@skaile/workspaces 5.19.0 → 6.1.0

package/dist/chunk-XGULGQA3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../bridge/src/codex/config-toml.ts"],"names":["stringifyToml"],"mappings":";;;;;;;;AAyDA,IAAM,cAAA,GAA6D;AAAA,EACjE,wBAAA,EAA0B,WAAA;AAAA,EAC1B,kBAAA,EAAoB,WAAA;AAAA,EACpB,wBAAA,EAA0B;AAC5B,CAAA;AAQA,IAAM,8CAAmD,IAAI,GAAA,CAAI,CAAC,QAAA,EAAU,QAAA,EAAU,UAAU,CAAC,CAAA;AAM1F,SAAS,qBAAqB,EAAA,EAAoB;AACvD,EAAA,OAAO,4BAA4B,GAAA,CAAI,EAAE,CAAA,GAAI,CAAA,OAAA,EAAU,EAAE,CAAA,CAAA,GAAK,EAAA;AAChE;AAGA,IAAM,yBAAA,GAAkD;AAAA,EACtD,cAAA,EAAgB,IAAA;AAAA,EAChB,MAAA,EAAQ,IAAA;AAAA,EACR,OAAA,EAAS;AACX,CAAA;AAyDA,SAAS,mBAAA,CACP,KAAA,EACA,QAAA,EACA,QAAA,EACS;AACT,EAAA,IAAI,QAAA,CAAS,IAAA,IAAQ,QAAA,CAAS,OAAA,KAAY,QAAW,OAAO,IAAA;AAC5D,EAAA,MAAM,QAAA,GAAW,MAAM,QAAA,EAAU,IAAA,MAAU,KAAA,CAAM,KAAA,EAAO,MAAK,IAAK,EAAA;AAClE,EAAA,IAAI,SAAS,UAAA,CAAW,CAAA,EAAG,SAAS,UAAU,CAAA,CAAA,CAAG,GAAG,OAAO,IAAA;AAC3D,EAAA,MAAM,KAAA,GAAQ,eAAA,CAAgB,QAAQ,CAAA,CAAE,IAAA,CAAK,CAAC,CAAC,EAAE,CAAA,KAAM,EAAA,KAAO,QAAA,CAAS,UAAU,IAAI,CAAC,CAAA;AAGtF,EAAA,MAAM,UAAU,QAAA,CAAS,OAAA;AACzB,EAAA,OACE,OAAA,KAAY,MAAA,KACX,KAAA,EAAO,SAAA,GAAY,OAAO,MAAM,MAAA,IAAa,KAAA,EAAO,YAAA,GAAe,OAAO,CAAA,KAAM,MAAA,CAAA;AAErF;AAiBO,SAAS,wBAAA,CACd,IACA,KAAA,EAC0D;AAC1D,EAAA,IAAI,CAAC,cAAA,CAAe,KAAK,GAAG,OAAO,EAAE,SAAS,mBAAA,EAAoB;AAClE,EAAA,IAAI,KAAA,CAAM,IAAA,KAAS,KAAA,IAAS,KAAA,CAAM,IAAA,KAAS,OAAA;AACzC,IAAA,OAAO,EAAE,OAAA,EAAS,CAAA,MAAA,EAAS,KAAA,CAAM,IAAI,CAAA,yBAAA,CAAA,EAA4B;AACnE,EAAA,MAAM,GAAA,GAAM,KAAA;AAIZ,EAAA,MAAM,SAAS,KAAA,CAAM,MAAA,GAAS,iBAAA,CAAkB,KAAA,CAAM,MAAM,CAAA,GAAI,MAAA;AAChE,EAAA,MAAM,OAAA,GAAU,GAAA,CAAI,OAAA,IAAW,MAAA,EAAQ,OAAA;AACvC,EAAA,MAAM,OAAA,GAAU,OAAA,GAAU,cAAA,CAAe,OAAO,CAAA,GAAI,MAAA;AACpD,EAAA,IAAI,CAAC,OAAA;AACH,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,OAAA,GACL,CAAA,mCAAA,EAAsC,OAAO,CAAA,CAAA,CAAA,GAC7C;AAAA,KACN;AACF,EAAA,MAAM,cAAA,GAAiB,MAAM,UAAA,EAAY,IAAA;AACzC,EAAA,MAAM,KAAA,GAAiC,EAAE,IAAA,EAAM,KAAA,CAAM,SAAS,EAAA,EAAG;AACjE,EAAA,MAAM,OAAA,GAAU,mBAAA,CAAoB,KAAK,CAAA,IAAK,MAAA,EAAQ,QAAA;AACtD,EAAA,IAAI,OAAA,QAAe,QAAA,GAAW,OAAA;AAC9B,EAAA,IAAI,cAAA,IAAkB,0BAA0B,cAAc,CAAA;AAC5D,IAAA,KAAA,CAAM,OAAA,GAAU,0BAA0B,EAAE,CAAA;AAC9C,EAAA,KAAA,CAAM,QAAA,GAAW,OAAA;AACjB,EAAA,IAAI,cAAA,KAAmB,OAAA,EAAS,KAAA,CAAM,oBAAA,GAAuB,IAAA;AAC7D,EAAA,IAAI,IAAI,YAAA,IAAgB,MAAA,CAAO,KAAK,GAAA,CAAI,YAAY,EAAE,MAAA,GAAS,CAAA;AAC7D,IAAA,KAAA,CAAM,YAAA,GAAe,EAAE,GAAG,GAAA,CAAI,YAAA,EAAa;AAC7C,EAAA,IAAI,MAAM,OAAA,IAAW,MAAA,CAAO,KAAK,KAAA,CAAM,OAAO,EAAE,MAAA,GAAS,CAAA;AACvD,IAAA,KAAA,CAAM,YAAA,GAAe,EAAE,GAAG,KAAA,CAAM,OAAA,EAAQ;AAC1C,EAAA,OAAO,EAAE,KAAA,EAAM;AACjB;AAMO,SAAS,yBAAyB,KAAA,EAA2C;AAClF,EAAA,MAAM,QAAA,GAAgC,EAAE,eAAA,EAAiB,EAAC,EAAE;AAC5D,EAAA,MAAM,UAA+B,EAAC;AACtC,EAAA,MAAM,UAAU,KAAA,CAAM,QAAA,GAAW,gBAAgB,KAAA,CAAM,QAAQ,IAAI,EAAC;AACpE,EAAA,KAAA,MAAW,CAAC,EAAA,EAAI,KAAK,CAAA,IAAK,OAAA,EAAS;AACjC,IAAA,MAAM,QAAA,GAAW,wBAAA,CAAyB,EAAA,EAAI,KAAK,CAAA;AACnD,IAAA,IAAI,SAAA,IAAa,UAAU,OAAA,CAAQ,IAAA,CAAK,EAAE,EAAA,EAAI,MAAA,EAAQ,QAAA,CAAS,OAAA,EAAS,CAAA;AAAA,kBAC1D,eAAA,CAAgB,oBAAA,CAAqB,EAAE,CAAC,IAAI,QAAA,CAAS,KAAA;AAAA,EACrE;AAEA,EAAA,IAAI,CAAC,MAAM,QAAA,EAAU,OAAO,EAAE,QAAA,EAAU,OAAA,EAAS,QAAA,EAAU,EAAC,EAAE;AAI9D,EAAA,MAAM,QAAA,GAAW,aAAA;AAAA,IACf,MAAM,QAAA,EAAU,IAAA,MAAU,KAAA,CAAM,KAAA,EAAO,MAAK,IAAK,EAAA;AAAA,IACjD,KAAA,CAAM,QAAA;AAAA,IACN,KAAA,CAAM;AAAA,GACR;AACA,EAAA,IAAI,CAAC,UAAU,OAAO,EAAE,UAAU,OAAA,EAAS,QAAA,EAAU,EAAC,EAAE;AACxD,EAAA,MAAM,WAAW,QAAA,CAAS,QAAA;AAC1B,EAAA,MAAM,OAAA,GAAU,oBAAA,CAAqB,QAAA,CAAS,UAAU,CAAA;AACxD,EAAA,IAAI,CAAC,QAAA,CAAS,eAAA,CAAgB,OAAO,CAAA,EAAG;AAMtC,IAAA,MAAM,MAAA,GAAS,QAAQ,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,EAAA,KAAO,QAAA,CAAS,UAAU,CAAA,EAAG,MAAA;AAClE,IAAA,IAAI,UAAU,mBAAA,CAAoB,KAAA,EAAO,QAAA,EAAU,KAAA,CAAM,QAAQ,CAAA,EAAG;AAClE,MAAA,OAAO;AAAA,QACL,QAAA;AAAA,QACA,OAAA;AAAA,QACA,QAAA;AAAA,QACA,aAAA,EAAe,EAAE,EAAA,EAAI,QAAA,CAAS,YAAY,MAAA;AAAO,OACnD;AAAA,IACF;AACA,IAAA,OAAO,EAAE,QAAA,EAAU,OAAA,EAAS,QAAA,EAAS;AAAA,EACvC;AACA,EAAA,QAAA,CAAS,cAAA,GAAiB,OAAA;AAC1B,EAAA,IAAI,QAAA,CAAS,eAAA,EAAiB,QAAA,CAAS,KAAA,GAAQ,QAAA,CAAS,eAAA;AACxD,EAAA,OAAO;AAAA,IACL,QAAA;AAAA,IACA,YAAY,QAAA,CAAS,UAAA;AAAA,IACrB,GAAI,SAAS,eAAA,GAAkB,EAAE,OAAO,QAAA,CAAS,eAAA,KAAoB,EAAC;AAAA,IACtE,OAAA;AAAA,IACA;AAAA,GACF;AACF;AAGO,SAAS,sBAAsB,QAAA,EAAuC;AAC3E,EAAA,MAAM,UAAmC,EAAC;AAC1C,EAAA,IAAI,QAAA,CAAS,cAAA,EAAgB,OAAA,CAAQ,cAAA,GAAiB,QAAA,CAAS,cAAA;AAC/D,EAAA,IAAI,QAAA,CAAS,KAAA,EAAO,OAAA,CAAQ,KAAA,GAAQ,QAAA,CAAS,KAAA;AAC7C,EAAA,OAAA,CAAQ,kBAAkB,QAAA,CAAS,eAAA;AACnC,EAAA,OAAO,CAAA,EAAGA,SAAA,CAAc,OAAO,CAAC;AAAA,CAAA;AAClC;AAWO,SAAS,iBAAiB,MAAA,EAAqD;AACpF,EAAA,MAAM,GAAA,GACJ,MAAA,CAAO,SAAA,IAAa,yBAAA,CAA0B,IAAA,CAAK,OAAO,SAAS,CAAA,GAC/D,MAAA,CAAO,SAAA,GACP,UAAA,CAAW,QAAQ,EAChB,MAAA,CAAO,MAAA,CAAO,SAAA,IAAa,MAAA,CAAO,GAAG,CAAA,CACrC,OAAO,KAAK,CAAA,CACZ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AACpB,EAAA,OAAO,IAAA,CAAK,eAAA,EAAgB,EAAG,OAAA,EAAS,GAAG,CAAA;AAC7C;AAeO,SAAS,oBAAA,CACd,MACA,QAAA,EACoB;AACpB,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,EAAM,aAAa,CAAA;AAGrC,EAAA,SAAA,CAAU,MAAM,EAAE,SAAA,EAAW,IAAA,EAAM,IAAA,EAAM,KAAO,CAAA;AAChD,EAAA,IAAI,OAAO,IAAA,CAAK,QAAA,CAAS,eAAe,CAAA,CAAE,WAAW,CAAA,EAAG;AACtD,IAAA,MAAA,CAAO,IAAA,EAAM,EAAE,KAAA,EAAO,IAAA,EAAM,CAAA;AAC5B,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,IAAA,EAAM,iBAAiB,CAAA;AAC9C,EAAA,MAAA,CAAO,SAAA,EAAW,EAAE,KAAA,EAAO,IAAA,EAAM,CAAA;AACjC,EAAA,aAAA,CAAc,SAAA,EAAW,sBAAsB,QAAQ,CAAA,EAAG,EAAE,IAAA,EAAM,GAAA,EAAO,IAAA,EAAM,IAAA,EAAM,CAAA;AACrF,EAAA,UAAA,CAAW,WAAW,IAAI,CAAA;AAC1B,EAAA,OAAO,IAAA;AACT","file":"chunk-XGULGQA3.js","sourcesContent":["/**\n * Codex's `config.toml` adapter — the AI provider registry materialized into\n * the only provider surface the Codex CLI reads (plan §2.3, codex rows).\n *\n * Codex is a **file-shaped** harness: it takes its endpoints from\n * `$CODEX_HOME/config.toml`, never from per-request options. Both codex modes\n * therefore get a session-private `CODEX_HOME` holding a rendered document:\n *\n * - every addressable registry entry becomes `[model_providers.<id>]` with\n *   `base_url`, `env_key`, `wire_api`, `query_params` and `http_headers`\n *   mapping 1:1 onto the entry's `base_url`, `credential`, `surface`,\n *   `query_params` and `headers`;\n * - `model_provider` and `model` at the top level name the selected entry.\n *\n * The rendered file never contains a credential **value** — `env_key` holds\n * the *name* of the per-entry variable (`SKAILE_AIP_<ID>_KEY`, minted by\n * {@link providerCredentialEnvName}), and the value rides in the child\n * environment. An `oauth` entry has no env carrier at all: it gets\n * `requires_openai_auth`, which routes codex to its own auth manager.\n *\n * **Surface coverage.** Codex names the wire protocol `wire_api` and, as of\n * codex-cli 0.154, accepts exactly one value: `responses`. `chat` was removed\n * (\"`wire_api = \\\"chat\\\"` is no longer supported\", openai/codex#7782), and an\n * unknown value fails the *whole* document at load time — one unaddressable\n * entry would take the rest of the registry down with it. Entries whose\n * surface codex cannot speak (`openai-completions`, `anthropic-messages`,\n * `bedrock-converse-stream`, `google-*`) are therefore left out and reported\n * in {@link CodexConfigBuild.skipped} for the harness to log.\n *\n * @docLink packages/bridge/harnesses#codex-harness\n */\n\nimport { createHash } from \"node:crypto\";\nimport { mkdirSync, renameSync, rmSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { globalSkaileDir } from \"@skaile/workspaces/core\";\nimport {\n  type AIProviderEntry,\n  type AIProviderLlmEntry,\n  type AIProviderRegistry,\n  type AIProviderSurface,\n  isEntryEnabled,\n  type MergedAIProviderRegistry,\n  parseModelRef,\n  registryEntries,\n  type ResolvedModelRef,\n  resolveEntryBaseUrl,\n} from \"@skaile/workspaces/core/provider-registry\";\nimport { stringify as stringifyToml } from \"smol-toml\";\nimport { getProviderPreset } from \"../provider-catalog.js\";\nimport { providerCredentialEnvName } from \"../provider-materialize/credential-env.js\";\n\n/**\n * `surface` → codex `wire_api`. Only the responses-flavoured surfaces have a\n * codex spelling; see the module docstring for why `openai-completions` is\n * absent rather than mapped to the removed `chat` value.\n */\nconst CODEX_WIRE_API: Partial<Record<AIProviderSurface, string>> = {\n  \"openai-codex-responses\": \"responses\",\n  \"openai-responses\": \"responses\",\n  \"azure-openai-responses\": \"responses\",\n};\n\n/**\n * Provider ids codex reserves for its own built-ins. A `[model_providers.<id>]`\n * table under one of them fails the whole document (\"model_providers contains\n * reserved built-in provider IDs\"), so such an entry is rendered under\n * {@link codexProviderTableId}.\n */\nconst CODEX_RESERVED_PROVIDER_IDS: ReadonlySet<string> = new Set([\"openai\", \"ollama\", \"lmstudio\"]);\n\n/**\n * The `[model_providers.<id>]` table name for a registry entry: the entry id,\n * or `skaile-<id>` when codex reserves that id (the `openai` preset).\n */\nexport function codexProviderTableId(id: string): string {\n  return CODEX_RESERVED_PROVIDER_IDS.has(id) ? `skaile-${id}` : id;\n}\n\n/** Credential kinds whose value the adapter hands over in an env var. */\nconst ENV_DELIVERED_CREDENTIALS: Record<string, true> = {\n  api_key_header: true,\n  bearer: true,\n  command: true,\n};\n\n/** One `[model_providers.