry of entries) this.write(entry);\n  }\n\n  /** Optional query (no-op) — satisfies the LogSink contract. */\n  query(_q: LogQuery): LogQueryResult {\n    return { entries: this.ring.slice() };\n  }\n\n  /** Close hook — clears the ring so subsequent writes are dropped. */\n  close(): void {\n    this.ring.length = 0;\n  }\n\n  /** Number of entries currently buffered (capped at {@link cap}). */\n  size(): number {\n    return this.ring.length;\n  }\n\n  /** Snapshot of the currently-buffered entries. Used for diagnostics. */\n  entries(): readonly LogEntry[] {\n    return this.ring.slice();\n  }\n\n  /** Discard all buffered entries. Called by `bootstrapRunnerLogStore`. */\n  clear(): void {\n    this.ring.length = 0;\n  }\n}\n\nfunction formatForStdout(entry: LogEntry): string {\n  const ts = entry.timestamp ?? new Date().toISOString();\n  const where = [entry.source?.kind, entry.source?.subkind, entry.source?.instance]\n    .filter(Boolean)\n    .join(\":\");\n  const dataStr = entry.data ? ` ${JSON.stringify(entry.data)}` : \"\";\n  return `[${ts}] [${entry.level}] [${where}] ${entry.message}${dataStr}\\n`;\n}\n\nlet activePreInitSink: PreInitRingSink | null = null;\n\n/**\n * Install (or return the existing) process-wide pre-init sink. Idempotent\n * so the first import wins; later calls reuse the same ring.\n *\n * Called from the top of every runner entry point (CLI, serve.ts) before\n * any other code emits structured logs.\n */\nexport function installPreInitRingSink(cap = 200): PreInitRingSink {\n  if (activePreInitSink) return activePreInitSink;\n  activePreInitSink = new PreInitRingSink(cap);\n  return activePreInitSink;\n}\n\n/** Currently-installed pre-init sink, or `null` if none has been installed. */\nexport function getPreInitRingSink(): PreInitRingSink | null {\n  return activePreInitSink;\n}\n\n/** Drop the reference to the installed sink. Used in tests + on dispose. */\nexport function clearPreInitRingSink(): void {\n  activePreInitSink = null;\n}\n\n/**\n * Options for {@link bootstrapRunnerLogStore}.\n *\n * @docLink packages/runner/logging#bootstrap-options\n */\nexport interface BootstrapOptions {\n  sessionId: string;\n  projectDir: string;\n  /** `skaile.yaml`'s `logging:` block, if pre-loaded. */\n  yamlBlock?: unknown;\n  /** Back-compat callback — every entry mirrored as a formatted line. */\n  onLog?: (line: string) => void;\n  /**\n   * Transport send callback. When provided, a `WsLogSink` is installed so\n   * every recorded LogEntry flows to the connected client as a `log_entry`\n   * AgentEvent. Drops silently when the transport is disconnected — that\n   * gating happens inside the transport's `send()`.\n   */\n  transportSend?: (event: LogEntryEvent) => void;\n}\n\n/**\n * Result from {@link bootstrapRunnerLogStore}.\n *\n * @docLink packages/runner/logging#bootstrap-result\n */\nexport interface BootstrapResult {\n  store: LogStore;\n  dispose: () => void;\n}\n\nlet currentSessionId: string | null = null;\n\n/**\n * Idempotent bootstrap. If the same sessionId is re-used, returns the existing\n * registered store. If a different sessionId arrives, the previous store is\n * closed and replaced.\n * @docLink packages/runner/logging#bootstrap-runner-log-store\n */\nexport function bootstrapRunnerLogStore(opts: BootstrapOptions): BootstrapResult {\n  const existing = getLogStore();\n  if (existing && currentSessionId === opts.sessionId) {\n    return { store: existing, dispose: () => disposeStore(existing) };\n  }\n\n  const cfg = resolveLogStoreConfig({\n    sessionId: opts.sessionId,\n    workspacePath: opts.projectDir,\n    // The skaile.yaml `logging:` block is loosely typed at the workspace-config\n    // layer; the resolver validates `mode` / `level` strings at runtime.\n    yamlBlock: opts.yamlBlock as Parameters<typeof resolveLogStoreConfig>[0][\"yamlBlock\"],\n  });\n  const store = createLogStoreFromConfig(cfg);\n\n  if (opts.onLog) {\n    store.addSink(new OnLogBridgeSink(opts.onLog));\n  }\n\n  if (opts.transportSend) {\n    store.addSink(new WsLogSink({ send: opts.transportSend }));\n  }\n\n  if (existing) disposeStore(existing);\n  registerLogStore(store);\n  currentSessionId = opts.sessionId;\n\n  // Clear any entries buffered during the pre-init window (between process\n  // start and session_init processing). The entries are still visible on\n  // stdout (the PreInitRingSink wrote them there as they happened);\n  // backfilling them into LogStore.SQLite needs a LogStore.replay()\n  // upgrade tracked under follow-up `AF-PV3 / F-LOG-BACKFILL`.\n  const preInit = getPreInitRingSink();\n  if (preInit) preInit.clear();\n\n  return {\n    store,\n    dispose: () => {\n      disposeStore(store);\n      currentSessionId = null;\n    },\n  };\n}\n\n/**\n * Reset the runner's process-singleton LogStore.\n *\n * @docLink packages/runner/logging#reset-runner-log-store\n */\nexport function resetRunnerLogStore(): void {\n  const s = getLogStore();\n  if (s) disposeStore(s);\n  resetLogStore();\n  currentSessionId = null;\n}\n\nfunction disposeStore(store: LogStore): void {\n  try {\n    store.flush();\n    store.close();\n  } catch {\n    /* swallow */\n  }\n}\n","import { Marked } from \"marked\";\n// @ts-expect-error — no type declarations for marked-terminal\nimport { markedTerminal } from \"marked-terminal\";\n\nconst marked = new Marked(markedTerminal());\n\n/**\n * Accumulates streamed markdown text and renders it to the terminal\n * with ANSI formatting (bold, italic, code blocks, etc.).\n *\n * Strategy: accumulate full text, re-render on each write, output only\n * the newly rendered portion. Completed blocks (separated by double\n * newlines) are \"committed\" so re-rendering only processes the tail.\n * @docLink packages/runner/dev-guide#agent-chat-single-shot\n */\nexport class MarkdownStreamer {\n  private buffer = \"\";\n  private committedSource = \"\";\n  // biome-ignore lint/correctness/noUnusedPrivateClassMembers: write-only accumulator kept for future diff-based rendering\n  private committedRender = \"\";\n  private output: NodeJS.WriteStream;\n\n  constructor(output: NodeJS.WriteStream = process.stdout) {\n    this.output = output;\n  }\n\n  write(chunk: string): void {\n    this.buffer += chunk;\n    this.flush();\n  }\n\n  /** Render any remaining content and reset state. */\n  end(): void {\n    if (this.buffer.length > this.committedSource.length) {\n      const tail = this.buffer.slice(this.committedSource.length);\n      if (tail.trim()) {\n        const rendered = this.render(tail);\n        this.output.write(rendered);\n      }\n    }\n    this.buffer = \"\";\n    this.committedRender = \"\";\n    this.committedSource = \"\";\n  }\n\n  private flush(): void {\n    // Find the last double-newline boundary — everything before it is\n    // structurally complete markdown that won't change with more input.\n    const uncommitted = this.buffer.slice(this.committedSource.length);\n    const boundary = uncommitted.lastIndexOf(\"\\n\\n\");\n    if (boundary === -1) return;\n\n    const complete = uncommitted.slice(0, boundary + 2);\n    const rendered = this.render(complete);\n    this.output.write(rendered);\n\n    this.committedSource += complete;\n    this.committedRender += rendered;\n  }\n\n  private render(src: string): string {\n    try {\n      const result = marked.parse(src);\n      if (typeof result === \"string\") return result;\n      // marked v15 can return a Promise if async extensions are used,\n      // but with marked-terminal it is always synchronous.\n      return String(result);\n    } catch {\n      // Fallback: output raw text if rendering fails\n      return src;\n    }\n  }\n}\n","/**\n * Build a markdown section describing the platform context in which the\n * agent is running. Rendered into the system prompt alongside resource and environment sections.\n */\n\nimport type { AgentContextConfig } from \"@skaile/workspaces/core\";\n\nconst PLATFORM_DESCRIPTIONS: Record<string, string> = {\n  skaile:\n    \"You are an AI assistant operating within the Skaile platform, an enterprise AI workspace. Users interact with you through a chat interface in their browser.\",\n};\n\n/**\n * Build a markdown section describing the platform context in which the\n * agent is running. Rendered into the system prompt alongside resource\n * and environment sections.\n *\n * @param context - Platform context configuration (platform, multi_user, session_model)\n * @returns Markdown section string, or undefined when no context is configured\n * @docLink packages/runner/dev-guide#flow-execution-turn-based-model\n */\nexport function buildContextSection(context: AgentContextConfig | undefined): string | undefined {\n  if (!context) return undefined;\n  const hasAny =\n    context.platform !== undefined ||\n    context.multi_user !== undefined ||\n    context.session_model !== undefined;\n  if (!hasAny) return undefined;\n\n  const lines: string[] = [\"## Platform\", \"\"];\n\n  if (context.platform) {\n    const description = PLATFORM_DESCRIPTIONS[context.platform];\n    if (description) {\n      lines.push(description);\n    } else {\n      lines.push(`You are running inside the ${context.platform} platform.`);\n    }\n    lines.push(\"\");\n  }\n\n  if (context.multi_user === true) {\n    lines.push(\n      \"Multiple users may participate in the same session. Be aware that messages in this conversation may come from different users.\",\n    );\n    lines.push(\"\");\n  } else if (context.multi_user === false) {\n    lines.push(\"This is a single-user session.\");\n    lines.push(\"\");\n  }\n\n  if (context.session_model === \"persistent\") {\n    lines.push(\n      \"Your work persists across interactions. Files you create or modify in the workspace are saved and available in future sessions.\",\n    );\n    lines.push(\"\");\n  } else if (context.session_model === \"ephemeral\") {\n    lines.push(\n      \"This session is ephemeral. Work you do does not persist beyond the current interaction.\",\n    );\n    lines.push(\"\");\n  }\n\n  // Trim trailing empty line\n  while (lines.length > 0 && lines[lines.length - 1] === \"\") lines.pop();\n\n  return lines.join(\"\\n\");\n}\n","/**\n * `defineCapability` — author-friendly factory that builds a {@link DefinedCapability}\n * from a Zod-typed input/output schema.\n *\n * Authors declare a capability with Zod schemas; this factory derives the\n * wire-format `inputSchema` / `outputSchema` (JSON Schema) and packages the\n * handler so it can be invoked uniformly through {@link CapabilityRegistry}.\n *\n * The runtime per-handler logger (`ctx.log`) is wired by the registry at\n * invocation time — handlers MUST NOT construct their own logger; all output\n * goes through `ctx.log` so it lands under the\n * `capability:<origin>:<name>` slice (see protocol-v2 carry-forward L2).\n *\n * @category Capabilities\n * @since 2.0.0\n */\nimport * as z from \"zod\";\nimport type {\n  Capability,\n  CapabilityAudience,\n  CapabilityOrigin,\n  Logger,\n  RenderSpec,\n} from \"@skaile/workspaces/types\";\n\n/**\n * Per-invocation context passed to a capability handler. The registry builds\n * a fresh context for each call and fills in `log` from\n * `createLogger({kind: 'capability', subkind: <origin.kind>, instance: <name>})`.\n *\n * Additional runtime hooks (cancellation signal, store accessors, etc.) can\n * be threaded in by the bridge layer in later phases; the minimum contract is\n * `sessionId` + `log`.\n *\n * @category Capabilities\n * @since 2.0.0\n * @docLink packages/runner/capabilities#handlercontext-log-convention-carry-forward-l2\n */\nexport type HandlerContext = {\n  /** Session this invocation belongs to. */\n  sessionId: string;\n  /**\n   * Per-capability logger pre-configured as\n   * `createLogger({kind: 'capability', subkind: <origin.kind>, instance: <name>})`.\n   * Handlers MUST emit through this logger so invocations land under the\n   * `capability:<origin>:<name>` slice and stay queryable from the debug\n   * panel and `skaile session logs`.\n   */\n  log: Logger;\n};\n\n/**\n * Arguments to {@link defineCapability}. Mirrors the wire-format\n * {@link Capability} fields plus the Zod schemas (input + optional output)\n * and the handler.\n *\n * @category Capabilities\n * @since 2.0.0\n * @docLink packages/runner/capabilities#registry-surface\n */\nexport type DefineCapabilityArgs<\n  T extends z.ZodTypeAny,\n  R extends z.ZodTypeAny | undefined = undefined,\n> = {\n  /** Stable, session-unique name. Convention: `<namespace>.<verb>`. */\n  name: string;\n  /**\n   * Human-readable label for user-facing surfaces (cmdK action palette,\n   * debug panels). Falls back to `name` when omitted.\n   */\n  displayName?: string;\n  /** Human/LLM-readable summary; shown to the LLM at tool registration. */\n  description: string;\n  /** Zod schema validating `args` at invocation time. Converted to JSON Schema. */\n  input: T;\n  /** Optional Zod schema for the return value. Converted to JSON Schema when present. */\n  output?: R;\n  /** Where the handler runs. */\n  side: \"client\" | \"agent\";\n  /** Discriminated tag identifying who registered the capability. */\n  origin: CapabilityOrigin;\n  /** Lifetime: `session` survives the whole session, `turn` is dropped at end-of-turn. */\n  scope?: \"session\" | \"turn\";\n  /** When true, the bridge auto-resolves with `{}` immediately and runs the handler in the background. */\n  fireAndForget?: boolean;\n  /** When true, the platform shows a confirm UI before dispatch. */\n  requiresApproval?: boolean;\n  /** Documentation hint: side-effect, render, or pure query. */\n  kind?: \"effect\" | \"render\" | \"query\";\n  /**\n   * Whether this capability should be exposed in user-facing surfaces\n   * (cmdK / capability menus). Defers to `isUserInvokable` inference rules\n   * when omitted. See `@skaile/workspaces/types#isUserInvokable`.\n   *\n   * @deprecated Set {@link audience} instead. Kept for v2.x compatibility\n   * with skill authors that haven't migrated.\n   */\n  userInvokable?: boolean;\n  /**\n   * Audience scoping for this capability. When omitted, consumers treat\n   * the capability as `['llm', 'user']` (v2.x default). Host RPCs and\n   * `runner.*` capabilities MUST set this to `['runtime']` so they never\n   * reach the LLM tool list or the user-facing command palette.\n   *\n   * @since 3.0.0\n   */\n  audience?: CapabilityAudience[];\n  /** Appended to the system prompt's `<CAPABILITIES>` section. */\n  promptFragment?: string;\n  /**\n   * Per-capability override for the runner's `capability_result` round-trip\n   * timeout. Omit to use `DEFAULT_CAPABILITY_CALL_TIMEOUT_MS` (60s). Set a\n   * larger value for capabilities that block longer than a normal tool call\n   * (e.g. `platform.ask_session`).\n   */\n  callTimeoutMs?: number;\n  /** Render contract for capabilities that produce a UI surface. */\n  render?: RenderSpec;\n  /**\n   * The handler. Receives validated input plus a {@link HandlerContext}.\n   * When `output` is declared, the return type is inferred from the schema;\n   * otherwise the handler may return any value (including `void` for pure\n   * effects).\n   */\n  handler: (\n    args: z.infer<T>,\n    ctx: HandlerContext,\n  ) => Promise<R extends z.ZodTypeAny ? z.infer<R> : unknown>;\n};\n\n/**\n * A registered capability. Carries the wire-format {@link Capability} fields\n * plus the original Zod schemas and the type-erased handler. The registry\n * stores `DefinedCapability`s; serialization to the wire (for replay or\n * remote registration) drops the runtime fields.\n *\n * @category Capabilities\n * @since 2.0.0\n * @docLink packages/runner/capabilities#registry-surface\n */\nexport type DefinedCapability = Capability & {\n  /** Original Zod schema for runtime input validation. Not serialized to the wire. */\n  readonly inputZod: z.ZodTypeAny;\n  /** Original Zod schema for the optional output, if declared. Not serialized. */\n  readonly outputZod?: z.ZodTypeAny;\n  /** Type-erased handler invoked through {@link CapabilityRegistry.invoke}. */\n  handler: (args: unknown, ctx: HandlerContext) => Promise<unknown>;\n};\n\n/**\n * Build a {@link DefinedCapability} from author-friendly Zod-typed args.\n *\n * The resulting `inputSchema` / `outputSchema` on the capability are JSON\n * Schema records (per the wire contract); the original Zod schemas are kept\n * on `inputZod` / `outputZod` for runtime validation in\n * {@link CapabilityRegistry.invoke}.\n *\n * @example\n * ```ts\n * const reactCap = defineCapability({\n *   name: 'platform.react',\n *   description: 'Acknowledge a user message with a Unicode emoji.',\n *   side: 'client',\n *   origin: { kind: 'client' },\n *   fireAndForget: true,\n *   input: z.object({ emoji: z.string(), targetSeq: z.number().optional() }),\n *   handler: async ({ emoji }, ctx) => { ctx.log.info('reacted', { emoji }) },\n * });\n * ```\n *\n * @category Capabilities\n * @since 2.0.0\n * @docLink packages/runner/capabilities#registry-surface\n */\nexport function defineCapability<\n  T extends z.ZodTypeAny,\n  R extends z.ZodTypeAny | undefined = undefined,\n>(args: DefineCapabilityArgs<T, R>): DefinedCapability {\n  const inputSchema = z.toJSONSchema(args.input, {\n    target: \"draft-07\",\n    io: \"input\",\n  }) as Record<string, unknown>;\n  const outputSchema = args.output\n    ? (z.toJSONSchema(args.output, {\n        target: \"draft-07\",\n        io: \"output\",\n      }) as Record<string, unknown>)\n    : undefined;\n\n  return {\n    name: args.name,\n    displayName: args.displayName,\n    description: args.description,\n    inputSchema,\n    outputSchema,\n    side: args.side,\n    origin: args.origin,\n    scope: args.scope,\n    fireAndForget: args.fireAndForget,\n    requiresApproval: args.requiresApproval,\n    kind: args.kind,\n    userInvokable: args.userInvokable,\n    audience: args.audience,\n    promptFragment: args.promptFragment,\n    callTimeoutMs: args.callTimeoutMs,\n    render: args.render,\n    inputZod: args.input,\n    outputZod: args.output,\n    handler: args.handler as (args: unknown, ctx: HandlerContext) => Promise<unknown>,\n  };\n}\n","/**\n * mixin-resolver.ts\n *\n * Resolves agent composition mixin refs (persona, ruleset, knowledge) to text\n * for rendering into the agent definition at install time.\n *\n * Three ref forms:\n *   Local path  — \"./extra-rules.md\" or \"/abs/path/rules.md\"\n *                 Read directly relative to agentDir (or absolute).\n *   Bare name   — \"skaile-base\"\n *                 Resolved from repos as `${defaultKind}:skaile-base`\n *   Qualified   — \"persona:researcher@ext-repo#v2.0\"\n *                 Full AssetRef syntax; repo qualifier searches specific repo only.\n *\n * Knowledge bundles (kind=\"knowledge\") resolve to a directory — all *.md files\n * inside are loaded in priority order (same priority-based loadKnowledge logic used by the asset-manager).\n */\n\nimport fs from \"node:fs/promises\";\nimport { readdirSync } from \"node:fs\";\nimport path from \"node:path\";\nimport type { AgentManifest, CatalogEntry } from \"@skaile/workspaces/core\";\n\n// ── Types ─────────────────────────────────────────────────────────────────────\n\n/**\n * A resolved mixin with its content loaded from disk.\n *\n * @docLink packages/runner/dev-guide#key-conventions\n */\nexport interface ResolvedMixin {\n  /** Text content ready for system prompt injection. */\n  content: string;\n  /** Absolute path to the source file, for debugging. */\n  source: string;\n}\n\n/**\n * Pre-built repo catalog map: repoName → CatalogEntry[].\n * Built by the caller (session-builder) from wsConfig.repositories using\n * ensureRepo() + scanRepo() from @skaile/workspaces/core/repo-manager.\n * Local repos are scanned directly; remote repos use the global cache.\n * @docLink packages/runner/dev-guide#key-conventions\n */\nexport type RepoMap = Record<string, CatalogEntry[]>;\n\n/**\n * Content of an agent mixin, loaded from `CONVENTIONS.md` or `RULES.md`.\n *\n * @docLink packages/runner/dev-guide#key-conventions\n */\nexport interface AgentMixinContent {\n  personas: ResolvedMixin[];\n  rules: ResolvedMixin[];\n  knowledge: ResolvedMixin[];\n}\n\n// ── Public API ────────────────────────────────────────────────────────────────\n\n/**\n * Resolve a single mixin ref to its text content.\n * Returns null if the ref cannot be resolved (missing file or unknown catalog name).\n * Never throws — callers filter nulls.\n * @docLink packages/runner/dev-guide#key-conventions\n */\nexport async function resolveMixin(\n  ref: string,\n  defaultKind: string,\n  agentDir: string,\n  repos: RepoMap,\n): Promise<ResolvedMixin | null> {\n  // ── Local path ────────────────────────────────────────────────────────────\n  if (ref.startsWith(\".\") || ref.startsWith(\"/\")) {\n    const absPath = ref.startsWith(\"/\") ? ref : path.join(agentDir, ref);\n    if (defaultKind === \"knowledge\") {\n      return loadKnowledgeDir(absPath);\n    }\n    const content = await readFileSafe(absPath);\n    if (!content) return null;\n    return { content: stripFrontmatter(content).trim(), source: absPath };\n  }\n\n  // ── Catalog ref ───────────────────────────────────────────────────────────\n  const { kind, name, repoQualifier } = parseRef(ref, defaultKind);\n  const entry = findInRepos(repos, kind, name, repoQualifier);\n  if (!entry) return null;\n\n  if (entry.kind === \"knowledge\") {\n    // knowledge.yaml source — load the sibling directory\n    return loadKnowledgeDir(path.dirname(entry.source));\n  }\n\n  // persona, ruleset, skill, contract — read manifest file, strip frontmatter\n  const raw = await readFileSafe(entry.source);\n  if (!raw) return null;\n  return { content: stripFrontmatter(raw).trim(), source: entry.source };\n}\n\n/**\n * Resolve all mixin arrays from a manifest.\n * All three kinds resolve concurrently. Unresolvable refs are silently skipped.\n * @docLink packages/runner/dev-guide#key-conventions\n */\nexport async function resolveAgentMixins(\n  manifest: Pick<AgentManifest, \"persona\" | \"rules\" | \"knowledge\">,\n  agentDir: string,\n  repos: RepoMap,\n): Promise<AgentMixinContent> {\n  const resolve = (\n    refs: string[] | undefined,\n    kind: \"persona\" | \"ruleset\" | \"knowledge\",\n  ): Promise<(ResolvedMixin | null)[]> =>\n    Promise.all((refs ?? []).map((r) => resolveMixin(r, kind, agentDir, repos)));\n\n  const [personaResults, rulesResults, knowledgeResults] = await Promise.all([\n    resolve(manifest.persona, \"persona\"),\n    resolve(manifest.rules, \"ruleset\"),\n    resolve(manifest.knowledge, \"knowledge\"),\n  ]);\n\n  return {\n    personas: personaResults.filter((r): r is ResolvedMixin => r !== null),\n    rules: rulesResults.filter((r): r is ResolvedMixin => r !== null),\n    knowledge: knowledgeResults.filter((r): r is ResolvedMixin => r !== null),\n  };\n}\n\n// ── Internal helpers ──────────────────────────────────────────────────────────\n\n/** Read a file, return empty string on any error. */\nasync function readFileSafe(filePath: string): Promise<string> {\n  try {\n    return await fs.readFile(filePath, \"utf-8\");\n  } catch {\n    return \"\";\n  }\n}\n\n/** Strip YAML frontmatter (--- delimited) from markdown content. */\nfunction stripFrontmatter(text: string): string {\n  return text.replace(/^---\\s*\\n[\\s\\S]*?\\n---\\s*\\n?/, \"\");\n}\n\n/**\n * Parse a mixin ref string into kind, name, and optional repo qualifier.\n * Handles: \"skaile-base\", \"persona:skaile-base\", \"ruleset:safety@skaile-ai#v2\"\n */\nfunction parseRef(\n  ref: string,\n  defaultKind: string,\n): { kind: string; name: string; repoQualifier: string | undefined } {\n  let rest = ref.trim();\n  let kind = defaultKind;\n\n  // Extract kind: prefix\n  const colonIdx = rest.indexOf(\":\");\n  if (colonIdx !== -1) {\n    kind = rest.slice(0, colonIdx).trim();\n    rest = rest.slice(colonIdx + 1).trim();\n  }\n\n  // Extract #pin suffix (drop it — we use whatever's installed)\n  const hashIdx = rest.indexOf(\"#\");\n  if (hashIdx !== -1) rest = rest.slice(0, hashIdx).trim();\n\n  // Extract @repo qualifier\n  let repoQualifier: string | undefined;\n  const atIdx = rest.indexOf(\"@\");\n  if (atIdx !== -1) {\n    repoQualifier = rest.slice(atIdx + 1).trim() || undefined;\n    rest = rest.slice(0, atIdx).trim();\n  }\n\n  return { kind, name: rest, repoQualifier };\n}\n\n/** Find a CatalogEntry by kind + name across all repos (or a specific repo). */\nfunction findInRepos(\n  repos: RepoMap,\n  kind: string,\n  name: string,\n  repoQualifier: string | undefined,\n): CatalogEntry | undefined {\n  const searchRepos = repoQualifier\n    ? repos[repoQualifier]\n      ? [repos[repoQualifier]]\n      : []\n    : Object.values(repos);\n\n  for (const entries of searchRepos) {\n    const found = entries.find((e) => e.kind === kind && e.name === name);\n    if (found) return found;\n  }\n  return undefined;\n}\n\n/**\n * Load all *.md files from a knowledge directory, in priority order.\n * Reads index.yaml (same priority-based loadKnowledge format used by the asset-manager) when present.\n * Returns combined content joined with \\n\\n---\\n\\n.\n */\nasync function loadKnowledgeDir(dir: string): Promise<ResolvedMixin | null> {\n  let entries: string[];\n  try {\n    entries = readdirSync(dir).filter((e) => e.endsWith(\".md\"));\n  } catch {\n    return null;\n  }\n\n  // Parse index.yaml for priority ordering\n  const priorityMap: Record<string, number> = {};\n  const indexContent = await readFileSafe(path.join(dir, \"index.yaml\"));\n  if (indexContent) {\n    const pathMatches = [...indexContent.matchAll(/path:\\s*(\\S+)/g)];\n    const priorityMatches = [...indexContent.matchAll(/priority:\\s*(\\d+)/g)];\n    pathMatches.forEach((m, i) => {\n      const filename = m[1];\n      if (!filename) return;\n      const priority = priorityMatches[i] ? parseInt(priorityMatches[i][1] ?? \"99\", 10) : 99;\n      priorityMap[filename] = priority;\n    });\n  }\n\n  const docs = await Promise.all(\n    entries.map(async (filename) => ({\n      filename,\n      priority: priorityMap[filename] ?? 99,\n      content: (await readFileSafe(path.join(dir, filename))).trim(),\n    })),\n  );\n\n  const sorted = docs\n    .filter((d) => d.content)\n    .sort((a, b) => a.priority - b.priority || a.filename.localeCompare(b.filename));\n\n  if (sorted.length === 0) return null;\n\n  return {\n    content: sorted.map((d) => d.content).join(\"\\n\\n---\\n\\n\"),\n    source: dir,\n  };\n}\n","/**\n * composition/types.ts\n *\n * Shared types for the agent composition module (Task 1.7).\n *\n * Defines the binding system, compile manifest schema, and the\n * resolved composition result that the runner consumes at session start.\n */\n\nimport type { Binding, AgentComposeItem } from \"@skaile/workspaces/types/manifests\";\n\n// ---------------------------------------------------------------------------\n// Re-export from types\n// ---------------------------------------------------------------------------\n\nexport type { Binding, AgentComposeItem };\n\n// ---------------------------------------------------------------------------\n// Kind-to-binding defaults\n// ---------------------------------------------------------------------------\n\n/**\n * Default binding by asset kind.\n *\n * Per the spec: soul -> inline-snapshot, ruleset -> inline-live,\n * everything else (skill, knowledge, connector, mount, etc.) -> discoverable.\n */\nconst KIND_BINDING_DEFAULTS: Record<string, Binding> = {\n  soul: \"inline-snapshot\",\n  persona: \"inline-snapshot\",\n  ruleset: \"inline-live\",\n  skill: \"discoverable\",\n  knowledge: \"discoverable\",\n  connector: \"discoverable\",\n  mount: \"discoverable\",\n  prompt: \"inline-live\",\n  flow: \"discoverable\",\n  \"mcp-server\": \"discoverable\",\n  contract: \"inline-live\",\n};\n\n/**\n * Resolve the effective binding for a composition item.\n * Uses explicit `binding` if set, otherwise falls back to kind default.\n *\n * @param item - A single entry from an agent manifest's `composes:` list.\n * @returns The effective {@link Binding} — explicit value when set, otherwise\n *   the kind-specific default (e.g. `soul` → `inline-snapshot`, `skill` → `discoverable`).\n * @docLink packages/runner/capabilities#resolve-binding\n */\nexport function resolveBinding(item: AgentComposeItem): Binding {\n  if (item.binding) return item.binding;\n  return KIND_BINDING_DEFAULTS[item.kind] ?? \"discoverable\";\n}\n\n// ---------------------------------------------------------------------------\n// Compile manifest (written to <agent>/compile_manifest.json)\n// ---------------------------------------------------------------------------\n\n/**\n * Single entry in the agent's `compile_manifest.json`. Records the resolved\n * version, content hash, and effective binding for one composition item at\n * the time of the last `skaile rebuild` run.\n *\n * @docLink packages/runner/capabilities#compile-manifest-entry\n */\nexport interface CompileManifestEntry {\n  /** Asset ref (e.g. '@skaile/sales-soul@1.2') */\n  asset_ref: string;\n  /** Resolved version (e.g. '1.2.3') */\n  version: string | null;\n  /** SHA256 of the resolved content */\n  hash: string;\n  /** Effective binding */\n  binding: Binding;\n  /** ISO timestamp when this entry was resolved */\n  resolved_at: string;\n}\n\n/**\n * Root structure of `compile_manifest.json` written by `skaile rebuild`.\n * Tracks the prompt version counter and all resolved composition entries.\n * The runner reads this at session start to verify inline-snapshot content\n * against its stored hash.\n *\n * @docLink packages/runner/capabilities#compile-manifest\n */\nexport interface CompileManifest {\n  /** Compile manifest schema version */\n  schema_version: 1;\n  /** Prompt version — bumped on every rebuild */\n  prompt_version: number;\n  /** Entries for each composition item */\n  entries: CompileManifestEntry[];\n  /** ISO timestamp of the last rebuild */\n  compiled_at: string;\n}\n\n// ---------------------------------------------------------------------------\n// Resolved composition result (consumed by runner at session start)\n// ---------------------------------------------------------------------------\n\n/**\n * A resolved inline content block for system prompt injection.\n *\n * @docLink packages/runner/capabilities#inline-block\n */\nexport interface InlineBlock {\n  /** Source ref for debugging */\n  ref: string;\n  /** Asset kind */\n  kind: string;\n  /** The text content to inject */\n  content: string;\n  /** Binding mode that produced this block */\n  binding: \"inline-live\" | \"inline-snapshot\";\n}\n\n/**\n * A resolved discoverable item (becomes a tool-list entry).\n *\n * @docLink packages/runner/capabilities#discoverable-entry\n */\nexport interface DiscoverableEntry {\n  /** Source ref */\n  ref: string;\n  /** Asset kind */\n  kind: string;\n  /** Tool name for capability registry */\n  name: string;\n  /** One-line description */\n  description: string;\n  /** Full content (loaded on demand when the tool is invoked) */\n  content: string;\n}\n\n/**\n * The full result of resolving an agent's composes: field.\n *\n * @docLink packages/runner/capabilities#resolved-composition\n */\nexport interface ResolvedComposition {\n  /** Blocks to inline into the system prompt (inline-live + inline-snapshot) */\n  inlineBlocks: InlineBlock[];\n  /** Items to register as discoverable capabilities */\n  discoverableEntries: DiscoverableEntry[];\n  /** Warnings (non-fatal — e.g. missing assets) */\n  warnings: string[];\n}\n","/**\n * composition/compile.ts\n *\n * Implements `skaile rebuild <agent>` — re-snapshots all inline-snapshot items,\n * bumps the prompt version, and writes `<agent>/compile_manifest.json`.\n *\n * The compile manifest records what was resolved and when, so the runner can\n * verify content hasn't drifted without a rebuild.\n */\n\nimport { createHash } from \"node:crypto\";\nimport fs from \"node:fs/promises\";\nimport path from \"node:path\";\nimport type { AgentComposeItem } from \"@skaile/workspaces/types/manifests\";\nimport { resolveBinding, type CompileManifest, type CompileManifestEntry } from \"./types.js\";\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\n/**\n * Filename for the agent compile manifest written by `skaile rebuild`.\n *\n * @docLink packages/runner/capabilities#compile-composition\n */\nexport const COMPILE_MANIFEST_FILENAME = \"compile_manifest.json\";\n\n// ---------------------------------------------------------------------------\n// Options\n// ---------------------------------------------------------------------------\n\n/**\n * Options for {@link compileComposition}.\n *\n * @docLink packages/runner/capabilities#compile-composition\n */\nexport interface CompileOpts {\n  /** Path to the agent directory (where agent.yaml and compile_manifest.json live) */\n  agentDir: string;\n  /** The agent's composes: items */\n  items: AgentComposeItem[];\n  /**\n   * Content loader — given an asset ref + kind, returns the content text.\n   * Returns null if the content cannot be loaded.\n   */\n  loadContent: (ref: string, kind: string) => Promise<string | null>;\n  /**\n   * Version extractor — given an asset ref, returns the resolved version string.\n   * Returns null if unknown.\n   */\n  resolveVersion?: (ref: string) => Promise<string | null>;\n}\n\n/**\n * Result returned by {@link compileComposition}.\n *\n * @docLink packages/runner/capabilities#compile-composition\n */\nexport interface CompileResult {\n  /** The written compile manifest */\n  manifest: CompileManifest;\n  /** Path to the written file */\n  manifestPath: string;\n  /** Number of entries that were successfully resolved */\n  resolvedCount: number;\n  /** Warnings for unresolvable items */\n  warnings: string[];\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Compile (rebuild) the agent's composition.\n *\n * 1. Reads existing compile_manifest.json (if present) for version continuity\n * 2. Re-resolves ALL items (both snapshot and non-snapshot get recorded)\n * 3. Bumps prompt_version\n * 4. Writes compile_manifest.json\n *\n * @param opts - Compile options including agentDir, items, and content loader.\n * @returns A {@link CompileResult} with the written manifest and any warnings.\n * @docLink packages/runner/capabilities#compile-composition\n */\nexport async function compileComposition(opts: CompileOpts): Promise<CompileResult> {\n  const { agentDir, items, loadContent, resolveVersion } = opts;\n  const manifestPath = path.join(agentDir, COMPILE_MANIFEST_FILENAME);\n  const warnings: string[] = [];\n\n  // Read existing manifest for version continuity\n  const existing = await loadCompileManifest(manifestPath);\n  const nextVersion = (existing?.prompt_version ?? 0) + 1;\n\n  // Resolve all items\n  const entries: CompileManifestEntry[] = [];\n  for (const item of items) {\n    const binding = resolveBinding(item);\n    const content = await loadContent(item.ref, item.kind);\n\n    if (!content) {\n      warnings.push(`\"${item.ref}\" (${item.kind}): content not found — skipped`);\n      continue;\n    }\n\n    const hash = createHash(\"sha256\").update(content).digest(\"hex\");\n    const version = resolveVersion ? await resolveVersion(item.ref) : null;\n\n    entries.push({\n      asset_ref: item.ref,\n      version,\n      hash,\n      binding,\n      resolved_at: new Date().toISOString(),\n    });\n  }\n\n  const manifest: CompileManifest = {\n    schema_version: 1,\n    prompt_version: nextVersion,\n    entries,\n    compiled_at: new Date().toISOString(),\n  };\n\n  // Write atomically: temp file + rename to avoid corruption on interrupt\n  const tmpPath = `${manifestPath}.tmp`;\n  await fs.writeFile(tmpPath, `${JSON.stringify(manifest, null, 2)}\\n`, \"utf-8\");\n  await fs.rename(tmpPath, manifestPath);\n\n  return {\n    manifest,\n    manifestPath,\n    resolvedCount: entries.length,\n    warnings,\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Load an existing compile_manifest.json, or return undefined if not found.\n *\n * @param manifestPath - Absolute path to the manifest file.\n * @returns The parsed {@link CompileManifest} or `undefined` when missing or malformed.\n * @docLink packages/runner/capabilities#load-compile-manifest\n */\nexport async function loadCompileManifest(\n  manifestPath: string,\n): Promise<CompileManifest | undefined> {\n  try {\n    const raw = await fs.readFile(manifestPath, \"utf-8\");\n    const parsed = JSON.parse(raw);\n    if (parsed?.schema_version === 1 && typeof parsed.prompt_version === \"number\") {\n      return parsed as CompileManifest;\n    }\n    return undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Load compile manifest from an agent directory, reading the file from\n * `<agentDir>/compile_manifest.json`.\n *\n * @param agentDir - Absolute path to the agent definition directory.\n * @returns The parsed {@link CompileManifest} or `undefined` when missing or malformed.\n * @docLink packages/runner/capabilities#load-compile-manifest-from-dir\n */\nexport async function loadCompileManifestFromDir(\n  agentDir: string,\n): Promise<CompileManifest | undefined> {\n  return loadCompileManifest(path.join(agentDir, COMPILE_MANIFEST_FILENAME));\n}\n","/**\n * composition/resolve.ts\n *\n * Resolves an agent's `composes:` items against the Library into a\n * ResolvedComposition — prompt blocks for inline items and discoverable\n * entries for tool-list items.\n *\n * Three resolution paths per binding:\n *   - `inline-snapshot`: reads frozen content from compile_manifest.json\n *   - `inline-live`: reads current content from Library (per invocation)\n *   - `discoverable`: registers as a capability (name + description + content)\n *\n * This module is pure logic — no IO beyond the IAssetIndex calls.\n */\n\nimport { createHash } from \"node:crypto\";\nimport type { IAssetIndex } from \"@skaile/workspaces/library\";\nimport type { AgentComposeItem } from \"@skaile/workspaces/types/manifests\";\nimport { resolveBinding, type CompileManifest, type ResolvedComposition } from \"./types.js\";\n\n// ---------------------------------------------------------------------------\n// Options\n// ---------------------------------------------------------------------------\n\n/**\n * Options for {@link resolveComposition}.\n *\n * @docLink packages/runner/capabilities#resolve-composition\n */\nexport interface ResolveCompositionOpts {\n  /** The agent's composes: items */\n  items: AgentComposeItem[];\n  /** Library for asset resolution */\n  library: IAssetIndex;\n  /**\n   * Pre-loaded compile manifest for inline-snapshot items.\n   * If absent, inline-snapshot items fall back to live resolution with a warning.\n   */\n  compileManifest?: CompileManifest;\n  /**\n   * Content loader — given an asset ref, returns the asset's prompt-injectable content.\n   * For skill: the SKILL.md body. For persona/ruleset: the manifest body text.\n   * Returns null if the content cannot be loaded.\n   */\n  loadContent: (ref: string, kind: string) => Promise<string | null>;\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Resolve all composition items for an agent.\n *\n * Returns:\n *   - inlineBlocks: content to inject into the system prompt\n *   - discoverableEntries: items to register as LLM-visible capabilities\n *   - warnings: non-fatal issues encountered during resolution\n *\n * @param opts - Resolution options with items, library, optional compile manifest and content loader.\n * @returns A {@link ResolvedComposition} with inline blocks, discoverable entries, and warnings.\n * @docLink packages/runner/capabilities#resolve-composition\n */\nexport async function resolveComposition(\n  opts: ResolveCompositionOpts,\n): Promise<ResolvedComposition> {\n  const { items, library, compileManifest, loadContent } = opts;\n  const result: ResolvedComposition = {\n    inlineBlocks: [],\n    discoverableEntries: [],\n    warnings: [],\n  };\n\n  for (const item of items) {\n    const binding = resolveBinding(item);\n\n    try {\n      switch (binding) {\n        case \"inline-snapshot\":\n          await resolveInlineSnapshot(item, binding, compileManifest, loadContent, result);\n          break;\n        case \"inline-live\":\n          await resolveInlineLive(item, binding, loadContent, result);\n          break;\n        case \"discoverable\":\n          await resolveDiscoverable(item, library, loadContent, result);\n          break;\n      }\n    } catch (err) {\n      result.warnings.push(\n        `Failed to resolve \"${item.ref}\" (${item.kind}): ${err instanceof Error ? err.message : String(err)}`,\n      );\n    }\n  }\n\n  return result;\n}\n\n// ---------------------------------------------------------------------------\n// Internal: per-binding resolution\n// ---------------------------------------------------------------------------\n\nasync function resolveInlineSnapshot(\n  item: AgentComposeItem,\n  binding: \"inline-snapshot\",\n  compileManifest: CompileManifest | undefined,\n  loadContent: (ref: string, kind: string) => Promise<string | null>,\n  result: ResolvedComposition,\n): Promise<void> {\n  // Try to find frozen content in the compile manifest\n  if (compileManifest) {\n    const entry = compileManifest.entries.find(\n      (e) => e.asset_ref === item.ref && e.binding === \"inline-snapshot\",\n    );\n    if (entry) {\n      const content = await loadContent(item.ref, item.kind);\n      if (content) {\n        // Verify content hasn't drifted since last rebuild\n        const hash = createHash(\"sha256\").update(content).digest(\"hex\");\n        if (hash !