@skaile/workspaces 0.41.6 → 0.42.1

package/dist/bridge/drivers/codex.js

@@ -1,6 +1,6 @@
 import { fetchProviderModels } from '../../chunk-BMQKMOQY.js';
 import { classifyGenericErrorMessage } from '../../chunk-GAH4YRCI.js';
-import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-KM6DCR7A.js';
+import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-OCAQH66V.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';

package/dist/bridge/drivers/continue.js

@@ -1,6 +1,6 @@
-import { SubprocessCliDriver, mapApiKeysToEnv, extractText, extractCost, extractTokens } from '../../chunk-U3TV7SRR.js';
+import { SubprocessCliDriver, mapApiKeysToEnv, extractText, extractCost, extractTokens } from '../../chunk-RSK6FDMV.js';
 import '../../chunk-GAH4YRCI.js';
-import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-KM6DCR7A.js';
+import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-OCAQH66V.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';

package/dist/bridge/drivers/echo.js

@@ -1,5 +1,5 @@
 import { dispatchCapability } from '../../chunk-RRVQAE5D.js';
-import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-KM6DCR7A.js';
+import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-OCAQH66V.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';

package/dist/bridge/drivers/gemini.js

@@ -1,8 +1,8 @@
-export { GeminiDriver, GeminiFamilyDriver, geminiDriverTarget } from '../../chunk-4ZACMAT3.js';
-import '../../chunk-U3TV7SRR.js';
+export { GeminiDriver, GeminiFamilyDriver, geminiDriverTarget } from '../../chunk-Z3GAAIJK.js';
+import '../../chunk-RSK6FDMV.js';
 import '../../chunk-BMQKMOQY.js';
 import '../../chunk-GAH4YRCI.js';
-import '../../chunk-KM6DCR7A.js';
+import '../../chunk-OCAQH66V.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';

package/dist/bridge/drivers/goose.js

@@ -1,6 +1,6 @@
-import { SubprocessCliDriver, mapApiKeysToEnv, extractText, extractCost, extractTokens } from '../../chunk-U3TV7SRR.js';
+import { SubprocessCliDriver, mapApiKeysToEnv, extractText, extractCost, extractTokens } from '../../chunk-RSK6FDMV.js';
 import '../../chunk-GAH4YRCI.js';
-import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-KM6DCR7A.js';
+import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-OCAQH66V.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';

package/dist/bridge/drivers/omp.js

@@ -1,5 +1,5 @@
 import { classifyGenericErrorMessage } from '../../chunk-GAH4YRCI.js';
-import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-KM6DCR7A.js';
+import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-OCAQH66V.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';

package/dist/bridge/drivers/opencode.js

@@ -1,6 +1,6 @@
-import { SubprocessCliDriver, mapApiKeysToEnv, extractText, extractCost, extractTokens } from '../../chunk-U3TV7SRR.js';
+import { SubprocessCliDriver, mapApiKeysToEnv, extractText, extractCost, extractTokens } from '../../chunk-RSK6FDMV.js';
 import '../../chunk-GAH4YRCI.js';
-import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-KM6DCR7A.js';
+import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-OCAQH66V.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';

package/dist/bridge/drivers/qwen.js

@@ -1,8 +1,8 @@
-import { GeminiFamilyDriver } from '../../chunk-4ZACMAT3.js';
-import '../../chunk-U3TV7SRR.js';
+import { GeminiFamilyDriver } from '../../chunk-Z3GAAIJK.js';
+import '../../chunk-RSK6FDMV.js';
 import { fetchProviderModels } from '../../chunk-BMQKMOQY.js';
 import '../../chunk-GAH4YRCI.js';
-import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-KM6DCR7A.js';
+import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-OCAQH66V.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';

package/dist/bridge/index.js

@@ -1,8 +1,8 @@
-export { BridgeRuntime, EventNormalizer, createRuntime, detectFileChange, detectFileChanges, summarizeToolCall, summarizeToolResult, validateApiKey } from '../chunk-5IXCNMMU.js';
+export { BridgeRuntime, EventNormalizer, createRuntime, detectFileChange, detectFileChanges, summarizeToolCall, summarizeToolResult, validateApiKey } from '../chunk-5C3QJSOD.js';
 export { dispatchCapability, filterRenderCapabilities, renderFallback } from '../chunk-RRVQAE5D.js';
 export { STATIC_MODELS, fetchProviderModels, getModels, getStaticModels } from '../chunk-BMQKMOQY.js';
 export { AccountUnavailableError, AuthError, classifyClaudeSdkError, reclassifyAuthAsAccountUnavailable } from '../chunk-GAH4YRCI.js';
-export { AgentDriver, BUILTIN_DRIVER_CATALOG, DRIVER_CATALOG, createDriver, getBridgeLogger, listDrivers, listModelsForDriver, registerBuiltinDrivers } from '../chunk-KM6DCR7A.js';
+export { AgentDriver, BUILTIN_DRIVER_CATALOG, DRIVER_CATALOG, createDriver, getBridgeLogger, listDrivers, listModelsForDriver, registerBuiltinDrivers } from '../chunk-OCAQH66V.js';
 import '../chunk-6E6PKKAD.js';
 import '../chunk-JB35MVBN.js';
 import '../chunk-NSBPE2FW.js';

package/dist/bridge/src/drivers/claude-sdk.d.ts

@@ -60,6 +60,12 @@ export declare class ClaudeSdkDriver extends AgentDriver {
     private sdk;
     private toolIdToName;
     private prevText;
+    /**
+     * Count of sanitized characters already streamed for the current message.
+     * Lets {@link handleStreamEvent} emit only the newly-stable sanitized suffix
+     * as `_textDelta`, so a leaked marker that spans deltas is never half-sent.
+     */
+    private emittedSanitizedLen;
     /** Set once the streaming text of the current message classifies as a self-healable auth render. */
     private suppressingAuthStream;
     /** Active query — may stay alive between turns if streamInput works. */

package/dist/bridge/src/drivers/claude-sdk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-sdk.d.ts","sourceRoot":"","sources":["../../../../bridge/src/drivers/claude-sdk.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAU,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAUnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AASvE,OAAO,EAAuB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAEpE,OAAO,EACL,KAAK,WAAW,EAChB,WAAW,EAIX,KAAK,UAAU,EACf,KAAK,gBAAgB,EAEtB,MAAM,aAAa,CAAC;AAiErB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH;;;;;;;GAOG;AACH,UAAU,WAAW;IACnB,qEAAqE;IACrE,WAAW,EAAE,OAAO,CAAC;IACrB,wDAAwD;IACxD,MAAM,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,IAAI,EAAE,OAAO,CAAC;CACf;AAaD,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAK7B;IAEF,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAyC;IAC7D,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,GAAG,CAA6C;IACxD,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,QAAQ,CAAM;IACtB,oGAAoG;IACpG,OAAO,CAAC,qBAAqB,CAAS;IAEtC,wEAAwE;IACxE,OAAO,CAAC,KAAK,CAAyB;IACtC,gDAAgD;IAChD,OAAO,CAAC,WAAW,CAA6B;IAChD,4CAA4C;IAC5C,OAAO,CAAC,UAAU,CAAuC;IACzD,6DAA6D;IAC7D,OAAO,CAAC,aAAa,CAAS;IAC9B;;;;;;;;OAQG;IACH,OAAO,CAAC,gBAAgB,CAAS;IACjC,sEAAsE;IACtE,OAAO,CAAC,UAAU,CAAS;IAC3B,+DAA+D;IAC/D,OAAO,CAAC,SAAS,CAAM;IACvB,qDAAqD;IACrD,OAAO,CAAC,cAAc,CAA0B;IAChD,uDAAuD;IACvD,OAAO,CAAC,WAAW,CAA2B;IAC9C,oEAAoE;IACpE,OAAO,CAAC,cAAc,CAAuB;IAC7C;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB,CAAS;IAErC;;;;;;;;;;OAUG;gBACS,MAAM,EAAE,WAAW;IAK/B,IAAa,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAElD;IAEQ,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC,GAAG,IAAI;IAMrF,QAAQ,IAAI,MAAM,GAAG,SAAS;IAIvC;;;;;OAKG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAWnC;;;;;;;;;;;;;;OAcG;IACU,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgC,GAAG,OAAO,CAAC,IAAI,CAAC;IA+I9F;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IA4B/B;;;;;;;OAOG;IACH,OAAO,CAAC,uBAAuB;IAgD/B;;;;;;;OAOG;YACW,mBAAmB;IA0DjC;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAQ9B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,2BAA2B;YA6BrB,UAAU;IAoHf,gBAAgB,IAAI,gBAAgB,EAAE;IAI/C;;;;;;;;OAQG;YACW,wBAAwB;IAiBtC;;;;;;;OAOG;YACW,wBAAwB;IAwDtC,yDAAyD;YAC3C,kBAAkB;IAmBhC;;;;OAIG;YACW,eAAe;IAuC7B,gFAAgF;IAChF,OAAO,CAAC,gBAAgB;IAWxB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAkC3B;;;;;;;OAOG;IACH,OAAO,CAAC,YAAY;IAiBpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,OAAO,CAAC,QAAQ;IAqChB,OAAO,CAAC,gBAAgB;IAoBxB;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAyB5B,OAAO,CAAC,sBAAsB;IAgC9B,OAAO,CAAC,wBAAwB;IAehC,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,iBAAiB;IAazB,OAAO,CAAC,mBAAmB;IA4B3B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IA4B1B,6EAA6E;IAC7E,OAAO,CAAC,mBAAmB;IAmB3B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAazB;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAgDhC,+CAA+C;IAC/C,OAAO,CAAC,gBAAgB;IAYxB,gEAAgE;YACjD,kBAAkB;IAIjC,OAAO,CAAC,mBAAmB;IA+B3B,OAAO,CAAC,cAAc;IAqBtB;;;;;;OAMG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAanC,+DAA+D;IAC/D,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED;;;;;OAKG;IACI,IAAI,IAAI,IAAI;IAeJ,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAUzC,aAAa,IAAI,UAAU,GAAG,IAAI;IAIlC,gBAAgB,IAAI,MAAM,GAAG,IAAI;IAIpC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBnC;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAuB7B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAazB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,gBAAgB;CAezB;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,EAAE,YAAY,CAAC,WAAW,CAU3D,CAAC"}
+{"version":3,"file":"claude-sdk.d.ts","sourceRoot":"","sources":["../../../../bridge/src/drivers/claude-sdk.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAU,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAUnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AASvE,OAAO,EAAuB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAEpE,OAAO,EACL,KAAK,WAAW,EAChB,WAAW,EAIX,KAAK,UAAU,EACf,KAAK,gBAAgB,EAEtB,MAAM,aAAa,CAAC;AAkErB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH;;;;;;;GAOG;AACH,UAAU,WAAW;IACnB,qEAAqE;IACrE,WAAW,EAAE,OAAO,CAAC;IACrB,wDAAwD;IACxD,MAAM,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,IAAI,EAAE,OAAO,CAAC;CACf;AAaD,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAK7B;IAEF,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAyC;IAC7D,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,GAAG,CAA6C;IACxD,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,QAAQ,CAAM;IACtB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB,CAAK;IAChC,oGAAoG;IACpG,OAAO,CAAC,qBAAqB,CAAS;IAEtC,wEAAwE;IACxE,OAAO,CAAC,KAAK,CAAyB;IACtC,gDAAgD;IAChD,OAAO,CAAC,WAAW,CAA6B;IAChD,4CAA4C;IAC5C,OAAO,CAAC,UAAU,CAAuC;IACzD,6DAA6D;IAC7D,OAAO,CAAC,aAAa,CAAS;IAC9B;;;;;;;;OAQG;IACH,OAAO,CAAC,gBAAgB,CAAS;IACjC,sEAAsE;IACtE,OAAO,CAAC,UAAU,CAAS;IAC3B,+DAA+D;IAC/D,OAAO,CAAC,SAAS,CAAM;IACvB,qDAAqD;IACrD,OAAO,CAAC,cAAc,CAA0B;IAChD,uDAAuD;IACvD,OAAO,CAAC,WAAW,CAA2B;IAC9C,oEAAoE;IACpE,OAAO,CAAC,cAAc,CAAuB;IAC7C;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB,CAAS;IAErC;;;;;;;;;;OAUG;gBACS,MAAM,EAAE,WAAW;IAK/B,IAAa,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAElD;IAEQ,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC,GAAG,IAAI;IAMrF,QAAQ,IAAI,MAAM,GAAG,SAAS;IAIvC;;;;;OAKG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAWnC;;;;;;;;;;;;;;OAcG;IACU,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgC,GAAG,OAAO,CAAC,IAAI,CAAC;IAgJ9F;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IA4B/B;;;;;;;OAOG;IACH,OAAO,CAAC,uBAAuB;IAgD/B;;;;;;;OAOG;YACW,mBAAmB;IA0DjC;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAQ9B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,2BAA2B;YA6BrB,UAAU;IAoHf,gBAAgB,IAAI,gBAAgB,EAAE;IAI/C;;;;;;;;OAQG;YACW,wBAAwB;IAiBtC;;;;;;;OAOG;YACW,wBAAwB;IAwDtC,yDAAyD;YAC3C,kBAAkB;IAmBhC;;;;OAIG;YACW,eAAe;IAuC7B,gFAAgF;IAChF,OAAO,CAAC,gBAAgB;IAWxB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAkC3B;;;;;;;OAOG;IACH,OAAO,CAAC,YAAY;IAiBpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,OAAO,CAAC,QAAQ;IAqChB,OAAO,CAAC,gBAAgB;IAoBxB;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAyB5B,OAAO,CAAC,sBAAsB;IAkC9B,OAAO,CAAC,wBAAwB;IAehC,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,iBAAiB;IAyCzB,OAAO,CAAC,iBAAiB;IAazB,OAAO,CAAC,mBAAmB;IA4B3B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IA4B1B,6EAA6E;IAC7E,OAAO,CAAC,mBAAmB;IAwB3B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAazB;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAgDhC,+CAA+C;IAC/C,OAAO,CAAC,gBAAgB;IAYxB,gEAAgE;YACjD,kBAAkB;IAIjC,OAAO,CAAC,mBAAmB;IAiC3B,OAAO,CAAC,cAAc;IAqBtB;;;;;;OAMG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAanC,+DAA+D;IAC/D,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED;;;;;OAKG;IACI,IAAI,IAAI,IAAI;IAeJ,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAUzC,aAAa,IAAI,UAAU,GAAG,IAAI;IAIlC,gBAAgB,IAAI,MAAM,GAAG,IAAI;IAIpC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBnC;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAuB7B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAazB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,gBAAgB;CAezB;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,EAAE,YAAY,CAAC,WAAW,CAU3D,CAAC"}

package/dist/bridge/src/drivers/sanitize-assistant-text.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Defense-in-depth sanitizer for assistant text emitted by the Claude Agent
+ * SDK driver.
+ *
+ * The model occasionally leaks control markup into the *plaintext* of an
+ * assistant `text` block:
+ *
+ * 1. A verbatim function-call XML wrapper
+ *    (`[function_calls] … [invoke name="Bash"] … [/antml:invoke] … [/function_calls]`)
+ *    — the same call is *also* emitted as a structured `tool_use` block, so the
+ *    inline copy is pure duplication.
+ * 2. A fabricated follow-up turn the model auto-completes from the prepended
+ *    conversation transcript, e.g. a trailing `[User]: "…"` (or `[Assistant]:`)
+ *    line. This hallucinated turn swallows the user's real next message in the
+ *    UI.
+ *
+ * Neither belongs in persisted assistant prose. The primary fix lives in the
+ * prompt shape (`enrichPromptWithHistory` no longer renders a continuable
+ * `[User]:`/`[Assistant]:` transcript); this strips the residue if a leak still
+ * slips through. It is deliberately conservative — only the clearly-leaked
+ * control markup above is removed; legitimate prose (including a user *quoting*
+ * a bracketed phrase mid-sentence) is left untouched.
+ *
+ * @module
+ */
+/**
+ * Strip leaked control markup from an assistant text block.
+ *
+ * Order matters: remove function-call wrappers first (they may span multiple
+ * lines and contain role-like text), then drop any trailing fabricated role
+ * turns. Only *trailing* role turns are removed — a `[User]:` line in the
+ * middle of genuine prose is left alone, because a real answer never emits one
+ * mid-stream, whereas the hallucinated follow-up always lands at the end.
+ *
+ * @param text - Raw assistant text (possibly a partial stream so far).
+ * @returns The text with leaked markup removed. Returns the input unchanged
+ *   when it contains none.
+ */
+export declare function sanitizeAssistantText(text: string): string;
+/**
+ * Streaming-safe variant of {@link sanitizeAssistantText}.
+ *
+ * Returns the sanitized text truncated before (a) any surviving unclosed
+ * markup opener and (b) any trailing partial marker fragment, so the caller can
+ * emit the result so far without ever flushing the first half of a marker that
+ * will complete in a later delta. The held-back portion is re-evaluated on the
+ * next call once more text arrives.
+ *
+ * @param text - The accumulated assistant text so far (not a single delta).
+ * @returns The sanitized, complete-marker-free prefix safe to emit now.
+ */
+export declare function streamingSafeSanitize(text: string): string;
+//# sourceMappingURL=sanitize-assistant-text.d.ts.map

package/dist/bridge/src/drivers/sanitize-assistant-text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-assistant-text.d.ts","sourceRoot":"","sources":["../../../../bridge/src/drivers/sanitize-assistant-text.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AA0CH;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAiC1D;AAiED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAmB1D"}

package/dist/{chunk-J4RF5ABK.js → chunk-2BEDUMTA.js}

@@ -1,4 +1,4 @@
-import { globalSettingsPath, mapLegacyFields } from './chunk-MVXXAXDW.js';
+import { globalSettingsPath, mapLegacyFields } from './chunk-KYQNWFJV.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { homedir } from 'os';
 import { join } from 'path';
@@ -89,5 +89,5 @@ function isStoreAuthenticated(config) {
 }
 
 export { clearStoreTokens, getStoreConfig, isStoreAuthenticated, saveStoreTokens, storeFetch };
-//# sourceMappingURL=chunk-J4RF5ABK.js.map
-//# sourceMappingURL=chunk-J4RF5ABK.js.map
+//# sourceMappingURL=chunk-2BEDUMTA.js.map
+//# sourceMappingURL=chunk-2BEDUMTA.js.map