<id>]` table, in codex's own vocabulary. */\nexport interface CodexModelProviderTable {\n  /** Display name. Codex rejects a provider table without one. */\n  name: string;\n  base_url?: string;\n  /** Name of the variable carrying the credential — never the credential. */\n  env_key?: string;\n  wire_api?: string;\n  /** Routes codex to its own auth manager (ChatGPT subscription / stored key). */\n  requires_openai_auth?: boolean;\n  query_params?: Record<string, string>;\n  http_headers?: Record<string, string>;\n}\n\n/** The subset of codex's `config.toml` this adapter owns. */\nexport interface CodexConfigDocument {\n  /** Table id the session addresses (see {@link codexProviderTableId}); absent when nothing rendered. */\n  model_provider?: string;\n  /** Provider-side model id. */\n  model?: string;\n  model_providers: Record<string, CodexModelProviderTable>;\n}\n\n/** An entry codex cannot address, and why. */\nexport interface CodexSkippedEntry {\n  id: string;\n  reason: string;\n}\n\n/** Result of {@link buildCodexConfigDocument}. */\nexport interface CodexConfigBuild {\n  document: CodexConfigDocument;\n  /** Selected registry entry id (not the table id), when it rendered. */\n  providerId?: string;\n  /** Provider-side model id of the selection, when the selector named one. */\n  model?: string;\n  /**\n   * Entries left out of the document. Non-fatal: codex keeps its built-in\n   * providers, so a session whose selection was skipped behaves exactly as it\n   * did before the registry existed.\n   */\n  skipped: CodexSkippedEntry[];\n  /** Notes from `modelRef` resolution (dangling role, disabled provider, …). */\n  warnings: string[];\n  /**\n   * Set when the selector named an entry codex cannot address: the session\n   * must stop with `reason`, not fall back to codex's built-in providers.\n   */\n  unaddressable?: { id: string; reason: string };\n}\n\n/**\n * Whether the session's selector named the entry `selected` resolved to, rather\n * than reaching it by registry order alone.\n */\nfunction selectionNamesEntry(\n  input: CodexConfigInput,\n  selected: ResolvedModelRef,\n  registry: AIProviderRegistry | MergedAIProviderRegistry,\n): boolean {\n  if (selected.role && selected.modelId !== undefined) return true;\n  const selector = input.modelRef?.trim() || input.model?.trim() || \"\";\n  if (selector.startsWith(`${selected.providerId}/`)) return true;\n  const entry = registryEntries(registry).find(([id]) => id === selected.providerId)?.[1] as\n    | AIProviderLlmEntry\n    | undefined;\n  const modelId = selected.modelId;\n  return (\n    modelId !== undefined &&\n    (entry?.model_map?.[modelId] !== undefined || entry?.capabilities?.[modelId] !== undefined)\n  );\n}\n\n/** Inputs {@link buildCodexConfigDocument} reads off an `AgentConfig`. */\nexport interface CodexConfigInput {\n  registry?: AIProviderRegistry | MergedAIProviderRegistry;\n  /** `\"<providerId>/<modelId>\"`, a bare model id, or `\"@role\"`. */\n  modelRef?: string;\n  /** Legacy model field, used as the selector when `modelRef` is absent. */\n  model?: string;\n  /** Roles table (`skaile.yaml`), consulted for an `@role` selector. */\n  roles?: Record<string, string>;\n}\n\n/**\n * Render one entry as a codex provider table, or explain why codex cannot\n * address it.\n */\nexport function renderCodexProviderTable(\n  id: string,\n  entry: AIProviderEntry,\n): { table: CodexModelProviderTable } | { skipped: string } {\n  if (!isEntryEnabled(entry)) return { skipped: \"entry is disabled\" };\n  if (entry.kind !== \"llm\" && entry.kind !== \"embed\")\n    return { skipped: `kind '${entry.kind}' is not a model endpoint` };\n  const llm = entry as AIProviderLlmEntry;\n  // `surface` and `base_url` may live on the catalog preset the entry names —\n  // the catalog layer fills them during a merge, but an entry handed straight\n  // to a harness has not necessarily been through one.\n  const preset = entry.preset ? getProviderPreset(entry.preset) : undefined;\n  const surface = llm.surface ?? preset?.surface;\n  const wireApi = surface ? CODEX_WIRE_API[surface] : undefined;\n  if (!wireApi)\n    return {\n      skipped: surface\n        ? `codex has no wire_api for surface '${surface}'`\n        : \"entry declares no surface\",\n    };\n  const credentialKind = entry.credential?.kind;\n  const table: CodexModelProviderTable = { name: entry.label ?? id };\n  const baseUrl = resolveEntryBaseUrl(entry) ?? preset?.base_url;\n  if (baseUrl) table.base_url = baseUrl;\n  if (credentialKind && ENV_DELIVERED_CREDENTIALS[credentialKind])\n    table.env_key = providerCredentialEnvName(id);\n  table.wire_api = wireApi;\n  if (credentialKind === \"oauth\") table.requires_openai_auth = true;\n  if (llm.query_params && Object.keys(llm.query_params).length > 0)\n    table.query_params = { ...llm.query_params };\n  if (entry.headers && Object.keys(entry.headers).length > 0)\n    table.http_headers = { ...entry.headers };\n  return { table };\n}\n\n/**\n * Build the document for a session: every addressable entry, plus the\n * selection when it resolved to one of them.\n */\nexport function buildCodexConfigDocument(input: CodexConfigInput): CodexConfigBuild {\n  const document: CodexConfigDocument = { model_providers: {} };\n  const skipped: CodexSkippedEntry[] = [];\n  const entries = input.registry ? registryEntries(input.registry) : [];\n  for (const [id, entry] of entries) {\n    const rendered = renderCodexProviderTable(id, entry);\n    if (\"skipped\" in rendered) skipped.push({ id, reason: rendered.skipped });\n    else document.model_providers[codexProviderTableId(id)] = rendered.table;\n  }\n\n  if (!input.registry) return { document, skipped, warnings: [] };\n  // An empty selector resolves the same way a bare one does — first entry in\n  // registry order. A session that configured an endpoint and named no model\n  // still means that endpoint, not codex's built-in default.\n  const selected = parseModelRef(\n    input.modelRef?.trim() || input.model?.trim() || \"\",\n    input.registry,\n    input.roles,\n  );\n  if (!selected) return { document, skipped, warnings: [] };\n  const warnings = selected.warnings;\n  const tableId = codexProviderTableId(selected.providerId);\n  if (!document.model_providers[tableId]) {\n    // A selector that names the entry (`ollama/llama3`, a role or a model its\n    // `model_map` lists) and cannot be rendered must not fall through to\n    // codex's built-in OpenAI: the prompt would go to a provider the user did\n    // not pick. A bare model id that matched no entry only landed on the first\n    // entry by registry order, so codex's own providers stay the right answer.\n    const reason = skipped.find((s) => s.id === selected.providerId)?.reason;\n    if (reason && selectionNamesEntry(input, selected, input.registry)) {\n      return {\n        document,\n        skipped,\n        warnings,\n        unaddressable: { id: selected.providerId, reason },\n      };\n    }\n    return { document, skipped, warnings };\n  }\n  document.model_provider = tableId;\n  if (selected.providerModelId) document.model = selected.providerModelId;\n  return {\n    document,\n    providerId: selected.providerId,\n    ...(selected.providerModelId ? { model: selected.providerModelId } : {}),\n    skipped,\n    warnings,\n  };\n}\n\n/** Serialize a document to TOML. Deterministic: registry order throughout. */\nexport function renderCodexConfigToml(document: CodexConfigDocument): string {\n  const ordered: Record<string, unknown> = {};\n  if (document.model_provider) ordered.model_provider = document.model_provider;\n  if (document.model) ordered.model = document.model;\n  ordered.model_providers = document.model_providers;\n  return `${stringifyToml(ordered)}\\n`;\n}\n\n/**\n * The session-private codex home.\n *\n * Deliberately outside `cwd`: codex's `workspace-write` sandbox makes the\n * working tree writable by the model, and a config home inside it would let a\n * turn rewrite its own `base_url`. `$SKAILE_HOME` (honoured by\n * {@link globalSkaileDir}) relocates the whole tree, which is also the test\n * seam.\n */\nexport function codexSessionHome(config: { cwd: string; sessionId?: string }): string {\n  const key =\n    config.sessionId && /^[A-Za-z0-9._-]{1,128}$/.test(config.sessionId)\n      ? config.sessionId\n      : createHash(\"sha256\")\n          .update(config.sessionId ?? config.cwd)\n          .digest(\"hex\")\n          .slice(0, 32);\n  return join(globalSkaileDir(), \"codex\", key);\n}\n\n/**\n * Write `<home>/config.toml`, creating the home always. Atomic: a\n * partially written document would fail codex's config load for the whole\n * session.\n *\n * A document with no provider tables says nothing codex does not already\n * know, so nothing is written and a file left by an earlier render is\n * removed — a session that no longer carries a registry must not keep\n * answering to the one it used to have.\n *\n * @returns the absolute path written, or `undefined` when there was nothing\n *   to render.\n */\nexport function writeCodexConfigToml(\n  home: string,\n  document: CodexConfigDocument,\n): string | undefined {\n  const path = join(home, \"config.toml\");\n  // codex exits when CODEX_HOME names a directory that does not exist, so the\n  // home exists before the early return too.\n  mkdirSync(home, { recursive: true, mode: 0o700 });\n  if (Object.keys(document.model_providers).length === 0) {\n    rmSync(path, { force: true });\n    return undefined;\n  }\n  const temporary = join(home, \"config.toml.new\");\n  rmSync(temporary, { force: true });\n  writeFileSync(temporary, renderCodexConfigToml(document), { mode: 0o600, flag: \"wx\" });\n  renameSync(temporary, path);\n  return path;\n}\n"]}

package/dist/{chunk-Q6E6FM7P.js → chunk-XKNXPLKR.js}

@@ -1,4 +1,4 @@
-import { AskSlots } from './chunk-EPBKISS5.js';
+import { AskSlots } from './chunk-3TG2NV2F.js';
 
 // store/src/resource-client.ts
 var DEFAULT_TIMEOUT_MS = 3e4;
@@ -354,17 +354,17 @@ var AgentStore = class _AgentStore {
   _phase = "idle";
   _pendingQuestion = null;
   /**
-   * Unanswered sub-questions of the parked ask, oldest first. Drivers resume
+   * Unanswered sub-questions of the parked ask, oldest first. Harnesses resume
    * only once every one has an answer; `_pendingQuestion` is its last entry.