== entry.hash) {\n          result.warnings.push(\n            `\"${item.ref}\" (${item.kind}) content has changed since last rebuild (expected ${entry.hash.slice(0, 8)}…, got ${hash.slice(0, 8)}…). Run \"skaile rebuild\" to update the snapshot.`,\n          );\n        }\n        result.inlineBlocks.push({ ref: item.ref, kind: item.kind, content, binding });\n        return;\n      }\n    }\n  }\n\n  // Fallback: resolve live (with warning that rebuild is recommended)\n  const content = await loadContent(item.ref, item.kind);\n  if (content) {\n    result.warnings.push(\n      `\"${item.ref}\" (${item.kind}) is binding=inline-snapshot but no compile_manifest.json found — using live content. Run \"skaile rebuild\" to freeze.`,\n    );\n    result.inlineBlocks.push({ ref: item.ref, kind: item.kind, content, binding });\n  } else {\n    result.warnings.push(`\"${item.ref}\" (${item.kind}): content not found`);\n  }\n}\n\nasync function resolveInlineLive(\n  item: AgentComposeItem,\n  binding: \"inline-live\",\n  loadContent: (ref: string, kind: string) => Promise<string | null>,\n  result: ResolvedComposition,\n): Promise<void> {\n  const content = await loadContent(item.ref, item.kind);\n  if (content) {\n    result.inlineBlocks.push({ ref: item.ref, kind: item.kind, content, binding });\n  } else {\n    result.warnings.push(`\"${item.ref}\" (${item.kind}): content not found`);\n  }\n}\n\nasync function resolveDiscoverable(\n  item: AgentComposeItem,\n  library: IAssetIndex,\n  loadContent: (ref: string, kind: string) => Promise<string | null>,\n  result: ResolvedComposition,\n): Promise<void> {\n  // Look up the asset definition for metadata\n  const assetDef = await library.getAssetDef(item.ref);\n\n  // Build the tool name from the ref\n  const name = buildToolName(item);\n  const description = assetDef?.description ?? `${item.kind}: ${item.ref}`;\n\n  // Load full content for on-demand usage\n  const content = await loadContent(item.ref, item.kind);\n  if (content) {\n    result.discoverableEntries.push({\n      ref: item.ref,\n      kind: item.kind,\n      name,\n      description,\n      content,\n    });\n  } else {\n    result.warnings.push(`\"${item.ref}\" (${item.kind}): content not found for discoverable entry`);\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Build a capability tool name from a compose item ref.\n * e.g. '@skaile/gmail@^1' -> 'skaile__gmail'\n * e.g. '@acme/sales-research@^3' -> 'acme__sales-research'\n * e.g. '@skaile/gmail' (no version) -> 'skaile__gmail'\n */\nfunction buildToolName(item: AgentComposeItem): string {\n  // Strip version pin: only strip @<version> if it appears after the name\n  // (i.e. after the last /). Scoped refs like @skaile/gmail have the @\n  // as the publisher prefix — we must not strip that.\n  const lastSlash = item.ref.lastIndexOf(\"/\");\n  let refNoVersion: string;\n  if (lastSlash !== -1) {\n    const afterSlash = item.ref.slice(lastSlash + 1);\n    const versionAt = afterSlash.indexOf(\"@\");\n    refNoVersion = versionAt !== -1 ? item.ref.slice(0, lastSlash + 1 + versionAt) : item.ref;\n  } else {\n    // No slash — bare ref like 'gmail@^1'\n    const versionAt = item.ref.indexOf(\"@\");\n    refNoVersion = versionAt !== -1 ? item.ref.slice(0, versionAt) : item.ref;\n  }\n  // Strip leading @\n  const cleaned = refNoVersion.replace(/^@/, \"\");\n  // Replace / with __ for flat tool namespace\n  return cleaned.replace(/\\//g, \"__\");\n}\n","/**\n * composition/bootstrap.ts\n *\n * Wires the composition resolver into the agent session lifecycle.\n *\n * This module provides:\n *   - `resolveAgentComposition()` — called by session-builder.ts to produce\n *     inline blocks (→ system prompt) and discoverable entries (→ capability\n *     registry)\n *   - `registerCompositionCapabilities()` — called by serve.ts to register\n *     discoverable entries as Protocol v2 capabilities\n *\n * Phase 1 limitation: the content loader uses `resolveMixin()` which only\n * resolves local-path refs (./file.md, /abs/path). Scoped catalog refs\n * (@publisher/name) require a populated RepoMap from workspace config, which\n * Phase 2 / Library integration will provide. Unresolvable refs produce\n * warnings but do not block session start.\n */\n\nimport { existsSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type { AgentManifest } from \"@skaile/workspaces/core\";\nimport type { IAssetIndex } from \"@skaile/workspaces/library\";\nimport type { Logger } from \"@skaile/workspaces/types\";\nimport * as z from \"zod\";\nimport type { CapabilityRegistry } from \"../capability-registry.js\";\nimport { defineCapability } from \"../define-capability.js\";\nimport { type RepoMap, resolveMixin } from \"../mixin-resolver.js\";\nimport { loadCompileManifestFromDir } from \"./compile.js\";\nimport { resolveComposition } from \"./resolve.js\";\nimport type { DiscoverableEntry, ResolvedComposition } from \"./types.js\";\n\n// Re-export for downstream convenience\nexport type { ResolvedComposition };\n\n// ---------------------------------------------------------------------------\n// Options\n// ---------------------------------------------------------------------------\n\n/**\n * Options for {@link resolveAgentComposition}.\n *\n * @docLink packages/runner/capabilities#resolve-agent-composition\n */\nexport interface ResolveAgentCompositionOpts {\n  /** Path to the agent definition directory (where agent.yaml lives) */\n  agentDir: string;\n  /** Parsed agent manifest (must have `composes` field) */\n  manifest: AgentManifest;\n  /**\n   * Project root — reserved for Phase 2 workspace config resolution.\n   * In Phase 1 this is unused but accepted so the call site doesn't\n   * need updating when Library integration lands.\n   */\n  projectDir: string;\n  /** Pre-built repo map for catalog resolution. Empty in Phase 1. */\n  repos?: RepoMap;\n  /** Logger for composition resolution warnings */\n  log?: Logger;\n}\n\n// ---------------------------------------------------------------------------\n// Public API: Resolve\n// ---------------------------------------------------------------------------\n\n/**\n * Resolve an agent's `composes:` items into inline blocks and discoverable\n * entries. Called by session-builder.ts during the session creation pipeline.\n *\n * Returns null when the manifest has no `composes:` items.\n *\n * @param opts - Resolution options including agentDir, manifest, and optional repos/log.\n * @returns A {@link ResolvedComposition} or `null` when there are no composition items.\n * @docLink packages/runner/capabilities#resolve-agent-composition\n */\nexport async function resolveAgentComposition(\n  opts: ResolveAgentCompositionOpts,\n): Promise<ResolvedComposition | null> {\n  const { agentDir, manifest, repos = {}, log } = opts;\n\n  const items = manifest.composes;\n  if (!items || items.length === 0) return null;\n\n  // Load compile manifest for inline-snapshot verification\n  const compileManifest = await loadCompileManifestFromDir(agentDir);\n\n  // Build a content loader using the existing mixin resolver.\n  // Phase 1: only local-path refs resolve successfully. Scoped catalog refs\n  // (@publisher/name) require a populated RepoMap which Phase 2 provides.\n  // Non-matching kinds simply return null (surfaces as a compose warning).\n  const loadContent = async (ref: string, kind: string): Promise<string | null> => {\n    try {\n      const resolved = await resolveMixin(ref, kind, agentDir, repos);\n      return resolved?.content ?? null;\n    } catch {\n      return null;\n    }\n  };\n\n  // Try to open the real LocalIndex for asset description enrichment.\n  // Falls back to a null-returning stub when the library DB doesn't exist\n  // (user hasn't run `skaile source add` + `skaile source sync` yet).\n  const library = await openLocalIndexIfAvailable(log);\n\n  const result = await resolveComposition({\n    items,\n    library,\n    compileManifest,\n    loadContent,\n  });\n\n  // Log warnings so they surface in session debug logs\n  if (log && result.warnings.length > 0) {\n    for (const warning of result.warnings) {\n      log.warn(warning);\n    }\n  }\n\n  return result;\n}\n\n// ---------------------------------------------------------------------------\n// Public API: Register Capabilities\n// ---------------------------------------------------------------------------\n\n/**\n * Register discoverable composition entries as Protocol v2 capabilities.\n *\n * Each discoverable entry becomes a tool the LLM can invoke to \"activate\"\n * that asset. When invoked, the handler returns the asset's full content\n * (e.g. a SKILL.md body for skills, connection instructions for connectors).\n *\n * The LLM sees a lean tool list (name + description only) and loads full\n * content on demand — this keeps the context window efficient for agents\n * that compose many assets.\n *\n * @param registry - The session capability registry to register capabilities onto.\n * @param entries - Discoverable entries from a prior {@link resolveAgentComposition} call.\n * @docLink packages/runner/capabilities#register-composition-capabilities\n */\nexport function registerCompositionCapabilities(\n  registry: CapabilityRegistry,\n  entries: DiscoverableEntry[],\n): void {\n  for (const entry of entries) {\n    const cap = defineCapability({\n      name: entry.name,\n      displayName: `${entry.kind}: ${entry.ref}`,\n      description: entry.description,\n      side: \"agent\",\n      origin: { kind: \"skill\", skillId: entry.ref },\n      scope: \"session\",\n      kind: \"query\",\n      userInvokable: false,\n      input: z.strictObject({}),\n      handler: async (_args, ctx) => {\n        ctx.log.info(\"loading composed asset content\", {\n          ref: entry.ref,\n          kind: entry.kind,\n        });\n        return { content: entry.content, ref: entry.ref, kind: entry.kind };\n      },\n    });\n    registry.register(cap, \"agent\");\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Internal: Library resolution\n// ---------------------------------------------------------------------------\n\n/**\n * Null-returning IAssetIndex stub used when no real Library is available.\n * All query methods return empty; write methods are no-ops.\n */\nconst STUB_LIBRARY: IAssetIndex = {\n  getAssetDef: async () => null,\n  listAssetDefs: async () => [],\n  createInstance: async () => ({}) as any,\n  getInstance: async () => null,\n  listInstances: async () => [],\n  updateInstance: async () => ({}) as any,\n  deleteInstance: async () => {},\n  subscribe: async () => ({}) as any,\n  unsubscribe: async () => {},\n  listSubscriptions: async () => [],\n  getConsumptionGraph: async () => [],\n};\n\n/**\n * Try to open the LocalIndex SQLite store if it exists.\n * Returns a stub when the library DB is missing (user hasn't synced yet)\n * or when opening fails (e.g. corrupt DB).\n */\nasync function openLocalIndexIfAvailable(log?: Logger): Promise<IAssetIndex> {\n  // Probe for the index file at the canonical 2026-05-27 location plus the\n  // two legacy ones (lib.db inside libraries/ or library/). Migration to the\n  // canonical path is handled by `createLibraryDb`; here we only need to know\n  // whether *some* index file is present before constructing LocalIndex.\n  const indexPath = process.env.SKAILE_INDEX_PATH ?? join(homedir(), \".skaile\", \"index.db\");\n  const librariesDir = process.env.SKAILE_LIBRARIES_DIR ?? join(homedir(), \".skaile\", \"libraries\");\n  const legacyHome = join(homedir(), \".skaile\", \"library\");\n  const probes = [\n    indexPath,\n    join(librariesDir, \"index.db\"),\n    join(librariesDir, \"lib.db\"),\n    join(legacyHome, \"lib.db\"),\n  ];\n\n  if (!probes.some((p) => existsSync(p))) {\n    return STUB_LIBRARY;\n  }\n\n  try {\n    // Deferred import so the runner does not eagerly pull in the library\n    // subpath when no local library DB exists.\n    const { LocalIndex } = await import(\"@skaile/workspaces/library\");\n    return new LocalIndex() as IAssetIndex;\n  } catch (err) {\n    log?.debug(`Could not open LocalIndex at ${indexPath}: ${(err as Error).message}`);\n    return STUB_LIBRARY;\n  }\n}\n","/**\n * Probe the runtime environment for available tools and runtimes, and build\n * a markdown section describing them for the system prompt.\n *\n * Runs once at session start. All probes execute in parallel with a per-probe\n * timeout so the total wall time is bounded by the slowest single probe.\n */\n\nimport { execFile } from \"node:child_process\";\nimport { promisify } from \"node:util\";\n\nconst execFileAsync = promisify(execFile);\n\nconst PROBE_TIMEOUT_MS = 1500;\n\ninterface VersionProbe {\n  label: string;\n  bin: string;\n  args: string[];\n  /** Extract version from stdout (first line by default). */\n  extract?: (output: string) => string;\n}\n\nconst VERSION_PROBES: VersionProbe[] = [\n  { label: \"Python\", bin: \"python3\", args: [\"--version\"] },\n  { label: \"Node.js\", bin: \"node\", args: [\"--version\"] },\n  { label: \"Bun\", bin: \"bun\", args: [\"--version\"] },\n  { label: \"Git\", bin: \"git\", args: [\"--version\"] },\n  { label: \"npm\", bin: \"npm\", args: [\"--version\"] },\n  {\n    label: \"pip\",\n    bin: \"pip\",\n    args: [\"--version\"],\n    extract: (out) => out.split(\" \").slice(0, 2).join(\" \"),\n  },\n];\n\nconst PRESENCE_PROBES = [\"curl\", \"jq\", \"ssh\", \"wget\", \"rg\"];\n\nasync function runProbe(bin: string, args: string[]): Promise<string | null> {\n  try {\n    const { stdout } = await execFileAsync(bin, args, { timeout: PROBE_TIMEOUT_MS });\n    return stdout.trim().split(\"\\n\")[0] ?? null;\n  } catch {\n    return null;\n  }\n}\n\nasync function checkPresence(bin: string): Promise<boolean> {\n  try {\n    await execFileAsync(\"which\", [bin], { timeout: PROBE_TIMEOUT_MS });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Probe the runtime environment for available tools and runtimes at\n * session start, and build a markdown section describing them for the\n * system prompt.\n *\n * All probes execute in parallel with a per-probe timeout so total wall\n * time is bounded by the slowest single probe.\n *\n * @param projectDir - The project working directory\n * @returns Markdown section string, or undefined when no tools are found\n * @docLink packages/runner/dev-guide#environment-variables\n */\nexport async function buildEnvironmentSection(projectDir: string): Promise<string | undefined> {\n  const versionResults = await Promise.allSettled(\n    VERSION_PROBES.map(async (probe) => {\n      const raw = await runProbe(probe.bin, probe.args);\n      if (!raw) return null;\n      const version = probe.extract ? probe.extract(raw) : raw;\n      return { label: probe.label, version };\n    }),\n  );\n\n  const presenceResults = await Promise.allSettled(PRESENCE_PROBES.map(checkPresence));\n\n  const runtimes: string[] = [];\n  for (const result of versionResults) {\n    if (result.status === \"fulfilled\" && result.value) {\n      runtimes.push(`${result.value.label} (${result.value.version})`);\n    }\n  }\n\n  const tools: string[] = [];\n  for (let i = 0; i < PRESENCE_PROBES.length; i++) {\n    const result = presenceResults[i];\n    if (result?.status === \"fulfilled\" && result.value) {\n      tools.push(PRESENCE_PROBES[i]!);\n    }\n  }\n\n  if (runtimes.length === 0 && tools.length === 0) return undefined;\n\n  const lines: string[] = [\n    \"## Environment\",\n    \"\",\n    \"You are running inside an isolated container with the following tools available:\",\n    \"\",\n  ];\n\n  if (runtimes.length > 0) {\n    lines.push(\"**Runtimes:**\");\n    for (const r of runtimes) lines.push(`- ${r}`);\n    lines.push(\"\");\n  }\n\n  if (tools.length > 0) {\n    lines.push(`**Tools:** ${tools.join(\", \")}`);\n    lines.push(\"\");\n  }\n\n  const shell = process.env.SHELL ?? \"sh\";\n  lines.push(`**Shell:** ${shell}`);\n  lines.push(`**Working directory:** ${projectDir}`);\n\n  return lines.join(\"\\n\");\n}\n","/**\n * manifest.ts\n *\n * Parses the agent definition manifest (agent.yaml) from a GitAgent directory.\n * This is the sole responsibility of this module — system prompt assembly for\n * SOUL/RULES/knowledge is handled by the renderers at install time and the\n * backend drivers at runtime (native identity).\n */\n\nimport fs from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { parse as parseYaml } from \"yaml\";\nimport type { AgentManifest } from \"@skaile/workspaces/core\";\n\n/** True if the given directory contains a valid GitAgent definition (agent.yaml present). */\n/**\n * Check whether an agent definition directory contains a valid agent.yaml.\n *\n * @param agentDir - Path to the agent definition directory\n * @returns true when agent.yaml exists at the given path\n * @docLink packages/runner/dev-guide#manifest-loading\n */\nexport async function agentDefinitionExists(agentDir: string): Promise<boolean> {\n  try {\n    await fs.access(path.join(agentDir, \"agent.yaml\"));\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Load and parse the agent manifest from `agent.yaml` in the given directory.\n *\n * Returns `undefined` when:\n * - The file does not exist\n * - The file is empty or whitespace-only\n * - The YAML is malformed\n *\n * This replaces the old `buildAgentImprint()` for the manifest-extraction use case.\n * The system prompt assembly that `buildAgentImprint()` used to do is no longer\n * a runtime concern — it is handled by the renderers at install time.\n * @docLink packages/runner/dev-guide#manifest-loading\n */\nexport async function loadAgentManifest(agentDir: string): Promise<AgentManifest | undefined> {\n  const agentYamlPath = path.join(agentDir, \"agent.yaml\");\n  let content: string;\n  try {\n    content = await fs.readFile(agentYamlPath, \"utf-8\");\n  } catch {\n    return undefined;\n  }\n  if (!content.trim()) return undefined;\n  try {\n    return parseYaml(content) as AgentManifest;\n  } catch {\n    return undefined;\n  }\n}\n","/**\n * Resolves Nix flake attribute paths to /nix/store out-paths via\n * `nix path-info --offline <flakeRef>#<attr>`.\n *\n * Used by the MCP wiring path (and Phase 3+ connector/mount paths) to\n * turn `${recipe:<id>:<sub>}` markers into absolute store paths before\n * subprocess spawn.\n */\nimport { spawnSync } from \"node:child_process\";\nimport { readFileSync, statSync } from \"node:fs\";\nimport { validateAssetRecipeAttr } from \"@skaile/workspaces/core\";\nimport { createLogger } from \"@skaile/workspaces/core/logging\";\n\nexport class RecipeUnavailableError extends Error {\n  constructor(\n    public readonly flakeRef: string,\n    public readonly attr: string,\n    cause?: unknown,\n  ) {\n    super(\n      `Recipe unavailable: ${flakeRef}#${attr}${cause instanceof Error ? ` - ${cause.message}` : \"\"}`,\n    );\n    this.name = \"RecipeUnavailableError\";\n  }\n}\n\n/**\n * Per-resolve-pass cache. Created fresh by each call to\n * `loadMcpServerDeclarations` integration so values don't go stale across\n * sessions but multiple recipes within one pass dedupe.\n */\nexport type RecipeResolutionCache = Map<string, string>;\n\nexport function createRecipeCache(): RecipeResolutionCache {\n  return new Map();\n}\n\nconst DEFAULT_RECIPE_MAP_PATH = \"/etc/skaile/mcps-out-paths.json\";\n\n/** Resolves the prebuilt attr->storePath map file path (env override). */\nfunction recipeMapPath(): string {\n  return process.env.SKAILE_NIX_RECIPE_MAP || DEFAULT_RECIPE_MAP_PATH;\n}\n\ninterface RecipeMapMemo {\n  path: string;\n  mtimeMs: number;\n  map: Record<string, unknown> | null;\n}\n\nlet recipeMapMemo: RecipeMapMemo | null = null;\n\n/** Test-only: clears the (path, mtime) recipe-map memo so module-level state does not leak between cases. */\nexport function __resetRecipeMapMemoForTest(): void {\n  recipeMapMemo = null;\n}\n\n/**\n * Loads the prebuilt attr->storePath map, memoized by (file path + mtime).\n * Re-reads when the file's mtime changes so a live restage of\n * `/etc/skaile/mcps-out-paths.json` is picked up without a process restart.\n * Returns null (and falls through to nix) when the file is missing or its\n * JSON is malformed; a malformed map warns once per distinct (path, mtime)\n * version — re-reading the same corrupt file is served from memo without\n * re-warning, but a later corrupt version (new mtime) warns again.\n */\nfunction loadRecipeMap(): Record<string, unknown> | null {\n  const path = recipeMapPath();\n\n  let mtimeMs: number;\n  try {\n    mtimeMs = statSync(path).mtimeMs;\n  } catch {\n    // File missing — memo the absence keyed to this path, fall through. We\n    // intentionally re-stat on every call (the memo never short-circuits the\n    // statSync above) so a map staged later is detected and picked up live.\n    recipeMapMemo = { path, mtimeMs: -1, map: null };\n    return null;\n  }\n\n  if (recipeMapMemo && recipeMapMemo.path === path && recipeMapMemo.mtimeMs === mtimeMs) {\n    // Same version already seen (valid or malformed); do not re-warn.\n    return recipeMapMemo.map;\n  }\n\n  let map: Record<string, unknown> | null = null;\n  try {\n    const parsed: unknown = JSON.parse(readFileSync(path, \"utf8\"));\n    map = parsed && typeof parsed === \"object\" ? (parsed as Record<string, unknown>) : null;\n  } catch (err) {\n    // Reached only on a NEW (path, mtime) — the memo short-circuits an unchanged\n    // version above, so a corrupt map warns once per distinct file version, and\n    // a later valid->corrupt->fixed->corrupt sequence warns on each corrupt one.\n    createLogger({ kind: \"mcp\", subkind: \"recipe-resolve\" }).warn(\n      \"recipe map malformed — falling back to nix path-info\",\n      { path, error: err instanceof Error ? err.message : String(err) },\n    );\n    map = null;\n  }\n\n  recipeMapMemo = { path, mtimeMs, map };\n  return map;\n}\n\n/**\n * Resolves a flake attribute to its /nix/store out-path.\n * Throws RecipeUnavailableError on missing closure / nix failure.\n */\nexport function resolveRecipePath(\n  flakeRef: string,\n  attr: string,\n  cache: RecipeResolutionCache,\n): string {\n  const key = `${flakeRef}#${attr}`;\n  const cached = cache.get(key);\n  if (cached) return cached;\n\n  // Validate attr before it reaches the nix spawnSync arg — defense-in-depth\n  // for Phase 3+ community catalogs where attr may be untrusted.\n  try {\n    validateAssetRecipeAttr(attr);\n  } catch (err) {\n    throw new RecipeUnavailableError(\n      flakeRef,\n      attr,\n      err instanceof Error ? err : new Error(String(err)),\n    );\n  }\n\n  const log = createLogger({ kind: \"mcp\", subkind: \"recipe-resolve\" });\n  log.debug(\"resolving recipe\", { flakeRef, attr });\n\n  // Map-first fast path: a prebuilt attr->storePath map lets deployed\n  // containers skip the offline ai-assets flake eval entirely.\n  const map = loadRecipeMap();\n  if (map) {\n    const hit = attr\n      .split(\".\")\n      .reduce<unknown>(\n        (o, k) => (o && typeof o === \"object\" ? (o as Record<string, unknown>)[k] : undefined),\n        map,\n      );\n    if (typeof hit === \"string\" && hit.startsWith(\"/nix/store/\")) {\n      cache.set(key, hit);\n      log.info(\"resolved recipe (map)\", { flakeRef, attr, outPath: hit });\n      return hit;\n    }\n  }\n\n  const result = spawnSync(\"nix\", [\"path-info\", \"--offline\", `${flakeRef}#${attr}`], {\n    encoding: \"utf8\",\n  });\n  if (result.error) throw new RecipeUnavailableError(flakeRef, attr, result.error);\n  if (result.status !== 0) {\n    throw new RecipeUnavailableError(\n      flakeRef,\n      attr,\n      new Error(`nix path-info exited ${result.status}: ${result.stderr.trim()}`),\n    );\n  }\n  const outPath = result.stdout.trim().split(\"\\n\")[0];\n  if (!outPath?.startsWith(\"/nix/store/\")) {\n    throw new RecipeUnavailableError(\n      flakeRef,\n      attr,\n      new Error(`Unexpected output: ${result.stdout}`),\n    );\n  }\n  cache.set(key, outPath);\n  log.info(\"resolved recipe\", { flakeRef, attr, outPath });\n  return outPath;\n}\n","/**\n * Substitutes `${recipe:<id>}`, `${recipe:<id>:<sub>}`, `${recipe:<id>:bin}`,\n * and `${recipe:<id>:lib}` markers with absolute /nix/store paths.\n *\n * Matching rules:\n *   ${recipe:excel}          -> /nix/store/.../bin\n *   ${recipe:excel:bin}      -> /nix/store/.../bin\n *   ${recipe:excel:lib}      -> /nix/store/.../lib\n *   ${recipe:excel:share}    -> /nix/store/.../share  (any sub path)\n *\n * The bare ${recipe:<id>} form is treated as `${recipe:<id>:bin}` for\n * ergonomic command-line use; explicit subpaths win.\n */\nimport { existsSync } from \"node:fs\";\n\n// Case-sensitive by design: markers must be lowercase to match the declaration\n// id map keys. Uppercase markers survive as literal text and are caught by the\n// unresolved-marker scan in resources.ts, which skips the declaration cleanly.\nconst RECIPE_MARKER = /\\$\\{recipe:([a-z0-9_-]+)(?::([a-z0-9_/.-]+))?\\}/g;\n\nexport function substituteRecipeTemplating(\n  value: string,\n  recipeOutPaths: ReadonlyMap<string, string>,\n): string {\n  return value.replace(RECIPE_MARKER, (_match, id: string, sub: string | undefined) => {\n    const outPath = recipeOutPaths.get(id);\n    if (!outPath) {\n      // Leave the marker in place so the caller can decide policy. The\n      // wiring layer surfaces unresolved markers as a structured error\n      // before subprocess spawn.\n      return _match;\n    }\n    if (!sub) return `${outPath}/bin`;\n    return `${outPath}/${sub}`;\n  });\n}\n\nexport function substituteRecipeMap(\n  obj: Record<string, string> | undefined,\n  recipeOutPaths: ReadonlyMap<string, string>,\n): Record<string, string> | undefined {\n  if (!obj) return obj;\n  const out: Record<string, string> = {};\n  for (const [k, v] of Object.entries(obj)) {\n    out[k] = substituteRecipeTemplating(v, recipeOutPaths);\n  }\n  return out;\n}\n\nexport interface MissingSubstitutedPath {\n  field: string;\n  path: string;\n  error: string;\n}\n\n/**\n * Checks that the resolved binary path (command and args[0]) produced by\n * recipe substitution actually exists on the filesystem.\n *\n * Only checks `command` and `args[0]` — these are the fields where ENOENT\n * is most user-visible (subprocess spawn fails immediately). Other args and\n * env values are not checked to keep this focused.\n *\n * Returns an array of missing-path entries; an empty array means all checks\n * passed. The caller in resources.ts skips the declaration when non-empty.\n */\nexport function validateSubstitutedPaths(\n  command: string | undefined,\n  args: string[] | undefined,\n): MissingSubstitutedPath[] {\n  const missing: MissingSubstitutedPath[] = [];\n\n  if (command?.startsWith(\"/nix/store/\") && !existsSync(command)) {\n    missing.push({\n      field: \"command\",\n      path: command,\n      error: `resolved path does not exist: ${command}`,\n    });\n  }\n\n  const firstArg = args?.[0];\n  if (firstArg?.startsWith(\"/nix/store/\") && !existsSync(firstArg)) {\n    missing.push({\n      field: \"args[0]\",\n      path: firstArg,\n      error: `resolved path does not exist: ${firstArg}`,\n    });\n  }\n\n  return missing;\n}\n","/**\n * resources.ts\n *\n * Shared connector lifecycle for agent sessions — connect, watch, and build\n * tool injection for all connector types (filesystem-face and tool-face).\n *\n * Used by agent.ts (REPL), base-assets/connectors/flow/run-flow.ts (flow), and serve.ts (WebSocket server).\n * Extracted from duplicated inline blocks in each of those files.\n */\n\nimport {\n  buildConnectorPromptSection,\n  buildSdkConnectorTools,\n  type ConnectorChangeEvent,\n  ConnectorManager,\n  ConnectorStartupError,\n  findMissingPackages,\n  installNpmPackages,\n  loadConnectorDeclarations,\n  type PreMintedSecretProvider,\n  registerBuiltinConnectors,\n  type SyncStatusPayload,\n  type TokenMediator,\n} from \"@skaile/workspaces/connectors\";\nimport {\n  loadMcpServerDeclarations,\n  type McpServerDeclaration,\n  type RuntimeAssetsResult,\n  resolveRuntimeAssets,\n} from \"@skaile/workspaces/core\";\nimport { createLogger } from \"@skaile/workspaces/core/logging\";\nimport { WorkspacePlugin } from \"@skaile/workspaces/workspace-plugin\";\nimport { z } from \"zod\";\nimport { createRecipeCache, resolveRecipePath } from \"./recipe-resolver.js\";\nimport {\n  substituteRecipeMap,\n  substituteRecipeTemplating,\n  validateSubstitutedPaths,\n} from \"./recipe-templating.js\";\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/**\n * Result of {@link buildAgentResources}.\n *\n * @docLink packages/runner/dev-guide#flow-execution-turn-based-model\n */\nexport interface AgentResourcesResult {\n  /** Connected ConnectorManager instance — null if no connectors declared or package missing. */\n  resourceManager: any | null;\n  /** Markdown section to append to the system prompt — empty string if no resources. */\n  resourcePromptSection: string;\n  /**\n   * In-process MCP server map to pass as `mcpServers` in `AgentConfig`.\n   * Populated only for the `claude-sdk` driver; undefined for all others.\n   */\n  mcpServers: Record<string, unknown> | undefined;\n  /**\n   * Resolved runtime assets — catalog entries, implicit refs, npm deps, warnings.\n   * Held by the session so live-update paths (add_resource, configure)\n   * can call `runtimeAssets.refresh()` and consume the same shared view.\n   * `null` only when @skaile/workspaces/connectors or skaile.yaml parsing failed.\n   */\n  runtimeAssets: RuntimeAssetsResult | null;\n  /** Disconnect all connectors, unmount all mounts, and stop watchers. */\n  dispose: () => Promise<void>;\n  /**\n   * Start filesystem and connector watchers. Call AFTER the transport is\n   * listening — watching can be slow on large directory trees and must not\n   * block session startup.\n   */\n  startWatching: () => void;\n}\n\n/**\n * Callback hooks for filesystem and connector lifecycle events.\n *\n * @docLink packages/runner/dev-guide#flow-execution-turn-based-model\n */\nexport interface ResourceWatchCallbacks {\n  /**\n   * Called by mountable adapters to report incremental sync progress.\n   * Used by serve.ts to forward sync_status events to the frontend.\n   */\n  onSyncStatus?: (connectorId: string, status: SyncStatusPayload) => void;\n  /**\n   * Called when a watched connector detects an in-process change.\n   * Used by serve.ts to forward file_changed events to the frontend.\n   * Change events are deduplicated within `dedupTtlMs` per path.\n   */\n  onFileChanged?: (connectorId: string, event: ConnectorChangeEvent) => void;\n  /** Dedup window for file_changed events in milliseconds. Default: 500. */\n  dedupTtlMs?: number;\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Set up all connectors declared in `skaile.yaml` for an agent session.\n *\n * Steps:\n *   1. Register built-in connectors\n *   2. Load connector declarations from skaile.yaml\n *   3. Connect all connectors via ConnectorManager (filesystem + tool faces)\n *   4. Optionally start filesystem/connector watchers (serve.ts use case)\n *   5. Build the system prompt section (mount paths + connector tools)\n *   6. Build in-process MCP server (claude-sdk only)\n *\n * @param projectDir       Workspace root — where skaile.yaml lives\n * @param driverType       Active bridge driver ID: \"omp\" | \"claude-sdk\"\n * @param onLog            Optional log callback; silently ignored if omitted\n * @param watch            Optional watch callbacks; watching is skipped if omitted\n * @param secretProvider   Optional secret provider chain for connector field\n *                         resolution and `env:NAME` lookups\n * @param sessionMeta      Provider/model/sessionId metadata used for logging\n * @param tokenMediator    Optional callback for `auth: backend` connectors to\n *                         mint short-lived tokens. Threaded into `ConnectorManager`.\n * @param preMintedSecrets Optional v3 pre-minted credential provider — when\n *                         supplied, `auth: backend` connectors find their initial\n *                         token in-process instead of paying a\n *                         `request_access_token` round-trip at connect time.\n * @docLink packages/runner/dev-guide#flow-execution-turn-based-model\n */\nexport async function buildAgentResources(\n  projectDir: string,\n  driverType: string,\n  _onLog?: (line: string) => void,\n  watch?: ResourceWatchCallbacks,\n  secretProvider?: unknown,\n  sessionMeta?: { provider?: string; model?: string; sessionId?: string },\n  tokenMediator?: TokenMediator,\n  preMintedSecrets?: PreMintedSecretProvider,\n): Promise<AgentResourcesResult> {\n  const resLog = createLogger({\n    kind: \"runner\",\n    subkind: \"resources\",\n    instance: sessionMeta?.sessionId ?? \"no-session\",\n  });\n  // `_onLog` is preserved in the public signature for back-compat with external\n  // callers, but is unused internally — structured emission via `resLog` and the\n  // per-source loggers below reaches the caller through the OnLogBridgeSink that\n  // the runner bootstrap installs at the LogStore level.\n  const noopResult: AgentResourcesResult = {\n    resourceManager: null,\n    resourcePromptSection: \"\",\n    mcpServers: undefined,\n    runtimeAssets: null,\n    dispose: async () => {},\n    startWatching: () => {},\n  };\n\n  try {\n    registerBuiltinConnectors();\n\n    // Resolve catalog entries + implicit refs from skaile.yaml + base-assets repo.\n    // Held on the session result so live-update paths can call refresh().\n    const runtimeAssets = await resolveRuntimeAssets(projectDir);\n    for (const w of runtimeAssets.warnings) {\n      resLog.warn(\"runtime asset warning\", { code: w.code, message: w.message });\n    }\n\n    // Optional: install missing npm peer deps before mountAll/connectAll runs.\n    // Disabled by default for serve mode (no network or write access in\n    // production agent containers); enable via SKAILE_AUTO_INSTALL_DEPS=true.\n    // Asset-manager.install() is the canonical preflight install path.\n    if (process.env.SKAILE_AUTO_INSTALL_DEPS === \"true\") {\n      const required = runtimeAssets.requiredNpmDeps.required;\n      if (required.length > 0) {\n        const missing = findMissingPackages(required, projectDir);\n        if (missing.length > 0) {\n          resLog.info(\"installing missing npm peer deps\", { packages: missing });\n          const r = await installNpmPackages(missing, projectDir);\n          if (!r.success) resLog.error(\"npm install failed\", undefined, { output: r.output });\n        }\n      }\n    }\n\n    // --- Mounts ---\n    // --- Connectors (filesystem + tool faces) ---\n    // The unified ConnectorManager owns the full lifecycle for every connector\n    // declared in skaile.yaml — mountable (filesystem-face) and tool-face alike.\n    const connectorDeclarations = loadConnectorDeclarations(projectDir);\n    let resourceManager: ConnectorManager | null = null;\n\n    if (connectorDeclarations.length > 0) {\n      resourceManager = new ConnectorManager(projectDir, {\n        secrets: secretProvider as any,\n        catalogEntries: runtimeAssets.catalogEntries,\n        tokenMediator,\n        preMintedSecrets,\n      });\n      // failOnReadWriteError: a read-write mountable-connector failure means\n      // the agent workspace is unusable (e.g. expired SharePoint token leaves\n      // the workspace empty). Surface as a session-start error rather than\n      // silently degrading to \"agent sees no files.\"\n      try {\n        const report = await resourceManager.connectAll(connectorDeclarations, {\n          failOnReadWriteError: true,\n        });\n        for (const r of report.results) {\n          if (r.connected) {\n            resLog.info(\"connector ok\", { id: r.id, mountPath: r.mountPath });\n          } else {\n            resLog.error(\"connector failed\", undefined, { id: r.id, error: r.error });\n          }\n        }\n      } catch (err) {\n        // Log the full per-connector status from the report carried on the\n        // error before re-throwing so operators can see which connected.\n        if (err instanceof ConnectorStartupError) {\n          for (const r of err.report.results) {\n            if (r.connected) {\n              resLog.info(\"connector ok\", { id: r.id, mountPath: r.mountPath });\n            } else {\n              resLog.error(\"connector failed\", undefined, { id: r.id, error: r.error });\n            }\n          }\n        }\n        throw err;\n      }\n    }\n\n    // Build the system prompt section (mount paths + connector tools).\n    const resourcePromptSection = resourceManager\n      ? buildConnectorPromptSection(resourceManager)\n      : \"\";\n\n    // Build MCP servers (claude-sdk only). Phase 2d: structured logging.\n    const mcpLog = createLogger({\n      kind: \"mcp\",\n      subkind: \"wiring\",\n      instance: sessionMeta?.sessionId ?? \"no-session\",\n    });\n\n    let mcpServers: Record<string, unknown> | undefined;\n    let workspacePluginToShutdown: { shutdown(): Promise<void> } | null = null;\n\n    if (driverType === \"claude-sdk\") {\n      // Connector tools (only if connectors exist)\n      if (resourceManager) {\n        const connectorsLog = createLogger({ kind: \"mcp\", subkind: \"skaile-connectors\" });\n        try {\n          const server = await buildSdkConnectorTools(resourceManager, { z });\n          if (server) {\n            mcpServers = { \"skaile-connectors\": server };\n            connectorsLog.info(\"server constructed\", {\n              connectorCount: resourceManager.listConnectors().length,\n            });\n          } else {\n            connectorsLog.debug(\"server skipped (no tools to expose)\");\n          }\n        } catch (err) {\n          connectorsLog.error(\"server construction failed\", err);\n          throw err;\n        }\n      }\n\n      // Workspace plugin — always inject for claude-sdk.\n      // `onLog` is intentionally NOT passed: structured emission via\n      // `WorkspacePlugin.log` already reaches the caller's `onLog` through the\n      // OnLogBridgeSink installed by the runner bootstrap. Passing `onLog` here\n      // would cause double-emit for plugin lifecycle events (booted, warning).\n      const workspacePlugin = new WorkspacePlugin({\n        projectDir,\n        connectorManager: resourceManager ?? undefined,\n        driver: driverType,\n        provider: sessionMeta?.provider,\n        model: sessionMeta?.model,\n      });\n      const wsServer = await workspacePlugin.buildWorkspaceMcpServer();\n      if (wsServer) {\n        mcpServers = { ...(mcpServers ?? {}), \"skaile-workspace\": wsServer };\n      }\n      workspacePluginToShutdown = workspacePlugin;\n\n      // Declarative MCP servers from skaile.yaml `mcp_servers:` section\n      const mcpDeclarations = loadMcpServerDeclarations(projectDir);\n      mcpLog.debug(\"loaded MCP declarations\", { count: mcpDeclarations.length });\n\n      // One cache per resources.ts pass — dedupes nix path-info shell-outs for\n      // multiple declarations that share the same flake attr.\n      const recipeCache = createRecipeCache();\n      const nixFlakeRef = process.env.SKAILE_NIX_FLAKE_REF ?? \"/etc/skaile/flake\";\n\n      for (const decl of mcpDeclarations) {\n        if (RESERVED_MCP_SERVER_IDS.has(decl.id)) {\n          mcpLog.warn(\"MCP server skipped: reserved id\", { id: decl.id });\n          continue;\n        }\n\n        // Recipe resolution: substitute ${recipe:<id>...} markers before spawn.