package/dist/{chunk-J4RF5ABK.js.map → chunk-2BEDUMTA.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../cli/src/store-client.ts"],"names":[],"mappings":";;;;;AAuBO,SAAS,cAAA,GAA8B;AAC5C,EAAA,MAAM,eAAe,kBAAA,EAAmB;AACxC,EAAA,IAAI,WAAgC,EAAC;AACrC,EAAA,IAAI,UAAA,CAAW,YAAY,CAAA,EAAG;AAC5B,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,gBAAgB,IAAA,CAAK,KAAA,CAAM,aAAa,YAAA,EAAc,OAAO,CAAC,CAAC,CAAA;AAAA,IAC5E,CAAA,CAAA,MAAQ;AACN,MAAA,QAAA,GAAW,EAAC;AAAA,IACd;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,QAAA,CAAS,QAAA,IAAY,OAAA,CAAQ,IAAI,gBAAA,IAAoB,yBAAA;AAAA,IAC1D,GAAA,EAAK,SAAS,QAAA,IAAY,IAAA;AAAA,IAC1B,YAAA,EAAc,SAAS,iBAAA,IAAqB;AAAA,GAC9C;AACF;AAGA,SAAS,gBAAA,GAA2B;AAClC,EAAA,OAAO,IAAA,CAAK,OAAA,EAAQ,EAAG,SAAA,EAAW,eAAe,CAAA;AACnD;AASO,SAAS,eAAA,CAAgB,KAAa,YAAA,EAA4B;AACvE,EAAA,MAAM,eAAe,gBAAA,EAAiB;AACtC,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,YAAA,EAAc,IAAI,CAAA;AACnC,EAAA,SAAA,CAAU,GAAA,EAAK,EAAE,SAAA,EAAW,IAAA,EAAM,CAAA;AAElC,EAAA,IAAI,UAA+B,EAAC;AACpC,EAAA,IAAI,UAAA,CAAW,YAAY,CAAA,EAAG;AAC5B,IAAA,IAAI;AACF,MAAA,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,YAAA,EAAc,OAAO,CAAC,CAAA;AAAA,IAC1D,CAAA,CAAA,MAAQ;AACN,MAAA,OAAA,GAAU,EAAC;AAAA,IACb;AAAA,EACF;AAEA,EAAA,OAAA,CAAQ,QAAA,GAAW,GAAA;AACnB,EAAA,OAAA,CAAQ,iBAAA,GAAoB,YAAA;AAC5B,EAAA,aAAA,CAAc,cAAc,IAAA,CAAK,SAAA,CAAU,SAAS,IAAA,EAAM,CAAC,GAAG,OAAO,CAAA;AACvE;AAOO,SAAS,gBAAA,GAAyB;AACvC,EAAA,MAAM,eAAe,gBAAA,EAAiB;AACtC,EAAA,IAAI,CAAC,UAAA,CAAW,YAAY,CAAA,EAAG;AAE/B,EAAA,IAAI;AACF,IAAA,MAAM,UAAU,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,YAAA,EAAc,OAAO,CAAC,CAAA;AAC9D,IAAA,OAAO,OAAA,CAAQ,QAAA;AACf,IAAA,OAAO,OAAA,CAAQ,iBAAA;AACf,IAAA,aAAA,CAAc,cAAc,IAAA,CAAK,SAAA,CAAU,SAAS,IAAA,EAAM,CAAC,GAAG,OAAO,CAAA;AAAA,EACvE,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAWA,eAAsB,UAAA,CACpB,MAAA,EACA,IAAA,EACA,IAAA,EAMY;AACZ,EAAA,IAAI,GAAA,GAAM,CAAA,EAAG,MAAA,CAAO,GAAG,GAAG,IAAI,CAAA,CAAA;AAC9B,EAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,IAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,IAAA,CAAK,MAAM,CAAA;AAC1C,IAAA,GAAA,IAAO,IAAI,EAAE,CAAA,CAAA;AAAA,EACf;AAEA,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,cAAA,EAAgB,kBAAA;AAAA,IAChB,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAI,IAAA,EAAM,OAAA,IAAW;AAAC,GACxB;AACA,EAAA,IAAI,OAAO,GAAA,EAAK;AACd,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,GAAG,CAAA,CAAA;AAAA,EAC9C;AAEA,EAAA,MAAM,SAAA,GAAyB;AAAA,IAC7B,MAAA,EAAQ,MAAM,MAAA,IAAU,KAAA;AAAA,IACxB;AAAA,GACF;AACA,EAAA,IAAI,MAAM,IAAA,EAAM;AACd,IAAA,SAAA,CAAU,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AAAA,EAC3C;AAEA,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,UAAU,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,IAAK,CAAA;AAC1D,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,GAAG,SAAA,EAAW,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AACxE,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK,CAAE,KAAA,CAAM,OAAO,EAAE,KAAA,EAAO,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,IAAG,CAAE,CAAA;AAC3E,MAAA,MAAM,IAAI,KAAA,CAAO,IAAA,CAAa,SAAS,CAAA,iBAAA,EAAoB,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAAA,IACzE;AACA,IAAA,OAAO,IAAI,IAAA,EAAK;AAAA,EAClB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,OAAO,CAAA;AAAA,EACtB;AACF;AAQO,SAAS,qBAAqB,MAAA,EAA+B;AAClE,EAAA,MAAM,CAAA,GAAI,UAAU,cAAA,EAAe;AACnC,EAAA,OAAO,CAAC,CAAC,CAAA,CAAE,GAAA;AACb","file":"chunk-J4RF5ABK.js","sourcesContent":["import { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { globalSettingsPath, mapLegacyFields } from \"@skaile/workspaces/core\";\n\n/**\n * Connection configuration for the AI Asset Store API.\n *\n * @docLink cli/dev-guide#store-client\n */\nexport interface StoreConfig {\n  url: string;\n  jwt: string | null;\n  refreshToken: string | null;\n}\n\n/**\n * Read store connection config from global user settings, falling back to\n * `SKAILE_STORE_URL` env var and the default store URL.\n *\n * @returns Populated {@link StoreConfig} with `url`, `jwt`, and `refreshToken`.\n * @docLink cli/dev-guide#store-client\n */\nexport function getStoreConfig(): StoreConfig {\n  const settingsPath = globalSettingsPath();\n  let settings: Record<string, any> = {};\n  if (existsSync(settingsPath)) {\n    try {\n      settings = mapLegacyFields(JSON.parse(readFileSync(settingsPath, \"utf-8\")));\n    } catch {\n      settings = {};\n    }\n  }\n  return {\n    url: settings.storeUrl ?? process.env.SKAILE_STORE_URL ?? \"https://store.skaile.ai\",\n    jwt: settings.storeJwt ?? null,\n    refreshToken: settings.storeRefreshToken ?? null,\n  };\n}\n\n/** Path to user-level settings */\nfunction userSettingsPath(): string {\n  return join(homedir(), \".skaile\", \"settings.json\");\n}\n\n/**\n * Persist store authentication tokens to `~/.skaile/settings.json`.\n *\n * @param jwt - The JWT access token returned by the store login endpoint.\n * @param refreshToken - The refresh token for obtaining new JWTs.\n * @docLink cli/dev-guide#store-client\n */\nexport function saveStoreTokens(jwt: string, refreshToken: string): void {\n  const settingsPath = userSettingsPath();\n  const dir = join(settingsPath, \"..\");\n  mkdirSync(dir, { recursive: true });\n\n  let current: Record<string, any> = {};\n  if (existsSync(settingsPath)) {\n    try {\n      current = JSON.parse(readFileSync(settingsPath, \"utf-8\"));\n    } catch {\n      current = {};\n    }\n  }\n\n  current.storeJwt = jwt;\n  current.storeRefreshToken = refreshToken;\n  writeFileSync(settingsPath, JSON.stringify(current, null, 2), \"utf-8\");\n}\n\n/**\n * Remove store authentication tokens from `~/.skaile/settings.json`.\n *\n * @docLink cli/dev-guide#store-client\n */\nexport function clearStoreTokens(): void {\n  const settingsPath = userSettingsPath();\n  if (!existsSync(settingsPath)) return;\n\n  try {\n    const current = JSON.parse(readFileSync(settingsPath, \"utf-8\"));\n    delete current.storeJwt;\n    delete current.storeRefreshToken;\n    writeFileSync(settingsPath, JSON.stringify(current, null, 2), \"utf-8\");\n  } catch {\n    // ignore\n  }\n}\n\n/**\n * Make an authenticated HTTP request to the store REST API with a 1.5s timeout.\n *\n * @param config - Store connection config (URL + auth token).\n * @param path - API path (e.g. `/api/assets`).\n * @param opts - Optional method, body, query params, and extra headers.\n * @returns Parsed JSON response body.\n * @docLink cli/dev-guide#store-client\n */\nexport async function storeFetch<T = any>(\n  config: StoreConfig,\n  path: string,\n  opts?: {\n    method?: string;\n    body?: unknown;\n    params?: Record<string, string>;\n    headers?: Record<string, string>;\n  },\n): Promise<T> {\n  let url = `${config.url}${path}`;\n  if (opts?.params) {\n    const sp = new URLSearchParams(opts.params);\n    url += `?${sp}`;\n  }\n\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n    Accept: \"application/json\",\n    ...(opts?.headers ?? {}),\n  };\n  if (config.jwt) {\n    headers.Authorization = `Bearer ${config.jwt}`;\n  }\n\n  const fetchOpts: RequestInit = {\n    method: opts?.method ?? \"GET\",\n    headers,\n  };\n  if (opts?.body) {\n    fetchOpts.body = JSON.stringify(opts.body);\n  }\n\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), 1_500);\n  try {\n    const res = await fetch(url, { ...fetchOpts, signal: controller.signal });\n    if (!res.ok) {\n      const body = await res.json().catch(() => ({ error: `HTTP ${res.status}` }));\n      throw new Error((body as any).error ?? `Store API error: ${res.status}`);\n    }\n    return res.json() as Promise<T>;\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n\n/**\n * Return `true` if a JWT token is present in the provided (or default) store config.\n *\n * @param config - Optional pre-loaded config; if omitted, calls {@link getStoreConfig}.\n * @docLink cli/dev-guide#store-client\n */\nexport function isStoreAuthenticated(config?: StoreConfig): boolean {\n  const c = config ?? getStoreConfig();\n  return !!c.jwt;\n}\n"]}
+{"version":3,"sources":["../cli/src/store-client.ts"],"names":[],"mappings":";;;;;AAuBO,SAAS,cAAA,GAA8B;AAC5C,EAAA,MAAM,eAAe,kBAAA,EAAmB;AACxC,EAAA,IAAI,WAAgC,EAAC;AACrC,EAAA,IAAI,UAAA,CAAW,YAAY,CAAA,EAAG;AAC5B,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,gBAAgB,IAAA,CAAK,KAAA,CAAM,aAAa,YAAA,EAAc,OAAO,CAAC,CAAC,CAAA;AAAA,IAC5E,CAAA,CAAA,MAAQ;AACN,MAAA,QAAA,GAAW,EAAC;AAAA,IACd;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,QAAA,CAAS,QAAA,IAAY,OAAA,CAAQ,IAAI,gBAAA,IAAoB,yBAAA;AAAA,IAC1D,GAAA,EAAK,SAAS,QAAA,IAAY,IAAA;AAAA,IAC1B,YAAA,EAAc,SAAS,iBAAA,IAAqB;AAAA,GAC9C;AACF;AAGA,SAAS,gBAAA,GAA2B;AAClC,EAAA,OAAO,IAAA,CAAK,OAAA,EAAQ,EAAG,SAAA,EAAW,eAAe,CAAA;AACnD;AASO,SAAS,eAAA,CAAgB,KAAa,YAAA,EAA4B;AACvE,EAAA,MAAM,eAAe,gBAAA,EAAiB;AACtC,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,YAAA,EAAc,IAAI,CAAA;AACnC,EAAA,SAAA,CAAU,GAAA,EAAK,EAAE,SAAA,EAAW,IAAA,EAAM,CAAA;AAElC,EAAA,IAAI,UAA+B,EAAC;AACpC,EAAA,IAAI,UAAA,CAAW,YAAY,CAAA,EAAG;AAC5B,IAAA,IAAI;AACF,MAAA,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,YAAA,EAAc,OAAO,CAAC,CAAA;AAAA,IAC1D,CAAA,CAAA,MAAQ;AACN,MAAA,OAAA,GAAU,EAAC;AAAA,IACb;AAAA,EACF;AAEA,EAAA,OAAA,CAAQ,QAAA,GAAW,GAAA;AACnB,EAAA,OAAA,CAAQ,iBAAA,GAAoB,YAAA;AAC5B,EAAA,aAAA,CAAc,cAAc,IAAA,CAAK,SAAA,CAAU,SAAS,IAAA,EAAM,CAAC,GAAG,OAAO,CAAA;AACvE;AAOO,SAAS,gBAAA,GAAyB;AACvC,EAAA,MAAM,eAAe,gBAAA,EAAiB;AACtC,EAAA,IAAI,CAAC,UAAA,CAAW,YAAY,CAAA,EAAG;AAE/B,EAAA,IAAI;AACF,IAAA,MAAM,UAAU,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,YAAA,EAAc,OAAO,CAAC,CAAA;AAC9D,IAAA,OAAO,OAAA,CAAQ,QAAA;AACf,IAAA,OAAO,OAAA,CAAQ,iBAAA;AACf,IAAA,aAAA,CAAc,cAAc,IAAA,CAAK,SAAA,CAAU,SAAS,IAAA,EAAM,CAAC,GAAG,OAAO,CAAA;AAAA,EACvE,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAWA,eAAsB,UAAA,CACpB,MAAA,EACA,IAAA,EACA,IAAA,EAMY;AACZ,EAAA,IAAI,GAAA,GAAM,CAAA,EAAG,MAAA,CAAO,GAAG,GAAG,IAAI,CAAA,CAAA;AAC9B,EAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,IAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,IAAA,CAAK,MAAM,CAAA;AAC1C,IAAA,GAAA,IAAO,IAAI,EAAE,CAAA,CAAA;AAAA,EACf;AAEA,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,cAAA,EAAgB,kBAAA;AAAA,IAChB,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAI,IAAA,EAAM,OAAA,IAAW;AAAC,GACxB;AACA,EAAA,IAAI,OAAO,GAAA,EAAK;AACd,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,GAAG,CAAA,CAAA;AAAA,EAC9C;AAEA,EAAA,MAAM,SAAA,GAAyB;AAAA,IAC7B,MAAA,EAAQ,MAAM,MAAA,IAAU,KAAA;AAAA,IACxB;AAAA,GACF;AACA,EAAA,IAAI,MAAM,IAAA,EAAM;AACd,IAAA,SAAA,CAAU,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AAAA,EAC3C;AAEA,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,UAAU,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,IAAK,CAAA;AAC1D,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,GAAG,SAAA,EAAW,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AACxE,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK,CAAE,KAAA,CAAM,OAAO,EAAE,KAAA,EAAO,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,IAAG,CAAE,CAAA;AAC3E,MAAA,MAAM,IAAI,KAAA,CAAO,IAAA,CAAa,SAAS,CAAA,iBAAA,EAAoB,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAAA,IACzE;AACA,IAAA,OAAO,IAAI,IAAA,EAAK;AAAA,EAClB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,OAAO,CAAA;AAAA,EACtB;AACF;AAQO,SAAS,qBAAqB,MAAA,EAA+B;AAClE,EAAA,MAAM,CAAA,GAAI,UAAU,cAAA,EAAe;AACnC,EAAA,OAAO,CAAC,CAAC,CAAA,CAAE,GAAA;AACb","file":"chunk-2BEDUMTA.js","sourcesContent":["import { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { globalSettingsPath, mapLegacyFields } from \"@skaile/workspaces/core\";\n\n/**\n * Connection configuration for the AI Asset Store API.\n *\n * @docLink cli/dev-guide#store-client\n */\nexport interface StoreConfig {\n  url: string;\n  jwt: string | null;\n  refreshToken: string | null;\n}\n\n/**\n * Read store connection config from global user settings, falling back to\n * `SKAILE_STORE_URL` env var and the default store URL.\n *\n * @returns Populated {@link StoreConfig} with `url`, `jwt`, and `refreshToken`.\n * @docLink cli/dev-guide#store-client\n */\nexport function getStoreConfig(): StoreConfig {\n  const settingsPath = globalSettingsPath();\n  let settings: Record<string, any> = {};\n  if (existsSync(settingsPath)) {\n    try {\n      settings = mapLegacyFields(JSON.parse(readFileSync(settingsPath, \"utf-8\")));\n    } catch {\n      settings = {};\n    }\n  }\n  return {\n    url: settings.storeUrl ?? process.env.SKAILE_STORE_URL ?? \"https://store.skaile.ai\",\n    jwt: settings.storeJwt ?? null,\n    refreshToken: settings.storeRefreshToken ?? null,\n  };\n}\n\n/** Path to user-level settings */\nfunction userSettingsPath(): string {\n  return join(homedir(), \".skaile\", \"settings.json\");\n}\n\n/**\n * Persist store authentication tokens to `~/.skaile/settings.json`.\n *\n * @param jwt - The JWT access token returned by the store login endpoint.\n * @param refreshToken - The refresh token for obtaining new JWTs.\n * @docLink cli/dev-guide#store-client\n */\nexport function saveStoreTokens(jwt: string, refreshToken: string): void {\n  const settingsPath = userSettingsPath();\n  const dir = join(settingsPath, \"..\");\n  mkdirSync(dir, { recursive: true });\n\n  let current: Record<string, any> = {};\n  if (existsSync(settingsPath)) {\n    try {\n      current = JSON.parse(readFileSync(settingsPath, \"utf-8\"));\n    } catch {\n      current = {};\n    }\n  }\n\n  current.storeJwt = jwt;\n  current.storeRefreshToken = refreshToken;\n  writeFileSync(settingsPath, JSON.stringify(current, null, 2), \"utf-8\");\n}\n\n/**\n * Remove store authentication tokens from `~/.skaile/settings.json`.\n *\n * @docLink cli/dev-guide#store-client\n */\nexport function clearStoreTokens(): void {\n  const settingsPath = userSettingsPath();\n  if (!existsSync(settingsPath)) return;\n\n  try {\n    const current = JSON.parse(readFileSync(settingsPath, \"utf-8\"));\n    delete current.storeJwt;\n    delete current.storeRefreshToken;\n    writeFileSync(settingsPath, JSON.stringify(current, null, 2), \"utf-8\");\n  } catch {\n    // ignore\n  }\n}\n\n/**\n * Make an authenticated HTTP request to the store REST API with a 1.5s timeout.\n *\n * @param config - Store connection config (URL + auth token).\n * @param path - API path (e.g. `/api/assets`).\n * @param opts - Optional method, body, query params, and extra headers.\n * @returns Parsed JSON response body.\n * @docLink cli/dev-guide#store-client\n */\nexport async function storeFetch<T = any>(\n  config: StoreConfig,\n  path: string,\n  opts?: {\n    method?: string;\n    body?: unknown;\n    params?: Record<string, string>;\n    headers?: Record<string, string>;\n  },\n): Promise<T> {\n  let url = `${config.url}${path}`;\n  if (opts?.params) {\n    const sp = new URLSearchParams(opts.params);\n    url += `?${sp}`;\n  }\n\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n    Accept: \"application/json\",\n    ...(opts?.headers ?? {}),\n  };\n  if (config.jwt) {\n    headers.Authorization = `Bearer ${config.jwt}`;\n  }\n\n  const fetchOpts: RequestInit = {\n    method: opts?.method ?? \"GET\",\n    headers,\n  };\n  if (opts?.body) {\n    fetchOpts.body = JSON.stringify(opts.body);\n  }\n\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), 1_500);\n  try {\n    const res = await fetch(url, { ...fetchOpts, signal: controller.signal });\n    if (!res.ok) {\n      const body = await res.json().catch(() => ({ error: `HTTP ${res.status}` }));\n      throw new Error((body as any).error ?? `Store API error: ${res.status}`);\n    }\n    return res.json() as Promise<T>;\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n\n/**\n * Return `true` if a JWT token is present in the provided (or default) store config.\n *\n * @param config - Optional pre-loaded config; if omitted, calls {@link getStoreConfig}.\n * @docLink cli/dev-guide#store-client\n */\nexport function isStoreAuthenticated(config?: StoreConfig): boolean {\n  const c = config ?? getStoreConfig();\n  return !!c.jwt;\n}\n"]}