    */
   _openQuestions = [];
-  /** Slot rule of the parked ask, shared with the drivers and the SDK session. */
+  /** Slot rule of the parked ask, shared with the harnesses and the SDK session. */
   _ask = new AskSlots();
   /** Latest `question` event per sub-question text of the parked ask. */
   _askEvents = /* @__PURE__ */ new Map();
   /**
    * Own unnamed replies whose runner echo has not arrived yet. Best effort: a
-   * reply the driver rejects is never echoed, and its count lingers until the
+   * reply the harness rejects is never echoed, and its count lingers until the
    * ask ends.
    */
   _unnamedEchoesOwed = 0;
@@ -853,5 +853,5 @@ var AgentStore = class _AgentStore {
 };
 
 export { AgentStore, ResourceClient, ResourceRequestError };
-//# sourceMappingURL=chunk-Q6E6FM7P.js.map
-//# sourceMappingURL=chunk-Q6E6FM7P.js.map
+//# sourceMappingURL=chunk-XKNXPLKR.js.map
+//# sourceMappingURL=chunk-XKNXPLKR.js.map

package/dist/{chunk-Q6E6FM7P.js.map → chunk-XKNXPLKR.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../store/src/resource-client.ts","../store/src/store.ts"],"names":[],"mappings":";;;AAuBA,IAAM,kBAAA,GAAqB,GAAA;AAOpB,IAAM,oBAAA,GAAN,cAAmC,KAAA,CAAM;AAAA,EACrC,IAAA;AAAA,EAET,WAAA,CAAY,SAAiB,IAAA,EAAqC;AAChE,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,sBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AACF;AAUO,IAAM,iBAAN,MAA0E;AAAA,EAC9D,KAAA;AAAA,EACT,UAAgC,EAAC;AAAA,EACjC,cAAwC,EAAC;AAAA;AAAA,EAGjD,eAAA,uBAAoD,GAAA,EAAI;AAAA,EAEhD,SAAA,GAA2C,IAAA;AAAA,EAClC,UAAA,uBAAiB,GAAA,EAAgB;AAAA,EACjC,gBAAA,uBAAuB,GAAA,EAOtC;AAAA,EACe,WAAA;AAAA;AAAA;AAAA;AAAA,EAKjB,YAAY,SAAA,EAA2B;AACrC,IAAA,IAAA,CAAK,QAAQ,SAAA,CAAU,IAAA;AACvB,IAAA,IAAA,CAAK,WAAA,GAAc,UAAU,OAAA,CAAQ,CAAC,UAAU,IAAA,CAAK,YAAA,CAAa,KAAK,CAAC,CAAA;AAAA,EAC1E;AAAA;AAAA;AAAA,EAKA,IAAI,MAAA,GAA+B;AACjC,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,UAAA,GAAuC;AACzC,IAAA,OAAO,IAAA,CAAK,WAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,IAAA,CAAK,WAAA,EAAqB,IAAA,EAAe,IAAA,EAA+C;AAC5F,IAAA,MAAM,WAAW,MAAM,IAAA,CAAK,SAAS,WAAA,EAAa,MAAA,EAAQ,MAAM,IAAI,CAAA;AACpE,IAAA,OAAQ,QAAA,CAAS,QAA6B,EAAC;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,IAAA,CAAK,WAAA,EAAqB,IAAA,EAAc,IAAA,EAA+C;AAC3F,IAAA,MAAM,WAAW,MAAM,IAAA,CAAK,SAAS,WAAA,EAAa,MAAA,EAAQ,MAAM,IAAI,CAAA;AACpE,IAAA,OAAO,QAAA,CAAS,IAAA;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,KAAA,CAAM,WAAA,EAAqB,IAAA,EAAc,OAAA,EAA0C;AACvF,IAAA,MAAM,KAAK,QAAA,CAAS,WAAA,EAAa,OAAA,EAAS,IAAA,EAAM,QAAW,OAAO,CAAA;AAAA,EACpE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,MAAA,CAAO,WAAA,EAAqB,IAAA,EAA6B;AAC7D,IAAA,MAAM,IAAA,CAAK,QAAA,CAAS,WAAA,EAAa,QAAA,EAAU,IAAI,CAAA;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,MAAA,CACJ,WAAA,EACA,KAAA,EACA,IAAA,EAC2B;AAC3B,IAAA,MAAM,WAAW,MAAM,IAAA,CAAK,SAAS,WAAA,EAAa,QAAA,EAAU,OAAO,IAAI,CAAA;AACvE,IAAA,OAAQ,QAAA,CAAS,QAA6B,EAAC;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,KAAA,CAAM,WAAA,EAAqB,IAAA,EAA6B;AAC5D,IAAA,MAAM,IAAA,CAAK,QAAA,CAAS,WAAA,EAAa,OAAA,EAAS,IAAI,CAAA;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,IAAA,CAAK,WAAA,EAAqB,IAAA,EAAe,IAAA,EAA4C;AACzF,IAAA,MAAM,WAAW,MAAM,IAAA,CAAK,SAAS,WAAA,EAAa,MAAA,EAAQ,MAAM,IAAI,CAAA;AACpE,IAAA,OAAO,QAAA,CAAS,IAAA;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,SAAA,GAAY,CAAC,QAAA,KAAuC;AAClD,IAAA,IAAA,CAAK,UAAA,CAAW,IAAI,QAAQ,CAAA;AAC5B,IAAA,OAAO,MAAM,IAAA,CAAK,UAAA,CAAW,MAAA,CAAO,QAAQ,CAAA;AAAA,EAC9C,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,cAAc,MAA8B;AAC1C,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACnB,MAAA,IAAA,CAAK,YAAY,EAAE,MAAA,EAAQ,KAAK,OAAA,EAAS,UAAA,EAAY,KAAK,WAAA,EAAY;AAAA,IACxE;AACA,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,aAAa,WAAA,EAKJ;AACP,IAAA,IAAA,CAAK,MAAM,EAAE,IAAA,EAAM,oBAAoB,MAAA,EAAQ,KAAA,EAAO,aAAa,CAAA;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBAAgB,WAAA,EAA2B;AACzC,IAAA,IAAA,CAAK,MAAM,EAAE,IAAA,EAAM,oBAAoB,MAAA,EAAQ,QAAA,EAAU,aAAa,CAAA;AAAA,EACxE;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,iBAAA,GAA0B;AACxB,IAAA,IAAA,CAAK,MAAM,EAAE,IAAA,EAAM,kBAAA,EAAoB,MAAA,EAAQ,WAAW,CAAA;AAAA,EAC5D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,OAAA,GAAgB;AACd,IAAA,IAAA,CAAK,WAAA,EAAY;AACjB,IAAA,KAAA,MAAW,GAAG,OAAO,CAAA,IAAK,KAAK,gBAAA,EAAkB;AAC/C,MAAA,YAAA,CAAa,QAAQ,KAAK,CAAA;AAC1B,MAAA,OAAA,CAAQ,MAAA,CAAO,IAAI,KAAA,CAAM,yBAAyB,CAAC,CAAA;AAAA,IACrD;AACA,IAAA,IAAA,CAAK,iBAAiB,KAAA,EAAM;AAC5B,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AAAA,EACxB;AAAA;AAAA,EAIQ,aAAa,KAAA,EAAyB;AAC5C,IAAA,IAAI,KAAA,CAAM,SAAS,kBAAA,EAAoB;AACrC,MAAA,MAAM,CAAA,GAAI,KAAA;AACV,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,eAAA,CAAgB,GAAA,CAAI,EAAE,WAAW,CAAA;AACvD,MAAA,MAAM,IAAA,GAAO,IAAI,GAAA,CAAI,IAAA,CAAK,eAAe,CAAA;AACzC,MAAA,IAAA,CAAK,GAAA,CAAI,EAAE,WAAA,EAAa;AAAA,QACtB,IAAI,CAAA,CAAE,WAAA;AAAA,QACN,MAAA,EACE,QAAA,EAAU,MAAA,IAAU,IAAA,CAAK,WAAA,CAAY,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,CAAA,CAAE,WAAW,GAAG,MAAA,IAAU,EAAA;AAAA,QACtF,OAAO,CAAA,CAAE,MAAA;AAAA,QACT,GAAI,EAAE,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,CAAA,CAAE,KAAA,EAAM,GAAI,EAAC;AAAA,QAClD,GAAI,EAAE,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,CAAA,CAAE,SAAA,EAAU,GAAI,EAAC;AAAA,QAC9D,GAAI,EAAE,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,CAAA,CAAE,SAAA,EAAU,GAAI,EAAC;AAAA,QAC9D,WAAA,sBAAiB,IAAA;AAAK,OACvB,CAAA;AACD,MAAA,IAAA,CAAK,eAAA,GAAkB,IAAA;AACvB,MAAA,KAAA,MAAW,QAAA,IAAY,KAAK,UAAA,EAAY;AACtC,QAAA,QAAA,EAAS;AAAA,MACX;AACA,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,KAAA,CAAM,SAAS,qBAAA,EAAuB;AACxC,MAAA,IAAA,CAAK,UAAU,KAAA,CAAM,MAAA;AACrB,MAAA,IAAA,CAAK,cAAc,KAAA,CAAM,UAAA;AACzB,MAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AACjB,MAAA,KAAA,MAAW,QAAA,IAAY,KAAK,UAAA,EAAY;AACtC,QAAA,QAAA,EAAS;AAAA,MACX;AACA,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,KAAA,CAAM,SAAS,mBAAA,EAAqB;AACtC,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,gBAAA,CAAiB,GAAA,CAAI,MAAM,SAAS,CAAA;AACzD,MAAA,IAAI,CAAC,OAAA,EAAS;AAEd,MAAA,YAAA,CAAa,QAAQ,KAAK,CAAA;AAC1B,MAAA,IAAA,CAAK,gBAAA,CAAiB,MAAA,CAAO,KAAA,CAAM,SAAS,CAAA;AAE5C,MAAA,IAAI,MAAM,KAAA,EAAO;AACf,QAAA,OAAA,CAAQ,OAAO,IAAI,oBAAA,CAAqB,MAAM,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,MAClE,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,QAAQ,KAAK,CAAA;AAAA,MACvB;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,QAAA,CACN,WAAA,EACA,SAAA,EACA,IAAA,EACA,SACA,OAAA,EACiC;AACjC,IAAA,MAAM,SAAA,GAAY,OAAO,UAAA,EAAW;AAEpC,IAAA,OAAO,IAAI,OAAA,CAAgC,CAAC,OAAA,EAAS,MAAA,KAAW;AAC9D,MAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC7B,QAAA,IAAA,CAAK,gBAAA,CAAiB,OAAO,SAAS,CAAA;AACtC,QAAA,MAAA;AAAA,UACE,IAAI,KAAA;AAAA,YACF,CAAA,iCAAA,EAAoC,kBAAkB,CAAA,IAAA,EAAO,SAAS,CAAA,CAAA,EAAI,WAAW,CAAA,EAAG,IAAA,GAAO,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,GAAK,EAAE,CAAA;AAAA;AAChH,SACF;AAAA,MACF,GAAG,kBAAkB,CAAA;AAErB,MAAA,IAAA,CAAK,iBAAiB,GAAA,CAAI,SAAA,EAAW,EAAE,OAAA,EAAS,MAAA,EAAQ,OAAO,CAAA;AAE/D,MAAA,IAAA,CAAK,KAAA,CAAM;AAAA,QACT,IAAA,EAAM,kBAAA;AAAA,QACN,SAAA;AAAA,QACA,WAAA;AAAA,QACA,SAAA;AAAA,QACA,GAAI,IAAA,KAAS,MAAA,GAAY,EAAE,IAAA,KAAS,EAAC;AAAA,QACrC,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY,EAAC;AAAA,QAC7B,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY;AAAC,OAC9B,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AACF;;;AC9UA,IAAM,iBAAA,GAAoB,EAAA;AAG1B,SAAS,eAAA,CAAmB,CAAA,EAAkB,CAAA,EAAM,wBAAA,GAA2B,KAAA,EAAgB;AAC7F,EAAA,MAAM,QAAA,uBAAe,OAAA,EAAgB;AACrC,EAAA,MAAM,QAAA,uBAAe,OAAA,EAAgB;AAErC,EAAA,MAAM,OAAA,GAAU,CAAC,IAAA,EAAe,KAAA,KAA4B;AAC1D,IAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,KAAA,KAAU,IAAA,SAAa,IAAA,KAAS,KAAA;AACrD,IAAA,IAAI,OAAO,IAAA,KAAS,OAAO,KAAA,EAAO,OAAO,KAAA;AAEzC,IAAA,QAAQ,OAAO,IAAA;AAAM,MACnB,KAAK,QAAA;AAAA,MACL,KAAK,SAAA;AACH,QAAA,OAAO,IAAA,KAAS,KAAA;AAAA,MAClB,KAAK,QAAA;AACH,QAAA,OACE,MAAA,CAAO,SAAS,IAAI,CAAA,IACpB,OAAO,QAAA,CAAS,KAAK,KACrB,CAAC,MAAA,CAAO,GAAG,IAAA,EAAM,EAAE,KACnB,CAAC,MAAA,CAAO,GAAG,KAAA,EAAO,EAAE,KACpB,IAAA,KAAS,KAAA;AAAA,MAEb,KAAK,QAAA;AACH,QAAA;AAAA,MACF;AACE,QAAA,OAAO,KAAA;AAAA;AAGX,IAAA,MAAM,UAAA,GAAa,IAAA;AACnB,IAAA,MAAM,WAAA,GAAc,KAAA;AACpB,IAAA,IAAI,QAAA,CAAS,IAAI,UAAU,CAAA,IAAK,SAAS,GAAA,CAAI,WAAW,GAAG,OAAO,KAAA;AAClE,IAAA,IAAI,wBAAA,EAA0B;AAC5B,MAAA,IAAI,UAAA,KAAe,eAAe,QAAA,CAAS,GAAA,CAAI,UAAU,CAAA,IAAK,QAAA,CAAS,GAAA,CAAI,WAAW,CAAA,EAAG;AACvF,QAAA,OAAO,KAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,QAAA,CAAS,IAAI,UAAU,CAAA;AACvB,IAAA,QAAA,CAAS,IAAI,WAAW,CAAA;AAExB,IAAA,MAAM,WAAA,GAAc,KAAA,CAAM,OAAA,CAAQ,UAAU,CAAA;AAC5C,IAAA,IAAI,WAAA,KAAgB,KAAA,CAAM,OAAA,CAAQ,WAAW