\n        let resolvedDecl = decl;\n        if (decl.recipe) {\n          // For BYO-flake recipes `attr` is the in-flake target (\"default\") and\n          // may be absent on the decl; `flake` is the meaningful log key. Hoisted\n          // above the try so the catch block can log it too.\n          const recipeLogKey = decl.recipe.flake\n            ? { flake: decl.recipe.flake }\n            : { attr: decl.recipe.attr };\n          try {\n            // Lookup key: legacy platform-flake recipes resolve by their `attr`\n            // (e.g. `mcps.excel`); BYO-flake recipes all build `#default`, so\n            // `attr` is NOT a unique key — resolve by `mcps.<id>` instead, which\n            // is the key the host-side builder writes into the recipe map.\n            // The legacy `attr ?? mcps.<id>` fallback is dead code for recipes\n            // emitted by mcpDeclFromCatalogEntry (it always sets `attr` for the\n            // legacy form); it only guards a hand-built `{ recipe: {} }`, which\n            // then misses the map and is skipped by the path check below.\n            const recipeKey = decl.recipe.flake\n              ? `mcps.${decl.id}`\n              : (decl.recipe.attr ?? `mcps.${decl.id}`);\n            const outPath = resolveRecipePath(nixFlakeRef, recipeKey, recipeCache);\n            // Build a single-entry map keyed by this declaration's id.\n            const outPaths: ReadonlyMap<string, string> = new Map([[decl.id, outPath]]);\n\n            const resolvedCommand = decl.command\n              ? substituteRecipeTemplating(decl.command, outPaths)\n              : decl.command;\n            const resolvedArgs = decl.args?.map((a) => substituteRecipeTemplating(a, outPaths));\n            const resolvedEnv = substituteRecipeMap(decl.env, outPaths);\n\n            resolvedDecl = {\n              ...decl,\n              command: resolvedCommand,\n              args: resolvedArgs,\n              env: resolvedEnv,\n            };\n\n            // Warn on any surviving markers (id mismatch in the template)\n            const allResolved = [\n              resolvedCommand ?? \"\",\n              ...(resolvedArgs ?? []),\n              ...Object.values(resolvedEnv ?? {}),\n            ];\n            for (const v of allResolved) {\n              if (v.includes(\"${recipe:\")) {\n                const recipeLog = createLogger({\n                  kind: \"mcp\",\n                  subkind: decl.id,\n                  instance: \"recipe-resolve\",\n                });\n                recipeLog.warn(\"unresolved recipe marker after substitution\", {\n                  value: v,\n                  declId: decl.id,\n                });\n              }\n            }\n\n            // Verify substituted /nix/store paths exist (catches recipes without bin/).\n            const missingPaths = validateSubstitutedPaths(resolvedCommand, resolvedArgs);\n            if (missingPaths.length > 0) {\n              const recipeLog = createLogger({\n                kind: \"mcp\",\n                subkind: decl.id,\n                instance: \"recipe-resolve\",\n              });\n              recipeLog.error(\"MCP server skipped: substituted path does not exist\", undefined, {\n                id: decl.id,\n                ...recipeLogKey,\n                missing: missingPaths,\n              });\n              continue;\n            }\n\n            const recipeLog = createLogger({\n              kind: \"mcp\",\n              subkind: decl.id,\n              instance: \"recipe-resolve\",\n            });\n            recipeLog.info(\"recipe substitution complete\", {\n              ...recipeLogKey,\n              outPath,\n            });\n          } catch (err) {\n            // Catch all errors — not just RecipeUnavailableError — so a single\n            // broken declaration cannot abort buildAgentResources for the entire\n            // session. Log the full error and skip this declaration.\n            const recipeLog = createLogger({\n              kind: \"mcp\",\n              subkind: decl.id,\n              instance: \"recipe-resolve\",\n            });\n            recipeLog.error(\"MCP server skipped: recipe resolution failed\", err, {\n              id: decl.id,\n              ...recipeLogKey,\n              flakeRef: nixFlakeRef,\n            });\n            continue;\n          }\n        }\n\n        const serverConfig = toSdkMcpServerConfig(\n          resolvedDecl,\n          secretProvider as SecretProviderLike | undefined,\n        );\n        if (serverConfig) {\n          mcpServers = { ...(mcpServers ?? {}), [decl.id]: serverConfig };\n          const declLog = createLogger({ kind: \"mcp\", subkind: decl.id });\n          declLog.info(\"MCP server registered\", {\n            transport: decl.transport ?? \"stdio\",\n            ...(decl.transport === \"stdio\" || !decl.transport\n              ? { command: resolvedDecl.command, args: resolvedDecl.args }\n              : { url: decl.url }),\n          });\n        } else {\n          mcpLog.error(\"MCP server config invalid (translation returned null)\", undefined, {\n            id: decl.id,\n            transport: decl.transport,\n          });\n        }\n      }\n    }\n\n    // If neither connectors nor workspace-plugin produced anything useful\n    // for a non-claude-sdk driver, return noop to avoid overhead.\n    if (!resourceManager && driverType !== \"claude-sdk\") return noopResult;\n\n    // Deferred watch setup — called by the consumer after the transport is listening\n    // so that slow filesystem scans (e.g. large node_modules over Docker bind mounts)\n    // don't block session startup.\n    const startWatching = () => {\n      if (resourceManager && watch?.onFileChanged) {\n        const dedupTtlMs = watch.dedupTtlMs ?? 500;\n        const recentlyEmitted = new Map<string, number>();\n\n        resourceManager.watchAll((connectorId: string, event: ConnectorChangeEvent) => {\n          const dedupKey = `${connectorId}:${event.path}`;\n          const now = Date.now();\n          const lastEmit = recentlyEmitted.get(dedupKey);\n          if (lastEmit && now - lastEmit < dedupTtlMs) return;\n          recentlyEmitted.set(dedupKey, now);\n\n          if (recentlyEmitted.size > 200) {\n            for (const [key, ts] of recentlyEmitted) {\n              if (now - ts > dedupTtlMs) recentlyEmitted.delete(key);\n            }\n          }\n\n          watch.onFileChanged!(connectorId, event);\n        });\n      }\n    };\n\n    const dispose = async () => {\n      if (workspacePluginToShutdown) {\n        try {\n          await workspacePluginToShutdown.shutdown();\n        } catch {\n          /* best-effort */\n        }\n      }\n      try {\n        await resourceManager?.disconnectAll();\n      } catch {\n        /* best-effort */\n      }\n    };\n\n    return {\n      resourceManager,\n      resourcePromptSection,\n      mcpServers,\n      runtimeAssets,\n      dispose,\n      startWatching,\n    };\n  } catch {\n    // @skaile/workspaces/connectors not installed or skaile.yaml parse error — resources disabled\n    return noopResult;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/** IDs reserved for built-in MCP servers. Declarative servers must not shadow these. */\nconst RESERVED_MCP_SERVER_IDS = new Set([\"skaile-connectors\", \"skaile-workspace\"]);\n\n/**\n * Minimal interface for secret resolution — avoids a hard import of\n * `@skaile/workspaces/connectors` just for the SecretProvider type.\n */\ninterface SecretProviderLike {\n  resolve(ref: string): string | undefined;\n}\n\n/**\n * Resolve secret references (`env:VAR`, `forge:KEY`, etc.) in a string-keyed\n * record. Returns a new record with resolved values; entries that fail to\n * resolve are passed through unchanged.\n */\nfunction resolveRecordSecrets(\n  record: Record<string, string>,\n  secrets: SecretProviderLike | undefined,\n): Record<string, string> {\n  if (!secrets) return record;\n  const resolved: Record<string, string> = {};\n  for (const [k, v] of Object.entries(record)) {\n    resolved[k] = secrets.resolve(v) ?? v;\n  }\n  return resolved;\n}\n\n/**\n * Convert a `McpServerDeclaration` from `skaile.yaml` into the SDK's\n * `McpServerConfig` shape accepted by `AgentConfig.mcpServers`.\n *\n * Secret references in `env` and `headers` values (e.g. `env:MY_TOKEN`) are\n * resolved through the session's `SecretProvider` chain when available.\n *\n * Returns `null` when the declaration is missing required fields for its\n * transport type (e.g. no `command` for a stdio server).\n */\nfunction toSdkMcpServerConfig(\n  decl: McpServerDeclaration,\n  secrets?: SecretProviderLike,\n): Record<string, unknown> | null {\n  const transport = decl.transport ?? \"stdio\";\n\n  if (transport === \"stdio\") {\n    if (!decl.command) return null;\n    const cfg: Record<string, unknown> = { type: \"stdio\", command: decl.command };\n    if (decl.args?.length) cfg.args = decl.args;\n    if (decl.env && Object.keys(decl.env).length > 0) {\n      cfg.env = resolveRecordSecrets(decl.env, secrets);\n    }\n    return cfg;\n  }\n\n  if (transport === \"sse\" || transport === \"http\") {\n    if (!decl.url) return null;\n    const cfg: Record<string, unknown> = { type: transport, url: decl.url };\n    if (decl.headers && Object.keys(decl.headers).length > 0) {\n      cfg.headers = resolveRecordSecrets(decl.headers, secrets);\n    }\n    return cfg;\n  }\n\n  return null;\n}\n","/**\n * session-builder.ts\n *\n * Shared `createAgentSession()` factory — extracts the common agent\n * initialisation sequence from agent.ts (REPL), run-flow.ts (flow), and\n * serve.ts (WebSocket server) into a single reusable module.\n *\n * The shared setup pipeline:\n *   1. resolveSettings → driverType, provider, model, apiKey\n *   2. loadAgentManifest → manifest (model, maxTurns, tools, name)\n *   3. buildAgentResources → resourceManager, resourcePromptSection, mcpServers, dispose\n *   4. Load workspace config, build contextSection + environmentSection, load prompt-extensions\n *   5. assembleSystemPrompt (context + env + resources + extensions + additional sections)\n *   6. Resolve maxTurns (config override wins over manifest)\n *   7. createDriver (NOT started — caller calls driver.start() when ready)\n *\n * Agent identity (SOUL.md, RULES.md, knowledge/) is never assembled here.\n * It is rendered at install time by the renderers in asset-manager and read\n * natively by each backend driver at runtime.\n */\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { resolve as resolvePath } from \"node:path\";\nimport { createDriver } from \"@skaile/workspaces/bridge\";\nimport { resolveApiKey, resolveSettings, resolveSkWorkspaceConfig } from \"@skaile/workspaces/core\";\nimport { createLogger } from \"@skaile/workspaces/core/logging\";\nimport type { AgentDriver, BridgeCapabilityHooks } from \"@skaile/workspaces/bridge\";\nimport type {\n  AgentManifest,\n  RuntimeAssetsResult,\n  SkWorkspaceConfig,\n} from \"@skaile/workspaces/core\";\nimport type { TelemetryProvider, Trace } from \"@skaile/workspaces/telemetry\";\nimport type { SystemPromptSection } from \"@skaile/workspaces/types\";\nimport { buildContextSection } from \"./context.js\";\nimport { resolveAgentComposition, type ResolvedComposition } from \"./composition/bootstrap.js\";\nimport { buildEnvironmentSection } from \"./environment.js\";\nimport { loadAgentManifest } from \"./manifest.js\";\nimport { assembleSystemPrompt } from \"./prompt-assembly.js\";\nimport { buildAgentResources, type ResourceWatchCallbacks } from \"./resources.js\";\n\nexport type { ResourceWatchCallbacks };\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/**\n * Configuration for creating an agent session.\n *\n * Controls the driver backend, LLM provider and model, agent identity,\n * workspace layout, resource lifecycle, and protocol v2 capability hooks.\n *\n * @docLink packages/runner/dev-guide#flow-execution-turn-based-model\n */\nexport interface AgentSessionConfig {\n  projectDir: string;\n  /**\n   * Agent working directory — where the agent reads/writes files.\n   * Defaults to `projectDir` when omitted. Use this to separate the config\n   * root (`projectDir` with `skaile.yaml`) from the actual working directory\n   * (e.g. when the user is in a subdirectory or has no `skaile.yaml` in their CWD).\n   */\n  cwd?: string;\n  agentDir?: string;\n  driver?: string;\n  model?: string;\n  provider?: string;\n  promptsDir?: string;\n  projectClaudeMd?: string;\n  sessionId?: string;\n  resumeSessionId?: string;\n  /**\n   * Path to a file whose contents are prepended to the system prompt.\n   * @deprecated Use `agent.prompt-extensions` in skaile.yaml instead. The runner\n   * no longer injects this file's contents.\n   */\n  externalPromptFile?: string;\n  /**\n   * Pre-resolved workspace config. Avoids re-reading skaile.yaml when the caller\n   * already has it. Optional — falls back to `resolveSkWorkspaceConfig(projectDir)`.\n   */\n  wsConfig?: SkWorkspaceConfig;\n  /**\n   * Platform-level maxTurns override. Takes precedence over manifest.runtime.max_turns.\n   * Flow/REPL modes omit this field — they use the manifest value only.\n   */\n  maxTurns?: number;\n  /** Thinking mode override. */\n  thinking?: \"adaptive\" | \"enabled\" | \"disabled\";\n  /** Reasoning effort level override. */\n  effort?: \"low\" | \"medium\" | \"high\" | \"max\";\n  /** Watch callbacks for filesystem/sync events (serve mode only). */\n  watch?: ResourceWatchCallbacks;\n  /** Secret provider for connector credential resolution. */\n  secretProvider?: unknown;\n  /**\n   * Pre-resolved API key for the active provider. When supplied, it takes\n   * precedence over the env-var lookup performed inside `resolveApiKey()`.\n   * Used by `serve.ts` to feed the value from `provision_secrets` straight\n   * into `AgentConfig.apiKeys` without writing it to `process.env`.\n   */\n  apiKey?: string;\n  /**\n   * Optional callback used by `auth: backend` git connectors to request\n   * short-lived access tokens from the platform's credential mediator.\n   * Threaded into the `ConnectorManager` constructor so all git connectors in\n   * this session share the same mediator.\n   */\n  tokenMediator?: import(\"@skaile/workspaces/connectors\").TokenMediator;\n  /**\n   * Pre-minted credential provider populated from the v3 `session_init`\n   * envelope's `credentials` map. Threaded into ConnectorManager so that\n   * connectors with `auth: backend` find their token in-process instead of\n   * paying a `request_access_token` round-trip at mount time.\n   *\n   * @since 3.0.0\n   */\n  preMintedSecrets?: import(\"@skaile/workspaces/connectors\").PreMintedSecretProvider;\n  /**\n   * Platform `AIProviderConfig.id` for the AI credential provisioned into\n   * this session. Threaded into `AgentConfig.aiProviderConfigId` so that\n   * driver recreates (tier-1 native SDK resume, subagents, etc.) preserve\n   * the link to the platform mediator. The driver itself does not consume\n   * this field; only the runner's 401-mediation handler reads it.\n   */\n  aiProviderConfigId?: string;\n  /**\n   * Optional auth-refresh callback threaded into the bridge driver. Invoked\n   * by the driver when the underlying agent surfaces an\n   * `authentication_error`; in v3 the runner mediates a fresh credential\n   * via the `host.refresh_credential` capability and returns a typed\n   * {@link CredentialMint}. The driver branches on the discriminator:\n   * `ok: true` triggers a one-shot retry of the in-flight prompt;\n   * `ok: false` surfaces the original auth error to the caller.\n   *\n   * Centralising auth-retry inside the driver removes the need to wrap\n   * every `driver.prompt(...)` call site (compaction, flow turns, serve\n   * handler) with a runner-side retry helper. Standalone CLI / forge\n   * sessions leave it undefined.\n   *\n   * Spec: `_devlog/specs/2026-05-10-deterministic-session-bootstrap.md`\n   * § \"Refresh-on-401 routes through host.refresh_credential\".\n   */\n  onAuthError?: (args: {\n    configId: string;\n  }) => Promise<import(\"@skaile/workspaces/types\").CredentialMint>;\n  /**\n   * Additional sections to append to the assembled system prompt.\n   * Used by serve mode to inject the component catalog (AVAILABLE_COMPONENTS)\n   * without modifying the session builder's core assembly logic.\n   */\n  additionalPromptSections?: string[];\n  onLog?: (line: string) => void;\n  /** Telemetry provider for observability. Optional — omit to disable tracing. */\n  telemetry?: TelemetryProvider;\n  /** Active trace to attach to this session's driver. */\n  trace?: Trace;\n  /**\n   * Protocol v2 capability dispatch hooks built from the runner's\n   * CapabilityRegistry. When present, the driver routes registered tool\n   * calls through `hooks.invoke()` instead of the legacy in-driver dispatch.\n   *\n   * @since 2.0.0\n   */\n  capabilities?: BridgeCapabilityHooks;\n}\n\n/**\n * A configured agent session returned by {@link createAgentSession}.\n *\n * Carries a driver instance (not yet started), connected resource and\n * mount managers, resolved runtime assets, and the parsed agent manifest.\n *\n * @docLink packages/runner/dev-guide#flow-execution-turn-based-model\n */\nexport interface AgentSession {\n  /** Driver configured but NOT started. Caller must call driver.start(). */\n  driver: AgentDriver;\n  /** Connected ConnectorManager — null if no connectors declared. any intentional (optional dep). */\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  resourceManager: any | null;\n  /**\n   * Resolved runtime assets — catalog entries, implicit refs, npm deps,\n   * warnings, plus refresh() / findEntry() helpers. Live-update paths\n   * (add_resource, configure) hold this reference and call refresh() when\n   * a new repository is cloned or driver installed mid-session.\n   */\n  runtimeAssets: RuntimeAssetsResult | null;\n  /**\n   * Resolved composition — inline blocks (already injected into systemPrompt)\n   * and discoverable entries (caller registers these with CapabilityRegistry).\n   * Null when the agent has no `composes:` field.\n   */\n  composition: ResolvedComposition | null;\n  /** Parsed agent.yaml manifest — model, maxTurns, tools, name. */\n  manifest: AgentManifest | undefined;\n  /** Active driver type string ('omp' | 'claude-sdk'). */\n  driverType: string;\n  provider: string | undefined;\n  model: string | undefined;\n  /** Disconnect all connectors, unmount all mounts, and stop watchers. */\n  dispose: () => Promise<void>;\n  /** Start filesystem and connector watchers. Call after transport is listening. */\n  startWatching: () => void;\n  /** Telemetry provider for this session (noop if not configured). */\n  telemetry?: TelemetryProvider;\n  /**\n   * Labeled per-section breakdown of the system prompt, in the same\n   * order assembleSystemPrompt consumed them. Multi-entry sections\n   * (prompt-extensions, composition, additional) appear as repeated\n   * entries with `source` set.\n   *\n   * Consumed by serve.ts's emitSystemPromptComposed helper to emit\n   * `system_prompt_composed` events to the platform.\n   * @since 2026-05\n   */\n  systemPromptSections: SystemPromptSection[];\n}\n\n// ---------------------------------------------------------------------------\n// Factory\n// ---------------------------------------------------------------------------\n\n/**\n * Create an agent session by resolving settings, loading the agent\n * manifest, building resources (connectors, mounts, MCP servers),\n * and creating the driver.\n *\n * The returned driver is NOT started — the caller must call\n * `driver.start()` after optionally attaching event handlers.\n *\n * @param config - Session configuration\n * @returns A fully configured AgentSession ready for start()\n * @docLink packages/runner/dev-guide#flow-execution-turn-based-model\n */\nexport async function createAgentSession(config: AgentSessionConfig): Promise<AgentSession> {\n  const {\n    projectDir,\n    cwd: cwdOverride,\n    agentDir,\n    driver: driverOverride,\n    model: modelOverride,\n    provider: providerOverride,\n    sessionId,\n    resumeSessionId,\n    externalPromptFile,\n    wsConfig: wsConfigOverride,\n    maxTurns: maxTurnsOverride,\n    watch,\n    secretProvider,\n    onLog,\n    telemetry,\n    trace,\n  } = config;\n\n  // Agent working directory — defaults to projectDir when not explicitly set.\n  const agentCwd = cwdOverride ?? projectDir;\n\n  const sessionLog = createLogger({\n    kind: \"runner\",\n    subkind: \"session\",\n    instance: sessionId ?? \"no-session\",\n  });\n\n  // Step 1: resolve driver/model/provider/apiKey\n  const settings = await resolveSettings(projectDir, {\n    driver: driverOverride,\n    provider: providerOverride,\n    model: modelOverride,\n  });\n  const driverType = settings.driver ?? \"omp\";\n  const provider = settings.provider;\n  const model = settings.model;\n  // Explicit `config.apiKey` wins over the env/settings cascade — used by\n  // serve.ts to inject the platform-provisioned key without leaking it into\n  // `process.env`.\n  const apiKey = config.apiKey ?? resolveApiKey(provider ?? \"anthropic\", settings);\n\n  // Step 2: load agent manifest (model, maxTurns, tools, name)\n  const manifest = agentDir ? await loadAgentManifest(agentDir) : undefined;\n\n  // Step 3: build resources (mounts + connectors lifecycle)\n  const {\n    resourceManager,\n    resourcePromptSection,\n    mcpServers,\n    runtimeAssets,\n    dispose,\n    startWatching,\n  } = await buildAgentResources(\n    projectDir,\n    driverType,\n    onLog,\n    watch,\n    secretProvider,\n    {\n      provider,\n      model,\n      sessionId,\n    },\n    config.tokenMediator,\n    config.preMintedSecrets,\n  );\n\n  // Step 4: resolve workspace config + build context/environment sections + load extensions\n  const wsConfig = wsConfigOverride ?? resolveSkWorkspaceConfig(projectDir);\n  const contextSection = buildContextSection(wsConfig.agent?.context);\n  // Free-form user-authored prompt — placed immediately after the platform\n  // context section. Empty / undefined values are dropped by assembleSystemPrompt\n  // (filters falsies via `!!p`) so we skip an explicit guard here.\n  const userPromptSection = wsConfig.agent?.prompt?.trim();\n  const environmentSection = await buildEnvironmentSection(projectDir);\n  const promptExtensions = loadPromptExtensions(\n    wsConfig.agent?.[\"prompt-extensions\"],\n    projectDir,\n    sessionLog,\n  );\n\n  if (externalPromptFile) {\n    sessionLog.warn(\n      \"externalPromptFile is deprecated and no longer injected; use agent.prompt-extensions in skaile.yaml instead\",\n    );\n  }\n\n  // Step 4.5: resolve agent composition (composes: field)\n  // Produces inline blocks (injected into system prompt below) and discoverable\n  // entries (caller registers these with CapabilityRegistry in serve.ts).\n  let composition: ResolvedComposition | null = null;\n  if (agentDir && manifest?.composes?.length) {\n    composition = await resolveAgentComposition({\n      agentDir,\n      manifest,\n      projectDir,\n      log: sessionLog,\n    });\n  } else if (manifest?.composes?.length && !agentDir) {\n    sessionLog.debug(\"skipping composition resolution — no agentDir available\");\n  }\n\n  // Step 5: assemble systemPrompt — context + prompt + env + resources + extensions + composition + additional\n  // Agent identity (SOUL/RULES/knowledge) is NOT included here — it is rendered at install time\n  // by the renderers in asset-manager and read natively by each backend driver at runtime.\n  // Composition inline blocks ARE included here — they are the v2 equivalent of identity injection\n  // for agents that use `composes:` (replaces the legacy persona/rules/knowledge fields).\n  // The userPromptSection (free-form `agent.prompt`) sits between context and environment per\n  // the platform-agent-prompt design spec (2026-05-13).\n  const compositionBlocks = composition?.inlineBlocks ?? [];\n  const additionalSections = config.additionalPromptSections ?? [];\n\n  // Labeled per-section breakdown — order matches the assembleSystemPrompt input.\n  // assembleSystemPrompt filters falsies; we mirror that here so only non-empty\n  // sections appear in the breakdown emitted to the platform.\n  const systemPromptSections: SystemPromptSection[] = [];\n  if (contextSection) systemPromptSections.push({ label: \"context\", value: contextSection });\n  if (userPromptSection) systemPromptSections.push({ label: \"prompt\", value: userPromptSection });\n  if (environmentSection)\n    systemPromptSections.push({ label: \"environment\", value: environmentSection });\n  if (resourcePromptSection)\n    systemPromptSections.push({ label: \"resources\", value: resourcePromptSection });\n  for (const ext of promptExtensions) {\n    systemPromptSections.push({\n      label: \"prompt-extensions\",\n      value: ext.value,\n      source: ext.source,\n    });\n  }\n  for (const block of compositionBlocks) {\n    // InlineBlock (composition/types.ts) carries `ref` as the identifying field\n    // (asset ref string like \"skill:foo\" or \"agent:bar\"); no separate `id`/`source` field.\n    systemPromptSections.push({\n      label: \"composition\",\n      value: block.content,\n      source: block.ref,\n    });\n  }\n  additionalSections.forEach((value, idx) => {\n    // additionalPromptSections is string[] today — no per-entry source label\n    // available, so we synthesize a stable index-based descriptor.\n    systemPromptSections.push({\n      label: \"additional\",\n      value,\n      source: `additional[${idx}]`,\n    });\n  });\n\n  const systemPrompt = assembleSystemPrompt([\n    contextSection,\n    userPromptSection,\n    environmentSection,\n    resourcePromptSection,\n    ...promptExtensions.map((e) => e.value),\n    ...compositionBlocks.map((b) => b.content),\n    ...additionalSections,\n  ]);\n\n  // Log the assembled system prompt so it can be inspected via container logs.\n  // No secrets flow through this string: API keys live in `apiKeys`, connector\n  // credentials are resolved by the secret provider. Set SKAILE_LOG_SYSTEM_PROMPT=0\n  // to suppress.\n  if (process.env.SKAILE_LOG_SYSTEM_PROMPT !== \"0\") {\n    const length = systemPrompt?.length ?? 0;\n    sessionLog.debug(\"assembled system prompt\", { length });\n    sessionLog.debug(\"system prompt content\", { content: systemPrompt ?? \"(empty)\" });\n  }\n\n  // Step 5b: resolve thinking/effort — explicit config wins over workspace config\n  const thinking =\n    config.thinking ?? (wsConfig.agent_config?.default?.thinking as AgentSessionConfig[\"thinking\"]);\n  const effort =\n    config.effort ?? (wsConfig.agent_config?.default?.effort as AgentSessionConfig[\"effort\"]);\n\n  // Step 6: resolve maxTurns — platform override wins over manifest\n  const maxTurns = maxTurnsOverride ?? manifest?.runtime?.max_turns;\n\n  // Step 7: create driver (NOT started)\n  // Driver CWD is the agent working directory (may differ from config root).\n  const driver = await createDriver(driverType, {\n    cwd: agentCwd,\n    provider,\n    model: model ?? manifest?.model?.preferred,\n    maxTurns,\n    apiKeys: apiKey ? { [provider ?? \"anthropic\"]: apiKey } : undefined,\n    systemPrompt,\n    tools: manifest?.tools,\n    ...(thinking ? { thinking } : {}),\n    ...(effort ? { effort } : {}),\n    ...(sessionId ? { sessionId } : {}),\n    ...(resumeSessionId ? { resumeSessionId } : {}),\n    ...(mcpServers ? { mcpServers } : {}),\n    // Protocol v2 capability dispatch hooks. When provided, the driver builds\n    // a synthetic `skaile-capabilities` MCP server alongside any existing\n    // mcpServers so capability invocations route through the registry's\n    // `invoke()` (which logs + validates + handles fire-and-forget / render).\n    ...(config.capabilities ? { capabilities: config.capabilities } : {}),\n    ...(config.aiProviderConfigId ? { aiProviderConfigId: config.aiProviderConfigId } : {}),\n    ...(config.onAuthError ? { onAuthError: config.onAuthError } : {}),\n    // Always forward agentDir/agentName for native identity handling\n    ...(agentDir ? { agentDir, agentName: manifest?.name } : {}),\n  });\n\n  // Attach telemetry to driver if provided\n  if (telemetry && trace) {\n    driver.setTelemetry(telemetry, trace);\n  }\n\n  return {\n    driver,\n    resourceManager,\n    runtimeAssets,\n    composition,\n    manifest,\n    driverType,\n    provider,\n    model,\n    dispose,\n    startWatching,\n    telemetry,\n    systemPromptSections,\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * One loaded prompt-extension file. `source` carries the original relative\n * path from `skaile.yaml` so labeled breakdowns (system_prompt_composed event)\n * can attribute each section to a specific file.\n */\ntype LoadedPromptExtension = { value: string; source: string };\n\n/**\n * Load markdown files declared under `agent.prompt-extensions` in skaile.yaml.\n * Paths are resolved relative to the project root. Missing files are skipped\n * with a warning. Empty files are filtered out.\n */\nfunction loadPromptExtensions(\n  paths: string[] | undefined,\n  projectDir: string,\n  log: ReturnType<typeof createLogger>,\n): LoadedPromptExtension[] {\n  if (!paths?.length) return [];\n  const result: LoadedPromptExtension[] = [];\n  for (const relPath of paths) {\n    const absPath = resolvePath(projectDir, relPath);\n    if (!existsSync(absPath)) {\n      log.warn(\"prompt-extension file not found\", { relPath });\n      continue;\n    }\n    try {\n      const content = readFileSync(absPath, \"utf-8\").trim();\n      if (content.length > 0) result.push({ value: content, source: relPath });\n    } catch (err) {\n      log.warn(\"could not read prompt-extension\", {\n        relPath,\n        error: (err as Error).message,\n      });\n    }\n  }\n  return result;\n}\n","/**\n * agent.ts\n *\n * Single-shot agent chat — runs a driver session without a flow.\n * Useful for ad-hoc tasks and skill invocations.\n *\n * The interactive REPL lives at @skaile/workspaces/tui (startRepl).\n */\n\nimport type { AgentEvent, AgentMessage } from \"@skaile/workspaces/bridge\";\nimport { resolveAgentDir } from \"@skaile/workspaces/core\";\nimport { createLogger } from \"@skaile/workspaces/core/logging\";\nimport pc from \"picocolors\";\nimport { bootstrapRunnerLogStore } from \"./logging-bootstrap.js\";\nimport { MarkdownStreamer } from \"./markdown-stream.js\";\nimport { createAgentSession, type AgentSession } from \"./session-builder.js\";\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/**\n * Options for the agent REPL session (legacy).\n *\n * @docLink packages/runner/dev-guide#agent-chat-single-shot\n */\nexport interface AgentReplOptions {\n  /** GitAgent definition directory (SOUL.md, RULES.md, knowledge/) */\n  agentDir?: string;\n  /** Project working directory for the agent */\n  projectDir: string;\n  /** Bridge driver: 'omp' | 'claude-sdk' | 'codex' (default: 'omp') */\n  driver?: string;\n  /** LLM model override */\n  model?: string;\n  /** LLM provider override */\n  provider?: string;\n  /** Path to settings.json for API key resolution */\n  settingsFile?: string;\n  /** Called for every raw agent event */\n  onEvent?: (event: AgentEvent) => void;\n  /** Called for log lines */\n  onLog?: (line: string) => void;\n  /** Prompts directory for deployed command files */\n  promptsDir?: string;\n}\n\n/**\n * Options for a single-shot agent chat session.\n *\n * @docLink packages/runner/dev-guide#agent-chat-single-shot\n */\nexport interface AgentChatOptions extends AgentReplOptions {\n  /** The message to send */\n  message: string;\n  /** Optional skill ID — if provided, the skill prompt is prepended */\n  skill?: string;\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/** Extract printable text from an AgentMessage content field. */\nfunction _extractText(msg: AgentMessage | undefined): string {\n  if (!msg) return \"\";\n  if (typeof msg.content === \"string\") return msg.content;\n  if (Array.isArray(msg.content)) {\n    return msg.content\n      .filter((b) => b.type === \"text\" && b.text)\n      .map((b) => b.text!)\n      .join(\"\");\n  }\n  return \"\";\n}\n\n// ---------------------------------------------------------------------------\n// Styling\n// ---------------------------------------------------------------------------\n\nconst PROMPT_AGENT = `${pc.magenta(pc.bold(\"agent\"))} ${pc.dim(\"▶\")} `;\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Send a single message to an agent and wait for the response.\n * Prints agent output to stdout, then exits.\n * @docLink packages/runner/dev-guide#agent-chat-single-shot\n */\nexport async function runAgentChat(opts: AgentChatOptions): Promise<void> {\n  const sessionId = `chat-${Date.now().toString(36)}`;\n  const { dispose: disposeLogStore } = bootstrapRunnerLogStore({\n    sessionId,\n    projectDir: opts.projectDir,\n    onLog: opts.onLog,\n  });\n  const chatLog = createLogger({\n    kind: \"runner\",\n    subkind: \"session\",\n    instance: sessionId,\n  });\n  // Diagnostic emission goes through chatLog. The user-facing markdown stream\n  // and PROMPT_AGENT prefix continue to write directly to stdout — they are\n  // agent output, not diagnostics.\n  const agentSession = await buildDriver(opts);\n  const driver = agentSession.driver;\n\n  await driver.start();\n\n  let firstChunk = true;\n  const mdStream = new MarkdownStreamer();\n  driver.on(\"agent-event\", (event: AgentEvent) => {\n    opts.onEvent?.(event);\n    if (event.type === \"message_update\") {\n      const delta = (event as any)._textDelta;\n      if (delta) {\n        if (firstChunk) {\n          process.stdout.write(PROMPT_AGENT);\n          firstChunk = false;\n        }\n        mdStream.write(delta);\n      }\n    }\n  });\n\n  let message = opts.message;\n  if (opts.skill) {\n    message = `Skill: ${opts.skill}\\n\\n${message}`;\n  }\n\n  try {\n    await new Promise<void>((resolve, reject) => {\n      const onEvent = (event: AgentEvent) => {\n        if (event.type === \"agent_end\") {\n          driver.off(\"agent-event\", onEvent);\n          mdStream.end();\n          process.stdout.write(\"\\n\");\n          driver.kill();\n          resolve();\n        } else if (event.type === \"error\") {\n          driver.off(\"agent-event\", onEvent);\n          const err = new Error(String((event as any).error));\n          chatLog.error(\"agent emitted error event\", err);\n          driver.kill();\n          reject(err);\n        }\n      };\n      driver.on(\"agent-event\", onEvent);\n      driver.prompt(message).catch((err: Error) => {\n        driver.off(\"agent-event\", onEvent);\n        chatLog.error(\"prompt failed\", err);\n        driver.kill();\n        reject(err);\n      });\n    });\n  } finally {\n    await agentSession.dispose();\n    disposeLogStore();\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Internal\n// ---------------------------------------------------------------------------\n\n// buildDriver is a thin wrapper — all setup logic lives in createAgentSession.\n// agentDir/agentName are always forwarded to the driver for native identity handling\n// (omp: PI_CODING_AGENT_DIR, claude-sdk: agent option).\nasync function buildDriver(opts: AgentReplOptions): Promise<AgentSession> {\n  const agentDir = opts.agentDir ?? resolveAgentDir(opts.projectDir);\n  return createAgentSession({\n    projectDir: opts.projectDir,\n    agentDir,\n    driver: opts.driver,\n    model: opts.model,\n    provider: opts.provider,\n    promptsDir: opts.promptsDir,\n    onLog: opts.onLog,\n  });\n}\n","/**\n * resource-handler.ts — handles resource_request commands from the frontend.\n *\n * Dispatches list/read/write/delete/search operations to the ConnectorManager.\n * Tool-face connectors are served through the manager's CRUD dispatch;\n * filesystem-face (mountable) connectors are served directly from their\n * projected mount directory. Emits resource_response events back through the\n * transport.\n */\n\nimport {\n  closeSync,\n  openSync,\n  readSync,\n  readdirSync,\n  readFileSync,\n  statSync,\n  writeFileSync,\n  unlinkSync,\n  mkdirSync,\n} from \"node:fs\";\nimport { resolve, join, basename, dirname } from \"node:path\";\nimport mime from \"mime\";\nimport type { ConnectorManager } from \"@skaile/workspaces/connectors\";\nimport type {\n  AgentEvent,\n  ConnectorContent,\n  ConnectorRequestCommand,\n} from \"@skaile/workspaces/types\";\n\n// ---------------------------------------------------------------------------\n// Connector resource handler\n// ---------------------------------------------------------------------------\n\n/**\n * Handle a resource_request command by dispatching to the ConnectorManager\n * and emitting a resource_response event.\n * @docLink packages/runner/dev-guide#flow-execution-turn-based-model\n */\nexport async function handleResourceRequest(\n  command: ConnectorRequestCommand,\n  manager: ConnectorManager,\n  emit: (event: AgentEvent) => void,\n): Promise<void> {\n  const { requestId, connectorId, operation, path, options, content } = command;\n\n  try {\n    let data: unknown;\n    switch (operation) {\n      case \"list\":\n        data = await manager.list(\n          connectorId,\n          path,\n          options as import(\"@skaile/workspaces/connectors\").ListOptions | undefined,\n        );\n        break;\n      case \"read\":\n        data = await manager.read(connectorId, path!);\n        break;\n      case \"write\":\n        await manager.write(connectorId, path!, content!);\n        data = true;\n        break;\n      case \"delete\":\n        data = await manager.delete(connectorId, path!);\n        break;\n      case \"search\":\n        data = await manager.search(\n          connectorId,\n          path!,\n          options as import(\"@skaile/workspaces/connectors\").SearchOptions | undefined,\n        );\n        break;\n    }\n    emit({ type: \"resource_response\", requestId, resourceId: connectorId, operation, data });\n  } catch (err) {\n    emit({\n      type: \"resource_response\",\n      requestId,\n      resourceId: connectorId,\n      operation,\n      error: err instanceof Error ? err.message : String(err),\n    });\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Mountable-connector resource handler — serves list/read/write from the\n// projected mount directory of a filesystem-face connector.\n// ---------------------------------------------------------------------------\n\n/** Resolve MIME type for a filename. Falls back to application/octet-stream. */\nfunction getMimeType(filename: string): string {\n  return mime.getType(filename) ?? \"application/octet-stream\";\n}\n\n/**\n * Returns true if the file should be served as base64-encoded binary.\n *\n * Uses a byte-level heuristic: reads the first 8KB and checks for null bytes.\n * This correctly handles all code/config formats regardless of MIME type.\n */\nfunction isBinaryFile(filePath: string): boolean {\n  try {\n    const fd = openSync(filePath, \"r\");\n    const buf = Buffer.alloc(8192);\n    const bytesRead = readSync(fd, buf, 0, 8192, 0);\n    closeSync(fd);\n    for (let i = 0; i < bytesRead; i++) {\n      if (buf[i] === 0) return true;\n    }\n    return false;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Handle a resource request against a filesystem-face (mountable) connector.\n *\n * @docLink packages/runner/dev-guide#flow-execution-turn-based-model\n */\nexport function handleMountResourceRequest(\n  command: ConnectorRequestCommand,\n  manager: ConnectorManager,\n  emit: (event: AgentEvent) => void,\n): void {\n  const { requestId, connectorId: mountId, operation, path: reqPath, content } = command;\n\n  try {\n    const entry = manager.get(mountId);\n    const mountPath = entry.handle.mountPath;\n    if (!mountPath) {\n      throw new Error(`Connector \"${mountId}\" has no projected mount directory`);\n    }\n    const targetPath = reqPath ? resolve(mountPath, reqPath) : mountPath;\n\n    // Safety: prevent path traversal outside mount\n    if (!targetPath.startsWith(mountPath)) {\n      throw new Error(\"Path traversal outside mount\");\n    }\n\n    let data: unknown;\n    switch (operation) {\n      case \"list\": {\n        const entries = readdirSync(targetPath, { withFileTypes: true });\n        data = entries\n          .filter((e) => !e.name.startsWith(\".