package/dist/{chunk-5VJVSYXX.js → chunk-3HUUP3JC.js}

@@ -436,6 +436,20 @@ ${recentStderr.slice(-5).join("\n")}` : "";
       throw new Error(`rclone flush did not drain within 60s (pid=${handle.pid})`);
     }
   }
+  /**
+   * Authoritative remote byte size for a mount-relative path, via rclone's
+   * `operations/stat` rc endpoint. Backs the mount read-path stale-tail gate:
+   * `operations/stat` hits the backend object directly, so it returns the true
+   * remote size even when the VFS cache is serving a non-truncated item (and
+   * `statSync` on the FUSE mount reports the inflated length). Returns `null`
+   * when the handle is unknown, the object is missing / a directory, or the
+   * call fails — the caller then trusts the on-disk bytes.
+   */
+  async statSize(handle, relPath) {
+    const entry = HANDLES.get(handle.pid);
+    if (!entry) return null;
+    return fetchAuthoritativeSize(handle.rcAddr, entry.spawnConfig.remote, relPath);
+  }
   /** Liveness + cache-dir size. */
   async status(handle) {
     const entry = HANDLES.get(handle.pid);
@@ -582,6 +596,30 @@ function _buildRcloneArgs(config, io) {
   }
   return args;
 }
+function _operationsStatTarget(remote, relPath) {
+  const colon = remote.indexOf(":");
+  const fs = colon >= 0 ? remote.slice(0, colon + 1) : remote;
+  const base = colon >= 0 ? remote.slice(colon + 1) : "";
+  const joined = [base, relPath].map((s) => s.replace(/^\/+|\/+$/g, "")).filter((s) => s.length > 0).join("/");
+  return { fs, remote: joined };
+}
+async function fetchAuthoritativeSize(rcAddr, remote, relPath, fetchImpl = fetch) {
+  const target = _operationsStatTarget(remote, relPath);
+  try {
+    const res = await fetchImpl(`http://${rcAddr}/operations/stat`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify(target)
+    });
+    if (!res.ok) return null;
+    const body = await res.json();
+    const item = body.item;
+    if (!item || item.IsDir === true) return null;
+    return typeof item.Size === "number" && item.Size >= 0 ? item.Size : null;
+  } catch {
+    return null;
+  }
+}
 async function awaitQuiescent(dir, opts) {
   const deadline = Date.now() + opts.timeoutMs;
   for (; ; ) {
@@ -697,6 +735,6 @@ async function dirSize(dir) {
   return total;
 }
 
-export { DEFAULT_UPLOAD_STUCK_THRESHOLD, DEFAULT_VFS_WRITE_BACK, PortPool, RcloneProcessManager, _buildRcloneArgs, _fuseMountPresent, _routeRcloneLogLine, awaitQuiescent, createFsWatcher, ensureDirMode };
-//# sourceMappingURL=chunk-5VJVSYXX.js.map
-//# sourceMappingURL=chunk-5VJVSYXX.js.map
+export { DEFAULT_UPLOAD_STUCK_THRESHOLD, DEFAULT_VFS_WRITE_BACK, PortPool, RcloneProcessManager, _buildRcloneArgs, _fuseMountPresent, _operationsStatTarget, _routeRcloneLogLine, awaitQuiescent, createFsWatcher, ensureDirMode, fetchAuthoritativeSize };
+//# sourceMappingURL=chunk-3HUUP3JC.js.map
+//# sourceMappingURL=chunk-3HUUP3JC.js.map