,GAAG,OAAO,KAAA;AAEvD,IAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,cAAA,CAAe,UAAU,CAAA;AACtD,IAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,cAAA,CAAe,WAAW,CAAA;AACxD,IAAA,MAAM,qBAAA,GAAwB,cAC1B,aAAA,KAAkB,KAAA,CAAM,YACxB,aAAA,KAAkB,MAAA,CAAO,aAAa,aAAA,KAAkB,IAAA;AAC5D,IAAA,MAAM,sBAAA,GAAyB,cAC3B,cAAA,KAAmB,KAAA,CAAM,YACzB,cAAA,KAAmB,MAAA,CAAO,aAAa,cAAA,KAAmB,IAAA;AAC9D,IAAA,IACE,CAAC,qBAAA,IACD,CAAC,sBAAA,IACD,kBAAkB,cAAA,IAClB,CAAC,MAAA,CAAO,YAAA,CAAa,UAAU,CAAA,IAC/B,CAAC,MAAA,CAAO,YAAA,CAAa,WAAW,CAAA,EAChC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ,UAAU,CAAA;AAC3C,IAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA;AAC7C,IAAA,IACE,SAAS,MAAA,KAAW,SAAA,CAAU,UAC9B,QAAA,CAAS,IAAA,CAAK,CAAC,GAAA,KAAQ,OAAO,QAAQ,QAAQ,CAAA,IAC9C,UAAU,IAAA,CAAK,CAAC,QAAQ,OAAO,GAAA,KAAQ,QAAQ,CAAA,EAC/C;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,MAAM,oBAAA,GAAuB,MAAA,CAAO,wBAAA,CAAyB,UAAA,EAAY,QAAQ,CAAA;AACjF,MAAA,MAAM,qBAAA,GAAwB,MAAA,CAAO,wBAAA,CAAyB,WAAA,EAAa,QAAQ,CAAA;AACnF,MAAA,MAAM,aAAa,oBAAA,EAAsB,KAAA;AACzC,MAAA,MAAM,cAAc,qBAAA,EAAuB,KAAA;AAC3C,MAAA,IACE,CAAC,oBAAA,IACD,EAAE,OAAA,IAAW,yBACb,CAAC,oBAAA,CAAqB,QAAA,IACtB,oBAAA,CAAqB,UAAA,IACrB,oBAAA,CAAqB,YAAA,IACrB,CAAC,yBACD,EAAE,OAAA,IAAW,qBAAA,CAAA,IACb,CAAC,qBAAA,CAAsB,QAAA,IACvB,qBAAA,CAAsB,UAAA,IACtB,sBAAsB,YAAA,IACtB,OAAO,UAAA,KAAe,QAAA,IACtB,UAAA,KAAe,WAAA,IACf,QAAA,CAAS,MAAA,KAAW,aAAa,CAAA,EACjC;AACA,QAAA,OAAO,KAAA;AAAA,MACT;AAEA,MAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,UAAA,EAAY,KAAA,EAAA,EAAS;AAC/C,QAAA,MAAM,GAAA,GAAM,OAAO,KAAK,CAAA;AACxB,QAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,wBAAA,CAAyB,UAAA,EAAY,GAAG,CAAA;AACtE,QAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,wBAAA,CAAyB,WAAA,EAAa,GAAG,CAAA;AACxE,QAAA,IACE,CAAC,cAAA,EAAgB,UAAA,IACjB,EAAE,OAAA,IAAW,cAAA,CAAA,IACb,CAAC,cAAA,CAAe,QAAA,IAChB,CAAC,cAAA,CAAe,YAAA,IAChB,CAAC,eAAA,EAAiB,UAAA,IAClB,EAAE,OAAA,IAAW,eAAA,CAAA,IACb,CAAC,eAAA,CAAgB,QAAA,IACjB,CAAC,eAAA,CAAgB,YAAA,IACjB,CAAC,OAAA,CAAQ,cAAA,CAAe,KAAA,EAAO,eAAA,CAAgB,KAAK,CAAA,EACpD;AACA,UAAA,OAAO,KAAA;AAAA,QACT;AAAA,MACF;AACA,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,QAAA,CAAS,QAAQ,KAAA,EAAA,EAAS;AACpD,MAAA,MAAM,OAAA,GAAU,SAAS,KAAK,CAAA;AAC9B,MAAA,MAAM,QAAA,GAAW,UAAU,KAAK,CAAA;AAChC,MAAA,IAAI,OAAA,KAAY,UAAU,OAAO,KAAA;AAEjC,MAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,wBAAA,CAAyB,UAAA,EAAY,OAAO,CAAA;AAC1E,MAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,wBAAA,CAAyB,WAAA,EAAa,QAAQ,CAAA;AAC7E,MAAA,IACE,CAAC,cAAA,EAAgB,UAAA,IACjB,EAAE,OAAA,IAAW,cAAA,CAAA,IACb,CAAC,cAAA,CAAe,QAAA,IAChB,CAAC,cAAA,CAAe,YAAA,IAChB,CAAC,eAAA,EAAiB,UAAA,IAClB,EAAE,OAAA,IAAW,eAAA,CAAA,IACb,CAAC,eAAA,CAAgB,QAAA,IACjB,CAAC,eAAA,CAAgB,YAAA,IACjB,CAAC,OAAA,CAAQ,cAAA,CAAe,KAAA,EAAO,eAAA,CAAgB,KAAK,CAAA,EACpD;AACA,QAAA,OAAO,KAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,CAAA,EAAG,CAAC,CAAA;AACzB,IAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,wBAAA,EAA0B,OAAO,IAAA;AAC/C,IAAA,eAAA,CAAgB,CAAC,CAAA;AACjB,IAAA,eAAA,CAAgB,CAAC,CAAA;AACjB,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAYO,IAAM,UAAA,GAAN,MAAM,WAAA,CAA4D;AAAA,EACtD,QAAA;AAAA,EACT,SAAA;AAAA,EACA,cAAA,GAAiB,EAAA;AAAA,EACjB,cAAA,GAAiB,EAAA;AAAA,EACjB,OAAA,GAA4B,MAAA;AAAA,EAC5B,MAAA,GAAqB,MAAA;AAAA,EACrB,gBAAA,GAA0D,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAK1D,iBAAkC,EAAC;AAAA;AAAA,EAE1B,IAAA,GAAO,IAAI,QAAA,EAAS;AAAA;AAAA,EAEpB,UAAA,uBAAiB,GAAA,EAA2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMrD,kBAAA,GAAqB,CAAA;AAAA,EACrB,MAAA,GAAsC,IAAA;AAAA,EACtC,YAAA;AAAA;AAAA,EAEA,iBAAA,uBAA6C,GAAA,EAAI;AAAA,EACjD,IAAA;AAAA,EACA,iBAAA,GAAoB,IAAA;AAAA;AAAA,EAEpB,YAAA,uBAAyD,GAAA,EAAI;AAAA;AAAA,EAE7D,aAAA,uBAA6C,GAAA,EAAI;AAAA;AAAA,EAEjD,wBAAA,uBAAgE,GAAA,EAAI;AAAA;AAAA,EAEpE,aAAA,GAA0C,IAAA;AAAA;AAAA,EAE1C,qBAAA,GAA0D,IAAA;AAAA,EAE1D,SAAA,GAAuC,IAAA;AAAA,EAC9B,UAAA,uBAAiB,GAAA,EAAgB;AAAA,EACjC,WAAA;AAAA,EACA,YAAA;AAAA;AAAA;AAAA;AAAA,EAKjB,YAAY,OAAA,EAA4B;AACtC,IAAA,IAAA,CAAK,QAAA,GAAW,OAAA;AAChB,IAAA,IAAA,CAAK,SAAA,GAAY,QAAQ,eAAA,GAAkB,CAAC,GAAG,OAAA,CAAQ,eAAe,IAAI,EAAC;AAC3E,IAAA,IAAA,CAAK,YAAA,GAAe,CAAC,OAAA,CAAQ,YAAA;AAC7B,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,CAAC,GAAA,EAAK,CAAA,KAAM,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,CAAA,CAAE,GAAG,GAAG,CAAC,CAAA;AAErE,IAAA,IAAA,CAAK,WAAA,GAAc,QAAQ,OAAA,CAAQ,CAAC,UAAU,IAAA,CAAK,YAAA,CAAa,KAAK,CAAC,CAAA;AACtE,IAAA,IAAA,CAAK,YAAA,GAAe,QAAQ,cAAA,GAAiB,CAAC,WAAW,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA;AAAA,EACjF;AAAA;AAAA;AAAA,EAKA,IAAI,QAAA,GAA+B;AACjC,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,aAAA,GAAwB;AAC1B,IAAA,OAAO,IAAA,CAAK,cAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,MAAA,GAA2B;AAC7B,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,KAAA,GAAoB;AACtB,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,eAAA,GAAyD;AAC3D,IAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,KAAA,GAAqC;AACvC,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,aAAA,GAAwB;AAC1B,IAAA,OAAO,IAAA,CAAK,cAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,WAAA,GAAuB;AACzB,IAAA,OAAO,IAAA,CAAK,YAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,gBAAA,GAAwC;AAC1C,IAAA,OAAO,IAAA,CAAK,iBAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,gBAAgB,OAAA,EAA2B;AACzC,IAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,IAAA,OACE,OAAA,CAAQ,IAAA,KAAS,QAAA,IACjB,OAAO,OAAA,CAAQ,SAAA,KAAc,QAAA,IAC7B,IAAA,CAAK,iBAAA,CAAkB,GAAA,CAAI,OAAA,CAAQ,SAAS,CAAA;AAAA,EAEhD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,OAAO,IAAA,EAAoB;AAIzB,IAAA,IAAA,CAAK,eAAA,EAAgB;AACrB,IAAA,IAAA,CAAK,MAAA,GAAS,IAAA;AACd,IAAA,IAAA,CAAK,cAAA,GAAiB,EAAA;AACtB,IAAA,IAAA,CAAK,iBAAA,GAAoB,KAAA;AAGzB,IAAA,IAAA,CAAK,SAAA,EAAU;AACf,IAAA,IAAA,CAAK,MAAA,GAAS,UAAA;AACd,IAAA,MAAM,MAAA,GAAS,KAAK,QAAA,CAAS,MAAA;AAC7B,IAAA,IAAI,MAAA,EAAQ;AAGV,MAAA,MAAM,EAAA,GAAK,OAAO,UAAA,EAAW;AAC7B,MAAA,MAAM,OAAA,GAAU,EAAE,IAAA,EAAM,QAAA,EAAU,QAAQ,IAAA,EAAM,SAAA,EAAW,EAAA,EAAI,QAAA,EAAU,MAAA,EAAO;AAChF,MAAA,IAAA,CAAK,cAAA,CAAe,OAAA,EAAS,MAAA,EAAQ,EAAE,CAAA;AACvC,MAAA,IAAA,CAAK,QAAA,CAAS,KAAK,OAAO,CAAA;AAAA,IAC5B,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,eAAe,EAAE,IAAA,EAAM,UAAU,MAAA,EAAQ,IAAA,IAAQ,MAAM,CAAA;AAC5D,MAAA,IAAA,CAAK,SAAS,IAAA,CAAK,EAAE,MAAM,QAAA,EAAU,MAAA,EAAQ,MAAM,CAAA;AAAA,IACrD;AACA,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoBA,KAAA,CAAM,MAAA,EAAgB,QAAA,EAAmB,SAAA,EAA0B;AAEjE,IAAA,IAAI,KAAK,gBAAA,EAAkB,SAAA,IAAa,IAAA,CAAK,gBAAA,CAAiB,cAAc,SAAA,EAAW;AACvF,IAAA,IAAI,IAAA,CAAK,cAAA,CAAe,MAAA,GAAS,CAAA,EAAG;AAClC,MAAA,IAAA,CAAK,IAAA,CAAK,OAAO,QAAQ,CAAA;AACzB,MAAA,IAAA,CAAK,kBAAA,EAAmB;AACxB,MAAA,IAAI,aAAa,MAAA,IAAa,IAAA,CAAK,cAAA,CAAe,MAAA,GAAS,GAAG,IAAA,CAAK,kBAAA,EAAA;AAAA,IACrE;AAIA,IAAA,IAAI,IAAA,CAAK,cAAA,CAAe,MAAA,KAAW,CAAA,OAAQ,MAAA,GAAS,UAAA;AACpD,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,IAAA,EAAM,OAAA;AAAA,MACN,MAAA;AAAA,MACA,GAAI,QAAA,KAAa,MAAA,GAAY,EAAE,QAAA,KAAa,EAAC;AAAA,MAC7C,GAAI,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,KAAc;AAAC,KACjD;AACA,IAAA,IAAA,CAAK,cAAA,CAAe,SAAS,MAAM,CAAA;AACnC,IAAA,IAAA,CAAK,QAAA,CAAS,KAAK,OAAO,CAAA;AAC1B,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAA,GAAe;AAEb,IAAA,IAAA,CAAK,iBAAiB,IAAA,CAAK,cAAA;AAC3B,IAAA,IAAA,CAAK,cAAA,GAAiB,EAAA;AACtB,IAAA,IAAA,CAAK,iBAAA,GAAoB,IAAA;AACzB,IAAA,IAAA,CAAK,MAAA,GAAS,YAAA;AACd,IAAA,MAAM,MAAA,GAAS,KAAK,QAAA,CAAS,MAAA;AAC7B,IAAA,IAAA,CAAK,QAAA,CAAS,IAAA,CAAK,MAAA,GAAS,EAAE,IAAA,EAAM,QAAA,EAAU,QAAA,EAAU,MAAA,EAAO,GAAI,EAAE,IAAA,EAAM,QAAA,EAAU,CAAA;AACrF,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,WAAA,CAAY,OAAe,KAAA,EAAsC;AAC/D,IAAA,IAAA,CAAK,SAAS,IAAA,CAAK,EAAE,MAAM,cAAA,EAAgB,KAAA,EAAO,OAAO,CAAA;AACzD,IAAA,IAAI,eAAA,CAAgB,KAAK,YAAA,CAAa,GAAA,CAAI,KAAK,CAAA,EAAG,KAAA,EAAO,IAAI,CAAA,EAAG;AAEhE,IAAA,IAAA,CAAK,YAAA,GAAe,IAAI,GAAA,CAAI,IAAA,CAAK,YAAY,CAAA;AAC7C,IAAA,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,KAAA,EAAO,KAAK,CAAA;AAClC,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,KAAK,GAAA,EAAyB;AAC5B,IAAA,IAAA,CAAK,QAAA,CAAS,KAAK,GAAG,CAAA;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,oBAAA,GAAsC;AAC1C,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,YAAA,IAAgB,KAAK,YAAA,EAAc;AAEtD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,CAAS,QAAA,IAAY,iBAAA;AAC3C,IAAA,MAAM,MAAA,GAAS,KAAK,SAAA,CAAU,MAAA,GAAS,IAAI,IAAA,CAAK,SAAA,CAAU,CAAC,CAAA,CAAE,GAAA,GAAM,MAAA;AACnE,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,QAAA,CAAS,aAAa,EAAE,MAAA,EAAQ,KAAA,EAAO,QAAA,EAAU,CAAA;AAE1E,IAAA,IAAI,KAAA,CAAM,MAAA,GAAS,QAAA,EAAU,IAAA,CAAK,YAAA,GAAe,IAAA;AAEjD,IAAA,