\"))\n          .map((e) => {\n            const entryPath = reqPath ? join(reqPath, e.name) : e.name;\n            const result: Record<string, unknown> = {\n              name: e.name,\n              path: entryPath,\n              type: e.isDirectory() ? \"directory\" : \"file\",\n            };\n            if (!e.isDirectory()) {\n              try {\n                result.size = statSync(join(targetPath, e.name)).size;\n              } catch {\n                /* best-effort */\n              }\n            }\n            return result;\n          });\n        break;\n      }\n      case \"read\": {\n        const contentType = getMimeType(basename(targetPath));\n        if (isBinaryFile(targetPath)) {\n          const buf = readFileSync(targetPath);\n          data = {\n            data: buf.toString(\"base64\"),\n            contentType,\n            encoding: \"binary\",\n          };\n        } else {\n          data = {\n            data: readFileSync(targetPath, \"utf-8\"),\n            contentType,\n            encoding: \"utf-8\",\n          };\n        }\n        break;\n      }\n      case \"write\": {\n        mkdirSync(dirname(targetPath), { recursive: true });\n        const writeContent =\n          typeof content === \"string\"\n            ? content\n            : ((content as ConnectorContent | undefined)?.data ?? \"\");\n        const encoding =\n          typeof content === \"string\"\n            ? undefined\n            : (content as ConnectorContent | undefined)?.encoding;\n        if (encoding === \"binary\") {\n          writeFileSync(targetPath, Buffer.from(writeContent, \"base64\"));\n        } else {\n          writeFileSync(targetPath, writeContent, \"utf-8\");\n        }\n        data = true;\n        break;\n      }\n      case \"delete\": {\n        unlinkSync(targetPath);\n        data = true;\n        break;\n      }\n      default:\n        throw new Error(`Unsupported operation for mount: ${operation}`);\n    }\n    emit({ type: \"resource_response\", requestId, resourceId: mountId, operation, data });\n  } catch (err) {\n    emit({\n      type: \"resource_response\",\n      requestId,\n      resourceId: mountId,\n      operation,\n      error: err instanceof Error ? err.message : String(err),\n    });\n  }\n}\n","/**\n * Proactive AI-credential refresh scheduler.\n *\n * Holds a single `setTimeout` that fires `PROACTIVE_AI_REFRESH_MARGIN_MS`\n * before the current access token expires, asks the platform mediator for\n * a fresh credential via the caller-supplied `refresh` callback, and\n * re-arms itself against the new expiry. Pure logic — does not invoke\n * `host.refresh_credential` itself; the caller threads that side-effect\n * through `refresh`.\n *\n * Pairs with the bridge-side `failTurn` deferral that suppresses\n * downstream auth-error events when a self-heal is about to run: the\n * proactive timer is the primary prevention of in-container 401s, the\n * reactive 401 path is the safety net.\n *\n * Spec: `_devlog/specs/2026-05-07-unified-credential-mediation.md`\n * § \"Proactive refresh\" (added 2026-05-20).\n *\n * @docLink packages/runner/dev-guide#ai-credential-mediation\n */\n\n/**\n * Safety margin between the scheduled refresh and the token's declared\n * expiry. Default 5 minutes: long enough that any in-flight prompt at\n * fire time still has a usable token, short enough that a server clock\n * skew of a few seconds does not push the fire-time past expiry.\n */\nexport const PROACTIVE_AI_REFRESH_MARGIN_MS = 5 * 60 * 1000;\n\n/**\n * Caller-supplied side effects the scheduler invokes.\n *\n * - `refresh()` runs the actual mint round-trip; returns the new ISO\n *   expiry on success (or `null` for static tokens) and `undefined` on\n *   failure (the scheduler stays idle until the next external arming).\n * - `log()` receives operator-facing single-line strings.\n * - `now()` is dependency-injected for deterministic timer tests; defaults\n *   to `Date.now`.\n * - `setTimeoutImpl` / `clearTimeoutImpl` are injected for fake-timer\n *   tests; default to the host's `setTimeout` / `clearTimeout`.\n */\nexport interface AiCredentialRefreshDeps {\n  refresh: () => Promise<string | null | undefined>;\n  log: (line: string) => void;\n  now?: () => number;\n  setTimeoutImpl?: (handler: () => void, ms: number) => { unref?: () => void };\n  clearTimeoutImpl?: (handle: { unref?: () => void }) => void;\n  marginMs?: number;\n}\n\nexport interface AiCredentialRefreshScheduler {\n  /**\n   * Arm the timer for `expiresAtIso - marginMs`. Cancels any prior pending\n   * fire. `null` / `undefined` cancels without re-arming (static PAT\n   * semantics). If the fire-time has already passed, runs `refresh()` on\n   * the next tick.\n   */\n  schedule(expiresAtIso: string | null | undefined): void;\n  /** Cancel any pending fire. Idempotent. */\n  cancel(): void;\n  /**\n   * Whether a timer is currently armed. Exposed for tests; production\n   * callers should not need this.\n   */\n  isPending(): boolean;\n}\n\n/**\n * Build a scheduler bound to the supplied dependencies. One scheduler\n * per session — the runner constructs it once at session_init and\n * disposes via `cancel()` during cleanup.\n */\nexport function createAiCredentialRefreshScheduler(\n  deps: AiCredentialRefreshDeps,\n): AiCredentialRefreshScheduler {\n  const now = deps.now ?? (() => Date.now());\n  const setTimeoutImpl =\n    deps.setTimeoutImpl ??\n    ((handler: () => void, ms: number) => {\n      const handle = setTimeout(handler, ms);\n      // Node + Bun timers expose `unref` so this scheduler does not pin\n      // the event loop alive.\n      return handle as unknown as { unref?: () => void };\n    });\n  const clearTimeoutImpl =\n    deps.clearTimeoutImpl ??\n    ((handle: { unref?: () => void }) => {\n      clearTimeout(handle as unknown as ReturnType<typeof setTimeout>);\n    });\n  const marginMs = deps.marginMs ?? PROACTIVE_AI_REFRESH_MARGIN_MS;\n\n  let timer: { unref?: () => void } | null = null;\n\n  function cancel(): void {\n    if (timer !== null) {\n      clearTimeoutImpl(timer);\n      timer = null;\n    }\n  }\n\n  async function fire(): Promise<void> {\n    timer = null;\n    let next: string | null | undefined;\n    try {\n      next = await deps.refresh();\n    } catch (err) {\n      deps.log(\n        `[ai-credential-refresh] refresh threw: ${err instanceof Error ? err.message : String(err)}; reactive 401 path remains as safety net`,\n      );\n      return;\n    }\n    if (next === undefined) {\n      deps.log(\n        \"[ai-credential-refresh] refresh returned no expiry; reactive 401 path remains as safety net\",\n      );\n      return;\n    }\n    schedule(next);\n  }\n\n  function schedule(expiresAtIso: string | null | undefined): void {\n    cancel();\n    if (!expiresAtIso) {\n      // Static token (PAT) or unknown expiry — nothing to schedule.\n      return;\n    }\n    const expiresAtMs = Date.parse(expiresAtIso);\n    if (!Number.isFinite(expiresAtMs)) return;\n    const delayMs = expiresAtMs - now() - marginMs;\n    if (delayMs <= 0) {\n      deps.log(\n        `[ai-credential-refresh] token within ${marginMs / 1000}s of expiry; refreshing now`,\n      );\n      timer = setTimeoutImpl(() => {\n        void fire();\n      }, 0);\n    } else {\n      deps.log(\n        `[ai-credential-refresh] scheduled in ${Math.round(delayMs / 1000)}s (expiresAt=${expiresAtIso})`,\n      );\n      timer = setTimeoutImpl(() => {\n        void fire();\n      }, delayMs);\n    }\n    timer.unref?.();\n  }\n\n  return {\n    schedule,\n    cancel,\n    isPending: () => timer !== null,\n  };\n}\n","/**\n * Built-in framework capabilities. The runner registers these at boot via\n * {@link bootstrapCapabilityRegistry} so the LLM always has a discovery\n * surface for what is available in the session.\n *\n * All built-ins are agent-side, `origin: { kind: 'framework' }`, and\n * synchronous queries against the registry — they have no side-effects\n * outside the registry itself.\n *\n * @category Runtime\n * @since 2.0.0\n */\nimport * as z from \"zod\";\nimport type { Capability } from \"@skaile/workspaces/types\";\nimport type { CapabilityRegistry } from \"./capability-registry.js\";\nimport { defineCapability, type DefinedCapability } from \"./define-capability.js\";\n\n/**\n * Tokenize a free-text query and rank capabilities by case-insensitive\n * substring match count across `name`, `description`, and `promptFragment`.\n * Returns the top `limit` results, descending by score.\n */\nfunction keywordSearch(capabilities: Capability[], query: string, limit: number): Capability[] {\n  const tokens = query\n    .toLowerCase()\n    .split(/\\s+/)\n    .filter((t) => t.length > 0);\n  if (tokens.length === 0) return capabilities.slice(0, limit);\n\n  const scored = capabilities\n    .map((cap) => {\n      const haystack = [cap.name, cap.description, cap.promptFragment ?? \"\"]\n        .join(\" \")\n        .toLowerCase();\n      let score = 0;\n      for (const token of tokens) {\n        if (haystack.includes(token)) score += 1;\n      }\n      return { cap, score };\n    })\n    .filter((x) => x.score > 0)\n    .sort((a, b) => b.score - a.score);\n\n  return scored.slice(0, limit).map((x) => x.cap);\n}\n\n/**\n * Build the three built-in discovery capabilities. They close over the\n * registry so the handlers stay in sync with mid-session register /\n * deregister events.\n *\n * @category Runtime\n * @since 2.0.0\n * @docLink packages/runner/capabilities#built-in-discovery-capabilities\n */\nexport function builtinCapabilities(registry: CapabilityRegistry): DefinedCapability[] {\n  const listFilterSchema = z.strictObject({\n    side: z.enum([\"client\", \"agent\"]).optional(),\n    originKind: z\n      .enum([\"framework\", \"client\", \"agent\", \"flow\", \"skill\", \"mcp\", \"connector\", \"mount\"])\n      .optional(),\n    scope: z.enum([\"session\", \"turn\"]).optional(),\n  });\n  return [\n    defineCapability({\n      name: \"__capabilities.list\",\n      displayName: \"List capabilities\",\n      description:\n        \"List available capabilities in this session. Optionally filter by side, origin kind, or scope.\",\n      side: \"agent\",\n      origin: { kind: \"framework\" },\n      kind: \"query\",\n      userInvokable: false,\n      input: listFilterSchema,\n      handler: async (args) =>\n        registry.list({\n          side: args.side,\n          origin: args.originKind,\n          scope: args.scope,\n        }),\n    }),\n    defineCapability({\n      name: \"__capabilities.search\",\n      displayName: \"Search capabilities\",\n      description:\n        \"Keyword search across capability names, descriptions, and prompt fragments. Returns the top matches by score (substring match count).\",\n      side: \"agent\",\n      origin: { kind: \"framework\" },\n      kind: \"query\",\n      userInvokable: false,\n      input: z.strictObject({\n        query: z.string(),\n        limit: z.number().int().positive().optional(),\n      }),\n      handler: async ({ query, limit }) => keywordSearch(registry.list(), query, limit ?? 10),\n    }),\n    defineCapability({\n      name: \"__capabilities.describe\",\n      displayName: \"Describe capability\",\n      description: \"Return the full Capability descriptor for a single capability by name.\",\n      side: \"agent\",\n      origin: { kind: \"framework\" },\n      kind: \"query\",\n      userInvokable: false,\n      input: z.strictObject({ name: z.string() }),\n      handler: async ({ name }) => {\n        const cap = registry.resolve(name);\n        if (!cap) return null;\n        // Strip runtime-only fields by going through the wire-format `list`\n        // and finding-by-name; cheaper than another method on the registry.\n        const wire = registry.list().find((c) => c.name === name);\n        return wire ?? null;\n      },\n    }),\n  ];\n}\n\n/**\n * Register all framework built-ins onto a registry. Idempotent — the\n * registry's `register` is keyed by name and overwrites prior entries with\n * the same name.\n *\n * @category Runtime\n * @since 2.0.0\n * @docLink packages/runner/capabilities#built-in-discovery-capabilities\n */\nexport function bootstrapCapabilityRegistry(registry: CapabilityRegistry): void {\n  for (const cap of builtinCapabilities(registry)) {\n    registry.register(cap, \"agent\");\n  }\n}\n","/**\n * `CapabilityRegistry` — single per-session registry of {@link Capability}s.\n *\n * The registry is the source of truth for everything the LLM can invoke\n * during a session. Both the platform (via `ConfigureCommand.capabilities`\n * and {@link CapabilityRegisterCommand}) and the runtime (skill loaders,\n * flow adapters, MCP/connector/mount surfaces) call {@link register}; the\n * bridge driver pulls the LLM tool list via {@link composeLLMTools}.\n *\n * Trust enforcement: each call to {@link register} carries the registering\n * `source` (`'client'` or `'agent'`); the registry rejects mismatches such\n * as the agent claiming a `'client'` origin or vice-versa, logging a warning\n * and dropping the capability.\n *\n * Per-invocation logging: {@link invoke} constructs a\n * `createLogger({kind: 'capability', subkind: origin.kind, instance: name})`\n * and threads it through {@link HandlerContext} so handler output lands under\n * the `capability:<origin>:<name>` slice.\n *\n * Hibernation: {@link serialize} / {@link hydrate} round-trip the wire-format\n * capabilities. Agent-side capabilities (skill / flow / mcp / connector /\n * mount) are expected to re-register from their original sources on wake;\n * client-side capabilities are pushed back via\n * {@link ConfigureCommandV2 ConfigureCommand} from the platform.\n *\n * @category Runtime\n * @since 2.0.0\n */\nimport { createHash } from \"node:crypto\";\nimport type {\n  Capability,\n  CapabilityAudience,\n  CapabilityOrigin,\n  Logger,\n} from \"@skaile/workspaces/types\";\nimport { createLogger } from \"@skaile/workspaces/core/logging\";\nimport type { DefinedCapability, HandlerContext } from \"./define-capability.js\";\n\n/**\n * Default audience scope applied when a {@link Capability} omits `audience`.\n * Matches the v2.x behaviour where every registered capability appears in\n * both the LLM tool list and the command palette.\n */\nconst DEFAULT_AUDIENCE: readonly CapabilityAudience[] = [\"llm\", \"user\"];\n\nfunction audienceOf(cap: Capability): readonly CapabilityAudience[] {\n  return cap.audience ?? DEFAULT_AUDIENCE;\n}\n\nfunction hasAudience(cap: Capability, target: CapabilityAudience): boolean {\n  return audienceOf(cap).includes(target);\n}\n\n/**\n * Function shape for the platform-bound capability invoker.\n *\n * The runner uses this to dispatch `host.*` capability invocations (e.g.\n * `host.refresh_credential`, `host.audit`, `host.notify_user`) over the\n * transport and await the matching `CapabilityResultCommand`. Implementations\n * own the wire serialization and the per-call pending map.\n *\n * The result value is the capability's domain payload (already\n * deserialised; for `host.refresh_credential` this is a `CredentialMint`).\n * Capability-dispatch infrastructure failures (timeout, schema validation,\n * transport disconnect) are thrown as `Error` so callers can distinguish\n * them from domain failures encoded in the payload.\n *\n * @category Runtime\n * @since 3.0.0\n * @docLink packages/runner/capabilities#remote-invoker\n */\nexport type RemoteCapabilityInvoker = (name: string, input: unknown) => Promise<unknown>;\n\n/**\n * Minimal LLM tool descriptor consumed by bridge drivers. Drivers translate\n * this into the provider-specific tool spec (Claude tool definition, OpenAI\n * function spec, etc.) at registration time.\n *\n * Only the fields needed for tool registration are surfaced here; runtime\n * dispatch flows through {@link CapabilityRegistry.invoke}.\n *\n * @category Runtime\n * @since 2.0.0\n * @docLink packages/runner/capabilities#registry-surface\n */\nexport type LLMTool = {\n  /** Capability name; used as the LLM-visible tool name. */\n  name: string;\n  /** Human/LLM-readable description. */\n  description: string;\n  /** JSON Schema for the tool's input parameters. */\n  parameters: Record<string, unknown>;\n};\n\n/**\n * Filter shape accepted by {@link CapabilityRegistry.list}. All fields are\n * optional and match exactly when present.\n *\n * @category Runtime\n * @since 2.0.0\n * @docLink packages/runner/capabilities#registry-surface\n */\nexport type CapabilityListFilter = {\n  side?: \"client\" | \"agent\";\n  origin?: CapabilityOrigin[\"kind\"];\n  scope?: \"session\" | \"turn\";\n};\n\n/**\n * Side-tag declaring who is registering a capability. The registry uses\n * this to enforce origin trust — a client cannot register an `agent`-side\n * origin, and the agent cannot register `client` / external-origin\n * capabilities.\n *\n * @category Runtime\n * @since 2.0.0\n * @docLink packages/runner/capabilities#registry-surface\n */\nexport type RegisterSource = \"client\" | \"agent\";\n\nconst ORIGIN_PROMPT_ORDER: CapabilityOrigin[\"kind\"][] = [\n  \"framework\",\n  \"client\",\n  \"agent\",\n  \"flow\",\n  \"skill\",\n  \"mcp\",\n  \"connector\",\n  \"mount\",\n];\n\n/**\n * Per-session registry of capabilities. Construct one per\n * `startAgentServer` invocation; the runner threads it through serve mode's\n * command handlers and the bridge.\n *\n * @category Runtime\n * @since 2.0.0\n * @docLink packages/runner/capabilities#registry-surface\n */\nexport class CapabilityRegistry {\n  private readonly byName = new Map<string, DefinedCapability>();\n  private readonly logger: Logger;\n  private remoteInvoker?: RemoteCapabilityInvoker;\n\n  constructor(logger?: Logger) {\n    this.logger = logger ?? createLogger({ kind: \"runner\", subkind: \"capability-registry\" });\n  }\n\n  /**\n   * Install the platform-bound invoker used by {@link invokeRemote}.\n   *\n   * The runner wires this up after the transport is connected and the\n   * per-session pending-call map is in place. Idempotent — repeated calls\n   * replace the prior invoker.\n   *\n   * @category Runtime\n   * @since 3.0.0\n   */\n  setRemoteInvoker(invoker: RemoteCapabilityInvoker | undefined): void {\n    this.remoteInvoker = invoker;\n  }\n\n  /**\n   * Invoke a `host.*` (or other peer-side) capability on the platform.\n   *\n   * Composes a `capability_invoked` event under the hood and resolves with\n   * the matching `capability_result` payload. Infrastructure failures\n   * (timeout, schema mismatch, transport disconnect) reject with `Error`;\n   * domain failures (e.g. `{ ok: false, code }` for credential mints) ride\n   * in the resolved payload.\n   *\n   * @category Runtime\n   * @since 3.0.0\n   */\n  async invokeRemote(name: string, input: unknown): Promise<unknown> {\n    if (!this.remoteInvoker) {\n      throw new Error(\n        `Capability '${name}' invoked remotely but no remote invoker is wired. ` +\n          `Call CapabilityRegistry.setRemoteInvoker(...) before dispatch.`,\n      );\n    }\n    return this.remoteInvoker(name, input);\n  }\n\n  /**\n   * Register a capability. Validates that the registering `source` is\n   * permitted to declare the capability's `origin.kind`; mismatches are\n   * dropped with a warning so untrusted callers cannot impersonate other\n   * registration sources.\n   *\n   * Allowed combinations:\n   * - source `'agent'`: origins `framework | agent | flow | skill | mcp | connector | mount`\n   * - source `'client'`: origin `client` only\n   *\n   * @param cap - capability to register (typically built via {@link defineCapability})\n   * @param source - which side is doing the registration\n   */\n  register(cap: DefinedCapability, source: RegisterSource): void {\n    if (!this.isOriginAllowed(source, cap.origin)) {\n      this.logger.warn(\"capability registration rejected (origin mismatch)\", {\n        name: cap.name,\n        source,\n        originKind: cap.origin.kind,\n      });\n      return;\n    }\n    this.byName.set(cap.name, cap);\n    this.logger.info(\"capability registered\", {\n      name: cap.name,\n      side: cap.side,\n      originKind: cap.origin.kind,\n    });\n  }\n\n  /**\n   * Remove a capability by name. No-op when the name is unknown.\n   *\n   * @param name - capability name\n   */\n  deregister(name: string): void {\n    if (this.byName.delete(name)) {\n      this.logger.info(\"capability deregistered\", { name });\n    }\n  }\n\n  /**\n   * List capabilities, optionally filtering by `side`, `origin` kind, or\n   * `scope`. Returns the wire-format {@link Capability} shape (no internal\n   * Zod schemas or handlers).\n   */\n  list(filter?: CapabilityListFilter): Capability[] {\n    const all = Array.from(this.byName.values());\n    const matching = filter\n      ? all.filter(\n          (c) =>\n            (filter.side === undefined || c.side === filter.side) &&\n            (filter.origin === undefined || c.origin.kind === filter.origin) &&\n            (filter.scope === undefined || c.scope === filter.scope),\n        )\n      : all;\n    return matching.map((c) => this.toWire(c));\n  }\n\n  /**\n   * Resolve a capability by name. Returns the full {@link DefinedCapability}\n   * (including the original Zod schemas + handler) for use by the bridge.\n   *\n   * @returns the capability or `null` when the name is not registered\n   */\n  resolve(name: string): DefinedCapability | null {\n    return this.byName.get(name) ?? null;\n  }\n\n  /**\n   * Build LLM tool descriptors for every registered capability whose\n   * audience includes `'llm'` (the default when {@link Capability.audience}\n   * is omitted). Bridge drivers consume this output directly when\n   * assembling the tool list passed to the underlying LLM SDK.\n   *\n   * Capabilities scoped to `'runtime'` only (e.g. `host.refresh_credential`,\n   * `runner.add_mount`) are filtered out so they never reach the model.\n   */\n  composeLLMTools(): LLMTool[] {\n    return Array.from(this.byName.values())\n      .filter((c) => hasAudience(c, \"llm\"))\n      .map((c) => ({\n        name: c.name,\n        description: c.description,\n        parameters: c.inputSchema,\n      }));\n  }\n\n  /**\n   * Compose a deterministic prompt section from every registered\n   * capability whose audience includes `'llm'`. Ordering matches\n   * `ORIGIN_PROMPT_ORDER` (framework first, then client, then agent-side\n   * surfaces) so the agent sees a stable layout. Capabilities without a\n   * `promptFragment` are skipped.\n   */\n  composePromptSection(): string {\n    const groups = new Map<CapabilityOrigin[\"kind\"], string[]>();\n    for (const cap of this.byName.values()) {\n      if (!cap.promptFragment) continue;\n      if (!hasAudience(cap, \"llm\")) continue;\n      const arr = groups.get(cap.origin.kind) ?? [];\n      arr.push(cap.promptFragment);\n      groups.set(cap.origin.kind, arr);\n    }\n    const lines: string[] = [];\n    for (const kind of ORIGIN_PROMPT_ORDER) {\n      const fragments = groups.get(kind);\n      if (!fragments?.length) continue;\n      for (const fragment of fragments) {\n        lines.push(fragment);\n      }\n    }\n    return lines.join(\"\\n\\n\");\n  }\n\n  /**\n   * Serialize the registry to wire-format capabilities for hibernation. The\n   * runtime fields (`inputZod`, `outputZod`, `handler`) are dropped; only\n   * the wire shape is kept.\n   */\n  serialize(): Capability[] {\n    return Array.from(this.byName.values()).map((c) => this.toWire(c));\n  }\n\n  /**\n   * Replay a wire snapshot taken via {@link serialize}. Wire-only capabilities\n   * (no handler) are stored so {@link list} / {@link composeLLMTools} return\n   * a complete picture; agent-side surfaces are expected to re-register\n   * fully (with handlers) from their original sources on wake.\n   *\n   * Per the v2 design, only `client`-side capabilities are persisted across\n   * hibernation by this method — agent-side ones come back via the\n   * skill / flow / connector / mount adapters. Snapshot entries from other\n   * origins are skipped on hydrate.\n   */\n  hydrate(snapshot: Capability[]): void {\n    for (const cap of snapshot) {\n      if (cap.origin.kind !== \"client\") continue;\n      const stub: DefinedCapability = {\n        ...cap,\n        inputZod: HYDRATED_PASSTHROUGH_ZOD,\n        outputZod: undefined,\n        handler: HYDRATED_REJECT_HANDLER,\n      };\n      this.byName.set(cap.name, stub);\n    }\n    this.logger.info(\"capability registry hydrated\", { count: snapshot.length });\n  }\n\n  /**\n   * Invoke a registered capability. Validates the input against the Zod\n   * schema, builds the per-handler logger, and runs the handler. Logs\n   * `info \"invoking\"` and `info \"ok\"` (or `error \"failed\"`) under the\n   * `capability:<origin>:<name>` slice for every call.\n   *\n   * @throws when the capability is unknown or the input fails validation\n   */\n  async invoke(\n    name: string,\n    input: unknown,\n    baseCtx: Omit<HandlerContext, \"log\">,\n  ): Promise<unknown> {\n    const cap = this.resolve(name);\n    if (!cap) {\n      throw new Error(`Unknown capability: ${name}`);\n    }\n    const log = createLogger({\n      kind: \"capability\",\n      subkind: cap.origin.kind,\n      instance: cap.name,\n    });\n    log.info(\"invoking\", { input });\n    try {\n      const validated = cap.inputZod.parse(input);\n      const result = await cap.handler(validated, { ...baseCtx, log });\n      log.info(\"ok\", { output: result });\n      return result;\n    } catch (err) {\n      log.error(\"failed\", err);\n      throw err;\n    }\n  }\n\n  /** True when `source` is allowed to register the given `origin`. */\n  private isOriginAllowed(source: RegisterSource, origin: CapabilityOrigin): boolean {\n    if (source === \"client\") {\n      return origin.kind === \"client\";\n    }\n    // source === 'agent'\n    return origin.kind !== \"client\";\n  }\n\n  /** Strip the runtime-only fields from a {@link DefinedCapability}. */\n  private toWire(cap: DefinedCapability): Capability {\n    return {\n      name: cap.name,\n      displayName: cap.displayName,\n      description: cap.description,\n      inputSchema: cap.inputSchema,\n      outputSchema: cap.outputSchema,\n      side: cap.side,\n      origin: cap.origin,\n      scope: cap.scope,\n      fireAndForget: cap.fireAndForget,\n      requiresApproval: cap.requiresApproval,\n      kind: cap.kind,\n      userInvokable: cap.userInvokable,\n      audience: cap.audience,\n      promptFragment: cap.promptFragment,\n      callTimeoutMs: cap.callTimeoutMs,\n      render: cap.render,\n    };\n  }\n}\n\n/**\n * Compute a deterministic signature over a registry's wire-format\n * capabilities. Used by the session-resume cascade (tier-1 native SDK\n * resume) to detect toolset drift between hibernate and wake.\n *\n * The signature hashes a canonicalized projection of each capability:\n * `name + origin.kind + sha256(inputSchema)`. Capabilities are sorted\n * by `name` so registration order does not affect the result.\n *\n * Excluded from the hash:\n * - `displayName` and `userInvokable` — UI metadata only; do not affect\n *   what the LLM can call.\n * - `description` and `outputSchema` — text/shape changes that don't\n *   alter the call surface.\n *\n * Spec: `_devlog/specs/2026-05-05-session-resume-restart-design.md`\n * § \"Capability signature\".\n *\n * @param caps - Wire-format capabilities from {@link CapabilityRegistry.list}.\n * @returns A hex SHA-256 string that uniquely identifies the toolset.\n * @category Resume\n * @since 3.2.0\n * @docLink packages/runner/capabilities#compute-capability-signature\n */\nexport function computeCapabilitySignature(caps: readonly Capability[]): string {\n  const canonical = caps\n    .slice()\n    .sort((a, b) => a.name.localeCompare(b.name))\n    .map((c) => ({\n      name: c.name,\n      origin: c.origin.kind,\n      schemaSha256: sha256(JSON.stringify(c.inputSchema ?? {})),\n    }));\n  return sha256(JSON.stringify(canonical));\n}\n\nfunction sha256(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\n// Sentinel Zod schema used by `hydrate()` to keep the wire-format snapshot\n// usable for `list`/`composeLLMTools` without forcing real handler reattach\n// at hibernate-restore time. Actual invocation must go through a re-registered\n// capability that comes back via `ConfigureCommand.capabilities` on wake.\nconst HYDRATED_PASSTHROUGH_ZOD: import(\"zod\").ZodTypeAny = {\n  parse: (v: unknown) => v,\n  // The full Zod surface is not required here — `parse` is the only method\n  // used by `invoke`, and hydrated stubs are not expected to be invoked\n  // before the platform resends the live capability via configure.\n} as unknown as import(\"zod\").ZodTypeAny;\n\nconst HYDRATED_REJECT_HANDLER = async (): Promise<never> => {\n  throw new Error(\n    \"Hydrated capability stub cannot be invoked — re-register via ConfigureCommand on wake.\",\n  );\n};\n","/**\n * Client-side capability round-trip helpers.\n *\n * When the LLM invokes a `side: 'client'` capability, the runner does NOT\n * execute the handler in-process. Instead it:\n *\n *  1. Generates a `callId`.\n *  2. Emits a {@link CapabilityInvokedEvent} over the transport.\n *  3. Registers a pending promise keyed by `callId`.\n *  4. Awaits a {@link CapabilityResultCommand} from the platform; resolves\n *     with `result` or rejects with `result.error`.\n *\n * `fireAndForget` short-circuits step 3 — the handler resolves with `{}`\n * immediately after emitting the invoke event. The bridge-level dispatch\n * also short-circuits before calling `hooks.invoke()`, so this is a\n * defence-in-depth guard.\n *\n * The helpers below are extracted for unit testing; the actual wiring\n * lives in `serve.ts` where the transport / pending map are owned.\n *\n * @category Capabilities\n * @since 2.0.0\n */\nimport type { AgentEvent, Capability, CapabilityResultCommand } from \"@skaile/workspaces/types\";\n\n/**\n * Registry of in-flight capability calls. The serve loop owns the map; this\n * type is exported so tests can pass a real `Map` instance and assert the\n * pending state across the round-trip.\n * @docLink packages/runner/capabilities#registry-surface\n */\nexport type PendingCallEntry = {\n  resolve: (value: unknown) => void;\n  reject: (err: Error) => void;\n  timer: ReturnType<typeof setTimeout>;\n};\n\n/**\n * Default timeout (60s) for waiting on a capability result from the platform.\n * Mirrors the value used in `serve.ts`.\n *\n * @docLink packages/runner/capabilities#registry-surface\n */\nexport const DEFAULT_CAPABILITY_CALL_TIMEOUT_MS = 60_000;\n\n/**\n * Resolve the round-trip timeout for a wire-format client capability.\n *\n * Precedence:\n *  1. An explicit per-capability `callTimeoutMs` — set for capabilities that\n *     legitimately block far longer than a normal tool call (e.g.\n *     `platform.ask_session`, which suspends the caller's turn until a peer\n *     session answers).\n *  2. `approvalTimeoutMs` when the capability is `requiresApproval` — human\n *     approvals routinely take minutes.\n *  3. `DEFAULT_CAPABILITY_CALL_TIMEOUT_MS` (60s) otherwise.\n *\n * Extracted as a pure function so the precedence is unit-testable without\n * spinning up `startAgentServer`.\n *\n * @docLink packages/runner/capabilities#registry-surface\n */\nexport function resolveCapabilityCallTimeoutMs(\n  cap: Pick<Capability, \"callTimeoutMs\" | \"requiresApproval\">,\n  approvalTimeoutMs: number,\n): number {\n  if (typeof cap.callTimeoutMs === \"number\") return cap.callTimeoutMs;\n  if (cap.requiresApproval) return approvalTimeoutMs;\n  return DEFAULT_CAPABILITY_CALL_TIMEOUT_MS;\n}\n\n/**\n * Build the runner-side handler for a wire-format client capability. The\n * returned function emits `capability_invoked` and waits for a matching\n * `capability_result` command via the supplied pending-calls map.\n *\n * Decoupled from `serve.ts` so it can be exercised in isolation without\n * spinning up `startAgentServer`.\n * @docLink packages/runner/capabilities#registry-surface\n */\nexport function buildClientCapabilityHandler(args: {\n  wire: Capability;\n  pending: Map<string, PendingCallEntry>;\n  emit: (event: AgentEvent) => void;\n  timeoutMs?: number;\n  /** Override the callId factory for deterministic tests. */\n  generateCallId?: () => string;\n}): (input: unknown) => Promise<unknown> {\n  const timeoutMs = args.timeoutMs ?? DEFAULT_CAPABILITY_CALL_TIMEOUT_MS;\n  const gen = args.generateCallId ?? (() => `cap-${Date.now()}-${Math.floor(Math.random() * 1e9)}`);\n  return async (input: unknown) => {\n    const callId = gen();\n    if (args.wire.fireAndForget) {\n      args.emit({\n        type: \"capability_invoked\",\n        callId,\n        name: args.wire.name,\n        input,\n        invokedBy: \"agent\",\n      });\n      return {};\n    }\n    return new Promise<unknown>((resolve, reject) => {\n      const timer = setTimeout(() => {\n        args.pending.delete(callId);\n        reject(\n          new Error(\n            `Capability ${args.wire.name} (callId=${callId}) timed out after ${timeoutMs}ms`,\n          ),\n        );\n      }, timeoutMs);\n      args.pending.set(callId, { resolve, reject, timer });\n      args.emit({\n        type: \"capability_invoked\",\n        callId,\n        name: args.wire.name,\n        input,\n        invokedBy: \"agent\",\n      });\n    });\n  };\n}\n\n/**\n * Resolve / reject a pending capability call based on a `capability_result`\n * command from the platform. Returns `true` when the callId matched a\n * pending entry, `false` otherwise (for telemetry / debug logging).\n * @docLink packages/runner/capabilities#registry-surface\n */\nexport function resolveCapabilityResult(\n  pending: Map<string, PendingCallEntry>,\n  cmd: CapabilityResultCommand,\n): boolean {\n  const entry = pending.get(cmd.callId);\n  if (!entry) return false;\n  clearTimeout(entry.timer);\n  pending.delete(cmd.callId);\n  const result = cmd.result;\n  if (result && typeof result === \"object\" && \"error\" in result) {\n    entry.reject(new Error(String((result as { error: unknown }).error)));\n  } else {\n    entry.resolve(result);\n  }\n  return true;\n}\n\n/**\n * Reject a pending capability call when the platform sends a\n * `capability_approve` with `decision: 'rejected'`. Used by capabilities\n * declared `requiresApproval: true` — the platform shows a confirm UI on\n * `capability_invoked`; on user denial it forwards the rejection back to the\n * runner via this command instead of dispatching the handler.\n *\n * Returns `true` when the callId matched a pending entry, `false` otherwise\n * (e.g. the call was already resolved via `capability_result`).\n *\n * Approvals (`decision: 'approved'`) are no-ops at this level — the platform\n * still drives dispatch and replies via `capability_result`. This function\n * only handles the rejection short-circuit.\n *\n * @param pending - Map of in-flight capability calls keyed by `callId`.\n * @param callId - ID of the call being denied.\n * @param feedback - Optional user-facing feedback message passed to the rejection error.\n * @returns `true` when the call was found and rejected; `false` when already resolved.\n * @category Capabilities\n * @since 2.1.0\n * @docLink packages/runner/capabilities#reject-capability-on-approval-deny\n */\nexport function rejectCapabilityOnApprovalDeny(\n  pending: Map<string, PendingCallEntry>,\n  callId: string,\n  feedback?: string,\n): boolean {\n  const entry = pending.get(callId);\n  if (!entry) return false;\n  clearTimeout(entry.timer);\n  pending.delete(callId);\n  entry.reject(new Error(feedback ?? \"declined by user\"));\n  return true;\n}\n","/**\n * Runtime context data supplied to a {@link CompactionStrategy}\n * when deciding whether to compact the context window.\n *\n * @docLink packages/runner/dev-guide#compaction\n */\nexport interface CompactionContext {\n  estimatedTokens: number;\n  contextWindow: number;\n  messageCount: number;\n  lastCompactionSeq: number | null;\n  timeSinceLastCompaction: number | null;\n}\n\n/**\n * Strategy for deciding when the context window should be compacted.\n *\n * Implementations receive the current {@link CompactionContext} and\n * return true when compaction should proceed.\n *\n * @docLink packages/runner/dev-guide#compaction\n */\nexport interface CompactionStrategy {\n  shouldCompact(context: CompactionContext): boolean;\n}\n\n/**\n * Compaction strategy that triggers when estimated token usage\n * exceeds a percentage of the context window. A cooldown period\n * prevents thrashing.\n *\n * @docLink packages/runner/dev-guide#compaction\n */\nexport class TokenThresholdStrategy implements CompactionStrategy {\n  private readonly thresholdPercent: number;\n  private readonly minCooldownMs: number;\n\n  constructor(opts: { thresholdPercent: number; minCooldownMs: number }) {\n    this.thresholdPercent = opts.thresholdPercent;\n    this.minCooldownMs = opts.minCooldownMs;\n  }\n\n  shouldCompact(context: CompactionContext): boolean {\n    const fillPercent = (context.estimatedTokens / context.contextWindow) * 100;\n    if (fillPercent < this.thresholdPercent) return false;\n\n    // Respect cooldown\n    if (\n      context.timeSinceLastCompaction !== null &&\n      context.timeSinceLastCompaction < this.minCooldownMs\n    ) {\n      return false;\n    }\n\n    return true;\n  }\n}\n","const DEFAULT_COMPACTION_PROMPT = `You are being asked to compact this conversation into a structured summary.\nThis summary will replace the full conversation history when the session\nis restored. Produce a summary that lets you continue working effectively\nwithout access to the original messages.\n\n## Rules\n\nPRESERVE (include verbatim):\n- Current task/goal and its status\n- All file paths that were read, created, or modified\n- Function/class/variable names that are relevant to ongoing work\n- Key decisions made and the reasoning behind them\n- Errors encountered and how they were resolved\n- Active flow node and state (if any)\n- Unresolved questions or pending user input\n- User names and who said/requested what (multi-user sessions)\n- Test commands and verification criteria\n- Any explicit user instructions about preferences or constraints\n\nCOMPRESS (summarize in one line each):\n- Tool call / tool result pairs\n- Intermediate reasoning steps\n- Exploration paths that informed a decision\n\nDROP (omit entirely):\n- Full file contents (can be re-read from disk)\n- Verbose command output (build logs, test suite output)\n- Exploration that led nowhere and didn't inform decisions\n- Redundant back-and-forth (corrections already applied)\n- Transient UI state\n\n## Format\n\nWrite a structured summary using these sections. Omit any section that\nhas no content.\n\n### Goal\nWhat the user is trying to accomplish.\n\n### Progress\nWhat has been done so far, organized by sub-task.\n\n### Key Decisions\nDecisions made and why, as a bulleted list.\n\n### Active State\nCurrent work in progress -- what was happening when compaction triggered.\n\n### Files\nAll relevant file paths with a one-line note on each.\n\n### Pending\nWhat still needs to be done or is waiting on user input.\n\n### Context\nUser preferences, constraints, or instructions that must carry forward.`;\n\n/**\n * Assemble the final compaction prompt from layered sources.\n *\n * Resolution order:\n *   base = agentPrompt ?? DEFAULT_COMPACTION_PROMPT\n *   final = base + skillDirectives + focus\n * @docLink packages/runner/dev-guide#compaction\n */\nexport function buildCompactionPrompt(opts: {\n  agentPrompt?: string;\n  skillDirectives?: string[];\n  mcpDirectives?: string[];\n  focus?: string;\n}): string {\n  const base = opts.agentPrompt ?? DEFAULT_COMPACTION_PROMPT;\n  const parts = [base];\n\n  const allDirectives = [...(opts.skillDirectives ?? []), ...(opts.mcpDirectives ?? [])];\n\n  if (allDirectives.length > 0) {\n    parts.push(\n      `\\n\\n## Additional Compaction Directives\\n${allDirectives.map((d) => `- ${d}`).join(\"\\n\")}`,\n    );\n  }\n\n  if (opts.focus) {\n    parts.push(`\\n\\n## Focus\\n${opts.focus}`);\n  }\n\n  return parts.join(\"\");\n}\n","import type { AgentDriver } from \"@skaile/workspaces/bridge\";\nimport { classifyClaudeSdkError } from \"@skaile/workspaces/bridge\";\nimport type { CompactionConfig } from \"@skaile/workspaces/core\";\nimport { COMPACTION_DEFAULTS } from \"@skaile/workspaces/core\";\nimport type {\n  CompactionAttemptEvent,\n  CompactionTrigger,\n  SnapshotEvent,\n} from \"@skaile/workspaces/types\";\nimport { buildCompactionPrompt } from \"./prompt.js\";\nimport { type CompactionStrategy, TokenThresholdStrategy } from \"./strategy.js\";\n\n/**\n * Minimum character length the LLM must produce to count as a meaningful summary.\n * Below this we mark the attempt `failed`/`too_short`. Tunable: 200 chars is roughly\n * 50 tokens, the floor for \"the model said anything substantive\".