package/dist/chunk-3HUUP3JC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../connectors/src/fs-utils.ts","../connectors/src/port-pool.ts","../connectors/src/watcher.ts","../connectors/src/rclone-process-manager.ts"],"names":[],"mappings":";;;;;;;;;;AAkCA,eAAsB,aAAA,CAAc,KAAa,GAAA,EAA6B;AAC5E,EAAA,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,SAAA,EAAW,MAAM,CAAA;AACpC,EAAA,IAAI;AACF,IAAA,MAAM,KAAA,CAAM,KAAK,GAAK,CAAA;AAAA,EACxB,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,EAAK,MAAM,4DAAA,EAAyD;AAAA,MAClE,IAAA,EAAM,GAAA;AAAA,MACN,OAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACvD,CAAA;AAAA,EACH;AACF;ACjCO,IAAM,QAAA,GAAN,MAAM,SAAA,CAAS;AAAA,EACH,GAAA;AAAA,EACA,GAAA;AAAA,EACA,KAAA,uBAAY,GAAA,EAAY;AAAA,EAEzC,YAAY,KAAA,EAAyB;AACnC,IAAA,IAAA,CAAK,GAAA,GAAM,MAAM,CAAC,CAAA;AAClB,IAAA,IAAA,CAAK,GAAA,GAAM,MAAM,CAAC,CAAA;AAAA,EACpB;AAAA;AAAA,EAGA,MAAM,QAAA,GAA4B;AAChC,IAAA,KAAA,IAAS,OAAO,IAAA,CAAK,GAAA,EAAK,IAAA,IAAQ,IAAA,CAAK,KAAK,IAAA,EAAA,EAAQ;AAClD,MAAA,IAAI,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA,EAAG;AAC1B,MAAA,IAAI,CAAE,MAAM,SAAA,CAAS,UAAA,CAAW,IAAI,CAAA,EAAI;AACtC,QAAA,IAAA,CAAK,KAAA,CAAM,IAAI,IAAI,CAAA;AACnB,QAAA;AAAA,MACF;AACA,MAAA,IAAA,CAAK,KAAA,CAAM,IAAI,IAAI,CAAA;AACnB,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAM,IAAI,MAAM,CAAA,sBAAA,EAAyB,IAAA,CAAK,GAAG,CAAA,CAAA,EAAI,IAAA,CAAK,GAAG,CAAA,CAAE,CAAA;AAAA,EACjE;AAAA;AAAA,EAGA,QAAQ,IAAA,EAAoB;AAC1B,IAAA,IAAA,CAAK,KAAA,CAAM,IAAI,IAAI,CAAA;AAAA,EACrB;AAAA;AAAA,EAGA,QAAQ,IAAA,EAAoB;AAC1B,IAAA,IAAA,CAAK,KAAA,CAAM,OAAO,IAAI,CAAA;AAAA,EACxB;AAAA;AAAA,EAGA,QAAQ,IAAA,EAAuB;AAC7B,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAAA,EAC5B;AAAA;AAAA,EAGA,OAAO,UAAA,CAAW,IAAA,EAAc,IAAA,GAAO,WAAA,EAA+B;AACpE,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC9B,MAAA,MAAM,MAAA,GAAS,gBAAA,CAAiB,EAAE,IAAA,EAAM,MAAM,CAAA;AAC9C,MAAA,MAAA,CAAO,IAAA,CAAK,WAAW,MAAM;AAC3B,QAAA,MAAA,CAAO,OAAA,EAAQ;AACf,QAAA,OAAA,CAAQ,KAAK,CAAA;AAAA,MACf,CAAC,CAAA;AACD,MAAA,MAAA,CAAO,IAAA,CAAK,SAAS,MAAM;AACzB,QAAA,MAAA,CAAO,OAAA,EAAQ;AACf,QAAA,OAAA,CAAQ,IAAI,CAAA;AAAA,MACd,CAAC,CAAA;AACD,MAAA,MAAA,CAAO,UAAA,CAAW,KAAK,MAAM;AAC3B,QAAA,MAAA,CAAO,OAAA,EAAQ;AACf,QAAA,OAAA,CAAQ,IAAI,CAAA;AAAA,MACd,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AACF;ACxCA,SAAS,cAAc,OAAA,EAA4C;AAGjE,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,KAAA,CAAM,yBAAyB,CAAA;AAC5D,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,MAAM,IAAA,GAAO,aAAa,CAAC,CAAA;AAC3B,IAAA,OAAO,CAAC,CAAA,KAAc,CAAA,CAAE,QAAA,CAAS,IAAI,IAAI,CAAA,CAAA,CAAG,CAAA,IAAK,CAAA,CAAE,QAAA,CAAS,CAAA,CAAA,EAAI,IAAI,CAAA,CAAE,KAAK,CAAA,KAAM,IAAA;AAAA,EACnF;AAGA,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,KAAA,CAAM,+BAA+B,CAAA;AAChE,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,MAAM,IAAA,GAAO,WAAW,CAAC,CAAA;AACzB,IAAA,OAAO,CAAC,CAAA,KAAc,CAAA,CAAE,QAAA,CAAS,IAAI,IAAI,CAAA,CAAA,CAAG,CAAA,IAAK,CAAA,CAAE,QAAA,CAAS,CAAA,CAAA,EAAI,IAAI,CAAA,CAAE,KAAK,CAAA,KAAM,IAAA;AAAA,EACnF;AAGA,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,KAAA,CAAM,2BAA2B,CAAA;AAC1D,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,MAAM,MAAA,GAAS,SAAS,CAAC,CAAA;AACzB,IAAA,IAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,EAAG;AAEzB,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAC/B,MAAA,OAAO,CAAC,CAAA,KAAc,CAAA,CAAE,QAAA,CAAS,IAAI,CAAA;AAAA,IACvC;AACA,IAAA,OAAO,CAAC,CAAA,KAAc,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA;AAAA,EACzC;AAGA,EAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,KAAA,CAAM,gBAAgB,CAAA;AAClD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,MAAM,GAAA,GAAM,YAAY,CAAC,CAAA;AACzB,IAAA,OAAO,CAAC,CAAA,KAAc,CAAA,CAAE,QAAA,CAAS,GAAG,CAAA;AAAA,EACtC;AAGA,EAAA,MAAM,OAAA,GAAU,QACb,OAAA,CAAQ,mBAAA,EAAqB,MAAM,CAAA,CACnC,OAAA,CAAQ,SAAS,cAAc,CAAA,CAC/B,QAAQ,KAAA,EAAO,OAAO,EACtB,OAAA,CAAQ,KAAA,EAAO,MAAM,CAAA,CACrB,OAAA,CAAQ,qBAAqB,IAAI,CAAA;AACpC,EAAA,MAAM,EAAA,GAAK,IAAI,MAAA,CAAO,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA,CAAG,CAAA;AACpC,EAAA,OAAO,CAAC,CAAA,KAAc,EAAA,CAAG,IAAA,CAAK,CAAC,CAAA;AACjC;AAEA,IAAM,eAAA,GAA+D;AAAA,EACnE,CAAC,MAAc,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA,IAAK,CAAA,CAAE,SAAS,OAAO,CAAA;AAAA,EACzD,CAAC,MAAc,CAAA,CAAE,QAAA,CAAS,gBAAgB,CAAA,IAAK,CAAA,CAAE,SAAS,eAAe,CAAA;AAAA,EACzE,CAAC,MAAc,CAAA,CAAE,QAAA,CAAS,eAAe,CAAA,IAAK,CAAA,CAAE,SAAS,cAAc,CAAA;AAAA;AAAA;AAAA,EAGvE,CAAC,CAAA,KAAc,WAAA,CAAY,IAAA,CAAK,CAAC,CAAA;AAAA;AAAA,EAEjC,CAAC,CAAA,KAAc,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA;AAAA,EAChC,CAAC,CAAA,KAAc,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA;AAAA,EAChC,CAAC,CAAA,KAAc,CAAA,CAAE,QAAA,CAAS,KAAK,CAAA;AAAA,EAC/B,CAAC,CAAA,KAAc,CAAA,CAAE,QAAA,CAAS,GAAG;AAC/B,CAAA;AAMO,IAAM,mBAAA,GAAsB,GAAA;AAOnC,SAAS,eAAe,OAAA,EAAmD;AACzE,EAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,OAAA,EAAS,YAAY,CAAA;AAChD,EAAA,IAAI,CAAC,UAAA,CAAW,aAAa,CAAA,SAAU,EAAC;AAExC,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,YAAA,CAAa,aAAA,EAAe,OAAO,CAAA;AACnD,IAAA,MAAM,WAA6C,EAAC;AAEpD,IAAA,KAAA,MAAW,GAAA,IAAO,OAAA,CAAQ,KAAA,CAAM,IAAI,CAAA,EAAG;AACrC,MAAA,MAAM,IAAA,GAAO,IAAI,IAAA,EAAK;AACtB,MAAA,IAAI,CAAC,QAAQ,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,IAAK,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AAE3D,MAAA,IAAI,OAAA,GAAU,IAAA;AAGd,MAAA,IAAI,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,EAAG;AAC3B,QAAA,OAAA,GAAU,OAAA,CAAQ,MAAM,CAAC,CAAA;AAAA,MAC3B,CAAA,MAAA,IAAW,CAAC,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA,EAAG;AAEjC,QAAA,OAAA,GAAU,MAAM,OAAO,CAAA,CAAA;AAAA,MACzB;AAGA,MAAA,IAAI,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA,EAAG;AACzB,QAAA,QAAA,CAAS,IAAA,CAAK,aAAA,CAAc,CAAA,EAAG,OAAO,IAAI,CAAC,CAAA;AAAA,MAC7C,CAAA,MAAO;AACL,QAAA,QAAA,CAAS,IAAA,CAAK,aAAA,CAAc,OAAO,CAAC,CAAA;AAEpC,QAAA,IAAI,CAAC,QAAQ,QAAA,CAAS,GAAG,KAAK,CAAC,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA,EAAG;AACpD,UAAA,QAAA,CAAS,IAAA,CAAK,aAAA,CAAc,CAAA,EAAG,OAAO,KAAK,CAAC,CAAA;AAAA,QAC9C;AAAA,MACF;AAAA,IACF;AAEA,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AAIA,IAAM,kBAAA,GAAqD;AAAA,EACzD,GAAA,EAAK,QAAA;AAAA,EACL,MAAA,EAAQ,MAAA;AAAA,EACR,MAAA,EAAQ,QAAA;AAAA,EACR,MAAA,EAAQ,QAAA;AAAA,EACR,SAAA,EAAW;AACb,CAAA;AAWA,eAAsB,eAAA,CACpB,OAAA,EACA,QAAA,EACA,OAAA,EACsB;AACtB,EAAA,MAAM,GAAA,GAAM,aAAa,EAAE,IAAA,EAAM,aAAa,OAAA,EAAS,SAAA,EAAW,QAAA,EAAU,OAAA,EAAS,CAAA;AACrF,EAAA,MAAM,iBAAA,GAAoB,eAAe,OAAO,CAAA;AAGhD,EAAA,MAAM,cAAA,GAAA,CAAkB,OAAA,EAAS,OAAA,IAAW,EAAC,EAAG,GAAA;AAAA,IAAI,CAAC,KAAA,KACnD,OAAO,UAAU,QAAA,GAAW,aAAA,CAAc,KAAK,CAAA,GAAI;AAAA,GACrD;AACA,EAAA,MAAM,UAAU,CAAC,GAAG,iBAAiB,GAAG,iBAAA,EAAmB,GAAG,cAAc,CAAA;AAC5E,EAAA,MAAM,UAAA,GAAa,SAAS,UAAA,IAAc,mBAAA;AAE1C,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,KAAA,CAAM,OAAA,EAAS;AAAA,IACtC,aAAA,EAAe,IAAA;AAAA,IACf,OAAA;AAAA,IACA,gBAAA,EAAkB,EAAE,kBAAA,EAAoB,UAAA,EAAY,cAAc,EAAA,EAAG;AAAA,IACrE,UAAA,EAAY;AAAA,GACb,CAAA;AAKD,EAAA,OAAA,CAAQ,EAAA,CAAG,OAAA,EAAS,CAAC,GAAA,KAAQ;AAC3B,IAAA,MAAM,UAAU,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC/D,IAAA,GAAA,CAAI,IAAA,CAAK,2BAAA,EAA6B,EAAE,OAAA,EAAS,CAAA;AAAA,EACnD,CAAC,CAAA;AAED,EAAA,KAAA,MAAW,CAAC,aAAA,EAAe,MAAM,KAAK,MAAA,CAAO,OAAA,CAAQ,kBAAkB,CAAA,EAAG;AACxE,IAAC,OAAA,CAAwE,EAAA;AAAA,MACvE,aAAA;AAAA,MACA,CAAC,QAAA,KAAqB;AACpB,QAAA,MAAM,GAAA,GAAM,QAAA,CAAS,OAAA,EAAS,QAAQ,CAAA;AACtC,QAAA,IAAI,CAAC,GAAA,IAAO,GAAA,CAAI,UAAA,CAAW,IAAI,CAAA,EAAG;AAElC,QAAA,MAAM,iBAAiB,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,CAAE,KAAK,GAAG,CAAA;AAC/C,QAAA,QAAA,CAAS,EAAE,IAAA,EAAM,cAAA,EAAgB,MAAA,EAAQ,MAAA,EAAQ,cAAc,CAAA;AAAA,MACjE;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,MAAM,OAAA,CAAQ,KAAA;AAAM,GAC7B;AACF;;;AC9KA,IAAM,kBAAkB,IAAI,QAAA,CAAS,CAAC,IAAA,EAAO,IAAK,CAAC,CAAA;AAG5C,IAAM,sBAAA,GAAyB;AAG/B,IAAM,8BAAA,GAAiC;AAQ9C,IAAM,sBAAA,GAAyB,IAAA;AAC/B,IAAM,oBAAA,GAAuB,GAAA;AAC7B,IAAM,iBAAA,GAAoB,mBAAA;AA8G1B,IAAM,OAAA,uBAAc,GAAA,EAA2B;AAQxC,IAAM,uBAAN,MAA2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMhC,MAAM,MAAM,MAAA,EAAkD;AAC5D,IAAA,IAAI,CAAC,IAAA,CAAK,UAAA,CAAW,MAAA,CAAO,UAAU,CAAA,EAAG;AACvC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6BAAA,EAAgC,MAAA,CAAO,UAAU,CAAA,CAAE,CAAA;AAAA,IACrE;AACA,IAAA,IAAI,CAAC,IAAA,CAAK,UAAA,CAAW,MAAA,CAAO,QAAQ,CAAA,EAAG;AACrC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,MAAA,CAAO,QAAQ,CAAA,CAAE,CAAA;AAAA,IACjE;AAKA,IAAA,MAAM,aAAA,CAAc,MAAA,CAAO,UAAA,EAAY,MAAA,CAAO,GAAG,CAAA;AACjD,IAAA,MAAM,aAAA,CAAc,MAAA,CAAO,QAAA,EAAU,MAAA,CAAO,GAAG,CAAA;AAE/C,IAAA,MAAM,aAAa,IAAA,CAAK,IAAA;AAAA,MACtB,MAAA,EAAO;AAAA,MACP,CAAA,OAAA,EAAU,OAAO,OAAO,CAAA,CAAA,EAAI,YAAY,CAAC,CAAA,CAAE,QAAA,CAAS,KAAK,CAAC,CAAA,KAAA;AAAA,KAC5D;AACA,IAAA,MAAM,UAAU,UAAA,EAAY,MAAA,CAAO,cAAc,EAAE,IAAA,EAAM,KAAO,CAAA;AAEhE,IAAA,MAAM,IAAA,GAAO,MAAM,eAAA,CAAgB,QAAA,EAAS;AAC5C,IAAA,MAAM,MAAA,GAAS,aAAa,IAAI,CAAA,CAAA;AAChC,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,GAAA,CAAI,KAAA,CAAM,EAAE,SAAS,CAAA,EAAG,MAAA,CAAO,UAAU,CAAA,OAAA,CAAA,EAAW,CAAA;AAE7E,IAAA,MAAA,CAAO,GAAA,CAAI,KAAK,uBAAA,EAAyB;AAAA,MACvC,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,cAAc,MAAA,CAAO;AAAA,KACtB,CAAA;AAED,IAAA,MAAM,OAAO,gBAAA,CAAiB,MAAA,EAAQ,EAAE,UAAA,EAAY,QAAQ,CAAA;AAE5D,IAAA,MAAM,IAAA,GAAO,KAAA,CAAM,QAAA,EAAU,IAAA,EAAM,EAAE,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM,CAAA,EAAG,CAAA;AAKxE,IAAA,MAAM,QAAA,GAAkC;AAAA,MACtC,cAAA,EAAgB,OAAO,oBAAA,IAAwB,8BAAA;AAAA,MAC/C,cAAA,sBAAoB,GAAA,EAAY;AAAA,MAChC,kBAAA,sBAAwB,GAAA,EAAoB;AAAA,MAC5C,aAAA,EAAe,CAAC,MAAA,EAAQ,KAAA,KAAU;AAChC,QAAA,SAAA,CAAU,KAAA;AAAA,UACR,sFAAA;AAAA,UACA,MAAA;AAAA,UACA,EAAE,MAAA,EAAQ,KAAA,EAAO,KAAA,EAAO,aAAA,EAAe,OAAO,OAAA;AAAQ,SACxD;AACA,QAAA,MAAA,CAAO,aAAA,GAAgB,QAAQ,KAAK,CAAA;AAAA,MACtC,CAAA;AAAA,MACA,aAAa,MAAA,CAAO;AAAA,KACtB;AAEA,IAAA,MAAM,eAAyB,EAAC;AAChC,IAAA,MAAM,UAAA,GAAa,CAAC,IAAA,KAAiB;AACnC,MAAA,YAAA,CAAa,KAAK,IAAI,CAAA;AACtB,MAAA,IAAI,YAAA,CAAa,MAAA,GAAS,EAAA,EAAI,YAAA,CAAa,KAAA,EAAM;AAAA,IACnD,CAAA;AAEA,IAAA,MAAM,aAAA,GAAgB,CAAC,IAAA,KAAiB;AACtC,MAAA,mBAAA,CAAoB,IAAA,EAAM,WAAW,QAAQ,CAAA;AAAA,IAC/C,CAAA;AACA,IAAA,MAAM,aAAA,GAAgB,CAAC,IAAA,KAAiB;AACtC,MAAA,UAAA,CAAW,IAAI,CAAA;AACf,MAAA,mBAAA,CAAoB,IAAA,EAAM,WAAW,QAAQ,CAAA;AAAA,IAC/C,CAAA;AAEA,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,kBAAA,CAAmB,IAAA,CAAK,QAAQ,aAAa,CAAA;AAC9D,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,kBAAA,CAAmB,IAAA,CAAK,QAAQ,aAAa,CAAA;AAE9D,IAAA,IAAI,aAAA,GAA+B,IAAA;AACnC,IAAA,IAAI,eAAA,GAAyC,IAAA;AAC7C,IAAA,MAAM,SAAA,GAAY,IAAI,OAAA,CAAc,CAAC,OAAA,KAAY;AAC/C,MAAA,IAAA,CAAK,IAAA,CAAK,MAAA,EAAQ,CAAC,IAAA,EAAM,MAAA,KAAW;AAClC,QAAA,aAAA,GAAgB,IAAA;AAChB,QAAA,eAAA,GAAkB,MAAA;AAClB,QAAA,OAAA,EAAQ;AAAA,MACV,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAED,IAAA,MAAM,UAAA,GAAa,OAAA;AAAA,MACjB,YAAY;AACV,QAAA,IAAI,aAAA,KAAkB,IAAA,IAAQ,eAAA,KAAoB,IAAA,EAAM,OAAO,KAAA;AAC/D,QAAA,OAAO,MAAM,YAAA,CAAa,MAAA,CAAO,UAAU,CAAA;AAAA,MAC7C,CAAA;AAAA,MACA,EAAE,SAAA,EAAW,IAAA,EAAQ,UAAA,EAAY,GAAA;AAAI,KACvC;AAEA,IAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ,IAAA,CAAK,CAAC,UAAA,EAAY,SAAA,CAAU,IAAA,CAAK,MAAM,KAAK,CAAC,CAAC,CAAA;AAE1E,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,IAAI;AACF,QAAA,IAAI,IAAA,CAAK,QAAA,KAAa,IAAA,IAAQ,IAAA,CAAK,eAAe,IAAA,EAAM;AACtD,UAAA,IAAA,CAAK,KAAK,SAAS,CAAA;AAAA,QACrB;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,MAAM,MAAA,CAAO,UAAU,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,MAAC,CAAC,CAAA;AACvC,MAAA,eAAA,CAAgB,QAAQ,IAAI,CAAA;AAC5B,MAAA,MAAM,IAAA,GACJ,YAAA,CAAa,MAAA,GAAS,CAAA,GAAI;AAAA;AAAA,EAAmB,aAAa,KAAA,CAAM,EAAE,EAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,GAAK,EAAA;AACrF,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,uBAAA,EAA0B,MAAA,CAAO,MAAM,OAAO,MAAA,CAAO,UAAU,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAAA,IAC1F;AAEA,IAAA,MAAM,MAAM,IAAA,CAAK,GAAA;AACjB,IAAA,IAAI,QAAQ,MAAA,EAAW;AAErB,MAAA,IAAA,CAAK,KAAK,SAAS,CAAA;AACnB,MAAA,MAAM,MAAA,CAAO,UAAU,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,MAAC,CAAC,CAAA;AACvC,MAAA,eAAA,CAAgB,QAAQ,IAAI,CAAA;AAC5B,MAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,IACpE;AAEA,IAAA,MAAM,KAAA,GAAuB;AAAA,MAC3B,IAAA;AAAA,MACA,UAAA;AAAA,MACA,IAAA;AAAA,MACA,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,WAAA,EAAa,MAAA;AAAA,MACb,KAAK,MAAA,CAAO,GAAA;AAAA,MACZ,SAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,KAAK,CAAA;AAEtB,IAAA,IAAA,CAAK,EAAA,CAAG,MAAA,EAAQ,CAAC,IAAA,KAAS;AAExB,MAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA,EAAG;AACpB,QAAA,MAAA,CAAO,IAAI,IAAA,CAAK,4BAAA,EAA8B,EAAE,IAAA,EAAM,KAAK,CAAA;AAAA,MAC7D;AAAA,IACF,CAAC,CAAA;AAED,IAAA,MAAA,CAAO,GAAA,CAAI,IAAA,CAAK,6BAAA,EAA+B,EAAE,KAAK,CAAA;AAEtD,IAAA,OAAO,EAAE,KAAK,UAAA,EAAY,MAAA,CAAO,YAAY,QAAA,EAAU,MAAA,CAAO,UAAU,MAAA,EAAO;AAAA,EACjF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,IAAA,CAAK,MAAA,EAAsB,IAAA,EAA4C;AAC3E,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,IAAW,GAAA;AACjC,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA;AACpC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA;AAAA,IACF;AAEA,IAAA,IAAI;AAGF,MAAA,MAAM,KAAK,KAAA,CAAM,MAAA,EAAQ,EAAE,kBAAA,EAAoB,SAAS,CAAA;AAAA,IAC1D,SAAS,GAAA,EAAK;AACZ,MAAA,KAAA,CAAM,GAAA,CAAI,KAAK,iCAAA,EAAmC;AAAA,QAChD,KAAK,MAAA,CAAO,GAAA;AAAA,QACZ,OAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,OACvD,CAAA;AAAA,IACH;AAEA,IAAA,KAAA,CAAM,IAAI,IAAA,CAAK,uBAAA,EAAyB,EAAE,GAAA,EAAK,MAAA,CAAO,KAAK,CAAA;AAG3D,IAAA,OAAA,CAAQ,MAAA,CAAO,OAAO,GAAG,CAAA;AAEzB,IAAA,IAAI;AACF,MAAA,KAAA,CAAM,IAAA,CAAK,KAAK,SAAS,CAAA;AAAA,IAC3B,CAAA,CAAA,MAAQ;AAAA,IAER;AAEA,IAAA,MAAM,SAAA,GAAY,MAAM,OAAA,CAAQ,YAAY,CAAE,MAAM,YAAA,CAAa,KAAA,CAAM,UAAU,CAAA,EAAI;AAAA,MACnF,SAAA,EAAW,OAAA;AAAA,MACX,UAAA,EAAY;AAAA,KACb,CAAA;AAED,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,IAAI;AACF,QAAA,KAAA,CAAM,IAAA,CAAK,KAAK,SAAS,CAAA;AAAA,MAC3B,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,KAAY;AACnC,QAAA,MAAM,IAAA,GAAO,KAAA,CAAM,aAAA,EAAe,CAAC,IAAA,EAAM,KAAA,CAAM,UAAU,CAAA,EAAG,EAAE,KAAA,EAAO,QAAA,EAAU,CAAA;AAC/E,QAAA,IAAA,CAAK,IAAA,CAAK,MAAA,EAAQ,MAAM,OAAA,EAAS,CAAA;AACjC,QAAA,IAAA,CAAK,IAAA,CAAK,OAAA,EAAS,MAAM,OAAA,EAAS,CAAA;AAAA,MACpC,CAAC,CAAA;AACD,MAAA,KAAA,CAAM,IAAI,IAAA,CAAK,oBAAA,EAAsB,EAAE,GAAA,EAAK,MAAA,CAAO,KAAK,CAAA;AAAA,IAC1D;AAEA,IAAA,eAAA,CAAgB,OAAA,CAAQ,MAAM,IAAI,CAAA;AAClC,IAAA,MAAM,MAAA,CAAO,KAAA,CAAM,UAAU,CAAA,CAAE,MAAM,MAAM;AAAA,IAAC,CAAC,CAAA;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,WAAA,CAAY,MAAA,EAAsB,YAAA,EAA6C;AACnF,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA;AACpC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6BAAA,EAAgC,MAAA,CAAO,GAAG,CAAA,CAAA,CAAG,CAAA;AAAA,IAC/D;AACA,IAAA,MAAM,UAAA,GAAgC,EAAE,GAAG,KAAA,CAAM,aAAa,YAAA,EAAa;AAC3E,IAAA,KAAA,CAAM,GAAA,CAAI,KAAK,2EAAA,EAAwE;AAAA,MACrF,KAAK,MAAA,CAAO;AAAA,KACb,CAAA;AACD,IAAA,MAAM,KAAK,IAAA,CAAK,MAAA,EAAQ,EAAE,OAAA,EAAS,KAAQ,CAAA;AAC3C,IAAA,OAAO,IAAA,CAAK,MAAM,UAAU,CAAA;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,KAAA,CACJ,MAAA,EACA,IAAA,EACe;AACf,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA;AACpC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6BAAA,EAAgC,MAAA,CAAO,GAAG,CAAA,CAAA,CAAG,CAAA;AAAA,IAC/D;AAEA,IAAA,IAAI,IAAA,EAAM,cAAc,KAAA,EAAO;AAC7B,MAAA,MAAM,WAAA,GAAc,MAAM,oBAAA,IAAwB,sBAAA;AAClD,MAAA,MAAM,SAAA,GAAY,MAAM,kBAAA,IAAsB,oBAAA;AAG9C,MAAA,MAAM,OAAA,GAAU,MAAM,aAAA,CAAc,KAAA,CAAM,QAAQ,CAAA;AAClD,MAAA,MAAM,SAAA,GAAY,MAAM,cAAA,CAAe,OAAA,EAAS;AAAA,QAC9C,WAAA;AAAA,QACA,SAAA;AAAA,QACA,MAAA,EAAQ;AAAA,OACT,CAAA;AACD,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,KAAA,CAAM,GAAA,CAAI,KAAK,sEAAA,EAAmE;AAAA,UAChF,KAAK,MAAA,CAAO,GAAA;AAAA,UACZ,WAAA;AAAA,UACA;AAAA,SACD,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,MAAM,aAAa,MAAM,KAAA,CAAM,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,2BAAA,CAAA,EAA+B;AAAA,MACnF,MAAA,EAAQ;AAAA,KACT,CAAA;AACD,IAAA,IAAI,CAAC,WAAW,EAAA,EAAI;AAClB,MAAA,MAAM,OAAO,MAAM,UAAA,CAAW,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AACnD,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,WAAW,MAAM,CAAA,CAAA,EAAI,IAAI,CAAA,CAAE,CAAA;AAAA,IAC5E;AAEA,IAAA,MAAM,KAAK,MAAM,OAAA;AAAA,MACf,YAAY;AACV,QAAA,MAAM,CAAA,GAAI,MAAM,KAAA,CAAM,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,UAAA,CAAA,EAAc,EAAE,MAAA,EAAQ,KAAA,EAAO,CAAA;AAC5E,QAAA,IAAI,CAAC,CAAA,CAAE,EAAA,EAAI,OAAO,KAAA;AAClB,QAAA,MAAM,IAAA,GAAQ,MAAM,CAAA,CAAE,IAAA,EAAK;AAC3B,QAAA,OAAO,KAAK,KAAA,KAAU,CAAA;AAAA,MACxB,CAAA;AAAA,MACA,EAAE,SAAA,EAAW,GAAA,EAAQ,UAAA,EAAY,GAAA;AAAI,KACvC;AACA,IAAA,IAAI,CAAC,EAAA,EAAI;AACP,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2CAAA,EAA8C,MAAA,CAAO,GAAG,CAAA,CAAA,CAAG,CAAA;AAAA,IAC7E;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,QAAA,CAAS,MAAA,EAAsB,OAAA,EAAyC;AAC5E,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA;AACpC,IAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,IAAA,OAAO,uBAAuB,MAAA,CAAO,MAAA,EAAQ,KAAA,CAAM,WAAA,CAAY,QAAQ,OAAO,CAAA;AAAA,EAChF;AAAA;AAAA,EAGA,MAAM,OAAO,MAAA,EAAuE;AAClF,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA;AACpC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,CAAA,EAAE;AAAA,IACvC;AACA,IAAA,MAAM,QAAQ,KAAA,CAAM,IAAA,CAAK,aAAa,IAAA,IAAQ,KAAA,CAAM,KAAK,UAAA,KAAe,IAAA;AACxE,IAAA,MAAM,UAAA,GAAa,MAAM,OAAA,CAAQ,KAAA,CAAM,QAAQ,CAAA;AAC/C,IAAA,OAAO,EAAE,OAAO,UAAA,EAAW;AAAA,EAC7B;AACF;AA+BA,IAAM,cAAA,GAAiB,gCAAA;AAEvB,IAAM,YAAA,GAAe,mBAAA;AAUrB,IAAM,YAAA,GACJ,gFAAA;AAcF,IAAM,iBAAA,GAAoB,eAAA;AASnB,SAAS,mBAAA,CAAoB,IAAA,EAAc,GAAA,EAAa,GAAA,EAAmC;AAChG,EAAA,MAAM,OAAA,GAAU,KAAK,IAAA,EAAK;AAC1B,EAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AAE1B,EAAA,IAAI,MAAA,GAAgC,IAAA;AACpC,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACpC,IAAA,IAAI,SAAA,IAAa,OAAO,SAAA,KAAc,QAAA,EAAU,MAAA,GAAS,SAAA;AAAA,EAC3D,CAAA,CAAA,MAAQ;AACN,IAAA,MAAA,GAAS,IAAA;AAAA,EACX;AAEA,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,IAAI,GAAA,EAAK;AACP,MAAA,mBAAA,CAAoB,OAAA,EAAS,QAAW,GAAG,CAAA;AAC3C,MAAA,IAAI,YAAA,CAAa,IAAA,CAAK,OAAO,CAAA,MAAO,WAAA,IAAc;AAClD,MAAA,IAAI,kBAAkB,IAAA,CAAK,OAAO,GAAG,kBAAA,CAAmB,MAAA,EAAW,SAAS,GAAG,CAAA;AAAA,IACjF;AACA,IAAA,GAAA,CAAI,KAAK,OAAO,CAAA;AAChB,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,KAAA,GAAA,CAAS,MAAA,CAAO,KAAA,IAAS,MAAA,EAAQ,WAAA,EAAY;AACnD,EAAA,MAAM,GAAA,GAAM,OAAO,GAAA,IAAO,EAAA;AAC1B,EAAA,MAAM,OAAgC,EAAC;AACvC,EAAA,IAAI,MAAA,CAAO,MAAA,KAAW,MAAA,EAAW,IAAA,CAAK,SAAS,MAAA,CAAO,MAAA;AACtD,EAAA,IAAI,MAAA,CAAO,MAAA,KAAW,MAAA,EAAW,IAAA,CAAK,SAAS,MAAA,CAAO,MAAA;AAEtD,EAAA,IAAI,GAAA,EAAK;AACP,IAAA,mBAAA,CAAoB,GAAA,EAAK,MAAA,CAAO,MAAA,EAAQ,GAAG,CAAA;AAC3C,IAAA,MAAM,UAAU,OAAO,MAAA,CAAO,KAAA,KAAU,QAAA,GAAW,OAAO,KAAA,GAAQ,EAAA;AAClE,IAAA,IAAI,YAAA,CAAa,IAAA,CAAK,GAAG,CAAA,IAAM,OAAA,IAAW,aAAa,IAAA,CAAK,OAAO,CAAA,EAAI,GAAA,CAAI,WAAA,IAAc;AACzF,IAAA,IAAI,iBAAA,CAAkB,KAAK,GAAG,CAAA,IAAM,WAAW,iBAAA,CAAkB,IAAA,CAAK,OAAO,CAAA,EAAI;AAC/E,MAAA,kBAAA,CAAmB,MAAA,CAAO,MAAA,EAAQ,GAAA,EAAK,GAAG,CAAA;AAAA,IAC5C;AAAA,EACF;AAEA,EAAA,QAAQ,KAAA;AAAO,IACb,KAAK,OAAA;AACH,MAAA,GAAA,CAAI,KAAA,CAAM,KAAK,IAAI,CAAA;AACnB,MAAA;AAAA,IACF,KAAK,MAAA;AAAA,IACL,KAAK,QAAA;AACH,MAAA,GAAA,CAAI,IAAA,CAAK,KAAK,IAAI,CAAA;AAClB,MAAA;AAAA,IACF,KAAK,SAAA;AACH,MAAA,GAAA,CAAI,IAAA,CAAK,KAAK,IAAI,CAAA;AAClB,MAAA;AAAA,IACF,KAAK,OAAA;AAAA,IACL,KAAK,UAAA;AAAA,IACL,KAAK,WAAA;AAAA,IACL,KAAK,OAAA;AACH,MAAA,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK,MAAA,CAAO,KAAA,EAAO,IAAI,CAAA;AACjC,MAAA;AAAA,IACF;AACE,MAAA,GAAA,CAAI,IAAA,CAAK,KAAK,IAAI,CAAA;AAClB,MAAA;AAAA;AAEN;AASA,SAAS,mBAAA,CACP,GAAA,EACA,MAAA,EACA,GAAA,EACM;AACN,EAAA,MAAM,SAAA,GAAY,cAAA,CAAe,IAAA,CAAK,GAAG,CAAA;AACzC,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,SAAA,CAAU,CAAC,CAAC,CAAA;AACjC,IAAA,MAAM,GAAA,GAAM,MAAA,IAAU,oBAAA,CAAqB,GAAG,CAAA,IAAK,WAAA;AACnD,IAAA,MAAM,SAAA,GAAY,IAAI,cAAA,IAAkB,8BAAA;AACxC,IAAA,IAAI,CAAC,GAAA,CAAI,cAAA,EAAgB,GAAA,CAAI,cAAA,uBAAqB,GAAA,EAAY;AAC9D,IAAA,MAAM,UAAU,GAAA,CAAI,cAAA;AACpB,IAAA,IAAI,SAAS,SAAA,IAAa,CAAC,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA,EAAG;AAC3C,MAAA,OAAA,CAAQ,IAAI,GAAG,CAAA;AACf,MAAA,GAAA,CAAI,aAAA,GAAgB,KAAK,KAAK,CAAA;AAAA,IAChC;AACA,IAAA;AAAA,EACF;AACA,EAAA,IAAI,YAAA,CAAa,IAAA,CAAK,GAAG,CAAA,EAAG;AAC1B,IAAA,MAAM,GAAA,GAAM,MAAA,IAAU,oBAAA,CAAqB,GAAG,CAAA;AAC9C,IAAA,IAAI,GAAA,EAAK;AACP,MAAA,GAAA,CAAI,cAAA,EAAgB,OAAO,GAAG,CAAA;AAC9B,MAAA,GAAA,CAAI,kBAAA,EAAoB,OAAO,GAAG,CAAA;AAAA,IACpC;AAAA,EACF;AACF;AAYA,SAAS,kBAAA,CACP,MAAA,EACA,GAAA,EACA,GAAA,EACM;AACN,EAAA,MAAM,GAAA,GAAM,MAAA,IAAU,oBAAA,CAAqB,GAAG,CAAA,IAAK,WAAA;AACnD,EAAA,IAAI,CAAC,GAAA,CAAI,kBAAA,EAAoB,GAAA,CAAI,kBAAA,uBAAyB,GAAA,EAAoB;AAC9E,EAAA,IAAI,CAAC,GAAA,CAAI,cAAA,EAAgB,GAAA,CAAI,cAAA,uBAAqB,GAAA,EAAY;AAC9D,EAAA,MAAM,SAAS,GAAA,CAAI,kBAAA,CAAmB,GAAA,CAAI,GAAG,KAAK,CAAA,IAAK,CAAA;AACvD,EAAA,GAAA,CAAI,kBAAA,CAAmB,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AACrC,EAAA,MAAM,SAAA,GAAY,IAAI,cAAA,IAAkB,8BAAA;AACxC,EAAA,IAAI,SAAS,SAAA,IAAa,CAAC,IAAI,cAAA,CAAe,GAAA,CAAI,GAAG,CAAA,EAAG;AACtD,IAAA,GAAA,CAAI,cAAA,CAAe,IAAI,GAAG,CAAA;AAC1B,IAAA,GAAA,CAAI,aAAA,GAAgB,KAAK,KAAK,CAAA;AAAA,EAChC;AACF;AAGA,SAAS,qBAAqB,GAAA,EAAiC;AAC7D,EAAA,MAAM,CAAA,GAAI,6BAAA,CAA8B,IAAA,CAAK,GAAG,CAAA;AAChD,EAAA,OAAO,IAAI,CAAC,CAAA;AACd;AASO,SAAS,gBAAA,CACd,QACA,EAAA,EACU;AACV,EAAA,MAAM,IAAA,GAAO;AAAA,IACX,OAAA;AAAA,IACA,MAAA,CAAO,MAAA;AAAA,IACP,MAAA,CAAO,UAAA;AAAA,IACP,UAAA;AAAA,IACA,EAAA,CAAG,UAAA;AAAA,IACH,aAAA;AAAA,IACA,MAAA,CAAO,QAAA;AAAA,IACP,kBAAA;AAAA,IACA,MAAA,CAAO,YAAA;AAAA,IACP,sBAAA;AAAA,IACA,OAAO,YAAA,IAAgB,IAAA;AAAA,IACvB,qBAAA;AAAA,IACA,OAAO,WAAA,IAAe,MAAA;AAAA,IACtB,kBAAA;AAAA,IACA,OAAO,YAAA,IAAgB,sBAAA;AAAA,IACvB,2BAAA;AAAA,IACA,KAAA;AAAA,IACA,MAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAA,CAAG,MAAA;AAAA;AAAA;AAAA;AAAA,IAIH,cAAA;AAAA,IACA,aAAA;AAAA,IACA,MAAA;AAAA,IACA,gBAAA;AAAA,IACA,eAAA;AAAA;AAAA;AAAA,IAGA;AAAA,GACF;AAKA,EAAA,IAAI,OAAO,eAAA,EAAiB;AAC1B,IAAA,IAAA,CAAK,IAAA,CAAK,iBAAiB,mBAAmB,CAAA;AAAA,EAChD;AAEA,EAAA,OAAO,IAAA;AACT;AAWO,SAAS,qBAAA,CACd,QACA,OAAA,EACgC;AAChC,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA;AAChC,EAAA,MAAM,EAAA,GAAK,SAAS,CAAA,GAAI,MAAA,CAAO,MAAM,CAAA,EAAG,KAAA,GAAQ,CAAC,CAAA,GAAI,MAAA;AACrD,EAAA,MAAM,OAAO,KAAA,IAAS,CAAA,GAAI,OAAO,KAAA,CAAM,KAAA,GAAQ,CAAC,CAAA,GAAI,EAAA;AACpD,EAAA,MAAM,MAAA,GAAS,CAAC,IAAA,EAAM,OAAO,EAC1B,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,OAAA,CAAQ,YAAA,EAAc,EAAE,CAAC,CAAA,CACtC,OAAO,CAAC,CAAA,KAAM,EAAE,MAAA,GAAS,CAAC,CAAA,CAC1B,IAAA,CAAK,GAAG,CAAA;AACX,EAAA,OAAO,EAAE,EAAA,EAAI,MAAA,EAAQ,MAAA,EAAO;AAC9B;AAWA,eAAsB,sBAAA,CACpB,MAAA,EACA,MAAA,EACA,OAAA,EACA,YAA0B,KAAA,EACF;AACxB,EAAA,MAAM,MAAA,GAAS,qBAAA,CAAsB,MAAA,EAAQ,OAAO,CAAA;AACpD,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,CAAA,OAAA,EAAU,MAAM,CAAA,gBAAA,CAAA,EAAoB;AAAA,MAC9D,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,MAAM;AAAA,KAC5B,CAAA;AACD,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,OAAO,IAAA;AACpB,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,IAAA,MAAM,OAAO,IAAA,CAAK,IAAA;AAClB,IAAA,IAAI,CAAC,IAAA,IAAQ,IAAA,CAAK,KAAA,KAAU,MAAM,OAAO,IAAA;AACzC,IAAA,OAAO,OAAO,KAAK,IAAA,KAAS,QAAA,IAAY,KAAK,IAAA,IAAQ,CAAA,GAAI,KAAK,IAAA,GAAO,IAAA;AAAA,EACvE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAOA,eAAsB,cAAA,CACpB,KACA,IAAA,EACkB;AAClB,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA;AACnC,EAAA,WAAS;AACP,IAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc,GAAG,CAAA;AACtC,IAAA,IAAI,MAAA,KAAW,QAAQ,IAAA,CAAK,GAAA,KAAQ,MAAA,IAAU,IAAA,CAAK,aAAa,OAAO,IAAA;AACvE,IAAA,IAAI,IAAA,CAAK,GAAA,EAAI,IAAK,QAAA,EAAU,OAAO,KAAA;AACnC,IAAA,MAAM,KAAA,CAAM,KAAK,MAAM,CAAA;AAAA,EACzB;AACF;AAQA,eAAe,cAAc,QAAA,EAAmC;AAC9D,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,IAAA,CAAK,QAAA,EAAU,KAAK,CAAA;AACrC,EAAA,IAAI;AACF,IAAA,OAAA,CAAQ,MAAM,IAAA,CAAK,GAAG,CAAA,EAAG,WAAA,KAAgB,GAAA,GAAM,QAAA;AAAA,EACjD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,QAAA;AAAA,EACT;AACF;AAOA,eAAe,cAAc,GAAA,EAAqC;AAChE,EAAA,IAAI,MAAA,GAAwB,IAAA;AAC5B,EAAA,IAAI;AACF,IAAA,MAAM,UAAU,MAAM,OAAA,CAAQ,KAAK,EAAE,aAAA,EAAe,MAAM,CAAA;AAC1D,IAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,MAAA,MAAM,OAAO,IAAA,CAAK,IAAA,CAAK,KAAK,MAAA,CAAO,CAAA,CAAE,IAAI,CAAC,CAAA;AAC1C,MAAA,IAAI,CAAA,CAAE,aAAY,EAAG;AACnB,QAAA,MAAM,GAAA,GAAM,MAAM,aAAA,CAAc,IAAI,CAAA;AACpC,QAAA,IAAI,QAAQ,IAAA,KAAS,MAAA,KAAW,IAAA,IAAQ,GAAA,GAAM,SAAS,MAAA,GAAS,GAAA;AAAA,MAClE,CAAA,MAAA,IAAW,CAAA,CAAE,MAAA,EAAO,EAAG;AACrB,QAAA,IAAI;AACF,UAAA,MAAM,CAAA,GAAI,MAAM,IAAA,CAAK,IAAI,CAAA;AACzB,UAAA,IAAI,WAAW,IAAA,IAAQ,CAAA,CAAE,OAAA,GAAU,MAAA,WAAiB,CAAA,CAAE,OAAA;AAAA,QACxD,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO,MAAA;AACT;AAUO,SAAS,iBAAA,CAAkB,gBAAwB,UAAA,EAA6B;AACrF,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA;AACxC,EAAA,KAAA,MAAW,GAAA,IAAO,cAAA,CAAe,KAAA,CAAM,IAAI,CAAA,EAAG;AAC5C,IAAA,IAAI,GAAA,CAAI,WAAW,CAAA,EAAG;AACtB,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,KAAA,CAAM,KAAK,CAAA;AAC9B,IAAA,MAAM,EAAA,GAAK,OAAO,CAAC,CAAA;AACnB,IAAA,MAAM,MAAA,GAAS,OAAO,CAAC,CAAA;AACvB,IAAA,IAAI,CAAC,EAAA,IAAM,CAAC,MAAA,EAAQ;AAEpB,IAAA,MAAM,OAAA,GAAU,EAAA,CAAG,OAAA,CAAQ,QAAA,EAAU,GAAG,CAAA;AAGxC,IAAA,IAAI,OAAA,KAAY,aAAa,MAAA,KAAW,MAAA,IAAU,OAAO,UAAA,CAAW,OAAO,IAAI,OAAO,IAAA;AAAA,EACxF;AACA,EAAA,OAAO,KAAA;AACT;AAGA,eAAe,aAAa,UAAA,EAAsC;AAChE,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,mBAAA,EAAqB,MAAM,CAAA;AACvD,IAAA,OAAO,iBAAA,CAAkB,MAAM,UAAU,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAMA,eAAe,OAAA,CACb,OACA,IAAA,EACkB;AAClB,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA;AACnC,EAAA,OAAO,IAAA,CAAK,GAAA,EAAI,GAAI,QAAA,EAAU;AAC5B,IAAA,IAAI,MAAM,KAAA,EAAM,EAAG,OAAO,IAAA;AAC1B,IAAA,MAAM,KAAA,CAAM,KAAK,UAAU,CAAA;AAAA,EAC7B;AACA,EAAA,OAAO,MAAM,KAAA,EAAM;AACrB;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC9B,IAAA,UAAA,CAAW,SAAS,EAAE,CAAA;AAAA,EACxB,CAAC,CAAA;AACH;AAGA,SAAS,kBAAA,CAAmB,QAAkB,MAAA,EAAsC;AAClF,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,MAAA,CAAO,YAAY,MAAM,CAAA;AACzB,EAAA,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACnC,IAAA,MAAA,IAAU,KAAA;AACV,IAAA,IAAI,GAAA,GAAM,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA;AAC7B,IAAA,OAAO,OAAO,CAAA,EAAG;AACf,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA;AAChC,MAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,GAAA,GAAM,CAAC,CAAA;AAC7B,MAAA,IAAI,IAAA,CAAK,MAAA,GAAS,CAAA,EAAG,MAAA,CAAO,IAAI,CAAA;AAChC,MAAA,GAAA,GAAM,MAAA,CAAO,QAAQ,IAAI,CAAA;AAAA,IAC3B;AAAA,EACF,CAAC,CAAA;AACD,EAAA,MAAA,CAAO,EAAA,CAAG,OAAO,MAAM;AACrB,IAAA,IAAI,MAAA,CAAO,SAAS,CAAA,EAAG;AACrB,MAAA,MAAA,CAAO,MAAM,CAAA;AACb,MAAA,MAAA,GAAS,EAAA;AAAA,IACX;AAAA,EACF,CAAC,CAAA;AACH;AAGA,eAAe,QAAQ,GAAA,EAA8B;AACnD,EAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,EAAA,IAAI;AACF,IAAA,MAAM,UAAU,MAAM,OAAA,CAAQ,KAAK,EAAE,aAAA,EAAe,MAAM,CAAA;AAC1D,IAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,MAAA,MAAM,OAAO,IAAA,CAAK,IAAA,CAAK,KAAK,MAAA,CAAO,CAAA,CAAE,IAAI,CAAC,CAAA;AAC1C,MAAA,IAAI,CAAA,CAAE,aAAY,EAAG;AACnB,QAAA,KAAA,IAAS,MAAM,QAAQ,IAAI,CAAA;AAAA,MAC7B,CAAA,MAAA,IAAW,CAAA,CAAE,MAAA,EAAO,EAAG;AACrB,QAAA,IAAI;AACF,UAAA,MAAM,CAAA,GAAI,MAAM,IAAA,CAAK,IAAI,CAAA;AACzB,UAAA,KAAA,IAAS,CAAA,CAAE,IAAA;AAAA,QACb,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,CAAA;AAAA,EACT;AACA,EAAA,OAAO,KAAA;AACT","file":"chunk-3HUUP3JC.js","sourcesContent":["/**\n * Shared filesystem helpers for connector infrastructure.\n *\n * @docLink packages/connectors/api-reference#fs-utils\n */\n\nimport { chmod, mkdir } from \"node:fs/promises\";\nimport type { Logger } from \"@skaile/workspaces/types\";\n\n/**\n * mkdir(recursive) + chmod 0o770 in one call. The post-mkdir `chmod` is the\n * load-bearing piece: `mkdir(mode:)` is ANDed with the process umask\n * (typically 022 → effective mode 0o750), which strips the group-write bit\n * that `fusermount3` requires on the rclone mountpoint and rclone needs on\n * its vfs cache directory. Explicit `chmod` is umask-immune.\n *\n * EPERM on `chmod` is swallowed: when a foreign uid pre-created the\n * directory (a stray uid-1000 process inside the container or a host-side\n * platform process writing through the project bind-mount), the runner\n * cannot chmod it. The platform's agent container entrypoint runs as root\n * and heals the subtree on the next restart — see\n * `platform/docker/agent/entrypoint.sh` `_skaile_heal_ownership`. A debug\n * line is emitted when a logger is supplied so the rare-but-real heal\n * trigger is observable in session logs without adding noise on the happy\n * path.\n *\n * The chmod is *idempotent* (the syscall always fires, but a no-op when\n * the mode is already 0o770), not a no-op — kernel behaviour for chmod is\n * \"set\", not \"set-if-different\".\n *\n * @param dir Absolute or relative path to ensure exists at mode 0o770.\n * @param log Optional logger. When provided, EPERM-on-chmod emits a\n *   `debug`-level entry under whatever taxonomy the caller's logger uses.\n */\nexport async function ensureDirMode(dir: string, log?: Logger): Promise<void> {\n  await mkdir(dir, { recursive: true });\n  try {\n    await chmod(dir, 0o770);\n  } catch (err) {\n    log?.debug(\"chmod 0770 skipped (EPERM — entrypoint heal expected)\", {\n      path: dir,\n      error: err instanceof Error ? err.message : String(err),\n    });\n  }\n}\n","/**\n * PortPool — allocates ports from a [min, max] range, checks OS for collisions.\n */\n\nimport { createConnection } from \"node:net\";\n\n/**\n * Allocates TCP ports from a `[min, max]` range with OS-level collision detection.\n * Used by service connector adapters (devserver, static-server) to assign local ports.\n * @docLink packages/connectors/api-reference#port-pool\n */\nexport class PortPool {\n  private readonly min: number;\n  private readonly max: number;\n  private readonly inUse = new Set<number>();\n\n  constructor(range: [number, number]) {\n    this.min = range[0];\n    this.max = range[1];\n  }\n\n  /** Allocate the next free port from the range. Checks OS for collisions. */\n  async allocate(): Promise<number> {\n    for (let port = this.min; port <= this.max; port++) {\n      if (this.inUse.has(port)) continue;\n      if (!(await PortPool.isPortFree(port))) {\n        this.inUse.add(port);\n        continue;\n      }\n      this.inUse.add(port);\n      return port;\n    }\n    throw new Error(`No free port in range ${this.min}-${this.max}`);\n  }\n\n  /** Mark a port as in-use (for explicit port args or registered instances). */\n  reserve(port: number): void {\n    this.inUse.add(port);\n  }\n\n  /** Return a port to the pool. */\n  release(port: number): void {\n    this.inUse.delete(port);\n  }\n\n  /** Check if a port is currently tracked as in-use. */\n  isInUse(port: number): boolean {\n    return this.inUse.has(port);\n  }\n\n  /** Quick TCP connect test — returns true if nothing is listening. */\n  static isPortFree(port: number, host = \"127.0.0.1\"): Promise<boolean> {\n    return new Promise((resolve) => {\n      const socket = createConnection({ port, host });\n      socket.once(\"connect\", () => {\n        socket.destroy();\n        resolve(false);\n      });\n      socket.once(\"error\", () => {\n        socket.destroy();\n        resolve(true);\n      });\n      socket.setTimeout(500, () => {\n        socket.destroy();\n        resolve(true);\n      });\n    });\n  }\n}\n","/**\n * Shared filesystem watcher factory for mountable adapters.\n *\n * Uses chokidar for cross-platform, debounced file watching.\n *\n * Automatically reads .gitignore from the watched directory and merges\n * those patterns into chokidar's ignore list. This prevents scanning\n * large generated directories (node_modules, dist, .next, etc.) that\n * most projects already declare as ignored.\n */\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { join, relative } from \"node:path\";\nimport { createLogger } from \"@skaile/workspaces/core/logging\";\n// Static import so bun --compile bundles chokidar into the binary. A dynamic\n// `await import(\"chokidar\")` is not seen by the compiler's static analyzer\n// and fails at runtime inside the /$bunfs/ virtual filesystem.\nimport chokidar from \"chokidar\";\nimport type { ConnectorChangeEvent } from \"./connector-types.js\";\nimport type { WatchHandle, WatchOptions } from \"./shared-types.js\";\n\n/**\n * Convert a glob pattern to a matcher function.\n *\n * Chokidar 5 changed string matchers to exact equality (`===`) instead of\n * glob matching. We convert our patterns to functions so chokidar can still\n * filter correctly.\n */\nfunction globToMatcher(pattern: string): (path: string) => boolean {\n  // Simple segment-name patterns: **/NAME/** or **/NAME\n  // Match any path that contains /NAME/ or ends with /NAME\n  const segmentMatch = pattern.match(/^\\*\\*\\/([^*/?]+)\\/\\*\\*$/);\n  if (segmentMatch) {\n    const name = segmentMatch[1];\n    return (p: string) => p.includes(`/${name}/`) || p.endsWith(`/${name}`) || p === name;\n  }\n\n  // Dot-prefixed segment: **/.NAME or **/.NAME/**\n  const dotSegment = pattern.match(/^\\*\\*\\/(\\.[\\w#]+)(?:\\/\\*\\*)?$/);\n  if (dotSegment) {\n    const name = dotSegment[1];\n    return (p: string) => p.includes(`/${name}/`) || p.endsWith(`/${name}`) || p === name;\n  }\n\n  // Extension wildcard: **/*.EXT.* or **/*.EXT\n  const extMatch = pattern.match(/^\\*\\*\\/\\*(\\.\\w+(?:\\.\\*)?)/);\n  if (extMatch) {\n    const suffix = extMatch[1];\n    if (suffix.endsWith(\".*\")) {\n      // e.g. **/*.tmp.* -> match any file with .tmp. in it\n      const base = suffix.slice(0, -2);\n      return (p: string) => p.includes(base);\n    }\n    return (p: string) => p.endsWith(suffix);\n  }\n\n  // Suffix wildcard: **/*SUFFIX (e.g. **/*~)\n  const suffixMatch = pattern.match(/^\\*\\*\\/\\*(.+)$/);\n  if (suffixMatch) {\n    const sfx = suffixMatch[1];\n    return (p: string) => p.endsWith(sfx);\n  }\n\n  // Fallback: convert simple globs to regex\n  const escaped = pattern\n    .replace(/[.+^${}()|[\\]\\\\]/g, \"\\\\$&\")\n    .replace(/\\*\\*/g, \"{{GLOBSTAR}}\")\n    .replace(/\\*/g, \"[^/]*\")\n    .replace(/\\?/g, \"[^/]\")\n    .replace(/\\{\\{GLOBSTAR\\}\\}/g, \".*\");\n  const re = new RegExp(`^${escaped}$`);\n  return (p: string) => re.test(p);\n}\n\nconst DEFAULT_IGNORED: Array<string | ((path: string) => boolean)> = [\n  (p: string) => p.includes(\"/.git/\") || p.endsWith(\"/.git\"),\n  (p: string) => p.includes(\"/node_modules/\") || p.endsWith(\"/node_modules\"),\n  (p: string) => p.includes(\"/.connectors/\") || p.endsWith(\"/.connectors\"),\n  // Atomic-write tempfiles (Bun.write creates `<name>.tmp.<pid>.<ts>` then renames).\n  // These vanish between readdir and fs.watch, causing EINVAL that crashes the process.\n  (p: string) => /\\.tmp\\.\\d/.test(p),\n  // Editor swap/backup files that also race with save operations.\n  (p: string) => p.endsWith(\".swp\"),\n  (p: string) => p.endsWith(\".swx\"),\n  (p: string) => p.includes(\"/.#\"),\n  (p: string) => p.endsWith(\"~\"),\n];\n/**\n * Default chokidar `awaitWriteFinish` stability threshold (ms). Exported so the\n * rclone process manager can reuse the same write-stabilization concept when\n * gating a flush on a quiescent mount.\n */\nexport const DEFAULT_DEBOUNCE_MS = 150;\n\n/**\n * Parse a .gitignore file into glob patterns suitable for chokidar's `ignored` option.\n * Handles comments, blank lines, directory patterns, and root-relative patterns.\n * Negation patterns (!) are skipped - chokidar cannot un-ignore.\n */\nfunction parseGitignore(rootDir: string): Array<(path: string) => boolean> {\n  const gitignorePath = join(rootDir, \".gitignore\");\n  if (!existsSync(gitignorePath)) return [];\n\n  try {\n    const content = readFileSync(gitignorePath, \"utf-8\");\n    const matchers: Array<(path: string) => boolean> = [];\n\n    for (const raw of content.split(\"\\n\")) {\n      const line = raw.trim();\n      if (!line || line.startsWith(\"#\") || line.startsWith(\"!\")) continue;\n\n      let pattern = line;\n\n      // Strip leading / (root-relative -> convert to rootDir-relative)\n      if (pattern.startsWith(\"/\")) {\n        pattern = pattern.slice(1);\n      } else if (!pattern.includes(\"/\")) {\n        // Bare name like \"node_modules\" or \"*.log\" -> match anywhere\n        pattern = `**/${pattern}`;\n      }\n\n      // Directory pattern (trailing /) -> ensure it matches contents too\n      if (pattern.endsWith(\"/\")) {\n        matchers.push(globToMatcher(`${pattern}**`));\n      } else {\n        matchers.push(globToMatcher(pattern));\n        // Also match as directory (e.g. \"dist\" should match \"dist/\" and \"dist/**\")\n        if (!pattern.includes(\"*\") && !pattern.includes(\".\")) {\n          matchers.push(globToMatcher(`${pattern}/**`));\n        }\n      }\n    }\n\n    return matchers;\n  } catch {\n    return [];\n  }\n}\n\ntype ChokidarAction = \"create\" | \"edit\" | \"delete\";\n\nconst CHOKIDAR_EVENT_MAP: Record<string, ChokidarAction> = {\n  add: \"create\",\n  change: \"edit\",\n  unlink: \"delete\",\n  addDir: \"create\",\n  unlinkDir: \"delete\",\n};\n\n/**\n * Create a cross-platform filesystem watcher on `rootDir` using chokidar.\n * Auto-reads `.gitignore` from `rootDir` and merges those patterns into the ignore list.\n * @param rootDir - Absolute path to the directory to watch.\n * @param callback - Called with each `ConnectorChangeEvent` (create / edit / delete).\n * @param options - Debounce interval and additional ignore patterns.\n * @returns A `WatchHandle` — call `.close()` to stop watching.