MAAM,WAAA,GAAc,IAAI,GAAA,CAAI,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,EAAE,CAAC,CAAA;AAC3D,IAAA,MAAM,MAAA,GAAS,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,WAAA,CAAY,GAAA,CAAI,CAAA,CAAE,EAAE,CAAC,CAAA;AACzD,IAAA,IAAA,CAAK,YAAY,CAAC,GAAG,MAAA,EAAQ,GAAG,KAAK,SAAS,CAAA;AAE9C,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,UAAU,MAAA,EAAgC;AACxC,IAAA,IAAI,IAAA,CAAK,YAAY,MAAA,EAAQ;AAC7B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AACf,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,SAAA,GAAY,CAAC,QAAA,KAAuC;AAClD,IAAA,IAAA,CAAK,UAAA,CAAW,IAAI,QAAQ,CAAA;AAC5B,IAAA,OAAO,MAAM,IAAA,CAAK,UAAA,CAAW,MAAA,CAAO,QAAQ,CAAA;AAAA,EAC9C,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,cAAc,MAA0B;AACtC,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACnB,MAAA,IAAA,CAAK,SAAA,GAAY;AAAA,QACf,UAAU,IAAA,CAAK,SAAA;AAAA,QACf,eAAe,IAAA,CAAK,cAAA;AAAA,QACpB,eAAe,IAAA,CAAK,cAAA;AAAA,QACpB,QAAQ,IAAA,CAAK,OAAA;AAAA,QACb,OAAO,IAAA,CAAK,MAAA;AAAA,QACZ,iBAAiB,IAAA,CAAK,gBAAA;AAAA,QACtB,OAAO,IAAA,CAAK,MAAA;AAAA,QACZ,aAAa,IAAA,CAAK,YAAA;AAAA,QAClB,kBAAkB,IAAA,CAAK,iBAAA;AAAA,QACvB,aAAa,IAAA,CAAK,YAAA;AAAA,QAClB,cAAc,IAAA,CAAK,aAAA;AAAA,QACnB,yBAAyB,IAAA,CAAK,wBAAA;AAAA,QAC9B,cAAc,IAAA,CAAK,aAAA;AAAA,QACnB,sBAAsB,IAAA,CAAK;AAAA,OAC7B;AAAA,IACF;AACA,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,OAAA,GAAgB;AACd,IAAA,IAAA,CAAK,WAAA,EAAY;AACjB,IAAA,IAAA,CAAK,YAAA,IAAe;AACpB,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAqBA,OAAO,UAAA,CACL,MAAA,EACA,IAAA,EACY;AACZ,IAAA,OAAO,IAAI,WAAA,CAAW;AAAA,MACpB,SAAA,EAAW,IAAA,EAAM,SAAA,IAAa,MAAA,CAAO,UAAA,EAAW;AAAA,MAChD,IAAA,EAAM,CAAC,GAAA,KAAQ,MAAA,CAAO,KAAK,GAAG,CAAA;AAAA,MAC9B,OAAA,EAAS,CAAC,OAAA,KAAY;AACpB,QAAA,MAAA,CAAO,QAAQ,OAAO,CAAA;AACtB,QAAA,OAAO,MAAM,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA;AAAA,MACtC,CAAA;AAAA,MACA,iBAAiB,IAAA,EAAM;AAAA,KACxB,CAAA;AAAA,EACH;AAAA;AAAA;AAAA,EAKQ,kBAAA,GAA2B;AACjC,IAAA,IAAA,CAAK,cAAA,GAAiB,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,CAAC,CAAA,KAAM,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,CAAC,CAAA,IAAK,EAAE,CAAA;AAChF,IAAA,IAAA,CAAK,gBAAA,GAAmB,IAAA,CAAK,cAAA,CAAe,EAAA,CAAG,EAAE,CAAA,IAAK,IAAA;AACtD,IAAA,IAAI,IAAA,CAAK,cAAA,CAAe,MAAA,KAAW,CAAA,OAAQ,SAAA,EAAU;AAAA,EACvD;AAAA;AAAA,EAGQ,SAAA,GAAkB;AACxB,IAAA,IAAA,CAAK,KAAK,KAAA,EAAM;AAChB,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,IAAA,IAAA,CAAK,iBAAiB,EAAC;AACvB,IAAA,IAAA,CAAK,gBAAA,GAAmB,IAAA;AACxB,IAAA,IAAA,CAAK,kBAAA,GAAqB,CAAA;AAAA,EAC5B;AAAA,EAEQ,aAAa,KAAA,EAAyB;AAC5C,IAAA,QAAQ,MAAM,IAAA;AAAM,MAClB,KAAK,MAAA;AACH,QAAA,IAAA,CAAK,cAAA,GAAiB,EAAA;AACtB,QAAA,IAAA,CAAK,kBAAkB,KAAA,CAAM,OAAA;AAC7B,QAAA,IAAA,CAAK,iBAAA,GAAoB,KAAA;AACzB,QAAA;AAAA,MAEF,KAAK,cAAA;AAIH,QAAA,IAAI,CAAC,MAAM,OAAA,IAAW,CAAC,KAAK,cAAA,CAAe,QAAA,CAAS,KAAA,CAAM,OAAO,CAAA,EAAG;AACpE,QAAA,IAAA,CAAK,cAAA,GAAiB,KAAK,cAAA,CAAe,KAAA;AAAA,UACxC,CAAA;AAAA,UACA,IAAA,CAAK,cAAA,CAAe,MAAA,GAAS,KAAA,CAAM,OAAA,CAAQ;AAAA,SAC7C;AACA,QAAA;AAAA,MAEF,KAAK,UAAA;AACH,QAAA,IAAA,CAAK,cAAA,GAAiB,EAAA;AACtB,QAAA,IAAA,CAAK,eAAA,EAAgB;AACrB,QAAA,IAAA,CAAK,eAAe,KAAK,CAAA;AAIzB,QAAA,IAAI,CAAC,KAAA,CAAM,SAAA,EAAW,IAAA,CAAK,MAAA,GAAS,MAAA;AACpC,QAAA,IAAA,CAAK,SAAA,EAAU;AACf,QAAA;AAAA,MAEF,KAAK,QAAA;AAIH,QAAA,IAAI,IAAA,CAAK,MAAA,KAAW,YAAA,IAAgB,KAAA,CAAM,UAAU,MAAA,EAAQ;AAK5D,QAAA,IAAI,IAAA,CAAK,gBAAA,KAAqB,IAAA,IAAQ,KAAA,CAAM,UAAU,MAAA,EAAQ;AAI9D,QAAA,IAAI,IAAA,CAAK,MAAA,KAAW,KAAA,CAAM,KAAA,EAAO;AACjC,QAAA,IAAA,CAAK,SAAS,KAAA,CAAM,KAAA;AACpB,QAAA;AAAA,MAEF,KAAK,cAAA;AAOH,QAAA,IAAI,CAAC,IAAA,CAAK,eAAA,EAAgB,EAAG;AAC7B,QAAA;AAAA,MAEF,KAAK,gBAAA,EAAkB;AAOrB,QAAA,MAAM,UAAU,IAAA,CAAK,gBAAA;AACrB,QAAA,IAAI,YAAY,IAAA,EAAM;AACtB,QAAA,IAAI,QAAQ,SAAA,KAAc,MAAA,IAAa,OAAA,CAAQ,SAAA,KAAc,MAAM,SAAA,EAAW;AAC9E,QAAA,IAAI,KAAA,CAAM,aAAa,MAAA,EAAW;AAEhC,UAAA,IAAI,CAAC,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,QAAQ,CAAA,EAAG;AAAA,QACzC,CAAA,MAAA,IAAW,IAAA,CAAK,kBAAA,GAAqB,CAAA,EAAG;AACtC,UAAA,IAAA,CAAK,kBAAA,EAAA;AACL,UAAA;AAAA,QACF;AACA,QAAA,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,QAAQ,CAAA;AAC/B,QAAA,IAAA,CAAK,kBAAA,EAAmB;AACxB,QAAA,IAAA,CAAK,eAAA,EAAgB;AACrB,QAAA,IAAA,CAAK,eAAe,KAAK,CAAA;AACzB,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,WAAA;AAAA,MACL,KAAK,aAAA;AAAA,MACL,KAAK,cAAA;AAAA,MACL,KAAK,UAAA;AAAA,MACL,KAAK,YAAA;AAAA,MACL,KAAK,SAAA;AAIH,QAAA,IAAA,CAAK,eAAA,EAAgB;AACrB,QAAA,IAAA,CAAK,eAAe,KAAK,CAAA;AACzB,QAAA;AAAA,MAEF,KAAK,UAAA;AAIH,QAAA,IAAA,CAAK,eAAA,EAAgB;AACrB,QAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAGd,QAAA,IAAI,KAAK,IAAA,CAAK,GAAA,CAAI,MAAM,QAAA,EAAU,KAAA,CAAM,SAAS,CAAA,EAAG;AAClD,UAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,UAAA,IAAA,CAAK,kBAAA,GAAqB,CAAA;AAAA,QAC5B;AACA,QAAA,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,KAAA,CAAM,QAAA,EAAU,KAAK,CAAA;AACzC,QAAA,IAAA,CAAK,kBAAA,EAAmB;AACxB,QAAA,IAAA,CAAK,eAAe,KAAK,CAAA;AACzB,QAAA;AAAA,MAEF,KAAK,OAAA;AACH,QAAA,IAAA,CAAK,SAAS,EAAE,OAAA,EAAS,MAAM,OAAA,EAAS,KAAA,EAAO,MAAM,KAAA,EAAM;AAC3D,QAAA,IAAA,CAAK,cAAA,GAAiB,EAAA;AACtB,QAAA,IAAA,CAAK,iBAAA,GAAoB,IAAA;AACzB,QAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAGd,QAAA,IAAI,KAAA,CAAM,KAAA,EAAO,IAAA,CAAK,SAAA,EAAU;AAChC,QAAA,IAAA,CAAK,eAAe,KAAK,CAAA;AACzB,QAAA;AAAA,MAEF,KAAK,eAAA,EAAiB;AAQpB,QAAA,IAAI,eAAA,CAAgB,KAAK,YAAA,CAAa,GAAA,CAAI,MAAM,KAAK,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,EAAG;AACtE,QAAA,IAAA,CAAK,YAAA,GAAe,IAAI,GAAA,CAAI,IAAA,CAAK,YAAY,CAAA;AAC7C,QAAA,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,KAAA,CAAM,KAAA,EAAO,MAAM,KAAK,CAAA;AAC9C,QAAA;AAAA,MACF;AAAA;AAAA,MAIA,KAAK,qBAAA,EAAuB;AAK1B,QAAA,IACE,KAAA,CAAM,YAAA,CAAa,KAAA,CAAM,CAAC,QAAQ,eAAA,CAAgB,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA,EAAG,GAAG,CAAC,CAAA,EACxF;AACA,UAAA;AAAA,QACF;AACA,QAAA,IAAA,CAAK,aAAA,GAAgB,IAAI,GAAA,CAAI,IAAA,CAAK,aAAa,CAAA;AAC/C,QAAA,KAAA,MAAW,GAAA,IAAO,MAAM,YAAA,EAAc;AACpC,UAAA,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,GAAA,CAAI,IAAA,EAAM,GAAG,CAAA;AAAA,QACtC;AACA,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,uBAAA,EAAyB;AAG5B,QAAA,MAAM,OAAA,GAAU,KAAA,CAAM,KAAA,CAAM,MAAA,CAAO,CAAC,SAAS,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,IAAI,CAAC,CAAA;AACzE,QAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AAC1B,QAAA,IAAA,CAAK,aAAA,GAAgB,IAAI,GAAA,CAAI,IAAA,CAAK,aAAa,CAAA;AAC/C,QAAA,KAAA,MAAW,QAAQ,OAAA,EAAS;AAC1B,UAAA,IAAA,CAAK,aAAA,CAAc,OAAO,IAAI,CAAA;AAAA,QAChC;AACA,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,gBAAA;AAGH,QAAA,IAAA,CAAK,wBAAA,GAA2B,IAAI,GAAA,CAAI,IAAA,CAAK,wBAAwB,CAAA;AACrE,QAAA,IAAA,CAAK,wBAAA,CAAyB,GAAA,CAAI,KAAA,CAAM,MAAA,EAAQ,KAAK,CAAA;AACrD,QAAA;AAAA,MAEF,KAAK,eAAA,EAAiB;AAcpB,QAAA,MAAM,IAAA,GAAO,KAAK,aAAA,EAAe,OAAA;AACjC,QAAA,MAAM,cACJ,IAAA,KAAS,MAAA,IACT,IAAA,CAAK,KAAA,KAAU,MAAM,OAAA,CAAQ,KAAA,IAC7B,IAAA,CAAK,KAAA,KAAU,MAAM,OAAA,CAAQ,KAAA,IAC7B,IAAA,CAAK,KAAA,KAAU,MAAM,OAAA,CAAQ,KAAA;AAC/B,QAAA,IAAI,WAAA,IAAe,IAAA,CAAK,qBAAA,KAA0B,IAAA,EAAM;AAGxD,QAAA,IAAI,CAAC,WAAA,EAAa,IAAA,CAAK,aAAA,GAAgB,KAAA;AACvC,QAAA,IAAA,CAAK,qBAAA,GAAwB,IAAA;AAC7B,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,wBAAA,EAA0B;AAG7B,QAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,UAAA,CAAW,MAAA,CAAO,CAAC,EAAA,KAAO,CAAC,IAAA,CAAK,iBAAA,CAAkB,GAAA,CAAI,EAAE,CAAC,CAAA;AAC7E,QAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,QAAA,IAAA,CAAK,iBAAA,uBAAwB,GAAA,CAAI,CAAC,GAAG,IAAA,CAAK,iBAAA,EAAmB,GAAG,KAAK,CAAC,CAAA;AACtE,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,uBAAA;AAEH,QAAA,IAAA,CAAK,qBAAA,GAAwB,KAAA;AAC7B,QAAA;AAAA,MAEF,KAAK,oBAAA;AAIH,QAAA;AAAA,MAEF,KAAK,mBAAA;AAAA,MACL,KAAK,qBAAA;AAEH,QAAA;AAAA,MAEF;AAaE,QAAA;AAAA;AAGJ,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,eAAA,GAA2B;AACjC,IAAA,IAAI,IAAA,CAAK,iBAAA,IAAqB,CAAC,IAAA,CAAK,gBAAgB,OAAO,KAAA;AAC3D,IAAA,IAAA,CAAK,eAAe,EAAE,IAAA,EAAM,QAAQ,OAAA,EAAS,IAAA,CAAK,gBAAgB,CAAA;AAClE,IAAA,IAAA,CAAK,cAAA,GAAiB,EAAA;AACtB,IAAA,IAAA,CAAK,iBAAA,GAAoB,IAAA;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEQ,eACN,OAAA,EACA,QAAA,EACA,EAAA,GAAa,MAAA,CAAO,YAAW,EACzB;AACN,IAAA,IAAA,CAAK,IAAA,EAAA;AACL,IAAA,IAAA,CAAK,SAAA,GAAY;AAAA,MACf,GAAG,IAAA,CAAK,SAAA;AAAA,MACR;AAAA,QACE,EAAA;AAAA,QACA,KAAK,IAAA,CAAK,IAAA;AAAA,QACV,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,QAClC,SAAA,EAAW,KAAK,QAAA,CAAS,SAAA;AAAA,QACzB,GAAI,QAAA,GAAW,EAAE,QAAA,KAAa,EAAC;AAAA,QAC/B;AAAA;AACF,KACF;AAAA,EACF;AAAA,EAEQ,OAAA,GAAgB;AACtB,IAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AACjB,IAAA,KAAA,MAAW,QAAA,IAAY,KAAK,UAAA,EAAY;AACtC,MAAA,QAAA,EAAS;AAAA,IACX;AAAA,EACF;AACF","file":"chunk-Q6E6FM7P.js","sourcesContent":["import type {\n  AgentEvent,\n  ConnectorContent,\n  ConnectorEntry,\n  ConnectorInfo,\n  ConnectorOperation,\n  ConnectorResponseEvent,\n  ConnectorResponseFailureCode,\n  ConnectorStat,\n  ConnectorStatusEvent,\n  ListOptions,\n  MountInfo,\n  ReadOptions,\n  SearchOptions,\n  StatOptions,\n} from \"@skaile/workspaces/types\";\nimport type {\n  ConnectorStatus,\n  ResourceClientSnapshot,\n  StoreTransport,\n  SubscribableStore,\n} from \"./types.js\";\n\nconst DEFAULT_TIMEOUT_MS = 30_000;\n\n/**\n * Rejection for a `resource_response` that carried an `error`. `code` is the\n * runner's machine-readable failure class, absent from runners older than\n * protocol 4.2.0.