\n */\nconst MIN_SUMMARY_CHARS = 200;\n\n/**\n * Maximum compression ratio (outputTokens / tokensBefore) we accept as a successful\n * compaction. Above this the LLM essentially returned the input back; mark `poor_ratio`.\n */\nconst MAX_COMPRESSION_RATIO = 0.9;\n\n/**\n * Maximum length under which a captured response is still considered a candidate\n * for being a rate-limit error message rather than a real summary. Real\n * compactions are typically thousands of characters; rate-limit relays are\n * short.\n */\nconst RATE_LIMIT_TEXT_MAX_CHARS = 1500;\n\n/**\n * Phrases that strongly indicate the captured text is the LLM relaying a\n * rate-limit / quota error to the user rather than producing a summary.\n * Conservative on purpose — a real summary that mentions rate limits in\n * passing would only match if it is also short, see\n * {@link detectRateLimitInSummary}.\n */\nconst RATE_LIMIT_TEXT_PATTERNS: RegExp[] = [\n  /you('?| ha)ve hit your (rate |usage )?limit/i,\n  /you('?| ha)ve reached your (usage |rate )?limit/i,\n  /you('?| ha)ve been rate[\\s-]?limited/i,\n  /rate limit (exceeded|reached|hit)/i,\n  /usage limit (exceeded|reached)/i,\n  /quota (exceeded|reached)/i,\n  /claude (ai )?usage limit reached/i,\n];\n\n/**\n * Detect whether the captured response from a compaction `prompt()` call is\n * actually a rate-limit error message returned as text (instead of as a\n * thrown error). Persisting such a \"summary\" would corrupt context\n * restoration on the next wake — the snapshot prompt would inject the error\n * text as if it were the conversation summary.\n *\n * Conservative: requires both a strong signal phrase AND a short response.\n * Real summaries are routinely 2k+ chars; rate-limit relays are short.\n *\n * Issue: I-29.\n */\nexport function detectRateLimitInSummary(text: string): boolean {\n  if (text.length > RATE_LIMIT_TEXT_MAX_CHARS) return false;\n  return RATE_LIMIT_TEXT_PATTERNS.some((p) => p.test(text));\n}\n\n/**\n * Validation of a compaction output's structural shape, run BEFORE we persist\n * it as a `success`. Cheap synchronous checks only — no LLM calls.\n *\n * Failed validation does NOT throw; it returns a structured verdict so the\n * orchestrator can record a `failed` Compaction row with the right errorCode.\n *\n * @param text         The captured summary text from the driver.\n * @param tokensBefore Estimated input token count (from `driver.getTokenUsage()` before the call).\n * @param tokensAfter  Output token count of the summary (from driver or chars/4 heuristic).\n * @returns `{ ok: true }` on pass, otherwise `{ ok: false, errorCode }` with one of:\n *          `\"empty\"` | `\"too_short\"` | `\"poor_ratio\"` | `\"rate_limit\"`.\n *\n * Spec: `_devlog/specs/2026-05-05-session-resume-restart-design.md` § Validation at write time.\n * @docLink packages/runner/capabilities#validate-compaction-output\n */\nexport function validateCompactionOutput(\n  text: string,\n  tokensBefore: number,\n  tokensAfter: number,\n): { ok: true } | { ok: false; errorCode: string } {\n  if (!text.trim()) return { ok: false, errorCode: \"empty\" };\n  if (detectRateLimitInSummary(text)) return { ok: false, errorCode: \"rate_limit\" };\n  if (text.length < MIN_SUMMARY_CHARS) return { ok: false, errorCode: \"too_short\" };\n  if (tokensBefore > 0 && tokensAfter / tokensBefore > MAX_COMPRESSION_RATIO) {\n    return { ok: false, errorCode: \"poor_ratio\" };\n  }\n  return { ok: true };\n}\n\n/**\n * Options for the {@link CompactionOrchestrator}.\n *\n * @docLink packages/runner/dev-guide#compaction\n */\nexport interface CompactionOrchestratorOptions {\n  driver: AgentDriver;\n  config?: CompactionConfig;\n  skillDirectives?: string[];\n  mcpDirectives?: string[];\n  agentCompactionPrompt?: string;\n  onCompactionStart?: (trigger: CompactionTrigger) => void;\n  onSnapshot?: (snapshot: SnapshotEvent) => void;\n  /**\n   * Emitted on EVERY compaction attempt, success or failure. Phase 1 sink for\n   * the new `Compaction` table observability surface; the host's serve.ts wires\n   * this to forward events on the agent transport.\n   */\n  onCompactionAttempt?: (event: CompactionAttemptEvent) => void;\n  onCompactionEnd?: () => void;\n  onLog?: (line: string) => void;\n  /**\n   * Phase 3 (resume cascade): supplies the current capability registry\n   * signature at compaction time so it lands on the\n   * {@link CompactionAttemptEvent}. The wake selector compares this against\n   * the runner's current signature to decide tier-1 native SDK resume\n   * eligibility.\n   *\n   * Returns `null` when the host cannot compute a signature (legacy boot\n   * path, registry not yet bootstrapped); the orchestrator records `null`\n   * in that case and the resulting compaction is tier-1 ineligible.\n   */\n  getCurrentCapabilitySignature?: () => string | null;\n}\n\n/**\n * Orchestrates context window compaction for a running agent session.\n *\n * Monitors token usage against the configured thresholds and triggers\n * compaction via snapshots when the strategy fires.\n *\n * @docLink packages/runner/dev-guide#compaction\n */\nexport class CompactionOrchestrator {\n  private readonly driver: AgentDriver;\n  private readonly strategy: CompactionStrategy;\n  private readonly config: Required<CompactionConfig>;\n  private readonly opts: CompactionOrchestratorOptions;\n\n  private _isCompacting = false;\n  private lastCompactionSeq: number | null = null;\n  private lastCompactionTime: number | null = null;\n  private currentSeq = 0;\n  private messagesSinceCompaction = 0;\n\n  constructor(opts: CompactionOrchestratorOptions) {\n    this.driver = opts.driver;\n    this.opts = opts;\n    this.config = { ...COMPACTION_DEFAULTS, ...opts.config };\n    this.strategy = new TokenThresholdStrategy({\n      thresholdPercent: this.config.thresholdPercent,\n      minCooldownMs: this.config.minCooldownMs,\n    });\n  }\n\n  get hasNewMessagesSinceCompaction(): boolean {\n    return this.messagesSinceCompaction > 0;\n  }\n\n  trackMessage(seq: number): void {\n    this.currentSeq = seq;\n    this.messagesSinceCompaction++;\n  }\n\n  shouldCompact(): boolean {\n    if (!this.config.enabled) return false;\n    const usage = this.driver.getTokenUsage();\n    const contextWindow = this.driver.getContextWindow();\n    if (!usage || !contextWindow || usage.inputTokens === undefined) return false;\n\n    return this.strategy.shouldCompact({\n      estimatedTokens: usage.inputTokens,\n      contextWindow,\n      messageCount: this.messagesSinceCompaction,\n      lastCompactionSeq: this.lastCompactionSeq,\n      timeSinceLastCompaction:\n        this.lastCompactionTime !== null ? Date.now() - this.lastCompactionTime : null,\n    });\n  }\n\n  async compact(trigger: CompactionTrigger, focus?: string): Promise<SnapshotEvent | null> {\n    if (this._isCompacting) return null;\n    this._isCompacting = true;\n    try {\n      return await this._doCompact(trigger, focus);\n    } finally {\n      this._isCompacting = false;\n    }\n  }\n\n  private async _doCompact(\n    trigger: CompactionTrigger,\n    focus?: string,\n  ): Promise<SnapshotEvent | null> {\n    const tokensBefore = this.driver.getTokenUsage()?.inputTokens ?? 0;\n    const driverSessionId = this.driver.runtimeSessionId ?? null;\n    const driverModel = this.driver.getModel() ?? null;\n    const driverProvider = this.driver.driverInfo?.id ?? null;\n    const coversFromSeq = this.lastCompactionSeq ?? 0;\n    // Phase 3: capture the registry signature once at the start of the call\n    // so all attempt-event branches (failed/validation-failed/success) share\n    // the same value.\n    const capabilitySignatureAtCompaction = this.opts.getCurrentCapabilitySignature?.() ?? null;\n\n    this.opts.onCompactionStart?.(trigger);\n    this.opts.onLog?.(`[compaction] Starting (trigger=${trigger}, tokens=${tokensBefore})`);\n\n    const prompt = buildCompactionPrompt({\n      agentPrompt: this.opts.agentCompactionPrompt,\n      skillDirectives: this.opts.skillDirectives,\n      mcpDirectives: this.opts.mcpDirectives,\n      focus,\n    });\n\n    let summaryText = \"\";\n    // The driver emits raw bridge-level events (message_update, message_start,\n    // message_end) that are NOT in the AgentEvent union — those are normalized\n    // by EventNormalizer in serve.ts. Since the compaction handler attaches\n    // directly to the driver, we type the parameter loosely.\n    const captureHandler = (raw: unknown) => {\n      const event = raw as { type: string; [k: string]: unknown };\n      // Normalized events (from EventNormalizer or other drivers)\n      if (event.type === \"text\") {\n        summaryText += (event.content as string) ?? \"\";\n        return;\n      }\n      // Raw SDK driver events — message_update carries _textDelta, bypassing\n      // the EventNormalizer which isn't in the compaction capture path.\n      if (event.type === \"message_update\") {\n        const delta = event._textDelta as string | undefined;\n        if (delta) summaryText += delta;\n        return;\n      }\n      // Fallback: non-streaming drivers may emit message_start/message_end\n      // with the full text in the message content blocks.\n      if (event.type === \"message_start\" || event.type === \"message_end\") {\n        const msg = event.message as { content?: { type: string; text?: string }[] } | undefined;\n        if (!msg?.content) return;\n        const blocks = Array.isArray(msg.content) ? msg.content : [];\n        for (const b of blocks) {\n          if (b.type === \"text\" && b.text) summaryText += b.text;\n        }\n      }\n    };\n\n    let promptError: unknown = null;\n    try {\n      this.driver.on(\"agent-event\", captureHandler);\n      await this.driver.prompt(prompt);\n    } catch (err) {\n      promptError = err;\n    } finally {\n      this.driver.removeListener(\"agent-event\", captureHandler);\n    }\n\n    // ── Failure path: prompt() threw ──────────────────────────────────────\n    if (promptError !== null) {\n      const classified = classifyClaudeSdkError(\n        promptError instanceof Error ? promptError.message : String(promptError),\n      );\n      // Map classifier categories to our error codes per spec.\n      // `auth` covers both real credential failures AND payment-blocked OAuth\n      // subscriptions that Anthropic mislabels as auth errors (see\n      // bridge/error-classifier.ts docstring) — owners investigate further.\n      const errorCode =\n        classified.category === \"rate_limit\"\n          ? \"rate_limit\"\n          : classified.category === \"auth\"\n            ? \"auth\"\n            : classified.category === \"network\"\n              ? \"timeout\"\n              : classified.category === \"validation\"\n                ? \"parse_error\"\n                : classified.category;\n\n      this.opts.onLog?.(`[compaction] Failed: ${classified.message} (${errorCode})`);\n      this.opts.onCompactionAttempt?.({\n        type: \"compaction_attempt\",\n        status: \"failed\",\n        errorCode,\n        trigger,\n        summary: \"\",\n        model: driverModel,\n        provider: driverProvider,\n        inputTokens: tokensBefore,\n        outputTokens: 0,\n        coversFromSeq,\n        coversToSeq: this.currentSeq,\n        driverSessionIdAtCompaction: driverSessionId,\n        modelAtCompaction: driverModel,\n        capabilitySignatureAtCompaction,\n        validatedAt: null,\n      });\n      this.opts.onCompactionEnd?.();\n      return null;\n    }\n\n    // ── Validation path: prompt succeeded but output may be malformed ────\n    // Use actual output token count from the driver; fall back to heuristic.\n    const actualUsage = this.driver.getTokenUsage();\n    const tokensAfter = actualUsage?.outputTokens ?? Math.ceil(summaryText.length / 4);\n\n    const validation = validateCompactionOutput(summaryText, tokensBefore, tokensAfter);\n    if (!validation.ok) {\n      this.opts.onLog?.(\n        `[compaction] Output failed validation (${validation.errorCode}); recording failed attempt`,\n      );\n      this.opts.onCompactionAttempt?.({\n        type: \"compaction_attempt\",\n        status: \"failed\",\n        errorCode: validation.errorCode,\n        trigger,\n        summary: \"\",\n        model: driverModel,\n        provider: driverProvider,\n        inputTokens: tokensBefore,\n        outputTokens: tokensAfter,\n        coversFromSeq,\n        coversToSeq: this.currentSeq,\n        driverSessionIdAtCompaction: driverSessionId,\n        modelAtCompaction: driverModel,\n        capabilitySignatureAtCompaction,\n        validatedAt: null,\n      });\n      this.opts.onCompactionEnd?.();\n      return null;\n    }\n\n    // ── Success path ──────────────────────────────────────────────────────\n    const validatedAt = new Date().toISOString();\n\n    const snapshot: SnapshotEvent = {\n      type: \"snapshot\",\n      summary: summaryText,\n      trigger,\n      coversFromSeq,\n      coversToSeq: this.currentSeq,\n      tokensBefore,\n      tokensAfter,\n    };\n\n    // 1. Emit the new attempt event AND the legacy snapshot event.\n    //    Both ride alongside each other through Phase 4 (back-compat).\n    this.opts.onCompactionAttempt?.({\n      type: \"compaction_attempt\",\n      status: \"success\",\n      errorCode: null,\n      trigger,\n      summary: summaryText,\n      model: driverModel,\n      provider: driverProvider,\n      inputTokens: tokensBefore,\n      outputTokens: tokensAfter,\n      coversFromSeq,\n      coversToSeq: this.currentSeq,\n      driverSessionIdAtCompaction: driverSessionId,\n      modelAtCompaction: driverModel,\n      capabilitySignatureAtCompaction,\n      validatedAt,\n    });\n    this.opts.onSnapshot?.(snapshot);\n\n    // 2. Update internal state\n    this.lastCompactionSeq = this.currentSeq + 1;\n    this.lastCompactionTime = Date.now();\n    this.messagesSinceCompaction = 0;\n\n    // 3. Clear compacting flag so the injection turn's events flow normally\n    this.opts.onCompactionEnd?.();\n\n    // 4. Reset driver and inject snapshot (skip for hibernate -- container shuts down)\n    if (trigger !== \"hibernate\") {\n      this.opts.onLog?.(\"[compaction] Resetting driver session\");\n      await this.driver.resetSession();\n      await this.driver.prompt(\n        `<session_snapshot>\\n${summaryText}\\n</session_snapshot>\\n\\nThe conversation has been compacted. The above snapshot contains the full context of our work so far. Continue from where we left off.`,\n      );\n    }\n\n    // 5. Log completion\n    this.opts.onLog?.(\n      `[compaction] Complete (${tokensBefore} -> ${tokensAfter} tokens, ratio=${((tokensAfter / Math.max(tokensBefore, 1)) * 100).toFixed(1)}%)`,\n    );\n    return snapshot;\n  }\n\n  initFromSnapshot(lastSnapshotSeq: number, lastSnapshotTime: number): void {\n    this.lastCompactionSeq = lastSnapshotSeq;\n    this.lastCompactionTime = lastSnapshotTime;\n    this.messagesSinceCompaction = 0;\n  }\n}\n","/**\n * Rewrite file_changed event paths to mounts-relative form.\n *\n * The bridge normalizer forwards tool filePaths verbatim — for Claude SDK\n * Write/Edit they are cwd-relative (e.g. \"workspace/foo/bar.py\" when cwd\n * is /skaile and the file lives at /skaile/workspace/foo/bar.py). The\n * frontend's file-change listener treats the path as relative to the\n * currently-selected mount, which double-prefixes when the workspace\n * mount sits under cwd.\n *\n * This helper resolves the path against cwd, locates the mount it falls\n * inside, and re-expresses the path relative to that mount with the\n * matching mountId attached.\n *\n * Events that already carry a mountId (watcher-originated) and events\n * whose path resolves outside every mount are passed through unchanged.\n */\n\nimport { relative, resolve } from \"node:path\";\nimport type { AgentEvent } from \"@skaile/workspaces/types\";\n\n/**\n * Describes a filesystem mount point for path rewriting.\n *\n * @docLink packages/runner/dev-guide#flow-execution-turn-based-model\n */\nexport interface MountPoint {\n  id: string;\n  /** Absolute mount path on the agent's filesystem. */\n  mountPath: string;\n}\n\n/**\n * Rewrite a single file_changed event. Non-file_changed events and events\n * already tagged with a mountId are returned unchanged.\n * @docLink packages/runner/dev-guide#flow-execution-turn-based-model\n */\nexport function rewriteFileChangedPath(\n  event: AgentEvent,\n  cwd: string,\n  mounts: readonly MountPoint[],\n): AgentEvent {\n  if (event.type !== \"file_changed\") return event;\n  if ((event as { mountId?: string }).mountId) return event;\n  const rawPath = event.path;\n  if (!rawPath) return event;\n\n  const absPath = resolve(cwd, rawPath);\n  for (const mount of mounts) {\n    const rel = relative(mount.mountPath, absPath);\n    // rel starts with \"..\" → outside the mount\n    // rel === \"\" → the mount itself (not a child)\n    // rel is absolute (starts with \"/\") → different filesystem root\n    if (rel === \"\" || rel.startsWith(\"..\") || rel.startsWith(\"/\")) continue;\n    return { ...event, path: rel, mountId: mount.id };\n  }\n  return event;\n}\n","/**\n * Refresh-flag dispatcher — wake-mid-401 hardening for Tier-2 git connectors.\n *\n * The Tier-2 git credential-helper script (rendered by\n * `connectors/credential-helper-script.ts`) touches a workspace-level\n * refresh-flag file when it detects a stale credentials file. The runner\n * watches that flag via `fs.watch` and on `change` invokes the dispatcher\n * here, which:\n *\n *   1. Lists git connectors whose `exposeAccessToken === true` AND\n *      `auth === 'backend'` (Tier-2 backend-mediated only — PAT connectors\n *      can't be refreshed runtime-side).\n *   2. For each eligible connector, calls the GitConnector's\n *      `refreshExposedCredential(connectorId, handle)` — which mediates a\n *      fresh access token via the runner-supplied `tokenMediator` and\n *      rewrites the credentials file via `atomicReplaceCredential`.\n *\n * Extracted into its own module so the watcher logic can be unit-tested\n * without spinning up the full WebSocket server.\n *\n * Spec: `_devlog/specs/2026-05-07-unified-credential-mediation.md` Step 9a.\n */\n\nimport type { Logger } from \"@skaile/workspaces/types\";\n\n/**\n * Minimal connector-manager surface the dispatcher needs. Matches the public\n * interface of `ConnectorManager` (`listGitConnectors`, `get`) but stays\n * structural so tests can pass mocks without importing the full class.\n */\nexport interface DispatchConnectorManager {\n  listGitConnectors(): Array<{\n    id: string;\n    source: string;\n    exposeAccessToken: boolean;\n    auth?: string;\n  }>;\n  get(id: string): {\n    connector: {\n      refreshExposedCredential?: (connectorId: string, handle: unknown) => Promise<void>;\n    };\n    handle: unknown;\n  };\n}\n\n/**\n * Iterate every currently connected git connector and refresh the credential\n * for those eligible (Tier-2 backend-mediated). Failures on one connector do\n * not abort the rest.\n *\n * @param manager - The active connector manager. Pass `null` to short-circuit\n *   (used during the brief window between session boot and provisioning).\n * @param log - Logger. The dispatcher emits `info` on success and `warn` on\n *   per-connector failure.\n */\nexport async function dispatchRefreshToExposedGitMounts(\n  manager: DispatchConnectorManager | null,\n  log: Logger,\n): Promise<void> {\n  if (!manager) return;\n\n  let gitConnectors: ReturnType<DispatchConnectorManager[\"listGitConnectors\"]>;\n  try {\n    gitConnectors = manager.listGitConnectors();\n  } catch (err) {\n    log.warn(\"listGitConnectors failed during refresh-flag dispatch\", {\n      error: err instanceof Error ? err.message : String(err),\n    });\n    return;\n  }\n\n  const eligible = gitConnectors.filter(\n    (m) => m.exposeAccessToken === true && m.auth === \"backend\",\n  );\n  if (eligible.length === 0) {\n    log.debug(\"refresh-flag fired but no eligible git connectors (Tier-2 backend) found\");\n    return;\n  }\n\n  log.info(\"refresh-flag fired -- dispatching backend mediation\", {\n    connectorIds: eligible.map((m) => m.id),\n  });\n\n  await Promise.all(\n    eligible.map(async (m) => {\n      try {\n        const entry = manager.get(m.id);\n        if (typeof entry.connector.refreshExposedCredential !== \"function\") {\n          log.debug(\"connector lacks refreshExposedCredential -- skipping\", {\n            connectorId: m.id,\n          });\n          return;\n        }\n        await entry.connector.refreshExposedCredential(m.id, entry.handle);\n      } catch (err) {\n        log.warn(\"refresh-flag dispatch failed for connector\", {\n          connectorId: m.id,\n          error: err instanceof Error ? err.message : String(err),\n        });\n      }\n    }),\n  );\n}\n","/**\n * Runner-side capabilities (Protocol v3). Replaces the deleted v2\n * `AgentCommand` types `add_resource` / `remove_resource` /\n * `set_log_level` / `state_action` / lifecycle by exposing them as named\n * capabilities the platform invokes through the bidirectional\n * capability registry — the same wire pattern as agent->platform calls,\n * just in reverse.\n *\n * All seven caps are `audience: ['runtime']` so they never leak to the\n * LLM tool list or to the user-facing command palette (cmdK). They run\n * with `side: 'agent'` (handler lives in the agent runtime) and\n * `origin: { kind: 'framework' }` — `CapabilityOrigin` (as of\n * `@skaile/workspaces/types@4.0.0`) does not include a `runner` kind, and\n * per the v3 spec \"origin tag stays separate (origin.kind); audience\n * determines visibility\". The `runner.<verb>` naming convention lives\n * in the capability `name`, not in the origin tag.\n *\n * The factory takes a {@link RunnerCapabilityHandlers} bag so the\n * caller (typically `serve.ts`) wires each cap to its own state-\n * mutation helpers without this file having to import `serve.ts` —\n * keeping the dependency direction acyclic.\n *\n * @category Runtime\n * @since 3.0.0\n */\nimport * as z from \"zod\";\nimport type { CredentialMint, LogLevel } from \"@skaile/workspaces/types\";\nimport { getLogStore } from \"@skaile/workspaces/core/logging\";\nimport { defineCapability, type DefinedCapability } from \"./define-capability.js\";\n\n/**\n * Per-session handlers that runner-side capabilities delegate into. The\n * caller (typically `serve.ts`) wires these to its own state-mutation\n * helpers. Each method is optional; capabilities whose handler is\n * undefined return a structured `not_implemented` error.\n *\n * @category Runtime\n * @since 3.0.0\n */\nexport interface RunnerCapabilityHandlers {\n  /**\n   * Add a mount to the live session. Implementations typically delegate\n   * to `VolumeManager.mount()` after staging the `preMintedToken` into\n   * the secrets provider chain.\n   */\n  addMount?: (input: {\n    declaration: unknown;\n    preMintedToken?: { token: string; expiresAt?: string | null };\n  }) => Promise<{ ok: true; id: string } | { ok: false; code: string; message: string }>;\n\n  /**\n   * Add a connector to the live session. Implementations typically\n   * delegate to `ConnectorManager.connect()` after staging the\n   * `preMintedToken`.\n   */\n  addConnector?: (input: {\n    declaration: unknown;\n    preMintedToken?: { token: string; expiresAt?: string | null };\n  }) => Promise<{ ok: true; id: string } | { ok: false; code: string; message: string }>;\n\n  /**\n   * Remove a mount or connector by id. The id namespace is shared — the\n   * handler resolves whichever manager owns it.\n   */\n  removeResource?: (input: {\n    id: string;\n  }) => Promise<{ ok: true } | { ok: false; code: string; message: string }>;\n\n  /**\n   * Replace the pre-minted credential on an existing mount or\n   * connector. Used for proactive rotation before TTL expiry, so the\n   * resource can keep running without a reconnect.\n   */\n  updateCredential?: (input: {\n    kind: \"mount\" | \"connector\";\n    id: string;\n    mint: CredentialMint;\n  }) => Promise<{ ok: true } | { ok: false; code: string; message: string }>;\n\n  /**\n   * Set the in-container LogStore minimum level. When omitted, the\n   * cap falls back to calling `getLogStore()?.setLevel(level)` itself\n   * (the default behaviour matches the legacy `set_log_level` command).\n   */\n  setLogLevel?: (input: { level: string }) => Promise<{ ok: true }>;\n\n  /**\n   * Write into the shared state store. Shape matches the legacy\n   * `state_action` v2 command body so existing platform-side senders\n   * can be migrated mechanically.\n   */\n  setState?: (input: { store: string; key: string; value: unknown }) => Promise<{ ok: true }>;\n\n  /** Trigger a session lifecycle transition. */\n  lifecycle?: (input: { action: \"hibernate\" | \"close\" | \"shutdown\" }) => Promise<{ ok: true }>;\n}\n\n/** Common origin tag used by all runner-side caps. */\nconst RUNNER_CAP_ORIGIN = { kind: \"framework\" } as const;\n\n/**\n * Build the standard `not_implemented` reply for a cap whose handler\n * was not wired by the caller. The shape mirrors the success/error\n * union the wired handlers return, so callers consuming the result\n * uniformly only need one discriminator (`ok`).\n */\nfunction notImplemented(name: string): { ok: false; code: \"not_implemented\"; message: string } {\n  return {\n    ok: false,\n    code: \"not_implemented\",\n    message: `${name} handler not configured`,\n  };\n}\n\n// Input schemas. `declaration` and `value` use `z.unknown()` with an\n// explicit `.refine(() => true)` so the inferred type is `unknown`\n// (required) rather than `unknown | undefined` (optional) — Zod's\n// default treatment of `z.unknown()` is optional even at the top of\n// an object, which would break the handler-input contract.\nconst requiredUnknown = z.unknown().refine(() => true);\n\nconst preMintedTokenSchema = z\n  .object({\n    token: z.string(),\n    expiresAt: z.string().nullable().optional(),\n  })\n  .optional();\n\nconst mountDeclarationInput = z.strictObject({\n  declaration: requiredUnknown,\n  preMintedToken: preMintedTokenSchema,\n});\n\nconst connectorDeclarationInput = z.strictObject({\n  declaration: requiredUnknown,\n  preMintedToken: preMintedTokenSchema,\n});\n\nconst removeResourceInput = z.strictObject({\n  id: z.string(),\n});\n\nconst updateCredentialInput = z.strictObject({\n  kind: z.enum([\"mount\", \"connector\"]),\n  id: z.string(),\n  // `CredentialMint` is a discriminated union from `@skaile/workspaces/types`.\n  // We accept it as `z.unknown()` here because Zod can't easily mirror\n  // a discriminated TypeScript union without duplicating the schema —\n  // the platform side has already validated the shape before sending.\n  mint: requiredUnknown,\n});\n\nconst setLogLevelInput = z.strictObject({\n  level: z.enum([\"silent\", \"error\", \"warn\", \"info\", \"debug\", \"trace\"]),\n});\n\nconst setStateInput = z.strictObject({\n  store: z.string(),\n  key: z.string(),\n  value: requiredUnknown,\n});\n\nconst lifecycleInput = z.strictObject({\n  action: z.enum([\"hibernate\", \"close\", \"shutdown\"]),\n});\n\n/** Levels accepted by the underlying `LogStore.setLevel`. */\nconst VALID_LOG_STORE_LEVELS = new Set<LogLevel>([\"debug\", \"info\", \"warn\", \"error\"]);\n\n/**\n * Build the seven `runner.*` capabilities. Caller registers each with\n * `capabilityRegistry.register(cap, \"agent\")`.\n *\n * The returned capabilities are independent — the caller can also\n * register a subset, e.g. for a stub runner used in tests.\n *\n * @category Runtime\n * @since 3.0.0\n */\nexport function buildRunnerCapabilities(handlers: RunnerCapabilityHandlers): DefinedCapability[] {\n  return [\n    defineCapability({\n      name: \"runner.add_mount\",\n      displayName: \"Add mount\",\n      description:\n        \"Mount a volume into the live session. Used by the platform to attach data sources mid-session.\",\n      side: \"agent\",\n      origin: RUNNER_CAP_ORIGIN,\n      audience: [\"runtime\"],\n      kind: \"effect\",\n      input: mountDeclarationInput,\n      handler: async (input) => {\n        if (!handlers.addMount) return notImplemented(\"runner.add_mount\");\n        return handlers.addMount({\n          declaration: input.declaration,\n          preMintedToken: input.preMintedToken,\n        });\n      },\n    }),\n    defineCapability({\n      name: \"runner.add_connector\",\n      displayName: \"Add connector\",\n      description:\n        \"Connect a tool-providing connector into the live session. Used by the platform to attach databases, APIs, etc. mid-session.\",\n      side: \"agent\",\n      origin: RUNNER_CAP_ORIGIN,\n      audience: [\"runtime\"],\n      kind: \"effect\",\n      input: connectorDeclarationInput,\n      handler: async (input) => {\n        if (!handlers.addConnector) return notImplemented(\"runner.add_connector\");\n        return handlers.addConnector({\n          declaration: input.declaration,\n          preMintedToken: input.preMintedToken,\n        });\n      },\n    }),\n    defineCapability({\n      name: \"runner.remove_resource\",\n      displayName: \"Remove resource\",\n      description:\n        \"Detach a mount or connector by id. The id namespace is shared across both kinds.\",\n      side: \"agent\",\n      origin: RUNNER_CAP_ORIGIN,\n      audience: [\"runtime\"],\n      kind: \"effect\",\n      input: removeResourceInput,\n      handler: async (input) => {\n        if (!handlers.removeResource) return notImplemented(\"runner.remove_resource\");\n        return handlers.removeResource(input);\n      },\n    }),\n    defineCapability({\n      name: \"runner.update_credential\",\n      displayName: \"Update credential\",\n      description:\n        \"Replace the pre-minted credential on an existing mount or connector. Used for proactive rotation before TTL expiry.\",\n      side: \"agent\",\n      origin: RUNNER_CAP_ORIGIN,\n      audience: [\"runtime\"],\n      kind: \"effect\",\n      input: updateCredentialInput,\n      handler: async (input) => {\n        if (!handlers.updateCredential) return notImplemented(\"runner.update_credential\");\n        return handlers.updateCredential({\n          kind: input.kind,\n          id: input.id,\n          mint: input.mint as CredentialMint,\n        });\n      },\n    }),\n    defineCapability({\n      name: \"runner.set_log_level\",\n      displayName: \"Set log level\",\n      description:\n        \"Live-update the in-container LogStore minimum level without restarting the session.\",\n      side: \"agent\",\n      origin: RUNNER_CAP_ORIGIN,\n      audience: [\"runtime\"],\n      kind: \"effect\",\n      input: setLogLevelInput,\n      handler: async (input) => {\n        if (handlers.setLogLevel) {\n          return handlers.setLogLevel(input);\n        }\n        // Default behaviour matches the legacy `set_log_level` command:\n        // adjust the process-singleton LogStore directly. The cap input\n        // accepts 6 levels per the v3 spec for forward-compatibility with\n        // `silent` / `trace`, but `LogStore.setLevel` only knows the four\n        // canonical ones — drop unknown values silently.\n        const candidate = input.level as LogLevel;\n        if (VALID_LOG_STORE_LEVELS.has(candidate)) {\n          getLogStore()?.setLevel(candidate);\n        }\n        return { ok: true };\n      },\n    }),\n    defineCapability({\n      name: \"runner.set_state\",\n      displayName: \"Set state\",\n      description:\n        \"Write into the session shared state store. Shape matches the legacy state_action command body.\",\n      side: \"agent\",\n      origin: RUNNER_CAP_ORIGIN,\n      audience: [\"runtime\"],\n      kind: \"effect\",\n      input: setStateInput,\n      handler: async (input) => {\n        if (!handlers.setState) {\n          // Honour the protocol contract by returning a structured\n          // not_implemented error; callers can detect the gap without\n          // a thrown exception. Cast through unknown because the cap's\n          // declared output is `{ ok: true }` per the legacy shape.\n          return notImplemented(\"runner.set_state\") as unknown as { ok: true };\n        }\n        return handlers.setState({\n          store: input.store,\n          key: input.key,\n          value: input.value,\n        });\n      },\n    }),\n    defineCapability({\n      name: \"runner.lifecycle\",\n      displayName: \"Session lifecycle\",\n      description:\n        \"Transition the session lifecycle: hibernate to disk, close the active flow, or shut down the runner.\",\n      side: \"agent\",\n      origin: RUNNER_CAP_ORIGIN,\n      audience: [\"runtime\"],\n      kind: \"effect\",\n      input: lifecycleInput,\n      handler: async (input) => {\n        if (!handlers.lifecycle) {\n          return notImplemented(\"runner.lifecycle\") as unknown as { ok: true };\n        }\n        return handlers.lifecycle(input);\n      },\n    }),\n  ];\n}\n","/**\n * Credentials-file helpers used by `serve.ts` for Claude Code subscription\n * credentials. Extracted so other modules (e.g. AI 401 mediation) can reuse\n * the atomic rewrite without importing from the much larger `serve.ts`.\n *\n * @category Credentials\n * @since 3.3.0\n */\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { mkdir, rename, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\n/**\n * Well-known platform key for the Claude Code OAuth credentials JSON blob\n * forwarded by `provision_secrets`. The runner writes it to\n * `<home>/.claude/.credentials.json` instead of the secret provider since\n * the SDK reads it as a file.\n *\n * @docLink packages/runner/dev-guide#environment-variables\n */\nexport const CLAUDE_CODE_CREDENTIALS_KEY = \"CLAUDE_CODE_CREDENTIALS_JSON\";\n\n/**\n * Writes the Claude Code credentials JSON blob to the Claude user config dir\n * at the current canonical Linux path, `~/.claude/.credentials.json`, with\n * mode `0600`. Creates the parent directory with mode `0700` if needed.\n *\n * Atomic via tmp-file + rename within the same directory.\n *\n * Exported for unit tests + the AI 401 mediation helper.\n *\n * @docLink packages/runner/dev-guide#environment-variables\n */\nexport async function writeClaudeCodeCredentialsFile(home: string, json: string): Promise<string> {\n  const claudeDir = join(home, \".claude\");\n  await mkdir(claudeDir, { recursive: true, mode: 0o700 });\n  const finalPath = join(claudeDir, \".credentials.json\");\n  const tmpPath = `${finalPath}.tmp.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2)}`;\n  await writeFile(tmpPath, json, { mode: 0o600 });\n  await rename(tmpPath, finalPath); // POSIX atomic on same fs\n  return finalPath;\n}\n\n/**\n * Atomically merge a fresh `accessToken` into the credentials JSON at\n * `<home>/.claude/.credentials.json`, preserving any other top-level fields\n * and the nested `claudeAiOauth` shape the platform writes at provision time.\n *\n * Read-modify-write under {@link writeClaudeCodeCredentialsFile}'s atomic-\n * rename semantics. Used by the runner's `onAuthError` callback (in\n * `serve.ts`) when the bridge driver asks for a credential refresh after\n * a 401 from the underlying agent.\n *\n * @param home - The home directory under which `.claude/.credentials.json`\n *   lives.\n * @param accessToken - The fresh access token to persist.\n * @param expiresAt - Optional ISO timestamp for the rotated token.\n * @returns The path to the rewritten credentials file.\n *\n * Spec: `_devlog/specs/2026-05-07-unified-credential-mediation.md`\n * § \"Runner-side handling on 401\" (now bridge-side).\n */\nexport async function mergeAndRewriteCredentialsFile(\n  home: string,\n  accessToken: string,\n  expiresAt?: string | null,\n): Promise<string> {\n  const credPath = join(home, \".claude\", \".credentials.json\");\n  let merged: Record<string, unknown> = {};\n  if (existsSync(credPath)) {\n    try {\n      merged = JSON.parse(readFileSync(credPath, \"utf-8\")) as Record<string, unknown>;\n    } catch {\n      merged = {};\n    }\n  }\n  const oauthBlock = ((merged as { claudeAiOauth?: Record<string, unknown> }).claudeAiOauth ??\n    {}) as Record<string, unknown>;\n  oauthBlock.accessToken = accessToken;\n  if (expiresAt) oauthBlock.expiresAt = expiresAt;\n  (merged as { claudeAiOauth?: Record<string, unknown> }).claudeAiOauth = oauthBlock;\n  // Top-level accessToken too, for SDK builds that read the flat shape.\n  (merged as { accessToken?: string }).accessToken = accessToken;\n  return writeClaudeCodeCredentialsFile(home, JSON.stringify(merged));\n}\n\n/**\n * Extract the access-token expiry from a raw Claude Code credentials JSON\n * blob. Supports both the nested `claudeAiOauth.expiresAt` shape the\n * platform writes at provision time and an optional top-level `expiresAt`\n * field used by some SDK builds.\n *\n * Returns `null` when the field is missing, empty, or not a parseable\n * date — callers treat `null` as \"static token, don't schedule a\n * proactive refresh\". Tolerates both ISO-8601 strings and millisecond\n * epochs (some Claude Code builds emit the epoch; normalise to ISO so\n * downstream code has one format to reason about).\n *\n * Used by the runner's proactive AI-credential refresh scheduler in\n * `serve.ts` to compute the next refresh fire time after a fresh\n * credential lands (initial provision OR `host.refresh_credential`\n * response). The runner never mutates the credentials blob; this is a\n * pure read.\n *\n * @docLink packages/runner/dev-guide#ai-credential-mediation\n */\nexport function extractClaudeAiOauthExpiresAt(json: string): string | null {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(json);\n  } catch {\n    return null;\n  }\n  if (!parsed || typeof parsed !== \"object\") return null;\n  const obj = parsed as Record<string, unknown>;\n  const oauth = obj.claudeAiOauth as Record<string, unknown> | undefined;\n  const raw = oauth?.expiresAt ?? obj.expiresAt;\n  if (raw == null) return null;\n  if (typeof raw === \"string\") {\n    const t = Date.parse(raw);\n    return Number.isFinite(t) ? new Date(t).toISOString() : null;\n  }\n  if (typeof raw === \"number\" && Number.isFinite(raw)) {\n    // Epoch milliseconds (Claude Code subscription tokens encode it this way).\n    return new Date(raw).toISOString();\n  }\n  return null;\n}\n","/**\n * Session stimulus bus — generic trailing-edge coalescing turn driver.\n *\n * Connectors that observe state changes (FlowAdapter, future alert/inbox/\n * file-watch connectors) call `bus.signal(connectorId, { promptFragment, meta })`\n * to request that the agent be woken with a fresh turn. Multiple signals from\n * the same connector arriving within `coalesceMs` are folded into one turn,\n * with their `promptFragment`s concatenated by `\\n\\n` and their `meta` objects\n * collected into an array.\n *\n * Per-`connectorId` queues — concurrent connectors NEVER coalesce together;\n * each runs its own pending timer and turn pipeline.\n *\n * If `signal()` is called for a connector whose driveTurn is already in flight,\n * the new signal queues for the next cycle (a fresh timer starts only after\n * the in-flight turn settles).\n *\n * Distinct from `refresh-flag-dispatcher.ts`'s leading-edge debounce: that one\n * fires immediately and drops within a 2 s window. The stimulus bus is trailing-\n * edge collapse with a returned promise, so callers can `await` completion of\n * the turn that drained their signal.\n *\n * @docLink runner#session-stimulus-bus\n * @since 2.2.0\n */\n\nimport type { Logger } from \"@skaile/workspaces/types\";\n\n/**\n * One stimulus from a connector. The bus collapses contiguous signals from the\n * same connector into a single turn whose prompt is built by joining the\n * `promptFragment`s with `\\n\\n`.\n */\nexport interface StimulusSignal {\n  /** Fragment the connector wants prepended to the next turn prompt. */\n  promptFragment: string;\n  /** Optional event metadata for tracing. Connector-defined. */\n  meta?: Record<string, unknown>;\n  /**\n   * Trailing-edge coalesce window — multiple signals from the same connector\n   * arriving within this many ms are folded into one turn with their\n   * fragments concatenated. Default: 50 ms (a tick to let near-simultaneous\n   * signals settle without perceptible delay).\n   */\n  coalesceMs?: number;\n}\n\n/**\n * Public surface returned by `createSessionStimulusBus`. Connectors hold a\n * reference to this and call `signal(...)` whenever they want to wake the\n * agent.