\n * @docLink packages/connectors/api-reference#create-fs-watcher\n */\nexport async function createFsWatcher(\n  rootDir: string,\n  callback: (event: ConnectorChangeEvent) => void,\n  options?: WatchOptions,\n): Promise<WatchHandle> {\n  const log = createLogger({ kind: \"connector\", subkind: \"watcher\", instance: rootDir });\n  const gitignorePatterns = parseGitignore(rootDir);\n  // Convert any remaining string patterns from options to matcher functions\n  // (chokidar 5 treats strings as exact equality, not globs)\n  const optionsIgnored = (options?.ignored ?? []).map((entry) =>\n    typeof entry === \"string\" ? globToMatcher(entry) : entry,\n  );\n  const ignored = [...DEFAULT_IGNORED, ...gitignorePatterns, ...optionsIgnored];\n  const debounceMs = options?.debounceMs ?? DEFAULT_DEBOUNCE_MS;\n\n  const watcher = chokidar.watch(rootDir, {\n    ignoreInitial: true,\n    ignored,\n    awaitWriteFinish: { stabilityThreshold: debounceMs, pollInterval: 50 },\n    usePolling: false,\n  });\n\n  // Swallow transient watch errors (EINVAL/ENOENT when a file vanishes between\n  // readdir and fs.watch). Without this handler, chokidar rethrows and the\n  // agent process dies.\n  watcher.on(\"error\", (err) => {\n    const message = err instanceof Error ? err.message : String(err);\n    log.warn(\"watcher error (non-fatal)\", { message });\n  });\n\n  for (const [chokidarEvent, action] of Object.entries(CHOKIDAR_EVENT_MAP)) {\n    (watcher as { on(event: string, fn: (fullPath: string) => void): void }).on(\n      chokidarEvent,\n      (fullPath: string) => {\n        const rel = relative(rootDir, fullPath);\n        if (!rel || rel.startsWith(\"..\")) return;\n        // Normalize to forward slashes\n        const normalizedPath = rel.split(\"\\\\\").join(\"/\");\n        callback({ path: normalizedPath, action, source: \"filesystem\" });\n      },\n    );\n  }\n\n  return {\n    close: () => watcher.close(),\n  };\n}\n","/**\n * RcloneProcessManager — supervises an rclone FUSE subprocess per mount.\n *\n * Responsibilities:\n *   - Spawn rclone with a per-mount config + cache dir, wait for the FUSE\n *     mountpoint to appear, then return a handle.\n *   - Pipe rclone's JSON-formatted log lines into the parent driver's\n *     {@link Logger} via a child source `${driverName}+rclone`.\n *   - Coordinate graceful stop (flush → SIGTERM → fusermount fallback).\n *   - Expose `flush` (POST /vfs/refresh + poll /vfs/stats), `statSize`\n *     (operations/stat → authoritative remote size, backing the read-path\n *     stale-tail gate) and `status` (process liveness + cache-dir size).\n *\n * Cross-link: see `workspaces/core/CLAUDE.md` § Logging for the\n * `createLogger` / `LogStore` contract, and\n * `_devlog/specs/2026-05-01-debug-logging-design.md` for the source taxonomy.\n */\n\nimport { type ChildProcess, spawn } from \"node:child_process\";\nimport { randomBytes } from \"node:crypto\";\nimport { readdir, readFile, stat, unlink, writeFile } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport path from \"node:path\";\nimport type { Readable } from \"node:stream\";\nimport type { Logger } from \"@skaile/workspaces/types\";\nimport { ensureDirMode } from \"./fs-utils.js\";\nimport { PortPool } from \"./port-pool.js\";\nimport { DEFAULT_DEBOUNCE_MS } from \"./watcher.js\";\n\n/** Module-level pool for rclone remote-control (rc) ports. */\nconst RCLONE_RC_PORTS = new PortPool([55000, 56000]);\n\n/** Default rclone `--vfs-write-back` delay; raised from 5s so a rapidly-rewritten file settles before upload (avoids mid-write \"sizes differ\" aborts). */\nexport const DEFAULT_VFS_WRITE_BACK = \"30s\";\n\n/** Consecutive failed upload retries for one object before a stuck-upload error is surfaced. */\nexport const DEFAULT_UPLOAD_STUCK_THRESHOLD = 3;\n\n/**\n * Stabilization gate defaults for {@link RcloneProcessManager.flush}. Before\n * forcing an upload we wait until the vfs cache dir has had no write for\n * `thresholdMs`, bounded by `timeoutMs` so close/hibernate never blocks\n * forever. `pollMs` reuses the watcher's write-stabilization debounce.\n */\nconst STABILIZE_THRESHOLD_MS = 1_500;\nconst STABILIZE_TIMEOUT_MS = 30_000;\nconst STABILIZE_POLL_MS = DEFAULT_DEBOUNCE_MS;\n\n/**\n * Spawn-time configuration for a single rclone FUSE mount.\n * @docLink packages/connectors/api-reference#rclone-spawn-config\n */\nexport interface RcloneSpawnConfig {\n  /** Logical mount id; used as `instance` and as part of the rclone config filename. */\n  mountId: string;\n  /**\n   * Driver name (e.g. \"sharepoint\", \"webdav\"); used to derive the rclone\n   * subprocess child logger subkind: `${driverName}+rclone`.\n   */\n  driverName: string;\n  /** Absolute path inside the container where rclone will FUSE-mount. Created if missing. */\n  mountPoint: string;\n  /** Absolute path inside the container for the vfs cache. Created if missing. */\n  cacheDir: string;\n  /** Full INI text for rclone.conf (one [remote] section, named `skaile-<mountId>`). */\n  rcloneConfig: string;\n  /** Remote spec, e.g. `skaile-foo:/Clients/KADK`. */\n  remote: string;\n  /** rclone --vfs-cache-mode value. */\n  vfsCacheMode: \"minimal\" | \"writes\" | \"full\";\n  /** Per-mount cache size cap. Default: '5G'. */\n  cacheMaxSize?: string;\n  /** Per-mount cache age cap. Default: '168h'. */\n  cacheMaxAge?: string;\n  /**\n   * Skip rclone's post-transfer size + checksum verification by appending\n   * `--ignore-size --ignore-checksum`. Default: false (verification on).\n   *\n   * Escape hatch for remotes that mutate uploaded bytes server-side (notably\n   * SharePoint Online normalising LF→CRLF on text/html), which makes the\n   * remote object a different size/hash than the local source. rclone reads\n   * that as `corrupted on transfer`, deletes the upload, and retries forever,\n   * so the file never durably lands. Enabling this trades integrity\n   * verification for sync-ability and must only be set by drivers that have\n   * confirmed the mutation is benign. Off-by-default; wired per-driver, never\n   * globally.\n   */\n  ignoreSizeCheck?: boolean;\n  /**\n   * rclone `--vfs-write-back` delay (e.g. '30s', '1m'). Controls how long a\n   * dirty file sits before rclone starts uploading it. Default:\n   * {@link DEFAULT_VFS_WRITE_BACK}. Raise it when the agent rewrites files\n   * faster than they upload, to avoid mid-write \"sizes differ\" aborts.\n   */\n  vfsWriteBack?: string;\n  /**\n   * Consecutive upload retries for one object before {@link onUploadStuck}\n   * fires. Default: {@link DEFAULT_UPLOAD_STUCK_THRESHOLD}.\n   */\n  uploadStuckThreshold?: number;\n  /**\n   * Optional hook invoked once per object when its upload has failed\n   * `uploadStuckThreshold` times in a row. spawn() always also logs an\n   * error-level entry through the `${driverName}+rclone` child logger; this\n   * hook lets callers surface the stranded file elsewhere (e.g. a sync event).\n   */\n  onUploadStuck?: (object: string, tries: number) => void;\n  /**\n   * Optional hook invoked when rclone reports an OAuth auth failure (notably\n   * `invalid_client` / `couldn't fetch token`, the symptom of an expired\n   * access token that rclone cannot self-refresh). Wired by the mount driver\n   * to the reactive arm of its token-refresh controller. Fires per matching\n   * log line; the controller dedupes via its in-flight guard + cooldown.\n   */\n  onAuthError?: () => void;\n  /**\n   * Parent driver Logger — already tagged\n   * `{kind:\"mount\", subkind:<driver>, instance:<mountId>}` by ConnectorManager.\n   * Used for manager-level events; rclone subprocess events go through the\n   * derived `child({subkind: \\`${driverName}+rclone\\`})` logger.\n   */\n  log: Logger;\n}\n\n/**\n * Handle returned by `RcloneProcessManager.spawn()` once the FUSE mountpoint is confirmed.\n * @docLink packages/connectors/api-reference#rclone-handle\n */\nexport interface RcloneHandle {\n  /** OS process id of the rclone subprocess. */\n  pid: number;\n  /** Confirmed FUSE mountpoint (echo of input). */\n  mountPoint: string;\n  /** Cache directory (echo of input). */\n  cacheDir: string;\n  /** The local rc API address rclone is bound to, e.g. '127.0.0.1:54321'. */\n  rcAddr: string;\n}\n\ninterface InternalEntry {\n  proc: ChildProcess;\n  configPath: string;\n  port: number;\n  mountPoint: string;\n  cacheDir: string;\n  /** The full spawn config, retained so `reconfigure` can recycle the process. */\n  spawnConfig: RcloneSpawnConfig;\n  log: Logger;\n  rcloneLog: Logger;\n  /**\n   * Last few stderr lines for diagnostic purposes (used in spawn-failure\n   * messages).\n   */\n  recentStderr: string[];\n}\n\nconst HANDLES = new Map<number, InternalEntry>();\n\n/**\n * Manages rclone FUSE subprocesses for mount drivers. Stateless across instances —\n * the internal handle registry is module-scoped so a fresh `RcloneProcessManager`\n * can still find handles created by a previous instance.\n * @docLink packages/connectors/api-reference#rclone-process-manager\n */\nexport class RcloneProcessManager {\n  /**\n   * Spawn an rclone FUSE mount. Resolves once the mountpoint is confirmed\n   * present in `/proc/self/mounts`. Throws on timeout, on early exit, or\n   * if invariants are violated.\n   */\n  async spawn(config: RcloneSpawnConfig): Promise<RcloneHandle> {\n    if (!path.isAbsolute(config.mountPoint)) {\n      throw new Error(`mountPoint must be absolute: ${config.mountPoint}`);\n    }\n    if (!path.isAbsolute(config.cacheDir)) {\n      throw new Error(`cacheDir must be absolute: ${config.cacheDir}`);\n    }\n\n    // Defence-in-depth: the per-connector driver already chmods these via\n    // ensureDirMode, but direct callers that bypass the driver still need\n    // mountPoint and cacheDir to be group-writable for fusermount3 / vfs.\n    await ensureDirMode(config.mountPoint, config.log);\n    await ensureDirMode(config.cacheDir, config.log);\n\n    const configPath = path.join(\n      tmpdir(),\n      `rclone-${config.mountId}-${randomBytes(6).toString(\"hex\")}.conf`,\n    );\n    await writeFile(configPath, config.rcloneConfig, { mode: 0o600 });\n\n    const port = await RCLONE_RC_PORTS.allocate();\n    const rcAddr = `127.0.0.1:${port}`;\n    const rcloneLog = config.log.child({ subkind: `${config.driverName}+rclone` });\n\n    config.log.info(\"rclone spawn starting\", {\n      mountPoint: config.mountPoint,\n      remote: config.remote,\n      vfsCacheMode: config.vfsCacheMode,\n    });\n\n    const args = _buildRcloneArgs(config, { configPath, rcAddr });\n\n    const proc = spawn(\"rclone\", args, { stdio: [\"ignore\", \"pipe\", \"pipe\"] });\n\n    // Per-process tracker for the upload-stuck observability gate. When an\n    // object's upload retry count crosses the threshold we log once at error\n    // level (the stream otherwise stays at INFO and the failure is silent).\n    const routeCtx: RcloneLogRouteContext = {\n      stuckThreshold: config.uploadStuckThreshold ?? DEFAULT_UPLOAD_STUCK_THRESHOLD,\n      alertedObjects: new Set<string>(),\n      itemNotFoundCounts: new Map<string, number>(),\n      onUploadStuck: (object, tries) => {\n        rcloneLog.error(\n          \"rclone upload repeatedly failing — file may be stranded in this session's cache\",\n          undefined,\n          { object, tries, event: \"sync_status\", phase: \"error\" },\n        );\n        config.onUploadStuck?.(object, tries);\n      },\n      onAuthError: config.onAuthError,\n    };\n\n    const recentStderr: string[] = [];\n    const stderrTail = (line: string) => {\n      recentStderr.push(line);\n      if (recentStderr.length > 20) recentStderr.shift();\n    };\n\n    const stdoutHandler = (line: string) => {\n      _routeRcloneLogLine(line, rcloneLog, routeCtx);\n    };\n    const stderrHandler = (line: string) => {\n      stderrTail(line);\n      _routeRcloneLogLine(line, rcloneLog, routeCtx);\n    };\n\n    if (proc.stdout) attachLineSplitter(proc.stdout, stdoutHandler);\n    if (proc.stderr) attachLineSplitter(proc.stderr, stderrHandler);\n\n    let earlyExitCode: number | null = null;\n    let earlyExitSignal: NodeJS.Signals | null = null;\n    const earlyExit = new Promise<void>((resolve) => {\n      proc.once(\"exit\", (code, signal) => {\n        earlyExitCode = code;\n        earlyExitSignal = signal;\n        resolve();\n      });\n    });\n\n    const mountReady = waitFor(\n      async () => {\n        if (earlyExitCode !== null || earlyExitSignal !== null) return false;\n        return await isMountpoint(config.mountPoint);\n      },\n      { timeoutMs: 15_000, intervalMs: 100 },\n    );\n\n    const ready = await Promise.race([mountReady, earlyExit.then(() => false)]);\n\n    if (!ready) {\n      try {\n        if (proc.exitCode === null && proc.signalCode === null) {\n          proc.kill(\"SIGKILL\");\n        }\n      } catch {\n        // ignore\n      }\n      await unlink(configPath).catch(() => {});\n      RCLONE_RC_PORTS.release(port);\n      const tail =\n        recentStderr.length > 0 ? `\\nstderr tail:\\n${recentStderr.slice(-5).join(\"\\n\")}` : \"\";\n      throw new Error(`rclone failed to mount ${config.remote} at ${config.mountPoint}${tail}`);\n    }\n\n    const pid = proc.pid;\n    if (pid === undefined) {\n      // Should never happen if mountReady resolved true, but defend anyway.\n      proc.kill(\"SIGKILL\");\n      await unlink(configPath).catch(() => {});\n      RCLONE_RC_PORTS.release(port);\n      throw new Error(\"rclone process has no pid after successful mount\");\n    }\n\n    const entry: InternalEntry = {\n      proc,\n      configPath,\n      port,\n      mountPoint: config.mountPoint,\n      cacheDir: config.cacheDir,\n      spawnConfig: config,\n      log: config.log,\n      rcloneLog,\n      recentStderr,\n    };\n    HANDLES.set(pid, entry);\n\n    proc.on(\"exit\", (code) => {\n      // If the entry is still in the registry, this was unplanned.\n      if (HANDLES.has(pid)) {\n        config.log.warn(\"rclone exited unexpectedly\", { code, pid });\n      }\n    });\n\n    config.log.info(\"rclone mountpoint confirmed\", { pid });\n\n    return { pid, mountPoint: config.mountPoint, cacheDir: config.cacheDir, rcAddr };\n  }\n\n  /**\n   * Stop an rclone subprocess. Attempts a flush first, then SIGTERM, then\n   * SIGKILL + fusermount3 if `graceMs` elapses without the mountpoint\n   * disappearing.\n   *\n   * `graceMs` bounds both the flush stabilization gate and the SIGTERM→SIGKILL\n   * window — it is *not* a single total wall-clock cap: the flush also waits on\n   * rclone's `/vfs/stats` drain (its own 60s ceiling) between the two.\n   */\n  async stop(handle: RcloneHandle, opts?: { graceMs?: number }): Promise<void> {\n    const graceMs = opts?.graceMs ?? 30_000;\n    const entry = HANDLES.get(handle.pid);\n    if (!entry) {\n      return;\n    }\n\n    try {\n      // Bound the stabilization gate by graceMs so stop() doesn't silently add\n      // the full default stabilize timeout on top of the caller's budget.\n      await this.flush(handle, { stabilizeTimeoutMs: graceMs });\n    } catch (err) {\n      entry.log.warn(\"rclone flush before stop failed\", {\n        pid: handle.pid,\n        error: err instanceof Error ? err.message : String(err),\n      });\n    }\n\n    entry.log.info(\"rclone stop initiated\", { pid: handle.pid });\n\n    // Remove FIRST so the exit handler doesn't fire the unplanned-exit warning.\n    HANDLES.delete(handle.pid);\n\n    try {\n      entry.proc.kill(\"SIGTERM\");\n    } catch {\n      // ignore — process may already be gone\n    }\n\n    const unmounted = await waitFor(async () => !(await isMountpoint(entry.mountPoint)), {\n      timeoutMs: graceMs,\n      intervalMs: 200,\n    });\n\n    if (!unmounted) {\n      try {\n        entry.proc.kill(\"SIGKILL\");\n      } catch {\n        // ignore\n      }\n      await new Promise<void>((resolve) => {\n        const fuse = spawn(\"fusermount3\", [\"-u\", entry.mountPoint], { stdio: \"ignore\" });\n        fuse.once(\"exit\", () => resolve());\n        fuse.once(\"error\", () => resolve());\n      });\n      entry.log.warn(\"rclone hard-killed\", { pid: handle.pid });\n    }\n\n    RCLONE_RC_PORTS.release(entry.port);\n    await unlink(entry.configPath).catch(() => {});\n  }\n\n  /**\n   * Apply a freshly-rendered rclone INI to a running mount by recycling the\n   * process: flush + stop the current rclone, then re-spawn at the same\n   * mountpoint/cacheDir with the new config. Returns the new handle.\n   *\n   * rclone holds the OAuth token in memory (baked into the config at spawn);\n   * there is no rc command to swap it on a live `onedrive` backend, so a\n   * recycle is the reliable way to apply a refreshed token. The vfs cache dir\n   * is reused, so the remount revalidates rather than re-downloads. During the\n   * brief unmount window the read-only mount-placeholder barrier underneath is\n   * exposed (writes fail with EROFS, not EIO) — see ConnectorManager's\n   * read-only-until-ready guarantee.\n   */\n  async reconfigure(handle: RcloneHandle, rcloneConfig: string): Promise<RcloneHandle> {\n    const entry = HANDLES.get(handle.pid);\n    if (!entry) {\n      throw new Error(`rclone handle not found (pid=${handle.pid})`);\n    }\n    const nextConfig: RcloneSpawnConfig = { ...entry.spawnConfig, rcloneConfig };\n    entry.log.info(\"rclone reconfigure — recycling process to apply refreshed credential\", {\n      pid: handle.pid,\n    });\n    await this.stop(handle, { graceMs: 30_000 });\n    return this.spawn(nextConfig);\n  }\n\n  /**\n   * Force rclone to upload pending writes, then wait until the in-use\n   * counter reaches zero.\n   *\n   * Before issuing the refresh it waits for the vfs cache dir to go quiescent\n   * (no write for `stabilityThresholdMs`, bounded by `stabilizeTimeoutMs`) so a\n   * close/hibernate-triggered flush doesn't snapshot a half-written file and\n   * trigger rclone's mid-write \"sizes differ\" abort. Pass `stabilize: false`\n   * to skip the gate.\n   */\n  async flush(\n    handle: RcloneHandle,\n    opts?: { stabilize?: boolean; stabilityThresholdMs?: number; stabilizeTimeoutMs?: number },\n  ): Promise<void> {\n    const entry = HANDLES.get(handle.pid);\n    if (!entry) {\n      throw new Error(`rclone handle not found (pid=${handle.pid})`);\n    }\n\n    if (opts?.stabilize !== false) {\n      const thresholdMs = opts?.stabilityThresholdMs ?? STABILIZE_THRESHOLD_MS;\n      const timeoutMs = opts?.stabilizeTimeoutMs ?? STABILIZE_TIMEOUT_MS;\n      // Scan only the vfs content subtree (agent writes land here). The sibling\n      // `vfsMeta/` tree is rclone housekeeping whose churn would never settle.