\n */\nexport class ResourceRequestError extends Error {\n  readonly code: ConnectorResponseFailureCode | undefined;\n\n  constructor(message: string, code?: ConnectorResponseFailureCode) {\n    super(message);\n    this.name = \"ResourceRequestError\";\n    this.code = code;\n  }\n}\n\n/**\n * Lazy resource browser for agent connectors.\n *\n * Provides a reactive list of connected mounts and connectors, and\n * request/response methods for browsing connector contents. Shares\n * the same transport (`send` + `onEvent`) as `AgentStore`.\n * @docLink packages/store/concepts#resource-client\n */\nexport class ResourceClient implements SubscribableStore<ResourceClientSnapshot> {\n  private readonly _send: StoreTransport[\"send\"];\n  private _mounts: readonly MountInfo[] = [];\n  private _connectors: readonly ConnectorInfo[] = [];\n\n  /** Live connection status per connector, keyed by connector ID. Updated by connector_status events. */\n  connectorStatus: Map<string, ConnectorStatus> = new Map();\n\n  private _snapshot: ResourceClientSnapshot | null = null;\n  private readonly _listeners = new Set<() => void>();\n  private readonly _pendingRequests = new Map<\n    string,\n    {\n      resolve: (event: ConnectorResponseEvent) => void;\n      reject: (error: Error) => void;\n      timer: ReturnType<typeof setTimeout>;\n    }\n  >();\n  private readonly _unsubEvent: () => void;\n\n  /**\n   * @param transport - Shared transport (same instance as the AgentStore for this session).\n   */\n  constructor(transport: StoreTransport) {\n    this._send = transport.send;\n    this._unsubEvent = transport.onEvent((event) => this._handleEvent(event));\n  }\n\n  // -- Reactive state --------------------------------------------------------\n\n  /** Mounts available in this session, populated from `resources_available` events. */\n  get mounts(): readonly MountInfo[] {\n    return this._mounts;\n  }\n\n  /** Tool-based connectors available in this session, populated from `resources_available` events. */\n  get connectors(): readonly ConnectorInfo[] {\n    return this._connectors;\n  }\n\n  // -- Resource operations ---------------------------------------------------\n\n  /**\n   * List directory entries at the given path within a connector.\n   *\n   * @param connectorId - ID of the connector to query.\n   * @param path - Directory path to list. Omit for the connector root.\n   * @param opts - Optional pagination and filter options.\n   * @returns Array of entries (files, directories, etc.) at the given path.\n   * @throws If the request times out or the connector returns an error.\n   */\n  async list(connectorId: string, path?: string, opts?: ListOptions): Promise<ConnectorEntry[]> {\n    const response = await this._request(connectorId, \"list\", path, opts);\n    return (response.data as ConnectorEntry[]) ?? [];\n  }\n\n  /**\n   * Read the content of a single resource.\n   *\n   * @param connectorId - ID of the connector to query.\n   * @param path - Full path to the resource within the connector.\n   * @param opts - `{ encoding: \"binary\" }` asks a filesystem mount for base64\n   *   of the bytes instead of text guessed from a NUL sniff (protocol 4.6.0;\n   *   an older runner ignores it).\n   * @returns The resource content object.\n   * @throws If the request times out or the connector returns an error.\n   */\n  async read(connectorId: string, path: string, opts?: ReadOptions): Promise<ConnectorContent> {\n    const response = await this._request(connectorId, \"read\", path, opts);\n    return response.data as ConnectorContent;\n  }\n\n  /**\n   * Write content to a resource, creating it if it does not exist.\n   *\n   * @param connectorId - ID of the connector to write to.\n   * @param path - Full path to the resource within the connector.\n   * @param content - Content to write.\n   * @throws If the request times out or the connector returns an error.\n   */\n  async write(connectorId: string, path: string, content: ConnectorContent): Promise<void> {\n    await this._request(connectorId, \"write\", path, undefined, content);\n  }\n\n  /**\n   * Delete a resource from a connector.\n   *\n   * @param connectorId - ID of the connector to delete from.\n   * @param path - Full path to the resource within the connector.\n   * @throws If the request times out or the connector returns an error.\n   */\n  async delete(connectorId: string, path: string): Promise<void> {\n    await this._request(connectorId, \"delete\", path);\n  }\n\n  /**\n   * Full-text search within a connector.\n   *\n   * @param connectorId - ID of the connector to search.\n   * @param query - Search query string.\n   * @param opts - Optional search options (e.g. path prefix, result limit).\n   * @returns Matching entries, ordered by relevance as determined by the connector.\n   * @throws If the request times out or the connector returns an error.\n   */\n  async search(\n    connectorId: string,\n    query: string,\n    opts?: SearchOptions,\n  ): Promise<ConnectorEntry[]> {\n    const response = await this._request(connectorId, \"search\", query, opts);\n    return (response.data as ConnectorEntry[]) ?? [];\n  }\n\n  /**\n   * Create an empty directory on a filesystem mount, parents included.\n   *\n   * @param connectorId - ID of the mount.\n   * @param path - Directory path within the mount.\n   * @throws {ResourceRequestError} with `code: \"already_exists\"` if something\n   *   is already at `path`; also if the target is not a filesystem mount or the\n   *   runner predates protocol 4.2.0 (then `code` is absent).\n   */\n  async mkdir(connectorId: string, path: string): Promise<void> {\n    await this._request(connectorId, \"mkdir\", path);\n  }\n\n  /**\n   * Describe one path on a filesystem mount; with `opts.recursive`, a\n   * directory also carries capped recursive totals.\n   *\n   * @param connectorId - ID of the mount.\n   * @param path - Path within the mount; omit for the mount root.\n   * @param opts - Optional stat options.\n   * @throws If the path does not exist, the target is not a filesystem mount,\n   *   or the runner predates protocol 4.2.0.\n   */\n  async stat(connectorId: string, path?: string, opts?: StatOptions): Promise<ConnectorStat> {\n    const response = await this._request(connectorId, \"stat\", path, opts);\n    return response.data as ConnectorStat;\n  }\n\n  // -- useSyncExternalStore interface ----------------------------------------\n\n  /**\n   * Register a change listener. Called after every resource availability change.\n   *\n   * Conforms to the `subscribe` parameter of React's `useSyncExternalStore`.\n   *\n   * @param listener - Callback invoked whenever mounts or connectors change.\n   * @returns Unsubscribe function — call to stop receiving notifications.\n   */\n  subscribe = (listener: () => void): (() => void) => {\n    this._listeners.add(listener);\n    return () => this._listeners.delete(listener);\n  };\n\n  /**\n   * Return the current immutable resource snapshot.\n   *\n   * A new object is produced lazily after each `resources_available` event.\n   * Conforms to the `getSnapshot` parameter of React's `useSyncExternalStore`.\n   */\n  getSnapshot = (): ResourceClientSnapshot => {\n    if (!this._snapshot) {\n      this._snapshot = { mounts: this._mounts, connectors: this._connectors };\n    }\n    return this._snapshot;\n  };\n\n  // -- Connector config mutations --------------------------------------------\n\n  /**\n   * Send a `connector_config` add command to wire a new connector at runtime,\n   * without restarting the session. The runner receives this command and\n   * calls `ConnectorManager.connect()`, which fires a `connector_status` event\n   * back to the store once the connector is live.\n   *\n   * @param declaration - Connector declaration (id, driver, access level, options).