\n */\nexport interface SessionStimulusBus {\n  /**\n   * Request a turn kick for `connectorId`. Resolves once the resulting turn\n   * has drained (the supplied `driveTurn` resolved). Multiple parallel calls\n   * within `coalesceMs` collapse into one turn and share a single resolution.\n   */\n  signal(connectorId: string, sig: StimulusSignal): Promise<void>;\n}\n\n/**\n * Drives one agent turn given a concatenated prompt fragment. The runner\n * supplies this when constructing the bus — typically wraps `driver.prompt`\n * + waits for `agent_end`. The bus calls it with all coalesced fragments\n * joined by newline.\n */\nexport type TurnDriver = (\n  promptFragment: string,\n  batchedMeta: Array<Record<string, unknown>>,\n) => Promise<void>;\n\nexport interface CreateStimulusBusOptions {\n  driveTurn: TurnDriver;\n  /** Default coalesce window when a signal omits its own. */\n  defaultCoalesceMs?: number;\n  log?: Logger;\n}\n\n/** Default coalesce window — kept consistent with the spec's stated default. */\nexport const DEFAULT_COALESCE_MS = 50;\n\ninterface PendingEntry {\n  signal: StimulusSignal;\n  resolve: () => void;\n  reject: (err: unknown) => void;\n}\n\ninterface ConnectorQueue {\n  /** Buffered entries waiting for the current timer to fire. */\n  pending: PendingEntry[];\n  /** The timer that will fire `flushQueue`. `null` when no timer is active. */\n  timer: ReturnType<typeof setTimeout> | null;\n  /**\n   * `true` when `driveTurn` is currently running for this connector. New\n   * signals arriving while this is set queue up but do NOT start their timer\n   * until the in-flight turn settles.\n   */\n  inFlight: boolean;\n}\n\n/**\n * Construct a fresh stimulus bus. The caller (typically `serve.ts` or\n * `run-flow.ts`) provides `driveTurn`, which kicks one agent turn given a\n * joined prompt + batched meta, and resolves once the turn drains.\n */\nexport function createSessionStimulusBus(opts: CreateStimulusBusOptions): SessionStimulusBus {\n  const { driveTurn, defaultCoalesceMs = DEFAULT_COALESCE_MS, log } = opts;\n  const queues = new Map<string, ConnectorQueue>();\n\n  function getQueue(connectorId: string): ConnectorQueue {\n    let q = queues.get(connectorId);\n    if (!q) {\n      q = { pending: [], timer: null, inFlight: false };\n      queues.set(connectorId, q);\n    }\n    return q;\n  }\n\n  function startTimerIfNeeded(connectorId: string, q: ConnectorQueue, coalesceMs: number) {\n    if (q.timer != null) return;\n    if (q.inFlight) return; // wait until the in-flight turn settles\n    q.timer = setTimeout(() => {\n      q.timer = null;\n      void flushQueue(connectorId, q);\n    }, coalesceMs);\n  }\n\n  async function flushQueue(connectorId: string, q: ConnectorQueue): Promise<void> {\n    if (q.pending.length === 0) return;\n    const batch = q.pending;\n    q.pending = [];\n    q.inFlight = true;\n\n    const fragments = batch.map((e) => e.signal.promptFragment);\n    const metas = batch\n      .map((e) => e.signal.meta)\n      .filter((m): m is Record<string, unknown> => m !== undefined);\n    const joined = fragments.join(\"\\n\\n\");\n\n    log?.debug(\"turn driving\", {\n      connectorId,\n      count: batch.length,\n      fragmentLength: joined.length,\n    });\n\n    try {\n      await driveTurn(joined, metas);\n      log?.debug(\"turn drained\", {\n        connectorId,\n        count: batch.length,\n        fragmentLength: joined.length,\n      });\n      for (const entry of batch) entry.resolve();\n    } catch (err) {\n      log?.debug(\"turn failed\", {\n        connectorId,\n        count: batch.length,\n        fragmentLength: joined.length,\n        error: err instanceof Error ? err.message : String(err),\n      });\n      for (const entry of batch) entry.reject(err);\n    } finally {\n      q.inFlight = false;\n      // If signals arrived while the turn was in flight, kick a fresh timer\n      // for the next cycle so the next batch drains.\n      if (q.pending.length > 0) {\n        // Use the most recent signal's coalesceMs as the next window — it's\n        // the simplest predictable choice when callers may have heterogeneous\n        // windows.\n        const nextWindow = q.pending[q.pending.length - 1]?.signal.coalesceMs ?? defaultCoalesceMs;\n        startTimerIfNeeded(connectorId, q, nextWindow);\n      }\n    }\n  }\n\n  return {\n    signal(connectorId: string, sig: StimulusSignal): Promise<void> {\n      const coalesceMs = sig.coalesceMs ?? defaultCoalesceMs;\n      log?.debug(\"stimulus signaled\", {\n        connectorId,\n        fragmentLength: sig.promptFragment.length,\n      });\n      return new Promise<void>((resolve, reject) => {\n        const q = getQueue(connectorId);\n        q.pending.push({ signal: sig, resolve, reject });\n        startTimerIfNeeded(connectorId, q, coalesceMs);\n      });\n    },\n  };\n}\n","/**\n * serve.ts — WebSocket agent server.\n *\n * Exposes the agent runtime over a pluggable transport. Accepts AgentCommand\n * messages and streams AgentEvent responses. Uses WebSocketServerTransport for\n * the default transport (pass opts.transport to override for testing/stdio).\n *\n * Usage:\n *   skaile serve --project-dir /project --port 8080\n *\n * The platform's session manager connects via AgentClient + WebSocketClientTransport\n * to drive agent execution inside a local subprocess or Docker container.\n *\n * ─── Session Startup Pattern ───────────────────────────────────────────────────\n *\n * All three runner modes (REPL, flow, serve) follow the same 5-step setup:\n *   1. resolveSettings()          → driver, model, provider, API key\n *   2. loadAgentManifest()         → manifest (model/maxTurns/tools); optionally systemPrompt\n *   3. buildAgentResources()      → ConnectorManager, resourcePromptSection, mcpServers\n *   4. createDriver()             → AgentDriver with assembled systemPrompt\n *   5. driver.start()             → subprocess spawn / SDK import\n *\n * Differences between modes:\n *   REPL    — identity native (agentDir/agentName); systemPrompt = resource docs only; eager start\n *   Flow    — identity injected (full SOUL+RULES+knowledge); no transport; single orchestrator prompt\n *   Serve   — identity injected + external (SKAILE_SYSTEM_PROMPT_FILE); lazy start (first prompt cmd);\n *             adds EventNormalizer, resource watch callbacks, lifecycle command handling\n *\n * The shared `createAgentSession(opts)` helper in session-builder.ts extracts the\n * common setup sequence. serve.ts retains: EventNormalizer, lazy start (driverStarted flag),\n * transport setup, and lifecycle command handling.\n */\n\nimport {\n  existsSync,\n  type FSWatcher,\n  watch as fsWatch,\n  mkdirSync,\n  readFileSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport {\n  deployCatalogEntry,\n  undeployCatalogEntry,\n} from \"@skaile/workspaces/asset-manager/catalog-deployer\";\nimport type { FlowDefinition } from \"@skaile/workspaces/base-assets/connectors/flow/engine\";\nimport {\n  buildOrchestratorPrompt,\n  renderStimulusPrompt,\n  type TurnStimulus,\n} from \"@skaile/workspaces/base-assets/connectors/flow/prompt-fragments\";\nimport { type AgentEvent as BridgeAgentEvent, EventNormalizer } from \"@skaile/workspaces/bridge\";\nimport {\n  buildSdkConnectorTools,\n  type ConnectorHandle,\n  ConnectorManager,\n  type FlowAdapter,\n  InMemorySecretProvider,\n  PreMintedSecretProvider,\n  registerBuiltinConnectors,\n} from \"@skaile/workspaces/connectors\";\nimport {\n  type CatalogEntry,\n  parseAssetRef,\n  providerEnvKey,\n  resolveAgentDir,\n  resolveSkWorkspaceConfig,\n} from \"@skaile/workspaces/core\";\nimport { createLogger, WsLogSink } from \"@skaile/workspaces/core/logging\";\nimport { WebSocketServerTransport } from \"@skaile/workspaces/transport\";\nimport type {\n  AgentCommand,\n  AgentEvent,\n  ConnectorInfo,\n  FlowExecution,\n  MountInfo,\n  ServerTransport,\n} from \"@skaile/workspaces/types\";\nimport { PROTOCOL_VERSION } from \"@skaile/workspaces/types\";\n// Static import so bun --compile bundles zod into the binary. Without this,\n// dynamic import(\"zod\") fails at runtime inside the /$bunfs/ virtual filesystem.\nimport { z as _z } from \"zod\";\nimport { createAiCredentialRefreshScheduler } from \"./ai-credential-refresh.js\";\nimport { bootstrapCapabilityRegistry } from \"./builtin-capabilities.js\";\nimport { CapabilityRegistry, computeCapabilitySignature } from \"./capability-registry.js\";\nimport {\n  buildClientCapabilityHandler as buildClientCapabilityRoundtripHandler,\n  DEFAULT_CAPABILITY_CALL_TIMEOUT_MS,\n  type PendingCallEntry,\n  rejectCapabilityOnApprovalDeny,\n  resolveCapabilityCallTimeoutMs,\n  resolveCapabilityResult,\n} from \"./capability-roundtrip.js\";\nimport { CompactionOrchestrator } from \"./compaction/index.js\";\nimport { registerCompositionCapabilities } from \"./composition/bootstrap.js\";\nimport { type MountPoint, rewriteFileChangedPath } from \"./file-changed-rewriter.js\";\nimport { bootstrapRunnerLogStore } from \"./logging-bootstrap.js\";\nimport { buildCapabilitiesPromptSection } from \"./prompt-assembly.js\";\nimport { dispatchRefreshToExposedGitMounts } from \"./refresh-flag-dispatcher.js\";\nimport { handleMountResourceRequest, handleResourceRequest } from \"./resource-handler.js\";\nimport { buildRunnerCapabilities } from \"./runner-capabilities.js\";\nimport {\n  CLAUDE_CODE_CREDENTIALS_KEY,\n  extractClaudeAiOauthExpiresAt,\n  mergeAndRewriteCredentialsFile,\n  writeClaudeCodeCredentialsFile,\n} from \"./serve-credentials.js\";\nimport {\n  type AgentSession,\n  type AgentSessionConfig,\n  createAgentSession,\n} from \"./session-builder.js\";\nimport { createSessionStimulusBus, type SessionStimulusBus } from \"./session-stimulus.js\";\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Pull catalog entries from the active session's runtime assets, with a safe\n * fallback to empty when the session was not yet created or the resolver\n * failed. The session-builder caches the same `RuntimeAssetsResult` across\n * the session lifetime so live-update paths see a stable view.\n */\nfunction getSessionCatalogEntries(session: AgentSession | undefined): CatalogEntry[] {\n  return session?.runtimeAssets?.catalogEntries ?? [];\n}\n\n/**\n * Emit a `system_prompt_composed` event carrying the labeled section\n * breakdown from the freshly-built {@link AgentSession}. Called from every\n * `createAgentSession` consumer in serve.ts (initial bootstrap, configure\n * re-runs, add_resource flow-connector path, aiResources skill changes,\n * session_init provisioned path) so the platform's debug panel always sees\n * the prompt the agent is actually receiving.\n *\n * Keeping the emission centralised in serve.ts (rather than inside\n * session-builder.ts) preserves the builder's transport-agnostic contract —\n * forge apps and the CLI consume the same builder without a transport.\n *\n * Spec: `docs/superpowers/specs/2026-05-13-platform-agent-prompt-design.md`\n * § 3.3.2 Re-emission requirement.\n * @since 2026-05\n */\nexport function emitSystemPromptComposed(\n  agentSession: AgentSession,\n  sendEvent: (e: AgentEvent) => void,\n): void {\n  sendEvent({\n    type: \"system_prompt_composed\",\n    sections: agentSession.systemPromptSections,\n    composedAt: new Date().toISOString(),\n  });\n}\n\n/** Collect installed @skaile/* package versions. Cached per process. */\nconst FRAMEWORK_PACKAGES = [\n  \"@skaile/workspaces/runner\",\n  \"@skaile/workspaces/bridge\",\n  \"@skaile/workspaces/core\",\n  \"@skaile/workspaces/types\",\n  \"@skaile/workspaces/base-assets\",\n  \"@skaile/workspaces/connectors\",\n  \"@skaile/workspaces/resolver\",\n  \"@skaile/workspaces/transport\",\n  \"@skaile/workspaces/workspace-plugin\",\n] as const;\n\nlet _frameworkVersions: Record<string, string> | null = null;\nfunction getFrameworkVersions(): Record<string, string> {\n  if (_frameworkVersions) return _frameworkVersions;\n  const versions: Record<string, string> = {};\n  for (const pkg of FRAMEWORK_PACKAGES) {\n    try {\n      const pjPath = require.resolve(`${pkg}/package.json`);\n      const pj = JSON.parse(readFileSync(pjPath, \"utf-8\"));\n      versions[pkg.replace(\"@skaile/\", \"\")] = pj.version;\n    } catch {\n      // not installed\n    }\n  }\n  _frameworkVersions = versions;\n  return versions;\n}\n\n// ---------------------------------------------------------------------------\n// Resource lifecycle helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Split a unified `ConnectorManager`'s connectors into the wire-shape\n * `mounts` / `connectors` arrays the `resources_available` event expects.\n *\n * Filesystem-face connectors (those with a `mountPath`) are reported as\n * mounts; the rest are reported as connectors. The unified manager owns both,\n * so this is purely a wire-format projection.\n */\nfunction splitConnectorsForWire(manager: ConnectorManager | null): {\n  mounts: MountInfo[];\n  connectors: ConnectorInfo[];\n} {\n  const mounts: MountInfo[] = [];\n  const connectors: ConnectorInfo[] = [];\n  if (!manager) return { mounts, connectors };\n  for (const c of manager.listConnectors()) {\n    if (typeof c.mountPath === \"string\") {\n      let source = \"\";\n      try {\n        source = manager.get(c.id).declaration.mount?.source ?? \"\";\n      } catch {\n        /* connector vanished between list and get — best-effort */\n      }\n      mounts.push({\n        id: c.id,\n        driver: c.driver,\n        access: c.access,\n        mountPath: c.mountPath,\n        mounted: true,\n        source,\n      });\n    } else {\n      connectors.push({\n        id: c.id,\n        driver: c.driver,\n        access: c.access,\n        operations: manager.getOperations(c.id).map((op) => op.name),\n      });\n    }\n  }\n  return { mounts, connectors };\n}\n\n/** Walk upward from a directory looking for an ai-assets/ folder. */\nfunction findAiAssetsRoot(startDir: string): string | null {\n  let dir = startDir;\n  for (let i = 0; i < 6; i++) {\n    const candidate = join(dir, \"ai-assets\");\n    if (existsSync(candidate)) return candidate;\n    dir = join(dir, \"..\");\n  }\n  return null;\n}\n\n/**\n * Phase 4.8 — Claude Code subscription credentials provisioning.\n *\n * The constant + the atomic rewrite helper now live in `./serve-credentials.ts`\n * so the AI 401 mediation helper can reuse them without importing from this\n * (large) module. Re-exported here for back-compat with existing test\n * imports of `serve.js`.\n *\n * @docLink packages/runner/dev-guide#environment-variables\n */\nexport {\n  CLAUDE_CODE_CREDENTIALS_KEY,\n  extractClaudeAiOauthExpiresAt,\n  writeClaudeCodeCredentialsFile,\n};\n\n/**\n * Idempotently ensure `~/.gitconfig` includes the runner-managed gitconfig\n * via `[include] path = <managedGitconfigPath>`. Fallback path for shells\n * that strip `GIT_CONFIG_GLOBAL`. The function is idempotent — running it\n * twice produces the same file content.\n *\n * Exported for unit tests.\n * @docLink packages/runner/capabilities#ensure-git-config-include\n */\nexport function ensureGitConfigInclude(managedGitconfigPath: string): void {\n  const home = process.env.HOME ?? homedir();\n  if (!home) return;\n  const gitconfigPath = join(home, \".gitconfig\");\n  let existing = \"\";\n  try {\n    existing = readFileSync(gitconfigPath, \"utf-8\");\n  } catch {\n    // file doesn't exist — fall through and create\n  }\n  // Bail if any include block already references our managed file. Walk the\n  // gitconfig line-by-line tracking the current section header so a stray\n  // `path = …` key inside an unrelated section (e.g. `[some-other] path = …`)\n  // does not trigger a false-positive match. Git only honours `path` keys\n  // under `[include]` and `[includeIf \"<cond>\"]`; mirror that contract here.\n  const sectionRe = /^\\s*\\[([^\\]\\s]+)(?:\\s+\"[^\"]*\")?\\]\\s*$/;\n  const pathKeyRe = /^\\s*path\\s*=\\s*(.+?)\\s*$/;\n  let currentSection: string | null = null;\n  for (const line of existing.split(/\\r?\\n/)) {\n    const sectionMatch = line.match(sectionRe);\n    if (sectionMatch) {\n      currentSection = sectionMatch[1]?.toLowerCase() ?? null;\n      continue;\n    }\n    if (currentSection !== \"include\" && currentSection !== \"includeif\") continue;\n    const pathMatch = line.match(pathKeyRe);\n    if (pathMatch?.[1] === managedGitconfigPath) return;\n  }\n  if (!existsSync(dirname(gitconfigPath))) {\n    mkdirSync(dirname(gitconfigPath), { recursive: true });\n  }\n  const block =\n    `${existing.trimEnd()}\\n` +\n    `# skaile-runner: managed-gitconfig include\\n` +\n    `[include]\\n\\tpath = ${managedGitconfigPath}\\n`;\n  writeFileSync(gitconfigPath, block, { mode: 0o644 });\n}\n\n// v3 protocol — handleRemountMount removed alongside the RemountMountCommand\n// wire type. Hot remounting is now reachable through the runner.add_mount\n// capability (the platform's invokeRunnerCapability dispatch path), which\n// handles the disconnect+connect semantics via the ConnectorManager surface.\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/**\n * Configuration for {@link startAgentServer}.\n * @docLink packages/runner/dev-guide#flow-execution-turn-based-model\n */\nexport interface ServeOptions {\n  /**\n   * WebSocket server port. Defaults to `8080`.\n   * Ignored when a custom {@link transport} is provided.\n   */\n  port?: number;\n  /** Absolute path to the project working directory. */\n  projectDir: string;\n  /**\n   * GitAgent definition directory (`agent.yaml`, `SOUL.md`, `RULES.md`,\n   * `knowledge/`). When omitted, resolved from `skaile.yaml` via\n   * `resolveAgentDir`. If unresolvable, no agent definition is loaded and the\n   * agent starts without an identity prompt.\n   */\n  agentDir?: string;\n  /** Agent driver backend override (e.g. `\"omp\"`, `\"claude-sdk\"`). */\n  driver?: string;\n  /** LLM model name override. */\n  model?: string;\n  /** LLM provider override (e.g. `\"anthropic\"`, `\"openrouter\"`). */\n  provider?: string;\n  /** Directory of deployed prompt/command files appended to the system prompt. */\n  promptsDir?: string;\n  /** Stable session ID for conversation continuity across agent turns. */\n  sessionId?: string;\n  /**\n   * OMP driver session ID to resume. When set, OMP is spawned with\n   * `--session <id>` to restore its native conversation context without\n   * needing `<conversation_history>` injection. For OMP driver only.\n   */\n  resumeSessionId?: string;\n  /** Called for each diagnostic log line. Defaults to `console.log`. */\n  onLog?: (line: string) => void;\n  /**\n   * Pre-built transport to use instead of the default\n   * `WebSocketServerTransport`. Useful for testing (in-process transport,\n   * stdio transport) or embedding the server in another process.\n   */\n  transport?: ServerTransport;\n  /**\n   * Bearer token the default WebSocket server requires from connecting clients.\n   * Falls back to `SKAILE_WS_AUTH_TOKEN`. When neither is set the server accepts\n   * unauthenticated connections (back-compatible default). Ignored when a custom\n   * {@link transport} is provided.\n   */\n  authToken?: string;\n}\n\n// ---------------------------------------------------------------------------\n// Server\n// ---------------------------------------------------------------------------\n\n/**\n * Start a WebSocket agent server that the Skaile platform connects to for\n * host-driven agent execution inside a local subprocess or Docker container.\n *\n * The server accepts {@link AgentCommand} messages over a\n * {@link ServerTransport} (default: `WebSocketServerTransport` on `opts.port`)\n * and streams {@link AgentEvent} responses back to the connected client.\n *\n * Handled commands:\n * - `provision_secrets` — injects API keys and Claude Code credentials; in\n *   `provisioned` secrets mode, triggers deferred session creation.\n * - `configure` — registers shared state stores and applies mid-session skill\n *   catalog changes. Phase 4 of the flow-connector extraction (Protocol 2.2)\n *   removed the implicit `activeFlows` rehydration; hosts now issue an\n *   explicit `connector_mutate { id: \"flow\", op: \"hydrate\" }` per flow.\n * - `prompt` — routes free-chat messages through the SessionStimulusBus when\n *   a flow is active, otherwise forwards directly to the driver; **driver is\n *   lazily started on the first `prompt` command**.\n * - `connector_mutate` / `connector_query` — generic connector dispatch.\n *   Replaces the 6 typed flow commands removed in Protocol 2.2 (`start_flow`,\n *   `approve_flow_node`, `provide_flow_input`, `cancel_flow`,\n *   `set_flow_autonomous_mode`, `retry_flow_node`); see\n *   `MIGRATION-flow-connector.md` for the per-op mapping table.\n * - `add_resource` / `remove_resource` — mount/unmount mounts or\n *   connect/disconnect connectors mid-session. When the added connector's\n *   driver is `flow`, the runner injects the per-session stimulus bus into\n *   the connect options.\n *\n * The function resolves after the transport starts listening. It does not\n * resolve until the process exits — shutdown is driven by SIGINT/SIGTERM or\n * a `shutdown` command from the connected client.\n *\n * @param opts - Server configuration.\n * @docLink packages/runner/dev-guide#flow-execution-turn-based-model\n */\nexport async function startAgentServer(opts: ServeOptions): Promise<void> {\n  const port = opts.port ?? 8080;\n  const sessionId = opts.sessionId ?? process.env.SKAILE_SESSION_ID ?? \"session-unknown\";\n  const resumeSessionId = opts.resumeSessionId ?? process.env.SKAILE_RESUME_SESSION_ID;\n\n  // Read platform maxTurns from workspace config (before createAgentSession)\n  const wsConfig = resolveSkWorkspaceConfig(opts.projectDir);\n\n  // Bootstrap structured logging — registers a process-singleton LogStore.\n  // OnLogBridgeSink mirrors entries to opts.onLog when caller provides it,\n  // preserving back-compat with hosts that consume plain text lines.\n  const { store: logStore, dispose: disposeLogStore } = bootstrapRunnerLogStore({\n    sessionId,\n    projectDir: opts.projectDir,\n    yamlBlock: (wsConfig as { logging?: unknown }).logging,\n    onLog: opts.onLog,\n  });\n  const serverLog = createLogger({\n    kind: \"runner\",\n    subkind: \"session\",\n    instance: sessionId,\n  });\n  // Back-compat: keep `log()` as a string alias so existing call sites continue\n  // to work; new diagnostics should call serverLog.{info,warn,error,debug} directly.\n  const log = (line: string) => serverLog.info(line);\n  const profile = wsConfig.agent_config?.default;\n  const maxTurns =\n    wsConfig.agent?.permissions?.max_turns ??\n    ((profile as Record<string, unknown> | undefined)?.max_turns as number | undefined);\n\n  // ---------------------------------------------------------------------------\n  // Tier-2 managed-gitconfig env propagation (git credential tiers, Step 1A)\n  // ---------------------------------------------------------------------------\n  //\n  // The runner owns one path — `<projectDir>/.skaile/managed-gitconfig` — and\n  // exposes it to every spawned agent shell via `GIT_CONFIG_GLOBAL`. The git\n  // mount driver writes per-mount tagged blocks into this file when (and only\n  // when) `exposeAccessToken: true` is set on the mount declaration. Bridge\n  // drivers inherit the runner's env when spawning agent processes, so no\n  // change is required on their side.\n  //\n  // Belt-and-suspenders: also write `[include] path = …` into `~/.gitconfig`\n  // so shells that strip `GIT_CONFIG_GLOBAL` still pick the file up. The\n  // include is idempotent — a second run will not append a duplicate line.\n  //\n  // Spec: `_devlog/specs/2026-05-05-git-credential-tiers.md`.\n  const managedGitconfigPath = join(opts.projectDir, \".skaile\", \"managed-gitconfig\");\n  process.env.GIT_CONFIG_GLOBAL = managedGitconfigPath;\n  try {\n    ensureGitConfigInclude(managedGitconfigPath);\n  } catch (err) {\n    serverLog.warn(\"failed to write ~/.gitconfig include — relying on env only\", {\n      error: err instanceof Error ? err.message : String(err),\n    });\n  }\n\n  // Resolve the agent definition directory. CLI flag wins; otherwise fall back\n  // to skaile.yaml `agent.definition` via resolveAgentDir. Without this, the\n  // agent identity (SOUL+RULES+knowledge) is rendered at install time, not loaded at runtime.\n  const agentDir = opts.agentDir ?? resolveAgentDir(opts.projectDir);\n  if (agentDir) {\n    serverLog.info(\"agent dir resolved\", { agentDir });\n  } else {\n    serverLog.warn(\"no agent definition found in skaile.yaml\");\n  }\n\n  // ---------------------------------------------------------------------------\n  // Transport setup (must be before resource init — sync callbacks use sendEvent)\n  // ---------------------------------------------------------------------------\n\n  const authToken = opts.authToken ?? process.env.SKAILE_WS_AUTH_TOKEN;\n  const transport: ServerTransport =\n    opts.transport ??\n    new WebSocketServerTransport({ port, onLog: log, ...(authToken ? { authToken } : {}) });\n\n  // Wire structured log forwarding: every LogEntry recorded by the in-container\n  // LogStore is emitted as a `log_entry` AgentEvent over the same transport\n  // the gateway already subscribes to. The transport drops sends when no client\n  // is connected, so no buffering is needed here.\n  logStore.addSink(\n    new WsLogSink({\n      send: (event) => {\n        if (transport.connected) transport.send(event);\n      },\n    }),\n  );\n\n  // Forward agent events to the connected client\n  function sendEvent(event: AgentEvent) {\n    if (transport.connected) {\n      transport.send(event);\n    }\n  }\n\n  // ---------------------------------------------------------------------------\n  // Capability registry (Protocol v2)\n  // ---------------------------------------------------------------------------\n  //\n  // Single per-session registry. Built-in `__capabilities.list/search/describe`\n  // are registered at boot. Client-side capabilities arrive via\n  // ConfigureCommandV2.capabilities in the v2 configure handler below.\n  //\n  // The registry is constructed eagerly (before session creation) so the\n  // bridge can pull tool definitions through `BridgeCapabilityHooks` on its\n  // first turn. Built-ins are registered immediately; downstream registrations\n  // (skills/connectors/mounts/client) happen at their own lifecycles.\n\n  const capabilityRegistry = new CapabilityRegistry(\n    createLogger({\n      kind: \"runner\",\n      subkind: \"capability-registry\",\n      instance: sessionId,\n    }),\n  );\n  bootstrapCapabilityRegistry(capabilityRegistry);\n\n  // ---------------------------------------------------------------------------\n  // Client-side capability round-trip (Protocol v2)\n  // ---------------------------------------------------------------------------\n  //\n  // When the LLM invokes a `side: 'client'` capability, the bridge calls the\n  // registry's invoke() which delegates to the per-capability handler. For\n  // client-side caps the handler emits a `capability_invoked` event over the\n  // transport, registers a pending promise keyed by `callId`, and waits for\n  // a `capability_result` command from the platform. `fireAndForget` caps\n  // bypass the pending map (the bridge also short-circuits in\n  // `dispatchCapability`, so this is defence-in-depth).\n  const pendingCapabilityCalls = new Map<string, PendingCallEntry>();\n\n  // ---------------------------------------------------------------------------\n  // Outbound capability invocation (Protocol v3)\n  // ---------------------------------------------------------------------------\n  //\n  // The runner invokes `host.*` capabilities on the platform through the same\n  // `capability_invoked` / `capability_result` round-trip already used for\n  // client-side capabilities — just in the opposite direction. The pending\n  // map is shared (`pendingCapabilityCalls`) since the wire shape is identical.\n  //\n  // Spec: `_devlog/specs/2026-05-10-deterministic-session-bootstrap.md`\n  // § \"Bidirectional capability registry as RPC backbone\".\n  const remoteCapabilityInvoker = (name: string, input: unknown): Promise<unknown> => {\n    const callId =\n      typeof crypto?.randomUUID === \"function\"\n        ? crypto.randomUUID()\n        : `rcap-${Date.now()}-${Math.floor(Math.random() * 1e9)}`;\n    return new Promise<unknown>((resolve, reject) => {\n      if (!transport.connected) {\n        reject(new Error(`Transport disconnected; cannot invoke remote capability ${name}`));\n        return;\n      }\n      const timer = setTimeout(() => {\n        pendingCapabilityCalls.delete(callId);\n        reject(new Error(`Remote capability ${name} (callId=${callId}) timed out`));\n      }, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS);\n      pendingCapabilityCalls.set(callId, { resolve, reject, timer });\n      transport.send({\n        type: \"capability_invoked\",\n        callId,\n        name,\n        input,\n        invokedBy: \"agent\",\n      });\n    });\n  };\n\n  /**\n   * Per-session AI provider config id, threaded in via `ConfigureCommandV2.config.aiProviderConfigId`.\n   * Read by the auth-error retry handler to fill `request_access_token { kind: 'ai-credentials', configId }`.\n   * Standalone runners (CLI / forge / Claude plugin) never see a configure\n   * command with this field, so it stays `undefined` and the auth-error\n   * handler falls back to surfacing the error.\n   *\n   * Spec: `_devlog/specs/2026-05-07-unified-credential-mediation.md`\n   * § \"Wire `aiProviderConfigId` end-to-end\".\n   */\n  let aiProviderConfigId: string | undefined;\n\n  /**\n   * Inner credential-mediation helper shared by the reactive\n   * `onAuthError` callback and the proactive refresh timer. Acquires a\n   * fresh access token through `host.refresh_credential`, rewrites\n   * `<home>/.claude/.credentials.json`, and returns the typed mint.\n   * Successful mints re-arm the proactive scheduler against the freshly\n   * issued token's expiry.\n   *\n   * Declared before `aiCredentialRefreshScheduler` even though the\n   * scheduler's `refresh` callback references this — keeps the textual\n   * order matching the call graph (mint → schedule re-arm) instead of\n   * relying on hoisting semantics that would break under a future\n   * arrow-function refactor.\n   */\n  async function mintAndPersistAiCredential(args: {\n    configId?: string;\n    reason: \"refresh\" | \"retry-401\";\n  }): Promise<import(\"@skaile/workspaces/types\").CredentialMint> {\n    if (!transport.connected || aiProviderConfigId === undefined) {\n      return {\n        ok: false,\n        code: \"not-configured\",\n        message: \"no transport or aiProviderConfigId; standalone runner cannot mediate refresh\",\n      };\n    }\n    const targetConfigId = args.configId || aiProviderConfigId;\n    try {\n      const result = (await capabilityRegistry.invokeRemote(\"host.refresh_credential\", {\n        kind: \"ai-credentials\",\n        id: targetConfigId,\n        reason: args.reason,\n      })) as import(\"@skaile/workspaces/types\").CredentialMint;\n      if (!result?.ok) {\n        return result ?? { ok: false, code: \"backend-error\", message: \"no result from host\" };\n      }\n      const home = process.env.HOME ?? homedir();\n      if (!home) {\n        return {\n          ok: false,\n          code: \"backend-error\",\n          message: \"HOME env var unset; cannot rewrite credentials file\",\n        };\n      }\n      await mergeAndRewriteCredentialsFile(home, result.token, result.expiresAt ?? null);\n      // Re-arm proactive timer for the freshly issued token. The reactive\n      // (retry-401) path calls into here too, so retry success also chains\n      // the next proactive fire.\n      aiCredentialRefreshScheduler.schedule(result.expiresAt ?? null);\n      return result;\n    } catch (err) {\n      const errMsg = err instanceof Error ? err.message : String(err);\n      return { ok: false, code: \"backend-error\", message: errMsg };\n    }\n  }\n\n  /**\n   * Proactive AI-credential refresh scheduler. Holds a single timer that\n   * fires `PROACTIVE_AI_REFRESH_MARGIN_MS` before the current token\n   * expires, calls `host.refresh_credential { reason: 'refresh' }`, and\n   * re-arms against the new expiry. Pairs with the bridge-side\n   * `failTurn` deferral that suppresses downstream auth-error events\n   * when a self-heal is about to run: this timer is the primary\n   * prevention of in-container 401s, the reactive 401 path is the\n   * safety net.\n   *\n   * Schedule is re-armed on every fresh credential (initial provision,\n   * a reactive retry-401 success, or a previous proactive fire). Tokens\n   * with `expiresAt === null` (static PATs) do not schedule.\n   *\n   * Spec: `_devlog/specs/2026-05-07-unified-credential-mediation.md`\n   * § \"Proactive refresh\" (added 2026-05-20).\n   */\n  const aiCredentialRefreshScheduler = createAiCredentialRefreshScheduler({\n    refresh: async () => {\n      const result = await mintAndPersistAiCredential({ reason: \"refresh\" });\n      if (!result.ok) {\n        log(\n          `[serve] proactive AI refresh failed (code=${result.code}); leaving reactive path as fallback`,\n        );\n        return undefined;\n      }\n      return result.expiresAt ?? null;\n    },\n    log,\n  });\n\n  /**\n   * Auth-refresh callback handed to the bridge driver via\n   * `AgentConfig.onAuthError`. The bridge invokes this when its underlying\n   * agent surfaces an `authentication_error`. We ask the platform for a\n   * fresh access token, atomically rewrite `~/.claude/.credentials.json`,\n   * and resolve `true` so the driver retries the in-flight prompt once.\n   *\n   * Centralising auth retry inside the driver removes the per-call-site\n   * wrapping that previously lived around `driver.prompt(...)`. Compaction,\n   * flow turns, the serve handler, and any future call site all benefit\n   * automatically.\n   *\n   * Standalone CLI / forge sessions never set `aiProviderConfigId`, so\n   * this returns `false` and the driver surfaces the original `AuthError`\n   * to the caller — preserving the legacy behaviour.\n   *\n   * Spec: `_devlog/specs/2026-05-07-unified-credential-mediation.md`\n   * § \"Runner-side handling on 401\" (now bridge-side).\n   */\n  /**\n   * Auth-refresh callback handed to the bridge driver via\n   * `AgentConfig.onAuthError`. Invoked when the underlying agent surfaces\n   * an `authentication_error`. In v3, the runner mediates the fresh\n   * credential through `host.refresh_credential` (a `runtime`-audience\n   * capability the platform registered at session_init) and returns the\n   * typed `CredentialMint` to the driver so it can branch on the\n   * discriminator.\n   *\n   * Standalone CLI / forge sessions never register `host.refresh_credential`\n   * (no platform peer), so the invocation fails synchronously and we\n   * surface a structured `not_available` mint — preserving the legacy\n   * \"no mediator -> surface AuthError\" behaviour.\n   *\n   * Spec: `_devlog/specs/2026-05-10-deterministic-session-bootstrap.md`\n   * § \"Refresh-on-401 routes through host.refresh_credential\".\n   */\n  const onAuthError = async (args: {\n    configId: string;\n  }): Promise<import(\"@skaile/workspaces/types\").CredentialMint> => {\n    log(\"[serve] auth error: invoking host.refresh_credential capability\");\n    const result = await mintAndPersistAiCredential({\n      configId: args.configId,\n      reason: \"retry-401\",\n    });\n    if (!result.ok) {\n      log(`[serve] auth error: mint failed (code=${result.code}); surfacing`);\n    } else {\n      log(\"[serve] auth error: rewrote .credentials.json with mediated accessToken\");\n    }\n    return result;\n  };\n\n  /**\n   * Approval-required client caps (Protocol v2.1) park on the platform until\n   * a human responds. Human approvals routinely take minutes, so the default\n   * 60-second timeout would cause the runner to abandon the pending call\n   * while the platform later still dispatches the side effect. Use a long\n   * (15-minute) timeout for `requiresApproval: true` capabilities so the\n   * platform's parked-approval lifetime stays inside the runner's window.\n   */\n  const APPROVAL_REQUIRED_CAPABILITY_TIMEOUT_MS = 15 * 60 * 1000;\n\n  function buildClientCapabilityHandler(\n    wire: import(\"@skaile/workspaces/types\").Capability,\n  ): (input: unknown) => Promise<unknown> {\n    // Precedence: an explicit per-capability `callTimeoutMs` wins (e.g.\n    // `platform.ask_session` blocks for minutes); otherwise approval-required\n    // caps get the long 15-minute window; everything else uses the default.\n    const timeoutMs = resolveCapabilityCallTimeoutMs(wire, APPROVAL_REQUIRED_CAPABILITY_TIMEOUT_MS);\n    return buildClientCapabilityRoundtripHandler({\n      wire,\n      pending: pendingCapabilityCalls,\n      emit: (event) => sendEvent(event),\n      timeoutMs,\n    });\n  }\n\n  /**\n   * Build the bridge-facing capability hooks. Drivers consume this through\n   * `AgentConfig.capabilities`. The runner owns:\n   *   - tool list composition (registry.composeLLMTools)\n   *   - per-handler logging + Zod validation (registry.invoke)\n   *   - render-event forwarding to the WebSocket client\n   *   - text fallback emission for clients without a render layer\n   */\n  function buildCapabilityHooks(): import(\"@skaile/workspaces/bridge\").BridgeCapabilityHooks {\n    return {\n      sessionId,\n      composeTools: () => capabilityRegistry.composeLLMTools(),\n      resolve: (name) => {\n        const cap = capabilityRegistry.resolve(name);\n        if (!cap) return null;\n        // Strip runtime-only fields by going through the wire-format `list`.\n        return capabilityRegistry.list().find((c) => c.name === name) ?? null;\n      },\n      invoke: (name, input) => capabilityRegistry.invoke(name, input, { sessionId }),\n      emitRender: (event) => sendEvent(event),\n      emitText: (text) =>\n        sendEvent({\n          type: \"text\",\n          content: text,\n        }),\n    };\n  }\n\n  // ---------------------------------------------------------------------------\n  // Composition → capability registration helper\n  // ---------------------------------------------------------------------------\n\n  /**\n   * Register discoverable composition entries from a freshly created session\n   * into the capability registry. Inline blocks are already injected into the\n   * system prompt by session-builder; this handles only the tool-list entries.\n   */\n  function registerSessionComposition(session: AgentSession): void {\n    if (session.composition?.discoverableEntries.length) {\n      registerCompositionCapabilities(capabilityRegistry, session.composition.discoverableEntries);\n      log(\n        `[serve] registered ${session.composition.discoverableEntries.length} composition capabilities`,\n      );\n    }\n  }\n\n  // ---------------------------------------------------------------------------\n  // Secret provisioning mode\n  // ---------------------------------------------------------------------------\n\n  const secretsMode = wsConfig.secrets?.provider ?? \"env\";\n  const secretsTimeoutMs = wsConfig.secrets?.timeoutMs ?? 30_000;\n\n  // Build the session config factory (secretProvider injected after provisioning)\n  function buildSessionConfig(secretProvider?: unknown, apiKey?: string): AgentSessionConfig {\n    return {\n      projectDir: opts.projectDir,\n      agentDir,\n      driver: opts.driver,\n      model: opts.model,\n      provider: opts.provider,\n      promptsDir: opts.promptsDir,\n      sessionId,\n      resumeSessionId,\n      maxTurns,\n      wsConfig,\n      externalPromptFile: process.env.SKAILE_SYSTEM_PROMPT_FILE,\n      secretProvider,\n      onAuthError,\n      ...(apiKey ? { apiKey } : {}),\n      // Protocol v2 `<CAPABILITIES>` block — joins each registered capability's\n      // `promptFragment` (framework first, then client, then agent-side\n      // surfaces). Built lazily inside `buildSessionConfig` so newly registered\n      // capabilities (e.g. via mid-session `capability_register` commands) are\n      // reflected on the next session rebuild.