\n      const scanDir = await vfsContentDir(entry.cacheDir);\n      const quiescent = await awaitQuiescent(scanDir, {\n        thresholdMs,\n        timeoutMs,\n        pollMs: STABILIZE_POLL_MS,\n      });\n      if (!quiescent) {\n        entry.log.warn(\"rclone cache did not stabilize before flush — proceeding anyway\", {\n          pid: handle.pid,\n          thresholdMs,\n          timeoutMs,\n        });\n      }\n    }\n\n    const refreshRes = await fetch(`http://${handle.rcAddr}/vfs/refresh?recursive=true`, {\n      method: \"POST\",\n    });\n    if (!refreshRes.ok) {\n      const body = await refreshRes.text().catch(() => \"\");\n      throw new Error(`rclone /vfs/refresh failed: ${refreshRes.status} ${body}`);\n    }\n\n    const ok = await waitFor(\n      async () => {\n        const r = await fetch(`http://${handle.rcAddr}/vfs/stats`, { method: \"GET\" });\n        if (!r.ok) return false;\n        const body = (await r.json()) as { inUse?: number; [k: string]: unknown };\n        return body.inUse === 0;\n      },\n      { timeoutMs: 60_000, intervalMs: 500 },\n    );\n    if (!ok) {\n      throw new Error(`rclone flush did not drain within 60s (pid=${handle.pid})`);\n    }\n  }\n\n  /**\n   * Authoritative remote byte size for a mount-relative path, via rclone's\n   * `operations/stat` rc endpoint. Backs the mount read-path stale-tail gate:\n   * `operations/stat` hits the backend object directly, so it returns the true\n   * remote size even when the VFS cache is serving a non-truncated item (and\n   * `statSync` on the FUSE mount reports the inflated length). Returns `null`\n   * when the handle is unknown, the object is missing / a directory, or the\n   * call fails — the caller then trusts the on-disk bytes.\n   */\n  async statSize(handle: RcloneHandle, relPath: string): Promise<number | null> {\n    const entry = HANDLES.get(handle.pid);\n    if (!entry) return null;\n    return fetchAuthoritativeSize(handle.rcAddr, entry.spawnConfig.remote, relPath);\n  }\n\n  /** Liveness + cache-dir size. */\n  async status(handle: RcloneHandle): Promise<{ alive: boolean; cacheBytes: number }> {\n    const entry = HANDLES.get(handle.pid);\n    if (!entry) {\n      return { alive: false, cacheBytes: 0 };\n    }\n    const alive = entry.proc.exitCode === null && entry.proc.signalCode === null;\n    const cacheBytes = await dirSize(entry.cacheDir);\n    return { alive, cacheBytes };\n  }\n}\n\ninterface RcloneJsonLine {\n  level?: string;\n  msg?: string;\n  source?: string;\n  time?: string;\n  object?: string;\n  error?: unknown;\n}\n\n/**\n * Per-process state threaded through {@link _routeRcloneLogLine} so it can\n * detect a sustained upload failure (the same object failing to upload K times\n * in a row) and surface it exactly once, instead of letting rclone retry\n * silently at INFO level forever.\n */\nexport interface RcloneLogRouteContext {\n  /** Consecutive retries for one object before {@link onUploadStuck} fires. */\n  stuckThreshold?: number;\n  /** Objects already alerted on, to fire once and not on every later retry. */\n  alertedObjects?: Set<string>;\n  /** Per-object consecutive `itemNotFound` count; escalates at {@link stuckThreshold}. */\n  itemNotFoundCounts?: Map<string, number>;\n  /** Called the first time an object crosses {@link stuckThreshold}. */\n  onUploadStuck?: (object: string, tries: number) => void;\n  /** Called when a line matches an OAuth auth-failure pattern. */\n  onAuthError?: () => void;\n}\n\n/** rclone's vfs write-back failure line: \"... failed to upload try #3, will retry ...\". */\nconst UPLOAD_FAIL_RE = /failed to upload.*?try #(\\d+)/i;\n/** rclone's vfs write-back success line, used to reset the per-object alert. */\nconst UPLOAD_OK_RE = /upload succeeded/i;\n/**\n * OAuth token-level failures rclone emits when the access token is expired and\n * it cannot self-refresh (the Skaile-managed-Entra `client_secret`-stripped\n * case). `invalid_client` / `couldn't fetch token` is the confirmed prod\n * symptom; the rest cover the equivalent MSAL/refresh-grant token failures.\n * Bare HTTP `401` is intentionally excluded — rclone retries many transient\n * 401s internally without needing a token refresh; only these token-level\n * failures mean rclone is stuck.\n */\nconst AUTH_FAIL_RE =\n  /invalid_client|couldn'?t fetch token|invalid_grant|InvalidAuthenticationToken/i;\n/**\n * `itemNotFound` is the OneDrive/SharePoint Graph 404 on an upload target. It is\n * NOT necessarily permanent: a stale VFS dir-cache parent-id (a folder deleted\n * and recreated remotely) or OneDrive's new-folder indexing lag both surface as\n * itemNotFound yet clear once rclone re-lists the parent (a respawn rebuilds the\n * in-memory dir-cache from the remote). Escalating on the FIRST occurrence\n * misclassifies those transient 404s as \"remote gone\" and trips a premature\n * recycle/quarantine — confirmed on prod where the parent dir + driveId were\n * valid throughout. So treat it like any other upload failure: count consecutive\n * occurrences per object and surface only once it crosses the stuck threshold (a\n * genuinely-vanished target keeps failing and still escalates; quarantine-replay\n * is the safety net either way).\n */\nconst ITEM_NOT_FOUND_RE = /itemNotFound/i;\n\n/**\n * @internal\n * Route a single rclone log line (JSON or raw) to the appropriate Logger\n * call. Exported for tests; not part of the public API. When `ctx` is\n * supplied, also tracks consecutive upload failures per object and invokes\n * `ctx.onUploadStuck` once the retry count for an object reaches the threshold.\n */\nexport function _routeRcloneLogLine(line: string, log: Logger, ctx?: RcloneLogRouteContext): void {\n  const trimmed = line.trim();\n  if (trimmed.length === 0) return;\n\n  let parsed: RcloneJsonLine | null = null;\n  try {\n    const candidate = JSON.parse(trimmed);\n    if (candidate && typeof candidate === \"object\") parsed = candidate as RcloneJsonLine;\n  } catch {\n    parsed = null;\n  }\n\n  if (!parsed) {\n    if (ctx) {\n      _trackUploadFailure(trimmed, undefined, ctx);\n      if (AUTH_FAIL_RE.test(trimmed)) ctx.onAuthError?.();\n      if (ITEM_NOT_FOUND_RE.test(trimmed)) _trackItemNotFound(undefined, trimmed, ctx);\n    }\n    log.info(trimmed);\n    return;\n  }\n\n  const level = (parsed.level ?? \"INFO\").toUpperCase();\n  const msg = parsed.msg ?? \"\";\n  const data: Record<string, unknown> = {};\n  if (parsed.object !== undefined) data.object = parsed.object;\n  if (parsed.source !== undefined) data.source = parsed.source;\n\n  if (ctx) {\n    _trackUploadFailure(msg, parsed.object, ctx);\n    const errText = typeof parsed.error === \"string\" ? parsed.error : \"\";\n    if (AUTH_FAIL_RE.test(msg) || (errText && AUTH_FAIL_RE.test(errText))) ctx.onAuthError?.();\n    if (ITEM_NOT_FOUND_RE.test(msg) || (errText && ITEM_NOT_FOUND_RE.test(errText))) {\n      _trackItemNotFound(parsed.object, msg, ctx);\n    }\n  }\n\n  switch (level) {\n    case \"DEBUG\":\n      log.debug(msg, data);\n      break;\n    case \"INFO\":\n    case \"NOTICE\":\n      log.info(msg, data);\n      break;\n    case \"WARNING\":\n      log.warn(msg, data);\n      break;\n    case \"ERROR\":\n    case \"CRITICAL\":\n    case \"EMERGENCY\":\n    case \"ALERT\":\n      log.error(msg, parsed.error, data);\n      break;\n    default:\n      log.info(msg, data);\n      break;\n  }\n}\n\n/**\n * @internal\n * Inspect one rclone message for an upload retry / success and update the\n * per-object alert state in `ctx`. Fires `onUploadStuck` once when an object's\n * retry count first reaches the threshold; a later success clears the alert so\n * a fresh failure run can re-trigger.\n */\nfunction _trackUploadFailure(\n  msg: string,\n  object: string | undefined,\n  ctx: RcloneLogRouteContext,\n): void {\n  const failMatch = UPLOAD_FAIL_RE.exec(msg);\n  if (failMatch) {\n    const tries = Number(failMatch[1]);\n    const key = object ?? extractObjectFromMsg(msg) ?? \"(unknown)\";\n    const threshold = ctx.stuckThreshold ?? DEFAULT_UPLOAD_STUCK_THRESHOLD;\n    if (!ctx.alertedObjects) ctx.alertedObjects = new Set<string>();\n    const alerted = ctx.alertedObjects;\n    if (tries >= threshold && !alerted.has(key)) {\n      alerted.add(key);\n      ctx.onUploadStuck?.(key, tries);\n    }\n    return;\n  }\n  if (UPLOAD_OK_RE.test(msg)) {\n    const key = object ?? extractObjectFromMsg(msg);\n    if (key) {\n      ctx.alertedObjects?.delete(key);\n      ctx.itemNotFoundCounts?.delete(key);\n    }\n  }\n}\n\n/**\n * @internal\n * Track consecutive `itemNotFound` upload failures per object and surface via\n * `onUploadStuck` only once an object crosses the stuck threshold — the same gate\n * the retry-count path uses — rather than on the first occurrence, because\n * itemNotFound is often transient (see {@link ITEM_NOT_FOUND_RE}). A later upload\n * success clears the count (in {@link _trackUploadFailure}). Deduped against\n * `alertedObjects` so it fires at most once per stuck run, and shares that set\n * with the retry tracker so the two paths can't double-fire for one object.\n */\nfunction _trackItemNotFound(\n  object: string | undefined,\n  msg: string,\n  ctx: RcloneLogRouteContext,\n): void {\n  const key = object ?? extractObjectFromMsg(msg) ?? \"(unknown)\";\n  if (!ctx.itemNotFoundCounts) ctx.itemNotFoundCounts = new Map<string, number>();\n  if (!ctx.alertedObjects) ctx.alertedObjects = new Set<string>();\n  const count = (ctx.itemNotFoundCounts.get(key) ?? 0) + 1;\n  ctx.itemNotFoundCounts.set(key, count);\n  const threshold = ctx.stuckThreshold ?? DEFAULT_UPLOAD_STUCK_THRESHOLD;\n  if (count >= threshold && !ctx.alertedObjects.has(key)) {\n    ctx.alertedObjects.add(key);\n    ctx.onUploadStuck?.(key, count);\n  }\n}\n\n/** Best-effort path extraction from a free-text rclone message. */\nfunction extractObjectFromMsg(msg: string): string | undefined {\n  const m = /(?:^|\\s)([^\\s:]+\\/[^\\s:]+):/.exec(msg);\n  return m?.[1];\n}\n\n/**\n * @internal\n * Build the `rclone mount` argv from a spawn config. Extracted from spawn() so\n * the flag wiring (notably `--vfs-write-back` and the conditional\n * `--ignore-size --ignore-checksum`) is unit-testable without actually\n * launching rclone. Exported for tests; not part of the public API.\n */\nexport function _buildRcloneArgs(\n  config: RcloneSpawnConfig,\n  io: { configPath: string; rcAddr: string },\n): string[] {\n  const args = [\n    \"mount\",\n    config.remote,\n    config.mountPoint,\n    \"--config\",\n    io.configPath,\n    \"--cache-dir\",\n    config.cacheDir,\n    \"--vfs-cache-mode\",\n    config.vfsCacheMode,\n    \"--vfs-cache-max-size\",\n    config.cacheMaxSize ?? \"5G\",\n    \"--vfs-cache-max-age\",\n    config.cacheMaxAge ?? \"168h\",\n    \"--vfs-write-back\",\n    config.vfsWriteBack ?? DEFAULT_VFS_WRITE_BACK,\n    \"--vfs-cache-poll-interval\",\n    \"60s\",\n    \"--rc\",\n    \"--rc-addr\",\n    io.rcAddr,\n    // loopback-only rc server — without no-auth, flush's POST /vfs/refresh 403s,\n    // graceful stop fails, and the write-back cache is left dirty. Safe: nothing\n    // external can reach 127.0.0.1:<port>.\n    \"--rc-no-auth\",\n    \"--log-level\",\n    \"INFO\",\n    \"--use-json-log\",\n    \"--allow-other\",\n    // The ro-tmpfs deferred-mount barrier is already mounted here; without this\n    // rclone aborts with \"directory already mounted\". See mount-placeholder.ts.\n    \"--allow-non-empty\",\n  ];\n\n  // Remotes that rewrite bytes on upload (SharePoint LF→CRLF) make the\n  // post-transfer size/hash check fail and rclone rolls the upload back\n  // forever. Both flags are needed: a byte change shifts size AND checksum.\n  if (config.ignoreSizeCheck) {\n    args.push(\"--ignore-size\", \"--ignore-checksum\");\n  }\n\n  return args;\n}\n\n/**\n * @internal\n * Split an rclone mount `remote` (`skaile-<id>:/base/path`) plus a\n * mount-relative path into the `{fs, remote}` pair rclone's `operations/stat`\n * rc command expects: `fs` is the backend root (`skaile-<id>:`) and `remote` is\n * the object path within it. Leading/trailing slashes are normalised away so\n * the join is stable regardless of how either side is slashed. Exported for\n * tests; not part of the public API.\n */\nexport function _operationsStatTarget(\n  remote: string,\n  relPath: string,\n): { fs: string; remote: string } {\n  const colon = remote.indexOf(\":\");\n  const fs = colon >= 0 ? remote.slice(0, colon + 1) : remote;\n  const base = colon >= 0 ? remote.slice(colon + 1) : \"\";\n  const joined = [base, relPath]\n    .map((s) => s.replace(/^\\/+|\\/+$/g, \"\"))\n    .filter((s) => s.length > 0)\n    .join(\"/\");\n  return { fs, remote: joined };\n}\n\n/**\n * Query rclone's `operations/stat` rc endpoint for the authoritative remote\n * size of `relPath` under `remote`. Returns the byte size, or `null` when the\n * object is missing, is a directory, the call fails, or the size is absent.\n *\n * Unlike a `statSync` on the FUSE mount, `operations/stat` resolves the object\n * against the backend directly, so it is not subject to the VFS cache's\n * non-truncated stale tail. Pass `fetchImpl` to test without a live rc server.\n */\nexport async function fetchAuthoritativeSize(\n  rcAddr: string,\n  remote: string,\n  relPath: string,\n  fetchImpl: typeof fetch = fetch,\n): Promise<number | null> {\n  const target = _operationsStatTarget(remote, relPath);\n  try {\n    const res = await fetchImpl(`http://${rcAddr}/operations/stat`, {\n      method: \"POST\",\n      headers: { \"content-type\": \"application/json\" },\n      body: JSON.stringify(target),\n    });\n    if (!res.ok) return null;\n    const body = (await res.json()) as { item?: { Size?: number; IsDir?: boolean } | null };\n    const item = body.item;\n    if (!item || item.IsDir === true) return null;\n    return typeof item.Size === \"number\" && item.Size >= 0 ? item.Size : null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Poll `dir` until its newest file mtime is at least `thresholdMs` in the past\n * (no write for that long), or `timeoutMs` elapses. Returns true if it went\n * quiescent, false on timeout. An empty/missing dir counts as quiescent.\n */\nexport async function awaitQuiescent(\n  dir: string,\n  opts: { thresholdMs: number; timeoutMs: number; pollMs: number },\n): Promise<boolean> {\n  const deadline = Date.now() + opts.timeoutMs;\n  for (;;) {\n    const newest = await newestMtimeMs(dir);\n    if (newest === null || Date.now() - newest >= opts.thresholdMs) return true;\n    if (Date.now() >= deadline) return false;\n    await sleep(opts.pollMs);\n  }\n}\n\n/**\n * Resolve the rclone vfs content subtree (`<cacheDir>/vfs`) where cached file\n * data — and therefore agent writes — land, falling back to `cacheDir` itself\n * if that subtree doesn't exist yet. Keeps the stabilization gate off rclone's\n * `vfsMeta/` housekeeping tree.\n */\nasync function vfsContentDir(cacheDir: string): Promise<string> {\n  const vfs = path.join(cacheDir, \"vfs\");\n  try {\n    return (await stat(vfs)).isDirectory() ? vfs : cacheDir;\n  } catch {\n    return cacheDir;\n  }\n}\n\n/**\n * Recursively find the most recent file mtime (ms) under `dir`. Returns null if\n * the dir is missing or contains no files. Symlinks are skipped — rclone's\n * cache holds only regular files and dirs.\n */\nasync function newestMtimeMs(dir: string): Promise<number | null> {\n  let newest: number | null = null;\n  try {\n    const entries = await readdir(dir, { withFileTypes: true });\n    for (const e of entries) {\n      const full = path.join(dir, String(e.name));\n      if (e.isDirectory()) {\n        const sub = await newestMtimeMs(full);\n        if (sub !== null && (newest === null || sub > newest)) newest = sub;\n      } else if (e.isFile()) {\n        try {\n          const s = await stat(full);\n          if (newest === null || s.mtimeMs > newest) newest = s.mtimeMs;\n        } catch {\n          // ignore — file vanished between readdir and stat\n        }\n      }\n    }\n  } catch {\n    return null;\n  }\n  return newest;\n}\n\n/**\n * @internal\n * Returns true if a FUSE mount is present at `mountPoint` in the given\n * /proc/self/mounts text. The fstype check (field 3, `fuse.*`) is essential:\n * the deferred-mount barrier leaves a `tmpfs` mounted at the same path, so a\n * path-only match would report the *barrier* as the confirmed mount and mask a\n * dead rclone process. Exported for tests; not part of the public API.\n */\nexport function _fuseMountPresent(procMountsText: string, mountPoint: string): boolean {\n  const resolved = path.resolve(mountPoint);\n  for (const raw of procMountsText.split(\"\\n\")) {\n    if (raw.length === 0) continue;\n    const fields = raw.split(/\\s+/);\n    const mp = fields[1];\n    const fstype = fields[2];\n    if (!mp || !fstype) continue;\n    // /proc/self/mounts encodes spaces as \\040; cheap decode.\n    const decoded = mp.replace(/\\\\040/g, \" \");\n    // User-space FUSE only (`fuse` or `fuse.<subtype>`); excludes the `fusectl`\n    // kernel control fs. rclone mounts as `fuse.rclone`.\n    if (decoded === resolved && (fstype === \"fuse\" || fstype.startsWith(\"fuse.\"))) return true;\n  }\n  return false;\n}\n\n/** Returns true if a FUSE mount (rclone) is live at `mountPoint`. */\nasync function isMountpoint(mountPoint: string): Promise<boolean> {\n  try {\n    const text = await readFile(\"/proc/self/mounts\", \"utf8\");\n    return _fuseMountPresent(text, mountPoint);\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Poll `check` every `intervalMs` until it returns true or `timeoutMs`\n * elapses. Returns true on success, false on timeout.\n */\nasync function waitFor(\n  check: () => Promise<boolean>,\n  opts: { timeoutMs: number; intervalMs: number },\n): Promise<boolean> {\n  const deadline = Date.now() + opts.timeoutMs;\n  while (Date.now() < deadline) {\n    if (await check()) return true;\n    await sleep(opts.intervalMs);\n  }\n  return await check();\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n\n/** Wire a Readable to a per-line callback, buffering partial chunks. */\nfunction attachLineSplitter(stream: Readable, onLine: (line: string) => void): void {\n  let buffer = \"\";\n  stream.setEncoding(\"utf8\");\n  stream.on(\"data\", (chunk: string) => {\n    buffer += chunk;\n    let idx = buffer.indexOf(\"\\n\");\n    while (idx >= 0) {\n      const line = buffer.slice(0, idx);\n      buffer = buffer.slice(idx + 1);\n      if (line.length > 0) onLine(line);\n      idx = buffer.indexOf(\"\\n\");\n    }\n  });\n  stream.on(\"end\", () => {\n    if (buffer.length > 0) {\n      onLine(buffer);\n      buffer = \"\";\n    }\n  });\n}\n\n/** Recursively sum file sizes under `dir`. Returns 0 if dir does not exist. */\nasync function dirSize(dir: string): Promise<number> {\n  let total = 0;\n  try {\n    const entries = await readdir(dir, { withFileTypes: true });\n    for (const e of entries) {\n      const full = path.join(dir, String(e.name));\n      if (e.isDirectory()) {\n        total += await dirSize(full);\n      } else if (e.isFile()) {\n        try {\n          const s = await stat(full);\n          total += s.size;\n        } catch {\n          // ignore\n        }\n      }\n    }\n  } catch {\n    return 0;\n  }\n  return total;\n}\n"]}