\n   */\n  addConnector(declaration: {\n    id: string;\n    driver: string;\n    access?: \"read-only\" | \"read-write\";\n    options?: Record<string, unknown>;\n  }): void {\n    this._send({ type: \"connector_config\", action: \"add\", declaration });\n  }\n\n  /**\n   * Send a `connector_config` remove command to disconnect a connector by ID\n   * without restarting the session.\n   *\n   * @param connectorId - ID of the connector to disconnect and remove.\n   */\n  removeConnector(connectorId: string): void {\n    this._send({ type: \"connector_config\", action: \"remove\", connectorId });\n  }\n\n  /**\n   * Send a `connector_config` refresh command to reconnect all configured\n   * connectors (e.g. after a credentials change).\n   */\n  refreshConnectors(): void {\n    this._send({ type: \"connector_config\", action: \"refresh\" });\n  }\n\n  // -- Cleanup ---------------------------------------------------------------\n\n  /**\n   * Unsubscribe from transport events, reject all pending requests, and\n   * clear all change listeners.\n   *\n   * All in-flight resource requests will reject\n   * with `\"ResourceClient disposed\"`.\n   */\n  dispose(): void {\n    this._unsubEvent();\n    for (const [, pending] of this._pendingRequests) {\n      clearTimeout(pending.timer);\n      pending.reject(new Error(\"ResourceClient disposed\"));\n    }\n    this._pendingRequests.clear();\n    this._listeners.clear();\n  }\n\n  // -- Internal --------------------------------------------------------------\n\n  private _handleEvent(event: AgentEvent): void {\n    if (event.type === \"connector_status\") {\n      const e = event as ConnectorStatusEvent;\n      const existing = this.connectorStatus.get(e.connectorId);\n      const next = new Map(this.connectorStatus);\n      next.set(e.connectorId, {\n        id: e.connectorId,\n        driver:\n          existing?.driver ?? this._connectors.find((c) => c.id === e.connectorId)?.driver ?? \"\",\n        state: e.status,\n        ...(e.error !== undefined ? { error: e.error } : {}),\n        ...(e.errorKind !== undefined ? { errorKind: e.errorKind } : {}),\n        ...(e.latencyMs !== undefined ? { latencyMs: e.latencyMs } : {}),\n        lastUpdated: new Date(),\n      });\n      this.connectorStatus = next;\n      for (const listener of this._listeners) {\n        listener();\n      }\n      return;\n    }\n\n    if (event.type === \"resources_available\") {\n      this._mounts = event.mounts;\n      this._connectors = event.connectors;\n      this._snapshot = null;\n      for (const listener of this._listeners) {\n        listener();\n      }\n      return;\n    }\n\n    if (event.type === \"resource_response\") {\n      const pending = this._pendingRequests.get(event.requestId);\n      if (!pending) return;\n\n      clearTimeout(pending.timer);\n      this._pendingRequests.delete(event.requestId);\n\n      if (event.error) {\n        pending.reject(new ResourceRequestError(event.error, event.code));\n      } else {\n        pending.resolve(event);\n      }\n    }\n  }\n\n  private _request(\n    connectorId: string,\n    operation: ConnectorOperation,\n    path?: string,\n    options?: ListOptions | SearchOptions | StatOptions | ReadOptions,\n    content?: ConnectorContent,\n  ): Promise<ConnectorResponseEvent> {\n    const requestId = crypto.randomUUID();\n\n    return new Promise<ConnectorResponseEvent>((resolve, reject) => {\n      const timer = setTimeout(() => {\n        this._pendingRequests.delete(requestId);\n        reject(\n          new Error(\n            `Resource request timed out after ${DEFAULT_TIMEOUT_MS}ms: ${operation} ${connectorId}${path ? ` ${path}` : \"\"}`,\n          ),\n        );\n      }, DEFAULT_TIMEOUT_MS);\n\n      this._pendingRequests.set(requestId, { resolve, reject, timer });\n\n      this._send({\n        type: \"resource_request\",\n        requestId,\n        connectorId,\n        operation,\n        ...(path !== undefined ? { path } : {}),\n        ...(options ? { options } : {}),\n        ...(content ? { content } : {}),\n      });\n    });\n  }\n}\n","import type {\n  AgentCommand,\n  AgentEvent,\n  AgentPhase,\n  Capability,\n  IncompatibleProtocolEvent,\n  Message,\n  ProtocolInfoEvent,\n  QuestionEvent,\n  RenderInvokedEvent,\n} from \"@skaile/workspaces/types\";\nimport { AskSlots } from \"../../types/src/ask-slots.js\";\nimport type {\n  AgentClientLike,\n  AgentStoreOptions,\n  AgentStoreSnapshot,\n  ConnectionStatus,\n  SubscribableStore,\n} from \"./types.js\";\n\nconst DEFAULT_PAGE_SIZE = 50;\n\n/** Conservative equality for plain JSON data; unsupported or unverifiable values fail open. */\nfunction isSameJsonValue<T>(a: T | undefined, b: T, conservativeCommandInput = false): boolean {\n  const aObjects = new WeakSet<object>();\n  const bObjects = new WeakSet<object>();\n\n  const compare = (left: unknown, right: unknown): boolean => {\n    if (left === null || right === null) return left === right;\n    if (typeof left !== typeof right) return false;\n\n    switch (typeof left) {\n      case \"string\":\n      case \"boolean\":\n        return left === right;\n      case \"number\":\n        return (\n          Number.isFinite(left) &&\n          Number.isFinite(right) &&\n          !Object.is(left, -0) &&\n          !Object.is(right, -0) &&\n          left === right\n        );\n      case \"object\":\n        break;\n      default:\n        return false;\n    }\n\n    const leftObject = left as object;\n    const rightObject = right as object;\n    if (aObjects.has(leftObject) || bObjects.has(rightObject)) return false;\n    if (conservativeCommandInput) {\n      if (leftObject === rightObject || bObjects.has(leftObject) || aObjects.has(rightObject)) {\n        return false;\n      }\n    }\n    aObjects.add(leftObject);\n    bObjects.add(rightObject);\n\n    const leftIsArray = Array.isArray(leftObject);\n    if (leftIsArray !== Array.isArray(rightObject)) return false;\n\n    const leftPrototype = Object.getPrototypeOf(leftObject);\n    const rightPrototype = Object.getPrototypeOf(rightObject);\n    const leftHasPlainPrototype = leftIsArray\n      ? leftPrototype === Array.prototype\n      : leftPrototype === Object.prototype || leftPrototype === null;\n    const rightHasPlainPrototype = leftIsArray\n      ? rightPrototype === Array.prototype\n      : rightPrototype === Object.prototype || rightPrototype === null;\n    if (\n      !leftHasPlainPrototype ||\n      !rightHasPlainPrototype ||\n      leftPrototype !== rightPrototype ||\n      !Object.isExtensible(leftObject) ||\n      !Object.isExtensible(rightObject)\n    ) {\n      return false;\n    }\n\n    const leftKeys = Reflect.ownKeys(leftObject);\n    const rightKeys = Reflect.ownKeys(rightObject);\n    if (\n      leftKeys.length !== rightKeys.length ||\n      leftKeys.some((key) => typeof key !== \"string\") ||\n      rightKeys.some((key) => typeof key !== \"string\")\n    ) {\n      return false;\n    }\n\n    if (leftIsArray) {\n      const leftLengthDescriptor = Object.getOwnPropertyDescriptor(leftObject, \"length\");\n      const rightLengthDescriptor = Object.getOwnPropertyDescriptor(rightObject, \"length\");\n      const leftLength = leftLengthDescriptor?.value;\n      const rightLength = rightLengthDescriptor?.value;\n      if (\n        !leftLengthDescriptor ||\n        !(\"value\" in leftLengthDescriptor) ||\n        !leftLengthDescriptor.writable ||\n        leftLengthDescriptor.enumerable ||\n        leftLengthDescriptor.configurable ||\n        !rightLengthDescriptor ||\n        !(\"value\" in rightLengthDescriptor) ||\n        !rightLengthDescriptor.writable ||\n        rightLengthDescriptor.enumerable ||\n        rightLengthDescriptor.configurable ||\n        typeof leftLength !== \"number\" ||\n        leftLength !== rightLength ||\n        leftKeys.length !== leftLength + 1\n      ) {\n        return false;\n      }\n\n      for (let index = 0; index < leftLength; index++) {\n        const key = String(index);\n        const leftDescriptor = Object.getOwnPropertyDescriptor(leftObject, key);\n        const rightDescriptor = Object.getOwnPropertyDescriptor(rightObject, key);\n        if (\n          !leftDescriptor?.enumerable ||\n          !(\"value\" in leftDescriptor) ||\n          !leftDescriptor.writable ||\n          !leftDescriptor.configurable ||\n          !rightDescriptor?.enumerable ||\n          !