\n      additionalPromptSections: (() => {\n        const sections: string[] = [];\n        const capSection = buildCapabilitiesPromptSection(capabilityRegistry);\n        if (capSection) sections.push(capSection);\n        return sections.length > 0 ? sections : undefined;\n      })(),\n      watch: {\n        onSyncStatus: (mountId, status) => {\n          sendEvent({\n            type: \"sync_status\",\n            mountId,\n            ...status,\n            phase: status.phase as\n              | \"enumerating\"\n              | \"stubs_ready\"\n              | \"downloading\"\n              | \"initial_sync_complete\"\n              | \"error\",\n          });\n          if (status.phase === \"stubs_ready\") {\n            log(\n              `[serve] ${mountId}: file tree ready (${status.totalFiles} files, ${status.stubFiles} stubs)`,\n            );\n          } else if (status.phase === \"initial_sync_complete\") {\n            log(\n              `[serve] ${mountId}: sync complete (${status.downloadedFiles}/${status.totalFiles} downloaded)`,\n            );\n          }\n        },\n        onFileChanged: (connectorId, event) => {\n          sendEvent({\n            type: \"file_changed\",\n            path: event.path,\n            action: event.action,\n            mountId: connectorId,\n          });\n        },\n      },\n      onLog: (line) => log(`[serve] ${line}`),\n      capabilities: buildCapabilityHooks(),\n      // v3: pre-minted credentials replace the tokenMediator for initial mints.\n      // Refresh routes through `host.refresh_credential` (invoked from the\n      // bridge driver's onAuthError callback). The legacy `tokenMediator`\n      // wire is gone.\n      ...(preMintedSecrets ? { preMintedSecrets } : {}),\n      ...(aiProviderConfigId ? { aiProviderConfigId } : {}),\n    };\n  }\n\n  // Session-readiness gate — other command handlers await this promise before\n  // accessing agentSession, driver, resourceManager, etc. In env mode it\n  // resolves synchronously; in provisioned mode it resolves after\n  // createAgentSession completes (which may involve slow mount operations).\n  let resolveSessionReady!: () => void;\n  let rejectSessionReady!: (err: Error) => void;\n  const sessionReady = new Promise<void>((resolve, reject) => {\n    resolveSessionReady = resolve;\n    rejectSessionReady = reject;\n  });\n\n  // In provisioned mode we defer session creation until secrets arrive.\n  // In env mode we create the session immediately (existing behavior).\n  let sessionConfig: AgentSessionConfig;\n  let agentSession: AgentSession;\n  let secretProvider: unknown;\n\n  // v3 protocol — populated by the `session_init` handler. Used for the\n  // identity-mismatch shutdown on successive inits and for capability\n  // handlers that resolve project-scoped state.\n  let runtimeIdentity:\n    | import(\"@skaile/workspaces/types\").SessionInitCommand[\"identity\"]\n    | undefined;\n\n  // v3 protocol — pre-minted credentials delivered with `session_init`.\n  // Wired into ConnectorManager via the `preMintedSecrets` option so the\n  // initial mint of `auth: backend` connectors is satisfied in-process.\n  let preMintedSecrets: PreMintedSecretProvider | undefined;\n\n  if (secretsMode === \"provisioned\") {\n    log(\"[serve] secrets mode: provisioned — waiting for provision_secrets command\");\n  } else {\n    sessionConfig = buildSessionConfig();\n    agentSession = await createAgentSession(sessionConfig);\n    emitSystemPromptComposed(agentSession, sendEvent);\n\n    registerSessionComposition(agentSession);\n    resolveSessionReady();\n  }\n\n  // Mutable references — updated after provisioning in provisioned mode\n  let resourceManager: any | null = secretsMode === \"env\" ? agentSession!.resourceManager : null;\n\n  if (secretsMode === \"env\") {\n    if (!agentSession!.provider) {\n      log(\n        `[serve] WARNING: no API key found for ${agentSession!.provider ?? \"anthropic\"} — agent calls will fail`,\n      );\n      log(`[serve] Pass via env var (e.g. ANTHROPIC_API_KEY) or .skaile/settings.json`);\n    }\n\n    if (resourceManager) {\n      const watched: string[] = resourceManager.watchedResources ?? [];\n      if (watched.length > 0) {\n        log(`[serve] watching ${watched.length} resource(s): ${watched.join(\", \")}`);\n      }\n    }\n  }\n\n  // Surface runtime-asset resolution warnings (missing drivers, unavailable\n  // repositories) as validation_warning events so the platform frontend can\n  // show actionable hints. Same event shape as the legacy skill validator.\n  // Skip in provisioned mode — the session does not exist yet at this point;\n  // warnings will be emitted after createAgentSession runs in the\n  // provision_secrets handler.\n  if (secretsMode === \"env\" && agentSession!.runtimeAssets) {\n    for (const w of agentSession!.runtimeAssets.warnings) {\n      const asset =\n        w.code === \"missing_driver\" && w.declarationId\n          ? `${w.declarationId} → ${w.name ?? \"unknown\"}`\n          : (w.name ?? w.code);\n      log(`[serve] validation_warning: ${w.code}: ${w.message}`);\n      sendEvent({\n        type: \"validation_warning\",\n        asset,\n        reason: w.code,\n        suggestion: w.message,\n      });\n    }\n  }\n\n  // Validate top-level skaile.yaml dependencies against deployed skills\n  // (graceful degradation). The legacy ai_resources[] block is gone — deps are\n  // a flat top-level list of canonical refs now.\n  try {\n    const wsConfig = resolveSkWorkspaceConfig(opts.projectDir);\n    for (const dep of wsConfig.dependencies ?? []) {\n      let ref: string | undefined;\n      try {\n        const parsed = parseAssetRef(dep);\n        if (parsed.kind !== \"skill\") continue;\n        ref = parsed.name;\n      } catch {\n        continue;\n      }\n      const skillDir = join(opts.projectDir, \".claude\", \"skills\", ref);\n      if (!existsSync(skillDir)) {\n        log(`[serve] validation_warning: dependency \"${dep}\" not found — continuing without it`);\n        sendEvent({\n          type: \"validation_warning\",\n          asset: dep,\n          reason: \"not_found\",\n          suggestion: \"Sync the catalog and re-add this asset\",\n        });\n      }\n    }\n  } catch {\n    // Non-fatal — validation failure should never crash the container\n  }\n\n  // EventNormalizer deduplicates and normalizes events from the driver (e.g. subagent detection).\n  // Only applied in serve mode — REPL and flow modes receive raw events.\n  // TODO: candidate to move into createAgentSession() if REPL/flow are found to need normalisation.\n  const normalizer = new EventNormalizer();\n\n  /**\n   * Forward a normalized agent event, rewriting file_changed paths so they\n   * are mounts-relative and tagged with their mountId.\n   *\n   * See file-changed-rewriter.ts for the reasoning — the short version is\n   * that Claude SDK Write/Edit tool results carry cwd-relative filePaths,\n   * and the frontend's file-change listener assumes they are mounts-relative.\n   */\n  // Protocol v2 — `[CUSTOM:type:json]`, `[REACT:emoji]`, `[PASS]` text-marker\n  // parsing and the AAP raw-JSON-events-as-text robustness path are removed.\n  // The agent now invokes `platform.react`, `platform.pass`, and\n  // `platform.custom_message` capability tools instead.\n\n  function forwardNormalizedEvent(event: AgentEvent): void {\n    // Suppress event forwarding during compaction turns -- the orchestrator's\n    // captureHandler captures text independently and the host should not see\n    // the compaction turn's intermediate events.\n    if (compacting) return;\n\n    // Track durable events for compaction seq counter\n    const isTransient =\n      event.type === \"status\" ||\n      event.type === \"sync_status\" ||\n      event.type === \"resources_available\" ||\n      event.type === \"resource_response\" ||\n      event.type === \"commands_available\";\n    if (!isTransient) {\n      eventSeq++;\n      compactionOrchestrator?.trackMessage(eventSeq);\n    }\n\n    if (event.type === \"finished\") {\n      // Check auto-compaction after turn completes (skip if already compacting)\n      if (!compacting && compactionOrchestrator?.shouldCompact()) {\n        compactionOrchestrator.compact(\"threshold\").catch((err: unknown) => {\n          log(\n            `[serve] auto-compaction failed: ${err instanceof Error ? err.message : String(err)}`,\n          );\n        });\n      }\n    }\n\n    if (!resourceManager) {\n      sendEvent(event);\n      return;\n    }\n    // Filesystem-face connectors expose a `mountPath`; tool-only connectors do not.\n    const mounts: MountPoint[] = (\n      resourceManager.listConnectors() as Array<{ id: string; mountPath?: string }>\n    )\n      .filter((info) => typeof info.mountPath === \"string\")\n      .map((info) => ({\n        id: info.id,\n        mountPath: info.mountPath as string,\n      }));\n    sendEvent(rewriteFileChangedPath(event, opts.projectDir, mounts));\n  }\n  let driverStarted = false; // Lazy start — driver initializes on first prompt command\n  let driver = secretsMode === \"env\" ? agentSession!.driver : (undefined as any);\n  let secretsProvisioned = secretsMode === \"env\"; // env mode starts ready\n\n  // ---------------------------------------------------------------------------\n  // Compaction orchestrator\n  // ---------------------------------------------------------------------------\n\n  /** Local seq counter for durable events. */\n  let eventSeq = 0;\n  /** True while a compaction turn is in progress -- suppresses event forwarding. */\n  let compacting = false;\n  let compactionOrchestrator: CompactionOrchestrator | null = null;\n\n  const compactionConfig = wsConfig.compaction;\n\n  /** Build (or rebuild) the compaction orchestrator for the current driver. */\n  function rebuildCompactionOrchestrator(): void {\n    if (!driver) return;\n    compactionOrchestrator = new CompactionOrchestrator({\n      driver,\n      config: compactionConfig,\n      onCompactionStart: (trigger) => {\n        compacting = true;\n        sendEvent({ type: \"status\", phase: \"compacting\" } as AgentEvent);\n        log(`[serve] compaction started (trigger=${trigger})`);\n      },\n      onSnapshot: (snapshot) => {\n        sendEvent(snapshot as AgentEvent);\n      },\n      onCompactionAttempt: (event) => {\n        sendEvent(event as AgentEvent);\n      },\n      onCompactionEnd: () => {\n        compacting = false;\n        sendEvent({ type: \"status\", phase: \"idle\" } as AgentEvent);\n      },\n      onLog: (line) => log(`[serve] ${line}`),\n      // Phase 3: stamp every CompactionAttemptEvent with the registry's\n      // current signature so wake-time tier-1 selection has the input it\n      // needs. The registry exists for the entire serve lifetime, so this\n      // closure is safe across orchestrator rebuilds.\n      getCurrentCapabilitySignature: () => computeCapabilitySignature(capabilityRegistry.list()),\n    });\n  }\n\n  if (secretsMode === \"env\" && driver) {\n    rebuildCompactionOrchestrator();\n  }\n\n  // ---------------------------------------------------------------------------\n  // Active flow executions (Phase 4 of the flow-connector extraction)\n  // ---------------------------------------------------------------------------\n  //\n  // MVP allows one active flow per session (decision F14). Each entry holds\n  // the FlowAdapter handle + the connectorId used as the bus's queue key.\n  // Phase 4 dropped the FlowOrchestrator: SessionStimulusBus is the sole\n  // turn driver now, with FlowAdapter signalling on every mutation through\n  // its `useBusForStimulus: true` wiring (see `base-assets/connectors/flow/\n  // adapter.ts`).\n\n  interface ActiveFlow {\n    runId: string;\n    flowDef: FlowDefinition;\n    adapter: FlowAdapter;\n    handle: ConnectorHandle;\n    /** Bus queue key — matches `connectorId` passed to `flowAdapter.connect`. */\n    connectorId: string;\n  }\n\n  const activeFlows = new Map<string, ActiveFlow>();\n\n  /**\n   * Per-session stimulus bus — built lazily on the first flow start so the\n   * driver is guaranteed to exist by the time we wire `driveTurn`. The\n   * adapter calls `bus.signal(connectorId, ...)` on every mutation; the\n   * bus coalesces and invokes `driveTurn` to run one agent turn.\n   */\n  let stimulusBus: SessionStimulusBus | null = null;\n  /** Runner-side default per-flow turn timeout (4 hours). */\n  const FLOW_TURN_TIMEOUT_MS = 4 * 60 * 60 * 1000;\n\n  /** Shorthand for the single MVP active flow. Returns null if none. */\n  function getOnlyActiveFlow(): ActiveFlow | null {\n    const iter = activeFlows.values().next();\n    return iter.done ? null : iter.value;\n  }\n\n  /**\n   * Build (or rebuild) the per-session SessionStimulusBus. The bus's\n   * `driveTurn` callback wraps the active driver's `prompt(...)` and waits\n   * for `agent_end`. It also rebuilds the full orchestrator prompt around\n   * the bus-emitted stimulus fragment so the agent sees the same five-\n   * section flow context the legacy orchestrator produced.\n   *\n   * The bus is created on first use and reused across flows in the same\n   * session. When the driver is recreated (mid-session skill deploy or\n   * resume), the bus's closure over `driver` updates because we mutate the\n   * `driver` binding in place — hence the late-binding `driver` access\n   * below rather than capturing the current reference.\n   */\n  function getOrCreateStimulusBus(): SessionStimulusBus {\n    if (stimulusBus) return stimulusBus;\n    stimulusBus = createSessionStimulusBus({\n      driveTurn: async (promptFragment: string, metas: Array<Record<string, unknown>>) => {\n        // Locate the targeted flow from the metas so we can rebuild the\n        // full prompt with the correct flow definition + state. The bus\n        // queue is keyed by connectorId, so all metas in one batch share\n        // the same flow.\n        const lastMeta = metas[metas.length - 1] ?? {};\n        const runId = typeof lastMeta.runId === \"string\" ? lastMeta.runId : null;\n        const entry = runId ? activeFlows.get(runId) : getOnlyActiveFlow();\n        if (!entry) {\n          serverLog.warn(\"driveTurn fired with no active flow\", { runId });\n          return;\n        }\n\n        // Reconstruct the typed stimulus from the meta. The adapter sets\n        // `meta.kind` to a `TurnStimulus[\"kind\"]`; we promote it back to\n        // the structured form for `buildOrchestratorPrompt`. Fall back to\n        // `state_changed` for unknown / batched kinds.\n        const lastKind = lastMeta.kind;\n        let stimulus: TurnStimulus;\n        if (lastKind === \"flow_started\") {\n          stimulus = { kind: \"flow_started\" };\n        } else if (lastKind === \"user_message\" && typeof lastMeta.text === \"string\") {\n          stimulus = {\n            kind: \"user_message\",\n            text: String(lastMeta.text),\n            senderId: String(lastMeta.senderId ?? \"user\"),\n          };\n        } else {\n          stimulus = { kind: \"state_changed\" };\n        }\n        // The fragment passed in is the adapter's `renderStimulusPrompt(stim)`.\n        // We discard it and rebuild the full orchestrator prompt below; the\n        // structured stimulus already encodes everything the fragment did.\n        void promptFragment;\n\n        const fullPrompt = buildOrchestratorPrompt(\n          entry.flowDef,\n          entry.adapter.getExecution(entry.handle),\n          stimulus,\n        );\n\n        if (!driverStarted) {\n          await driver.start();\n          driverStarted = true;\n          driver.on(\"agent-event\", (event: unknown) => {\n            const normalized = normalizer.normalize(event as never);\n            for (const e of normalized) forwardNormalizedEvent(e);\n          });\n          driver.on(\"error\", (err: Error) => {\n            log(`[serve] driver error: ${err.message}`);\n            sendEvent({ type: \"error\", message: err.message, fatal: true });\n          });\n        }\n\n        await awaitFlowAgentEnd(fullPrompt, FLOW_TURN_TIMEOUT_MS);\n      },\n      log: serverLog,\n    });\n    return stimulusBus;\n  }\n\n  /**\n   * Send a prompt to the active driver and resolve when the agent emits\n   * `agent_end` (or reject on `error`). Used by the stimulus bus's\n   * `driveTurn` callback. Mirrors the legacy orchestrator's wait helper\n   * but uses a scoped per-turn listener so the persistent forwarding\n   * listener installed at driver-start time is left intact.\n   */\n  function awaitFlowAgentEnd(prompt: string, timeoutMs: number): Promise<void> {\n    return new Promise<void>((resolve, reject) => {\n      let settled = false;\n      const onEvent = (event: BridgeAgentEvent) => {\n        if (event.type === \"agent_end\") done();\n        else if (event.type === \"error\") {\n          const msg =\n            (event as { error?: string; message?: string }).error ??\n            (event as { message?: string }).message ??\n            \"Agent error\";\n          done(new Error(msg));\n        }\n      };\n      const done = (err?: Error) => {\n        if (settled) return;\n        settled = true;\n        clearTimeout(timer);\n        // EventEmitter.removeListener / .off — bridge drivers extend\n        // node:events EventEmitter so this is always available.\n        (driver as { off?: (e: string, h: (...a: unknown[]) => void) => void }).off?.(\n          \"agent-event\",\n          onEvent as unknown as (...a: unknown[]) => void,\n        ) ??\n          (\n            driver as {\n              removeListener: (e: string, h: (...a: unknown[]) => void) => void;\n            }\n          ).removeListener(\"agent-event\", onEvent as unknown as (...a: unknown[]) => void);\n        if (err) reject(err);\n        else resolve();\n      };\n      const timer = setTimeout(\n        () => done(new Error(`Flow turn timed out after ${timeoutMs / 1000}s`)),\n        timeoutMs,\n      );\n      driver.on(\"agent-event\", onEvent);\n      driver.prompt(prompt).catch(done);\n    });\n  }\n\n  /**\n   * Instantiate a FlowAdapter for a flow definition and register it as the\n   * active flow. Wires the adapter's onChange to emit state_changed via\n   * `sendEvent`, and connects it to the per-session stimulus bus so every\n   * mutation kicks an agent turn (Phase 4 of the flow-connector extraction).\n   */\n  async function createActiveFlow(\n    flowDef: FlowDefinition,\n    seedOrExecution:\n      | { seed: { runId: string; startedBy: string; autonomousMode?: boolean } }\n      | { execution: FlowExecution },\n  ): Promise<ActiveFlow> {\n    if (!resourceManager) {\n      // Lazy-create a ConnectorManager if one does not exist yet — the\n      // session may have no connectors in skaile.yaml, but we still\n      // need a home for the FlowAdapter instance.\n      registerBuiltinConnectors();\n      resourceManager = new ConnectorManager(opts.projectDir, {\n        catalogEntries: getSessionCatalogEntries(agentSession),\n      });\n      log(\"[serve] created ConnectorManager for flow execution (no other connectors declared)\");\n    }\n\n    const bus = getOrCreateStimulusBus();\n    const baseOptions = {\n      stimulusBus: bus,\n      useBusForStimulus: true,\n    };\n    const options =\n      \"execution\" in seedOrExecution\n        ? { flow: flowDef, execution: seedOrExecution.execution, ...baseOptions }\n        : { flow: flowDef, seed: seedOrExecution.seed, ...baseOptions };\n    const seedRunId =\n      \"execution\" in seedOrExecution ? seedOrExecution.execution.runId : seedOrExecution.seed.runId;\n    const connectorId = `flow:${seedRunId}`;\n\n    // Connect via ConnectorManager so the FlowAdapter's tools become\n    // visible to buildSdkConnectorTools below. Direct `new FlowAdapter()`\n    // would leave the adapter outside the manager's connectors map and\n    // the SDK driver would never see the flow tools.\n    const handle = await resourceManager.connect({\n      id: connectorId,\n      driver: \"flow\",\n      access: \"read-write\" as const,\n      options,\n    });\n    const adapter = resourceManager.get(connectorId).connector as unknown as FlowAdapter;\n\n    const runId = adapter.getExecution(handle).runId;\n\n    // Wire the adapter's onChange so the host's flow-state mirror stays in sync.\n    adapter.onStateChange(handle, (state) => {\n      sendEvent({\n        type: \"state_changed\",\n        store: `flow:${state.runId}`,\n        state: state as unknown as Record<string, unknown>,\n      });\n    });\n\n    // Rebuild the SDK MCP server tools so the agent can call the new flow\n    // connector's tools. If the driver has already started (e.g. the user\n    // chatted before clicking Start), restart it via the same dispose +\n    // recreate-with-resumeSessionId dance the mid-session skill deploy\n    // path uses (see the `aiResources` configure handler) so the agent\n    // sees the updated tool list with conversation history preserved.\n    if (agentSession?.driverType === \"claude-sdk\") {\n      try {\n        const server = await buildSdkConnectorTools(resourceManager, { z: _z });\n        if (server) {\n          if (driverStarted) {\n            const prevSessionId = driver.runtimeSessionId;\n            log(\n              `[serve] restarting driver to register flow connector tools (resume=${prevSessionId ?? \"none\"})`,\n            );\n            await agentSession.dispose();\n            agentSession = await createAgentSession({\n              ...sessionConfig,\n              resumeSessionId: prevSessionId,\n            });\n            emitSystemPromptComposed(agentSession, sendEvent);\n            driver = agentSession.driver;\n            normalizer.reset();\n            driverStarted = false;\n            rebuildCompactionOrchestrator();\n          }\n          (driver as any).config.mcpServers = { \"skaile-connectors\": server };\n          log(`[serve] rebuilt MCP connector tools for flow ${connectorId}`);\n        } else {\n          log(`[serve] buildSdkConnectorTools returned null for flow ${connectorId}`);\n        }\n      } catch (err) {\n        const errMsg = err instanceof Error ? err.message : String(err);\n        log(`[serve] failed to rebuild MCP tools for flow: ${errMsg}`);\n      }\n    }\n\n    const entry: ActiveFlow = { runId, flowDef, adapter, handle, connectorId };\n    activeFlows.set(runId, entry);\n    return entry;\n  }\n\n  // Phase 4: `destroyActiveFlow` was the legacy `cancel_flow` typed handler's\n  // tear-down helper. With Protocol 2.2, hosts cancel via\n  // `connector_mutate { id: \"flow\", op: \"cancel\" }` which transitions the\n  // adapter's state to `cancelled` without disconnecting the connector. The\n  // connector is reusable across runs (the adapter's `start` op replaces the\n  // execution in-place); the host issues `remove_resource` if and when the\n  // connector should go away.\n\n  // ---------------------------------------------------------------------------\n  // Refresh-flag watcher (Step 9a — wake-mid-401 hardening)\n  // ---------------------------------------------------------------------------\n  //\n  // The Tier-2 git credential-helper script touches\n  // `<projectDir>/.skaile/refresh-request` when it detects a stale credentials\n  // file (mtime > triggerAgeSec). The runner watches that path via `fs.watch`\n  // and dispatches `request_access_token { reason: 'retry-401' }` for every\n  // git mount with `exposeAccessToken: true` AND `auth: 'backend'`. The mount\n  // driver's `refreshExposedCredential` method does the actual mediation +\n  // file rewrite via `atomicReplaceCredential`, mirroring the proactive 5-min\n  // pre-expiry refresh timer.\n  //\n  // Pre-create the flag file: `fs.watch` on a non-existent path throws on\n  // Linux (ENOENT) and silently misses events on macOS until the file is\n  // created. Mode 0660 — owner+group rw so the helper script (running as\n  // the agent uid in the skaile group) can `: > \"$FLAG_FILE\"` it.\n  //\n  // Spec: `_devlog/specs/2026-05-07-unified-credential-mediation.md` Step 9a.\n\n  const refreshFlagPath = join(opts.projectDir, \".skaile\", \"refresh-request\");\n  try {\n    mkdirSync(join(opts.projectDir, \".skaile\"), { recursive: true });\n    if (!existsSync(refreshFlagPath)) {\n      writeFileSync(refreshFlagPath, \"\", { mode: 0o660, flag: \"a\" });\n    }\n  } catch (err) {\n    serverLog.warn(\"failed to pre-create refresh-flag — wake-mid-401 disabled\", {\n      error: err instanceof Error ? err.message : String(err),\n    });\n  }\n\n  let lastRefreshAt = 0;\n  const REFRESH_DEBOUNCE_MS = 2_000;\n\n  let refreshFlagWatcher: FSWatcher | null = null;\n  try {\n    refreshFlagWatcher = fsWatch(refreshFlagPath, (event) => {\n      if (event !== \"change\") return;\n      const now = Date.now();\n      if (now - lastRefreshAt < REFRESH_DEBOUNCE_MS) return;\n      lastRefreshAt = now;\n      // Dispatch is extracted into `refresh-flag-dispatcher.ts` so the logic\n      // can be unit-tested without spinning up the full WebSocket server.\n      void dispatchRefreshToExposedGitMounts(resourceManager, serverLog);\n    });\n  } catch (err) {\n    serverLog.warn(\"fs.watch on refresh-flag failed — wake-mid-401 disabled\", {\n      error: err instanceof Error ? err.message : String(err),\n    });\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cleanup\n  // ---------------------------------------------------------------------------\n\n  async function cleanup() {\n    // Bound the wait on sessionReady — in provisioned mode the session may\n    // never be built (no platform has connected yet), and in env mode it has\n    // already resolved. Either way we must not block shutdown on it.\n    try {\n      await Promise.race([\n        sessionReady,\n        new Promise<void>((resolve) => {\n          const t = setTimeout(resolve, 2000);\n          t.unref?.();\n        }),\n      ]);\n    } catch {\n      /* session may have failed to build */\n    }\n    try {\n      driver?.kill();\n    } catch {}\n    aiCredentialRefreshScheduler.cancel();\n    // Reject any pending capability round-trips so the bridge surfaces tool\n    // errors instead of hanging forever after the session shuts down.\n    for (const [callId, pending] of pendingCapabilityCalls) {\n      clearTimeout(pending.timer);\n      pending.reject(new Error(`Session terminated before capability_result (callId=${callId})`));\n    }\n    pendingCapabilityCalls.clear();\n    try {\n      refreshFlagWatcher?.close();\n    } catch {\n      /* best-effort — watcher may already be closed */\n    }\n    refreshFlagWatcher = null;\n    if (agentSession) {\n      try {\n        await agentSession.dispose();\n      } catch {\n        /* best-effort — mount unmount/connector disconnect can fail */\n      }\n    }\n  }\n\n  // ---------------------------------------------------------------------------\n  // Command handling\n  // ---------------------------------------------------------------------------\n\n  async function handleCommand(\n    cmd: AgentCommand | import(\"@skaile/workspaces/types\").SessionInitCommand,\n  ) {\n    // v3: the access_token_response ingress is removed — refresh-on-401\n    // rides on the host.refresh_credential capability invocation now.\n    // SessionInitCommand is delivered alongside AgentCommand on the same\n    // transport — type the parameter as the envelope union so the switch\n    // can handle both.\n    switch (cmd.type) {\n      case \"session_init\": {\n        // Protocol v3 deterministic boot envelope. Replaces the v2\n        // configure + provision_secrets + initial request_access_token round\n        // trips with one upfront message carrying identity, resolved config,\n        // pre-minted credentials, secrets, capabilities, shared state,\n        // active flows, resume hints, and logging config.\n        //\n        // Spec: _devlog/specs/2026-05-10-deterministic-session-bootstrap.md.\n\n        // 1. Protocol major-equality\n        if (cmd.protocolVersion.major !== PROTOCOL_VERSION.major) {\n          log(\n            `[serve] incompatible protocol: agent=${PROTOCOL_VERSION.major} platform=${cmd.protocolVersion.major}`,\n          );\n          sendEvent({\n            type: \"incompatible_protocol\",\n            agentVersion: PROTOCOL_VERSION,\n            platformVersion: cmd.protocolVersion,\n          });\n          await cleanup();\n          disposeLogStore();\n          return;\n        }\n\n        // 2. Identity. Future successive session_init calls must match this\n        // containerId; mismatch shuts the runner down.\n        if (runtimeIdentity && runtimeIdentity.containerId !== cmd.identity.containerId) {\n          log(\n            `[serve] session_init_mismatch: expected=${runtimeIdentity.containerId} received=${cmd.identity.containerId}`,\n          );\n          sendEvent({\n            type: \"session_init_mismatch\",\n            expectedContainerId: runtimeIdentity.containerId,\n            receivedContainerId: cmd.identity.containerId,\n          });\n          await cleanup();\n          disposeLogStore();\n          return;\n        }\n        runtimeIdentity = cmd.identity;\n\n        // 3. Register client-side capabilities from the envelope.\n        const incoming = cmd.capabilities ?? [];\n        for (const wire of incoming) {\n          // Audience-scoped runtime caps (host.*) are not registered as\n          // client capabilities — they are invoked outbound via\n          // capabilityRegistry.invokeRemote(). Filter them out here so the\n          // registry doesn't store them as LLM-callable stubs.\n          if (wire.audience && !wire.audience.includes(\"llm\") && !wire.audience.includes(\"user\")) {\n            // Pure runtime audience — keep around in a separate map for\n            // outbound invocation (handled by registry.setRemoteInvoker\n            // wiring, not by `register`).\n            continue;\n          }\n          const stub = {\n            ...wire,\n            inputZod: { parse: (v: unknown) => v } as unknown as import(\"zod\").ZodTypeAny,\n            outputZod: undefined,\n            handler: buildClientCapabilityHandler(wire),\n          };\n          capabilityRegistry.register(stub, \"client\");\n        }\n        sendEvent({ type: \"protocol_info\", version: PROTOCOL_VERSION });\n\n        // 4. Pre-minted credentials → in-process PreMintedSecretProvider.\n        preMintedSecrets = new PreMintedSecretProvider(cmd.credentials);\n\n        // 5. Long-lived secrets → in-memory secret provider (replaces\n        // provision_secrets). The Claude Code credentials JSON is handled\n        // separately — it goes to disk, not the secret provider.\n        let initialAiCredentialExpiresAt: string | null = null;\n        if (cmd.secrets) {\n          const ccdValue = cmd.secrets[CLAUDE_CODE_CREDENTIALS_KEY];\n          if (ccdValue) {\n            const home = process.env.HOME ?? homedir();\n            if (home) {\n              try {\n                await writeClaudeCodeCredentialsFile(home, ccdValue);\n                log(\n                  `[serve] wrote Claude Code credentials file to ${home}/.claude/.credentials.json (mode 0600)`,\n                );\n              } catch (err) {\n                const errMsg = err instanceof Error ? err.message : String(err);\n                log(`[serve] failed to write Claude Code credentials file: ${errMsg}`);\n              }\n            }\n            // Parse the expiry so the proactive refresh timer can prevent\n            // the next 401 instead of relying on the reactive retry path.\n            // Scheduling happens once aiProviderConfigId is stashed below.\n            initialAiCredentialExpiresAt = extractClaudeAiOauthExpiresAt(ccdValue);\n          }\n          const otherSecrets = Object.fromEntries(\n            Object.entries(cmd.secrets).filter(([k]) => k !== CLAUDE_CODE_CREDENTIALS_KEY),\n          );\n          const provider = new InMemorySecretProvider();\n          provider.provision(otherSecrets);\n          secretProvider = provider;\n          secretsProvisioned = true;\n        }\n\n        // 6. Build session using the resolved config. Replaces the v2\n        // provision_secrets + configure handshake.\n        try {\n          const effectiveProvider = opts.provider ?? \"anthropic\";\n          const envKey = providerEnvKey(effectiveProvider);\n          const apiKeyFromSecrets = cmd.secrets?.[envKey];\n          sessionConfig = buildSessionConfig(secretProvider, apiKeyFromSecrets);\n          if (!agentSession) {\n            agentSession = await createAgentSession(sessionConfig);\n            emitSystemPromptComposed(agentSession, sendEvent);\n            resourceManager = agentSession.resourceManager;\n            driver = agentSession.driver;\n            rebuildCompactionOrchestrator();\n            registerSessionComposition(agentSession);\n            sendEvent({\n              type: \"resources_available\",\n              ...splitConnectorsForWire(resourceManager),\n            });\n            agentSession.startWatching();\n\n            // 6a. Wire the outbound capability invoker so handlers can call\n            //     `capabilityRegistry.invokeRemote('host.*', ...)` against the\n            //     platform peer. Done after the transport is connected (which\n            //     happens before session_init is processed) so the round-trip\n            //     map is ready to park calls.\n            capabilityRegistry.setRemoteInvoker(remoteCapabilityInvoker);\n\n            // 6b. Register the seven runner.* capabilities (audience: runtime)\n            //     so the platform can dispatch lifecycle / resource / log-level\n            //     mutations through invokeRunnerCapability. Handlers that are\n            //     not yet wired return a structured `not_implemented` error\n            //     and will be filled in as Phase B platform reroutes land.\n            const runnerCaps = buildRunnerCapabilities({\n              // setLogLevel is left undefined — the cap's built-in fallback\n              // calls `getLogStore()?.setLevel(...)` directly, which matches\n              // the legacy `set_log_level` AgentCommand body 1:1.\n              // Other handlers (addMount / addConnector / removeResource /\n              // updateCredential / setState / lifecycle) remain stubs;\n              // wiring is tracked under AF-PV3 / F-RUNNER-CAPS.\n            });\n            for (const cap of runnerCaps) {\n              capabilityRegistry.register(cap, \"agent\");\n            }\n\n            resolveSessionReady();\n            log(\"[serve] session built from session_init envelope\");\n          }\n        } catch (err) {\n          const errMsg = err instanceof Error ? err.message : String(err);\n          log(`[serve] session_init failed to build session: ${errMsg}`);\n          sendEvent({ type: \"error\", message: errMsg, fatal: true });\n          rejectSessionReady(err instanceof Error ? err : new Error(errMsg));\n        }\n\n        // 7. Stash aiProviderConfigId for the auth-error retry handler.\n        if (cmd.resolvedConfig.aiProviderConfigId) {\n          aiProviderConfigId = cmd.resolvedConfig.aiProviderConfigId;\n          log(`[serve] stashed aiProviderConfigId=${aiProviderConfigId}`);\n        }\n\n        // 7a. Arm the proactive AI-credential refresh timer. Needs\n        // aiProviderConfigId in scope (set above) AND an `expiresAt`\n        // parsed from the initial credentials blob (step 5). Static PATs\n        // and standalone sessions short-circuit to no-op inside the\n        // scheduler.\n        if (aiProviderConfigId && initialAiCredentialExpiresAt) {\n          aiCredentialRefreshScheduler.schedule(initialAiCredentialExpiresAt);\n        }\n\n        // 8. Adapt the rest of the configure logic onto envelope fields.\n        const cfg = {\n          aiResources: cmd.resolvedConfig.aiResources,\n          subagents: cmd.resolvedConfig.subagents,\n          sharedState: cmd.sharedState,\n          resumeSessionId: cmd.resume?.sessionId,\n          expectedCapabilitySignature: cmd.resume?.expectedCapabilitySignature,\n          aiProviderConfigId: cmd.resolvedConfig.aiProviderConfigId,\n        };\n        log(\n          `[serve] configure cfg keys=${Object.keys(cfg).join(\",\")} sharedState=${cfg.sharedState ? cfg.sharedState.length : \"undefined\"} resourceManager=${resourceManager ? \"set\" : \"null\"}`,\n        );\n\n        // `aiProviderConfigId` was already stashed in step 7 above. The legacy\n        // configure-handler block re-stashed `cfg.aiProviderConfigId` here for\n        // the standalone configure path; on session_init the field is sourced\n        // from the same `cmd.resolvedConfig.aiProviderConfigId` so the second\n        // assignment was redundant and has been removed.\n        //\n        // Spec: `_devlog/specs/2026-05-07-unified-credential-mediation.md`\n        // § \"Wire `aiProviderConfigId` end-to-end\".\n\n        // ── Tier-1 native SDK resume (Phase 3 of the resume cascade) ──────\n        //\n        // The platform sets `cfg.resumeSessionId` (and optionally\n        // `cfg.expectedCapabilitySignature`) when wake-time tier selection\n        // chose tier 1. We:\n        //   1. Compute the current registry signature post-cap-registration.\n        //   2. If a signature was supplied and it doesn't match — drop the\n        //      resume hint and emit `resume_failed { signature_mismatch }`.\n        //   3. Otherwise, dispose + recreate the driver with the supplied\n        //      session id so the first prompt resumes the SDK conversation.\n        //\n        // Spec: `_devlog/specs/2026-05-05-session-resume-restart-design.md`\n        // The resume hint is staged here and merged into any subsequent\n        // driver recreate within this configure call. Without staging, a\n        // later branch (e.g. `cfg.subagents`) would clobber the resume by\n        // recreating the driver from `sessionConfig` without the hint.\n        let pendingResumeSessionId: string | undefined;\n        const cfgResumeSessionId = cfg.resumeSessionId;\n        const cfgExpectedSig = cfg.expectedCapabilitySignature;\n        if (cfgResumeSessionId) {\n          const currentSig = computeCapabilitySignature(capabilityRegistry.list());\n          if (cfgExpectedSig && cfgExpectedSig !== currentSig) {\n            log(\n              `[serve] tier-1 resume rejected: signature mismatch (expected=${cfgExpectedSig.slice(0, 12)} current=${currentSig.slice(0, 12)})`,\n            );\n            sendEvent({\n              type: \"resume_failed\",\n              resumeSessionId: cfgResumeSessionId,\n              reason: \"signature_mismatch\",\n            });\n          } else {\n            log(`[serve] tier-1 resume attempted: resumeSessionId=${cfgResumeSessionId}`);\n            sendEvent({\n              type: \"resume_attempted\",\n              resumeSessionId: cfgResumeSessionId,\n              capabilitySignature: currentSig,\n            });\n            pendingResumeSessionId = cfgResumeSessionId;\n          }\n        }\n\n        // Apply tier-1 resume + any subagents recreate in a single dispose\n        // + recreate. Either branch alone, both together, or neither. When\n        // both are set, the subagents `cfg.subagents` is already in\n        // `sessionConfig.wsConfig` via `buildSessionConfig`, so `cfg.subagents`\n        // here is informational only — we still need to recreate so the\n        // driver picks up the new config. Threading\n        // `pendingResumeSessionId` into the same recreate prevents the\n        // tier-1 hint from being clobbered.\n        if (pendingResumeSessionId || cfg.subagents) {\n          await agentSession.dispose();\n          agentSession = await createAgentSession({\n            ...sessionConfig,\n            ...(aiProviderConfigId ? { aiProviderConfigId } : {}),\n            ...(pendingResumeSessionId ? { resumeSessionId: pendingResumeSessionId } : {}),\n          });\n          emitSystemPromptComposed(agentSession, sendEvent);\n          driver = agentSession.driver;\n          normalizer.reset();\n          driverStarted = false;\n          rebuildCompactionOrchestrator();\n        }\n        if (cfg.sharedState) {\n          // Lazy-create a ConnectorManager if one doesn't exist yet (the\n          // session may have no connectors in skaile.yaml, but the platform\n          // still needs to register shared state stores).\n          if (!resourceManager) {\n            try {\n              registerBuiltinConnectors();\n              resourceManager = new ConnectorManager(opts.projectDir, {\n                catalogEntries: getSessionCatalogEntries(agentSession),\n              });\n              log(\"[serve] created ConnectorManager for sharedState (no connectors were declared)\");\n            } catch (err) {\n              const errMsg = err instanceof Error ? err.message : String(err);\n              log(`[serve] failed to create ConnectorManager: ${errMsg}`);\n              sendEvent({ type: \"configured\" });\n              break;\n            }\n          }\n          // Register each shared state store as a hot-plug connector and wire\n          // its change callback to forward state_changed events to the client.