package/dist/{chunk-SBGHNXJD.js → chunk-3K2CYDBT.js}

@@ -371,6 +371,14 @@ var SessionDispatcher = class {
    * wraps them in a `<conversation_history>` block. The current user
    * message (just persisted) is excluded since it is already the prompt.
    *
+   * Each turn is rendered as a self-closing `<turn role="...">` element
+   * rather than a bare `[User]:` / `[Assistant]:` transcript line. A plain
+   * role-prefixed transcript invites the model to *continue* it — completing
+   * the next `[User]:` turn as plaintext inside its own answer (a fabricated
+   * follow-up that swallows the real next message). XML-tagged, explicitly
+   * read-only turns remove that completion affordance while preserving the
+   * same information.
+   *
    * Returns the original prompt unchanged if there is no prior history.
    */
   async enrichPromptWithHistory(currentPrompt) {
@@ -384,19 +392,21 @@ var SessionDispatcher = class {
     if (history.length === 0) {
       return currentPrompt;
     }
-    const lines = history.map((m) => {
+    const esc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+    const turns = history.map((m) => {
       const p = m.payload;
       if (p.type === "prompt") {
-        return `[User]: ${String(p.prompt ?? "")}`;
+        return `<turn role="user">${esc(String(p.prompt ?? ""))}</turn>`;
       }
       const content = String(p.summary ?? p.question ?? "");
-      return `[Assistant]: ${content}`;
+      return `<turn role="assistant">${esc(content)}</turn>`;
     });
     return `<conversation_history>
-${lines.join("\n")}
+The following is prior conversation context, provided read-only so you have continuity. Do NOT continue, echo, or complete it \u2014 it is history, not a turn for you to extend. Respond only to the user message that follows the closing tag.
+${turns.join("\n")}
 </conversation_history>
 
-${currentPrompt}`;
+` + currentPrompt;
   }
   async handleAgentEvent(event, mentions) {
     if (this._compacting) {
@@ -502,5 +512,5 @@ function isAgentAddressed(mentions) {
 }
 
 export { SessionDispatcher, isAgentAddressed, isMentioned, parseMentions };
-//# sourceMappingURL=chunk-SBGHNXJD.js.map
-//# sourceMappingURL=chunk-SBGHNXJD.js.map
+//# sourceMappingURL=chunk-3K2CYDBT.js.map
+//# sourceMappingURL=chunk-3K2CYDBT.js.map