\n          let storesRegistered = 0;\n          for (const stateConfig of cfg.sharedState) {\n            try {\n              if (resourceManager.has(stateConfig.id)) {\n                // Store already exists (e.g. backend reconnected after restart).\n                // Re-emit current state so the backend's stateCache is repopulated.\n                try {\n                  const snapshot = await resourceManager.executeOp(stateConfig.id, \"get\", {});\n                  const state = snapshot ? JSON.parse(snapshot) : {};\n                  sendEvent({\n                    type: \"state_changed\",\n                    store: stateConfig.id,\n                    state,\n                  });\n                  log(\n                    `[serve] sharedState ${stateConfig.id} already registered — re-emitted current state`,\n                  );\n                } catch {\n                  log(\n                    `[serve] sharedState ${stateConfig.id} already registered — skipping (could not read state)`,\n                  );\n                }\n                continue;\n              }\n              const handle = await resourceManager.connect({\n                id: stateConfig.id,\n                driver: stateConfig.adapter,\n                access: \"read-write\" as const,\n                options: {\n                  ...((stateConfig.definition as Record<string, unknown> | undefined) ?? {}),\n                  initial: stateConfig.initialState ?? {},\n                },\n              });\n              // Wire onStoreChange (xstate-store specific) to emit state_changed events\n              const entry = resourceManager.get(stateConfig.id);\n              if (typeof entry.connector.onStoreChange === \"function\") {\n                entry.connector.onStoreChange(handle, (snapshot: Record<string, unknown>) => {\n                  sendEvent({\n                    type: \"state_changed\",\n                    store: stateConfig.id,\n                    state: snapshot,\n                  });\n                });\n              }\n              log(`[serve] sharedState registered: ${stateConfig.id} (${stateConfig.adapter})`);\n              storesRegistered++;\n              // Emit initial state immediately so subscribers don't have to wait for the first mutation.\n              sendEvent({\n                type: \"state_changed\",\n                store: stateConfig.id,\n                state: stateConfig.initialState ?? {},\n              });\n            } catch (err) {\n              const errMsg = err instanceof Error ? err.message : String(err);\n              log(`[serve] sharedState registration failed for ${stateConfig.id}: ${errMsg}`);\n              sendEvent({\n                type: \"error\",\n                message: `sharedState ${stateConfig.id}: ${errMsg}`,\n                fatal: false,\n              });\n            }\n          }\n\n          // Rebuild MCP connector tools so the agent can access the new stores.\n          // This must happen before the driver starts (lazy start on first prompt).\n          if (storesRegistered > 0 && !driverStarted && agentSession?.driverType === \"claude-sdk\") {\n            try {\n              const server = await buildSdkConnectorTools(resourceManager, { z: _z });\n              if (server) {\n                (driver as any).config.mcpServers = { \"skaile-connectors\": server };\n                log(`[serve] rebuilt MCP connector tools (${storesRegistered} new store(s))`);\n              } else {\n                log(`[serve] buildSdkConnectorTools returned null`);\n              }\n            } catch (err) {\n              const errMsg = err instanceof Error ? err.message : String(err);\n              log(`[serve] failed to rebuild MCP tools: ${errMsg}`);\n            }\n          }\n        }\n\n        // Phase 4 of flow-connector extraction (Protocol 2.2): the implicit\n        // `configure.activeFlows` rehydration was removed. Hosts now issue an\n        // explicit `connector_mutate { id: \"flow\", op: \"hydrate\" }` per flow\n        // after `configure` completes. See `MIGRATION-flow-connector.md`.\n\n        // Handle aiResources (mid-session skill changes via catalog)\n        if (cfg.aiResources) {\n          const catalogActions = cfg.aiResources.filter((a) => a.action);\n          if (catalogActions.length > 0) {\n            log(`[serve] aiResources catalog actions: ${catalogActions.length}`);\n            try {\n              const skillsDir = join(\n                sessionConfig.projectDir ?? process.cwd(),\n                \".claude\",\n                \"skills\",\n              );\n\n              // Resolve ai-assets root from runner's own environment\n              const assetsRoot =\n                process.env.SKAILE_ASSETS_ROOT ??\n                findAiAssetsRoot(sessionConfig.projectDir ?? process.cwd()) ??\n                \"/app/ai-assets\";\n\n              for (const res of catalogActions) {\n                if (res.action === \"add\" && res.entry) {\n                  const entry = res.entry as Record<string, unknown>;\n                  const result = deployCatalogEntry(entry as any, {\n                    assetsRoot,\n                    skillsDir,\n                    context: res.context,\n                  });\n                  if (result.success) {\n                    log(`[serve] deployed skill: ${(entry.name as string) ?? res.name}`);\n                  } else {\n                    log(\n                      `[serve] failed to deploy skill ${(entry.name as string) ?? res.name}: ${result.error}`,\n                    );\n                  }\n                } else if (res.action === \"remove\") {\n                  const removed = undeployCatalogEntry(res.name, skillsDir);\n                  log(`[serve] ${removed ? \"removed\" : \"not found\"} skill: ${res.name}`);\n                }\n              }\n\n              // Restart the driver so the SDK re-discovers skills from .claude/skills/.\n              // Capture the current session ID so we can resume with conversation history.\n              if (driverStarted) {\n                const prevSessionId = driver.runtimeSessionId;\n                log(\n                  `[serve] restarting driver to pick up skill changes (resume=${prevSessionId ?? \"none\"})`,\n                );\n                await agentSession.dispose();\n                agentSession = await createAgentSession({\n                  ...sessionConfig,\n                  resumeSessionId: prevSessionId,\n                });\n                emitSystemPromptComposed(agentSession, sendEvent);\n                driver = agentSession.driver;\n                normalizer.reset();\n                driverStarted = false;\n                rebuildCompactionOrchestrator();\n\n                sendEvent({\n                  type: \"skills_changed\",\n                  skills: catalogActions.map((a) => ({\n                    name: ((a.entry as Record<string, unknown>)?.name as string) ?? a.name,\n                    action: a.action ?? \"add\",\n                  })),\n                });\n              } else {\n                log(\n                  \"[serve] aiResources applied before driver start — skills discovered on first prompt\",\n                );\n              }\n            } catch (err) {\n              const errMsg = err instanceof Error ? err.message : String(err);\n              log(`[serve] aiResources handling failed: ${errMsg}`);\n              sendEvent({\n                type: \"error\",\n                message: `aiResources: ${errMsg}`,\n                fatal: false,\n              });\n            }\n          }\n        }\n        // ACK — let the platform know the envelope has been processed so it\n        // can release the session lock. Includes the post-init capability\n        // signature so tier-1 resume can be validated.\n        sendEvent({\n          type: \"session_init_ack\",\n          capabilitySignature: computeCapabilitySignature(capabilityRegistry.list()),\n        });\n        break;\n      }\n\n      case \"prompt\": {\n        try {\n          await sessionReady;\n        } catch (err) {\n          sendEvent({\n            type: \"error\",\n            message: `Session not available: ${(err as Error).message}`,\n            fatal: true,\n          });\n          break;\n        }\n        if (!secretsProvisioned) {\n          log(\"[serve] prompt received before secrets provisioned — rejecting\");\n          sendEvent({\n            type: \"error\",\n            message: \"Secrets not yet provisioned — send provision_secrets first\",\n            fatal: false,\n          });\n          break;\n        }\n        log(`[serve] prompt: ${cmd.prompt.slice(0, 80)}...`);\n\n        // Route free-chat user messages through the SessionStimulusBus\n        // when a flow is active — every turn then includes the flow\n        // context, and the agent decides whether to advance the flow\n        // or just answer the user. The original prompt path below\n        // runs only when no flow is active. Sender attribution comes\n        // from the envelope layer in hosts that track it; the bare\n        // prompt command carries none today so we use a placeholder.\n        const activeFlow = getOnlyActiveFlow();\n        if (activeFlow) {\n          sendEvent({ type: \"status\", phase: \"thinking\" });\n          try {\n            const bus = getOrCreateStimulusBus();\n            const userStimulus: TurnStimulus = {\n              kind: \"user_message\",\n              text: cmd.prompt,\n              senderId: \"user\",\n            };\n            await bus.signal(activeFlow.connectorId, {\n              promptFragment: renderStimulusPrompt(userStimulus),\n              meta: {\n                kind: \"user_message\",\n                runId: activeFlow.runId,\n                text: cmd.prompt,\n                senderId: \"user\",\n              },\n            });\n          } catch (err) {\n            const errMsg = err instanceof Error ? err.message : String(err);\n            log(`[serve] flow user-message turn failed: ${errMsg}`);\n            sendEvent({ type: \"error\", message: `Flow turn failed: ${errMsg}`, fatal: false });\n          }\n          break;\n        }\n\n        if (!driverStarted) {\n          try {\n            await driver.start();\n            driverStarted = true;\n          } catch (err) {\n            const errMsg = err instanceof Error ? err.message : String(err);\n            log(`[serve] driver start failed: ${errMsg}`);\n            sendEvent({ type: \"error\", message: `Driver start failed: ${errMsg}`, fatal: true });\n            break;\n          }\n\n          // Wire event forwarding through normalizer\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n          driver.on(\"agent-event\", (event: any) => {\n            const normalized = normalizer.normalize(event);\n            for (const e of normalized) {\n              forwardNormalizedEvent(e);\n            }\n          });\n\n          driver.on(\"error\", (err: Error) => {\n            log(`[serve] driver error: ${err.message}`);\n            sendEvent({ type: \"error\", message: err.message, fatal: true });\n          });\n        }\n\n        sendEvent({ type: \"status\", phase: \"thinking\" });\n\n        try {\n          await driver.prompt(cmd.prompt);\n        } catch (err) {\n          const errMsg = err instanceof Error ? err.message : String(err);\n          log(`[serve] prompt failed: ${errMsg}`);\n          sendEvent({ type: \"error\", message: `Prompt failed: ${errMsg}`, fatal: true });\n        }\n        break;\n      }\n\n      case \"reply\": {\n        try {\n          await sessionReady;\n        } catch (err) {\n          sendEvent({\n            type: \"error\",\n            message: `Session not available: ${(err as Error).message}`,\n            fatal: true,\n          });\n          break;\n        }\n        log(`[serve] reply: ${cmd.answer.slice(0, 80)}...`);\n        try {\n          await driver.prompt(cmd.answer);\n        } catch (err) {\n          sendEvent({\n            type: \"error\",\n            message: `Reply failed: ${err instanceof Error ? err.message : String(err)}`,\n            fatal: false,\n          });\n        }\n        break;\n      }\n\n      case \"cancel\": {\n        try {\n          await sessionReady;\n        } catch (err) {\n          sendEvent({\n            type: \"error\",\n            message: `Session not available: ${(err as Error).message}`,\n            fatal: true,\n          });\n          break;\n        }\n        log(\"[serve] cancel\");\n        try {\n          await driver.abort();\n        } catch (err) {\n          log(`[serve] cancel failed: ${err}`);\n        }\n        break;\n      }\n\n      // v3: compact + lifecycle removed — reachable via runner.lifecycle capability\n      // (the v3 `runner.lifecycle` cap takes `{ phase: 'hibernate' | 'close' | 'compact' }`).\n\n      case \"resource_request\": {\n        try {\n          await sessionReady;\n        } catch (err) {\n          sendEvent({\n            type: \"error\",\n            message: `Session not available: ${(err as Error).message}`,\n            fatal: true,\n          });\n          break;\n        }\n        // Route to mounts handler if the ID matches a mounted mount\n        if (resourceManager?.has(cmd.connectorId)) {\n          handleMountResourceRequest(cmd, resourceManager, sendEvent);\n          break;\n        }\n        if (!resourceManager) {\n          sendEvent({\n            type: \"resource_response\",\n            requestId: cmd.requestId,\n            resourceId: cmd.connectorId,\n            operation: cmd.operation,\n            error: \"No resources available — no mounts or connectors configured\",\n          });\n          break;\n        }\n        void handleResourceRequest(cmd, resourceManager, sendEvent);\n        break;\n      }\n\n      // v3: state_action removed — reachable via the runner.set_state capability.\n\n      // ── Generic connector dispatch (Protocol 2.2) ──────────────────────\n      // The 6 typed flow commands (`start_flow`, `approve_flow_node`,\n      // `provide_flow_input`, `cancel_flow`, `set_flow_autonomous_mode`,\n      // `retry_flow_node`) were removed in Phase 4 of the flow-connector\n      // extraction. Hosts now drive flow execution exclusively through\n      // `connector_mutate` against the `flow` connector. See\n      // `MIGRATION-flow-connector.md` for the per-op mapping table.\n      case \"connector_mutate\": {\n        try {\n          if (!resourceManager) throw new Error(\"connector_mutate before resources ready\");\n          // Phase 4: when the host issues `start` against the `flow` connector,\n          // route through `createActiveFlow` so the activeFlows map and bus\n          // wiring stay in sync with the adapter's new run. The path also\n          // ensures the SDK driver's MCP tool surface picks up the flow tools\n          // (legacy parity with the removed `start_flow` typed handler).\n          //\n          // For all other ops we fall through to the generic dispatch — the\n          // adapter's mutate() pipeline emits state_changed via onChange and\n          // wakes the next turn through the stimulus bus.\n          //\n          // Hosts address the flow connector by its bare driver id (\"flow\")\n          // per MIGRATION-flow-connector.md. createActiveFlow registers the\n          // per-run connector at id `flow:${runId}`, so we (a) treat a bare\n          // \"flow\" id with no existing entry as a request to create one\n          // (start path, below) and (b) rewrite a bare \"flow\" id to the\n          // singleton active run's connectorId for non-start ops so the\n          // ConnectorManager lookup succeeds.\n          const targetEntry = resourceManager.has?.(cmd.id) ? resourceManager.get(cmd.id) : null;\n          const isExistingFlow =\n            (targetEntry?.connector as { name?: string } | undefined)?.name === \"flow\";\n          const isBareFlowId = cmd.id === \"flow\";\n          if (cmd.op === \"start\") {\n            if (isExistingFlow || isBareFlowId) {\n              const payload = (cmd.payload ?? {}) as Record<string, unknown>;\n              const flowDef = payload.flow as FlowDefinition | undefined;\n              const seed = payload.seed as\n                | { runId: string; startedBy: string; autonomousMode?: boolean }\n                | undefined;\n              if (flowDef?.id && seed?.runId && seed?.startedBy) {\n                if (activeFlows.size > 0) {\n                  serverLog.warn(\"connector_mutate flow.start: another flow already active\", {\n                    activeRunIds: Array.from(activeFlows.keys()),\n                  });\n                  break;\n                }\n                const entry = await createActiveFlow(flowDef, { seed });\n                serverLog.info(\"connector_mutate flow.start\", {\n                  runId: entry.runId,\n                  flowId: flowDef.id,\n                });\n                break;\n              }\n            }\n          }\n          // Non-start ops: rewrite bare \"flow\" id to the active run's\n          // connectorId. The runner enforces a singleton active flow at\n          // `start` time, so picking the only entry is safe.\n          let dispatchId = cmd.id;\n          if (!targetEntry && isBareFlowId) {\n            const onlyActive = getOnlyActiveFlow();\n            if (onlyActive) {\n              dispatchId = onlyActive.connectorId;\n            }\n          }\n          await resourceManager.executeOp(dispatchId, cmd.op, cmd.payload ?? {});\n        } catch (err) {\n          serverLog.warn(\"connector_mutate failed\", {\n            id: cmd.id,\n            op: cmd.op,\n            error: err instanceof Error ? err.message : String(err),\n          });\n        }\n        break;\n      }\n\n      case \"connector_query\": {\n        let ok = true;\n        let result: string | undefined;\n        let error: string | undefined;\n        try {\n          if (!resourceManager) throw new Error(\"connector_query before resources ready\");\n          // Same bare-\"flow\"-id rewrite as connector_mutate so hosts can\n          // address the flow connector by its driver id without knowing\n          // the per-run connectorId format.\n          let dispatchId = cmd.id;\n          if (!resourceManager.has?.(cmd.id) && cmd.id === \"flow\") {\n            const onlyActive = getOnlyActiveFlow();\n            if (onlyActive) {\n              dispatchId = onlyActive.connectorId;\n            }\n          }\n          result = await resourceManager.executeOp(dispatchId, cmd.op, cmd.payload ?? {});\n        } catch (err) {\n          ok = false;\n          error = err instanceof Error ? err.message : String(err);\n        }\n        sendEvent({\n          type: \"connector_query_response\",\n          requestId: cmd.requestId,\n          ok,\n          ...(result !== undefined ? { result } : {}),\n          ...(error !== undefined ? { error } : {}),\n        });\n        break;\n      }\n\n      case \"debug\": {\n        try {\n          await sessionReady;\n        } catch (err) {\n          sendEvent({\n            type: \"error\",\n            message: `Session not available: ${(err as Error).message}`,\n            fatal: true,\n          });\n          break;\n        }\n        log(`[serve] debug query=${cmd.query}`);\n        let result: unknown;\n        try {\n          switch (cmd.query) {\n            case \"tools\": {\n              const mcpServers = Object.keys((driver as any)?.config?.mcpServers ?? {});\n              const allowedTools = (driver as any)?.config?.allowedTools ?? null;\n              result = { mcpServers, allowedTools, driverStarted };\n              break;\n            }\n            case \"connectors\": {\n              result = resourceManager?.listConnectors?.() ?? [];\n              break;\n            }\n            case \"mcp\": {\n              const servers = Object.entries((driver as any)?.config?.mcpServers ?? {}).map(\n                ([name]) => ({ name }),\n              );\n              result = { servers };\n              break;\n            }\n            case \"config\": {\n              // Read model from the live driver so changes via\n              // reconfigure_agent are reflected in the debug panel.\n              const liveModel = driver?.getModel() ?? agentSession?.model;\n              result = {\n                driver: agentSession?.driverType,\n                model: liveModel,\n                provider: agentSession?.provider,\n                maxTurns,\n                secretsMode,\n                driverStarted,\n                projectDir: opts.projectDir,\n                versions: getFrameworkVersions(),\n              };\n              break;\n            }\n            case \"state\": {\n              const storeId = cmd.args?.store as string | undefined;\n              if (storeId) {\n                try {\n                  const snapshot = await resourceManager?.executeOp(storeId, \"get\", {});\n                  result = snapshot ? JSON.parse(snapshot) : null;\n                } catch (err) {\n                  result = { error: err instanceof Error ? err.message : String(err) };\n                }\n              } else {\n                const all = resourceManager?.listConnectors?.() ?? [];\n                result = { stores: all.map((c: { id: string }) => c.id) };\n              }\n              break;\n            }\n            case \"commands\": {\n              const commands = driver?.getSlashCommands?.() ?? [];\n              result = { commands, driverType: agentSession?.driverType };\n              break;\n            }\n            default:\n              result = { error: `Unknown debug query: ${(cmd as any).query}` };\n          }\n        } catch (err) {\n          result = { error: err instanceof Error ? err.message : String(err) };\n        }\n        sendEvent({ type: \"debug_result\", query: cmd.query, data: result });\n        break;\n      }\n\n      // -----------------------------------------------------------------------\n      // -----------------------------------------------------------------------\n\n      // v3: add_resource, remove_resource, remount_mount, set_log_level,\n      // reconfigure_agent removed from AgentCommand union.\n      // Reachable now via the `runner.set_log_level` and `runner.reconfigure`\n      // capability invocations (audience: ['runtime']) — the platform calls\n      // them through invokeRunnerCapability on the gateway. Handler bodies\n      // live in the runner.* capability registrations.\n\n      case \"shutdown\": {\n        log(\"[serve] shutdown requested\");\n        await cleanup();\n        if (transport instanceof WebSocketServerTransport) {\n          await transport.close();\n        }\n        disposeLogStore();\n        process.exit(0);\n        break;\n      }\n\n      // Protocol v2 — capability round-trip results from the platform.\n      case \"capability_result\": {\n        const matched = resolveCapabilityResult(pendingCapabilityCalls, cmd);\n        if (!matched) {\n          log(\n            `[serve] capability_result for unknown callId=${cmd.callId} (timed out or already resolved); dropping`,\n          );\n        }\n        break;\n      }\n\n      // Protocol v2 — additional capability lifecycle commands. The platform\n      // can register / deregister capabilities mid-session (e.g. when a user\n      // installs an extension after `configure`). Approval routing is reserved\n      // for a later phase; we accept the command shape for forward\n      // compatibility and log it.\n      case \"capability_register\": {\n        for (const raw of cmd.capabilities) {\n          const wire = raw;\n          capabilityRegistry.register(\n            {\n              ...wire,\n              inputZod: { parse: (v: unknown) => v } as unknown as import(\"zod\").ZodTypeAny,\n              outputZod: undefined,\n              handler: buildClientCapabilityHandler(wire),\n            },\n            \"client\",\n          );\n        }\n        break;\n      }\n      case \"capability_deregister\": {\n        for (const name of cmd.names) {\n          capabilityRegistry.deregister(name);\n        }\n        break;\n      }\n      case \"capability_approve\": {\n        // Protocol v2.1 — the platform forwards the user's decision for any\n        // capability declared `requiresApproval: true`. The platform itself\n        // gates dispatch (it parks the `capability_invoked` until the user\n        // responds), so:\n        //\n        //   - `approved`: the platform proceeds to dispatch and replies with\n        //     `capability_result` through the normal path. We only audit-log\n        //     here; rejecting/resolving the pending call would race the\n        //     subsequent result.\n        //   - `rejected`: the platform did NOT dispatch. Reject the pending\n        //     call so the LLM sees a tool error explaining the user denied\n        //     the action.\n        if (cmd.decision === \"rejected\") {\n          const matched = rejectCapabilityOnApprovalDeny(\n            pendingCapabilityCalls,\n            cmd.callId,\n            cmd.feedback,\n          );\n          if (!matched) {\n            log(\n              `[serve] capability_approve(rejected) for unknown callId=${cmd.callId} (already resolved or timed out); dropping`,\n            );\n          } else {\n            log(\n              `[serve] capability_approve(rejected) callId=${cmd.callId} decidedBy=${cmd.decidedBy}${cmd.feedback ? ` feedback=${JSON.stringify(cmd.feedback)}` : \"\"}`,\n            );\n          }\n        } else {\n          log(\n            `[serve] capability_approve(approved) callId=${cmd.callId} decidedBy=${cmd.decidedBy} (awaiting capability_result)`,\n          );\n        }\n        break;\n      }\n    }\n  }\n\n  // Wire transport commands to handler\n  transport.onCommand((cmd) => {\n    void handleCommand(cmd);\n  });\n\n  // Start listening\n  if (transport instanceof WebSocketServerTransport) {\n    await transport.listen();\n  }\n\n  // Start filesystem/connector watchers AFTER the transport is listening.\n  // Watching can be slow on large directory trees (e.g. node_modules over\n  // Docker bind mounts) and must not block the WebSocket readiness check.\n  if (secretsMode === \"env\" && agentSession!) {\n    agentSession!.startWatching();\n  }\n\n  // Emit available resources on each client connect (not just once after listen,\n  // because the platform connects after the server starts listening)\n  if (transport instanceof WebSocketServerTransport) {\n    transport.onConnect(() => {\n      if (resourceManager) {\n        const wire = splitConnectorsForWire(resourceManager);\n        log(\n          `[serve] emitting resources_available: ${wire.mounts.length} mount(s), ${wire.connectors.length} connector(s)`,\n        );\n        sendEvent({ type: \"resources_available\", ...wire });\n      }\n      // Re-emit cached slash commands if the driver has already discovered them\n      const commands = driver?.getSlashCommands?.() ?? [];\n      if (commands.length > 0) {\n        log(`[serve] emitting commands_available: ${commands.length} command(s)`);\n        sendEvent({ type: \"commands_available\", commands });\n      }\n    });\n  }\n\n  if (secretsMode === \"env\") {\n    log(\n      `[serve] driver=${agentSession!.driverType} model=${agentSession!.model ?? \"(default)\"} provider=${agentSession!.provider ?? \"(default)\"} maxTurns=${maxTurns ?? \"(default)\"}`,\n    );\n  } else {\n    log(`[serve] secrets=provisioned — session will initialize after provision_secrets`);\n  }\n  log(`[serve] project=${opts.projectDir}`);\n\n  // Last-resort safety net: a single bad watcher event or stray async error\n  // should never take the session down. Log and keep serving.\n  process.on(\"uncaughtException\", (err) => {\n    log(\n      `[serve] uncaughtException (non-fatal): ${err instanceof Error ? (err.stack ?? err.message) : String(err)}`,\n    );\n  });\n  process.on(\"unhandledRejection\", (reason) => {\n    log(\n      `[serve] unhandledRejection (non-fatal): ${reason instanceof Error ? (reason.stack ?? reason.message) : String(reason)}`,\n    );\n  });\n\n  // Signal handlers for graceful shutdown.\n  //\n  // Must be safe against:\n  //   - Shutdown while session is still initializing (cleanup bounds its own wait).\n  //   - Hanging mount unmount / connector disconnect / driver kill (deadline timer force-exits).\n  //   - User impatience (second SIGINT/SIGTERM force-exits immediately).\n  const GRACEFUL_SHUTDOWN_TIMEOUT_MS = 5000;\n  let shuttingDown = false;\n\n  async function initiateShutdown(signal: \"SIGINT\" | \"SIGTERM\"): Promise<void> {\n    if (shuttingDown) {\n      log(`[serve] ${signal} received again — forcing exit`);\n      process.exit(130);\n    }\n    shuttingDown = true;\n    log(`[serve] ${signal} received — shutting down (press Ctrl-C again to force)`);\n\n    const forceExitTimer = setTimeout(() => {\n      log(`[serve] graceful shutdown exceeded ${GRACEFUL_SHUTDOWN_TIMEOUT_MS}ms — forcing exit`);\n      process.exit(130);\n    }, GRACEFUL_SHUTDOWN_TIMEOUT_MS);\n    forceExitTimer.unref?.();\n\n    try {\n      await cleanup();\n    } catch (err) {\n      log(`[serve] cleanup error: ${(err as Error).message}`);\n    }\n    try {\n      if (transport instanceof WebSocketServerTransport) {\n        await transport.close();\n      }\n    } catch (err) {\n      log(`[serve] transport close error: ${(err as Error).message}`);\n    }\n\n    clearTimeout(forceExitTimer);\n    log(\"[serve] shutdown complete\");\n    disposeLogStore();\n    process.exit(0);\n  }\n\n  process.on(\"SIGTERM\", () => {\n    void initiateShutdown(\"SIGTERM\");\n  });\n  process.on(\"SIGINT\", () => {\n    void initiateShutdown(\"SIGINT\");\n  });\n}\n","import { randomUUID } from \"node:crypto\";\nimport fs from \"node:fs/promises\";\nimport path from \"node:path\";\n\nconst SESSION_DIR = \".skaile\";\nconst SESSIONS_SUBDIR = \"sessions\";\nconst CURRENT_FILE = \"current\";\nconst LEGACY_FILE = \"session.json\";\n\n/**\n * Runner session metadata.\n *\n * Holds only what the runner needs to resume the agent driver across\n * process restarts — notably `driverSessionId` for SDK session resume.\n *\n * Flow execution state (per-node status, approvals, outputs) moved out\n * of the session file in Phase 2 of the flow-execution plan. It now\n * lives in the FlowAdapter's in-memory snapshot and, for hosts that\n * persist it, in whatever durable store they provide (the Skaile\n * platform uses the `FlowExecution` Prisma table). The runner does\n * not read or write flow state from disk.\n * @docLink packages/runner/session#session-state\n */\nexport interface SessionState {\n  /** Unique identifier for this session run (UUID). */\n  runId: string;\n  /** ID of the flow definition being executed. */\n  flowId: string;\n  /** Absolute path to the project directory. */\n  projectDir: string;\n  /**\n   * Absolute path to the agent definition directory (`agent.yaml`,\n   * `SOUL.md`, `RULES.md`, `knowledge/`). Resolved from `skaile.yaml`\n   * via `resolveAgentDir` when absent at session creation time.\n   */\n  agentDir?: string;\n  /** Agent driver backend used for this session (e.g. `\"omp\"`, `\"claude-sdk\"`). */\n  driver: string;\n  /** LLM provider (if set), e.g. `\"anthropic\"` or `\"openrouter\"`. */\n  provider?: string;\n  /** Model name (if set), e.g. `\"claude-opus-4-5\"`. */\n  model?: string;\n  /** Provider-native session/thread identifier for resume support. */\n  driverSessionId?: string;\n  /** ISO 8601 timestamp when the session was created. */\n  startedAt: string;\n  /** ISO 8601 timestamp of the last state change. */\n  updatedAt: string;\n  /** Optional human-readable label for the session */\n  label?: string;\n  /** Session lifecycle status. */\n  status?: \"running\" | \"complete\" | \"failed\" | \"paused\";\n}\n\n// ---------------------------------------------------------------------------\n// Path helpers\n// ---------------------------------------------------------------------------\n\nfunction sessionsDir(projectDir: string): string {\n  return path.join(projectDir, SESSION_DIR, SESSIONS_SUBDIR);\n}\n\nfunction sessionFilePath(projectDir: string, runId: string): string {\n  return path.join(sessionsDir(projectDir), `${runId}.json`);\n}\n\nfunction currentPointerPath(projectDir: string): string {\n  return path.join(projectDir, SESSION_DIR, CURRENT_FILE);\n}\n\nfunction legacySessionPath(projectDir: string): string {\n  return path.join(projectDir, SESSION_DIR, LEGACY_FILE);\n}\n\n// ---------------------------------------------------------------------------\n// Migration\n// ---------------------------------------------------------------------------\n\n/**\n * Migrate legacy session.json to sessions/<runId>.json if it exists.\n * Safe to call multiple times — no-op if already migrated.\n */\nasync function migrateLegacySession(projectDir: string): Promise<void> {\n  const legacyPath = legacySessionPath(projectDir);\n  try {\n    const raw = await fs.readFile(legacyPath, \"utf-8\");\n    const state = JSON.parse(raw) as SessionState;\n    // Write to new location\n    await fs.mkdir(sessionsDir(projectDir), { recursive: true });\n    await fs.writeFile(\n      sessionFilePath(projectDir, state.runId),\n      JSON.stringify(state, null, 2),\n      \"utf-8\",\n    );\n    // Write current pointer\n    await fs.writeFile(currentPointerPath(projectDir), state.runId, \"utf-8\");\n    // Remove legacy file\n    await fs.rm(legacyPath);\n  } catch {\n    // No legacy file or already migrated — ignore\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Load the current (most recently active) session for a project.\n *\n * Reads the `<projectDir>/.skaile/current` pointer file and loads the\n * corresponding session. Auto-migrates the legacy flat `session.json`\n * format to the per-run `sessions/<runId>.json` layout on first call.\n *\n * @param projectDir - Absolute path to the project directory.\n * @returns The current session or `null` if no session exists.\n * @docLink packages/runner/session#load-session\n */\nexport async function loadSession(projectDir: string): Promise<SessionState | null> {\n  await migrateLegacySession(projectDir);\n  try {\n    const runId = (await fs.readFile(currentPointerPath(projectDir), \"utf-8\")).trim();\n    if (!runId) return null;\n    return await loadSessionById(projectDir, runId);\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Load a specific session by its run ID.\n *\n * @param projectDir - Absolute path to the project directory.\n * @param runId - The UUID of the session to load.\n * @returns The session state or `null` if not found.\n * @docLink packages/runner/session#load-session-by-id\n */\nexport async function loadSessionById(\n  projectDir: string,\n  runId: string,\n): Promise<SessionState | null> {\n  try {\n    const raw = await fs.readFile(sessionFilePath(projectDir, runId), \"utf-8\");\n    return JSON.parse(raw) as SessionState;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * List all sessions for a project.\n *\n * Auto-migrates the legacy flat `session.json` format on first call.\n * Corrupt or unreadable session files are silently skipped.\n *\n * @param projectDir - Absolute path to the project directory.\n * @returns All sessions sorted by `updatedAt` descending (newest first).\n * @docLink packages/runner/session#list-sessions\n */\nexport async function listSessions(projectDir: string): Promise<SessionState[]> {\n  await migrateLegacySession(projectDir);\n  const dir = sessionsDir(projectDir);\n  try {\n    const files = await fs.readdir(dir);\n    const sessions: SessionState[] = [];\n    for (const file of files) {\n      if (!file.endsWith(\".json\")) continue;\n      try {\n        const raw = await fs.readFile(path.join(dir, file), \"utf-8\");\n        sessions.push(JSON.parse(raw) as SessionState);\n      } catch {\n        /* skip corrupt files */\n      }\n    }\n    return sessions.sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));\n  } catch {\n    return [];\n  }\n}\n\n/**\n * Persist a session to `<projectDir>/.skaile/sessions/<runId>.json`.\n *\n * @param projectDir - Absolute path to the project directory.\n * @param state - Session state to write.\n * @param setCurrent - When `true` (default), updates the `current` pointer\n *   file so subsequent {@link loadSession} calls return this session.\n * @docLink packages/runner/session#save-session\n */\nexport async function saveSession(\n  projectDir: string,\n  state: SessionState,\n  setCurrent = true,\n): Promise<void> {\n  await fs.mkdir(sessionsDir(projectDir), { recursive: true });\n  await fs.writeFile(\n    sessionFilePath(projectDir, state.runId),\n    JSON.stringify(state, null, 2),\n    \"utf-8\",\n  );\n  if (setCurrent) {\n    await fs.writeFile(currentPointerPath(projectDir), state.runId, \"utf-8\");\n  }\n}\n\n/**\n * Set the current session pointer to an existing session.\n *\n * @param projectDir - Absolute path to the project directory.\n * @param runId - The UUID of the session to make current.\n * @throws {Error} When no session with the given `runId` exists.\n * @docLink packages/runner/session#set-current-session\n */\nexport async function setCurrentSession(projectDir: string, runId: string): Promise<void> {\n  const exists = await loadSessionById(projectDir, runId);\n  if (!exists) throw new Error(`Session not found: ${runId}`);\n  await fs.mkdir(path.join(projectDir, SESSION_DIR), { recursive: true });\n  await fs.writeFile(currentPointerPath(projectDir), runId, \"utf-8\");\n}\n\n/**\n * Delete a session file by run ID.\n *\n * If the deleted session was the current session, the `current` pointer\n * file is also removed. Missing session files are silently ignored.\n *\n * @param projectDir - Absolute path to the project directory.\n * @param runId - The UUID of the session to delete.\n * @docLink packages/runner/session#delete-session\n */\nexport async function deleteSession(projectDir: string, runId: string): Promise<void> {\n  try {\n    await fs.rm(sessionFilePath(projectDir, runId));\n  } catch {\n    /* ignore missing */\n  }\n  // Clear current pointer if it pointed to this session\n  try {\n    const current = (await fs.readFile(currentPointerPath(projectDir), \"utf-8\")).trim();\n    if (current === runId) {\n      await fs.rm(currentPointerPath(projectDir));\n    }\n  } catch {\n    /* ignore */\n  }\n}\n\n/**\n * Unset the current session pointer without deleting the session file.\n *\n * After calling this, {@link loadSession} returns `null` until a new\n * session is saved or {@link setCurrentSession} is called.\n *\n * @param projectDir - Absolute path to the project directory.\n * @docLink packages/runner/session#clear-session\n */\nexport async function clearSession(projectDir: string): Promise<void> {\n  try {\n    await fs.rm(currentPointerPath(projectDir));\n  } catch {\n    /* ignore missing */\n  }\n}\n\n/**\n * Create a new {@link SessionState} with a fresh UUID and current timestamps.\n *\n * The returned session has `status: \"running\"` and both `startedAt` and\n * `updatedAt` set to the current ISO 8601 time. Caller is responsible for\n * persisting it via {@link saveSession}.\n *\n * @param opts - All session fields except `runId`, `startedAt`, `updatedAt`,\n *   and `status` (which are generated automatically).\n * @returns A fully initialized session state ready to be saved.\n * @docLink packages/runner/session#new-session\n */\nexport function newSession(\n  opts: Omit<SessionState, \"runId\" | \"startedAt\" | \"updatedAt\" | \"status\">,\n): SessionState {\n  const now = new Date().toISOString();\n  return { ...opts, runId: randomUUID(), startedAt: now, updatedAt: now, status: \"running\" };\n}\n\n/**\n * Update a session's `updatedAt` timestamp without changing any other field.\n * Used by callers that persist a session mid-run to refresh the staleness clock.\n *\n * @param state - Current session state\n * @returns New session state with updated timestamp\n * @docLink packages/runner/session#touch-session\n */\nexport function touchSession(state: SessionState): SessionState {\n  return { ...state, updatedAt: new Date().toISOString() };\n}\n"]}