(\"value\" in rightDescriptor) ||\n          !rightDescriptor.writable ||\n          !rightDescriptor.configurable ||\n          !compare(leftDescriptor.value, rightDescriptor.value)\n        ) {\n          return false;\n        }\n      }\n      return true;\n    }\n\n    for (let index = 0; index < leftKeys.length; index++) {\n      const leftKey = leftKeys[index] as string;\n      const rightKey = rightKeys[index] as string;\n      if (leftKey !== rightKey) return false;\n\n      const leftDescriptor = Object.getOwnPropertyDescriptor(leftObject, leftKey);\n      const rightDescriptor = Object.getOwnPropertyDescriptor(rightObject, rightKey);\n      if (\n        !leftDescriptor?.enumerable ||\n        !(\"value\" in leftDescriptor) ||\n        !leftDescriptor.writable ||\n        !leftDescriptor.configurable ||\n        !rightDescriptor?.enumerable ||\n        !(\"value\" in rightDescriptor) ||\n        !rightDescriptor.writable ||\n        !rightDescriptor.configurable ||\n        !compare(leftDescriptor.value, rightDescriptor.value)\n      ) {\n        return false;\n      }\n    }\n    return true;\n  };\n\n  try {\n    const same = compare(a, b);\n    if (!same || !conservativeCommandInput) return same;\n    structuredClone(a);\n    structuredClone(b);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Headless reactive store for agent conversation state.\n *\n * Framework-agnostic — works with React (`useSyncExternalStore`),\n * Vue (`shallowRef` + `subscribe`), or any other UI framework.\n *\n * Accepts a minimal transport interface (`send` + `onEvent`) so it works\n * with WebSocket, tRPC, SSE, or any other delivery mechanism.\n * @docLink packages/store/concepts#agent-store\n */\nexport class AgentStore implements SubscribableStore<AgentStoreSnapshot> {\n  private readonly _options: AgentStoreOptions;\n  private _messages: Message[];\n  private _streamingText = \"\";\n  private _cancelledText = \"\";\n  private _status: ConnectionStatus = \"idle\";\n  private _phase: AgentPhase = \"idle\";\n  private _pendingQuestion: AgentStoreSnapshot[\"pendingQuestion\"] = null;\n  /**\n   * Unanswered sub-questions of the parked ask, oldest first. Drivers resume\n   * only once every one has an answer; `_pendingQuestion` is its last entry.\n   */\n  private _openQuestions: QuestionEvent[] = [];\n  /** Slot rule of the parked ask, shared with the drivers and the SDK session. */\n  private readonly _ask = new AskSlots();\n  /** Latest `question` event per sub-question text of the parked ask. */\n  private readonly _askEvents = new Map<string, QuestionEvent>();\n  /**\n   * Own unnamed replies whose runner echo has not arrived yet. Best effort: a\n   * reply the driver rejects is never echoed, and its count lingers until the\n   * ask ends.\n   */\n  private _unnamedEchoesOwed = 0;\n  private _error: AgentStoreSnapshot[\"error\"] = null;\n  private _isAllLoaded: boolean;\n  /** Prompts a cancel dropped before they ran; new Set on every change. */\n  private _notSentPromptIds: ReadonlySet<string> = new Set();\n  private _seq: number;\n  private _streamingFlushed = true;\n  /** Shared state per store namespace — new Map instance on every mutation. */\n  private _sharedState: Map<string, Record<string, unknown>> = new Map();\n  /** Protocol v2 capability registry — new Map instance on every mutation. */\n  private _capabilities: Map<string, Capability> = new Map();\n  /** Protocol v2 active render invocations — new Map instance on every mutation. */\n  private _activeRenderInvocations: Map<string, RenderInvokedEvent> = new Map();\n  /** Protocol v2 — most recent `protocol_info` event from the runner. */\n  private _protocolInfo: ProtocolInfoEvent | null = null;\n  /** Protocol v2 — latest incompatible-protocol notice. */\n  private _incompatibleProtocol: IncompatibleProtocolEvent | null = null;\n\n  private _snapshot: AgentStoreSnapshot | null = null;\n  private readonly _listeners = new Set<() => void>();\n  private readonly _unsubEvent: () => void;\n  private readonly _unsubStatus: (() => void) | undefined;\n\n  /**\n   * @param options - Store configuration including transport and optional pagination support.\n   */\n  constructor(options: AgentStoreOptions) {\n    this._options = options;\n    this._messages = options.initialMessages ? [...options.initialMessages] : [];\n    this._isAllLoaded = !options.loadMessages;\n    this._seq = this._messages.reduce((max, m) => Math.max(max, m.seq), 0);\n\n    this._unsubEvent = options.onEvent((event) => this._handleEvent(event));\n    this._unsubStatus = options.onStatusChange?.((status) => this.setStatus(status));\n  }\n\n  // -- Reactive state --------------------------------------------------------\n\n  /** Accumulated conversation messages, oldest first. */\n  get messages(): readonly Message[] {\n    return this._messages;\n  }\n\n  /** Text currently streaming from the agent. Empty when not streaming. */\n  get streamingText(): string {\n    return this._streamingText;\n  }\n\n  /** Current connection lifecycle state. */\n  get status(): ConnectionStatus {\n    return this._status;\n  }\n\n  /** Current agent execution phase (e.g. `\"idle\"`, `\"thinking\"`, `\"executing\"`). */\n  get phase(): AgentPhase {\n    return this._phase;\n  }\n\n  /** The pending question the agent is waiting for the user to answer, or null. */\n  get pendingQuestion(): AgentStoreSnapshot[\"pendingQuestion\"] {\n    return this._pendingQuestion;\n  }\n\n  /** Most recent error, or null when no error is active. */\n  get error(): AgentStoreSnapshot[\"error\"] {\n    return this._error;\n  }\n\n  /** Partial text that was visible when the user cancelled. Empty when not cancelled. */\n  get cancelledText(): string {\n    return this._cancelledText;\n  }\n\n  /** True when there are no more older messages to load via pagination. */\n  get isAllLoaded(): boolean {\n    return this._isAllLoaded;\n  }\n\n  /** `messageId`s of prompts a cancel dropped before they ran. */\n  get notSentPromptIds(): ReadonlySet<string> {\n    return this._notSentPromptIds;\n  }\n\n  /**\n   * Whether `message` is a prompt a cancel dropped before it ran, so the UI\n   * shows it as \"Not sent\". Matches on the prompt payload's `messageId`.\n   */\n  isPromptNotSent(message: Message): boolean {\n    const payload = message.payload as { type: string; messageId?: unknown };\n    return (\n      payload.type === \"prompt\" &&\n      typeof payload.messageId === \"string\" &&\n      this._notSentPromptIds.has(payload.messageId)\n    );\n  }\n\n  // -- Commands --------------------------------------------------------------\n\n  /**\n   * Send a user prompt to the agent and optimistically update local state.\n   *\n   * Clears any previous error and cancelled text, sets phase to `\"thinking\"`,\n   * and appends the prompt as a local message before forwarding to the agent.\n   *\n   * @param text - The user's prompt text.\n   */\n  prompt(text: string): void {\n    // A prompt sent mid-turn (sender interjecting while the agent streams) is a\n    // boundary: finalize the in-flight text before this prompt so the two don't\n    // merge into one bubble. No-op at turn start (nothing streaming).\n    this._flushStreaming();\n    this._error = null;\n    this._cancelledText = \"\";\n    this._streamingFlushed = false;\n    // A free-form prompt abandons any unanswered question: the turn it belonged\n    // to is over. Left set, it would gate every status of the new turn.\n    this._clearAsk();\n    this._phase = \"thinking\";\n    const userId = this._options.userId;\n    if (userId) {\n      // The local message id doubles as the receipt token, so a drop report\n      // for this prompt finds its message.\n      const id = crypto.randomUUID();\n      const command = { type: \"prompt\", prompt: text, messageId: id, senderId: userId } as const;\n      this._appendMessage(command, \"user\", id);\n      this._options.send(command);\n    } else {\n      this._appendMessage({ type: \"prompt\", prompt: text }, \"user\");\n      this._options.send({ type: \"prompt\", prompt: text });\n    }\n    this._notify();\n  }\n\n  /**\n   * Send a reply to the agent's pending question.\n   *\n   * Closes the answered sub-question locally before forwarding the reply command.\n   *\n   * @param answer - The user's answer text.\n   * @param question - The sub-question being answered, verbatim from its\n   *   `question` event. Required for correctness in hosts that surface several\n   *   queued questions at once ({@link pendingQuestion} tracks only the latest,\n   *   so those hosts drive this from their own message history): without it the\n   *   agent files the answer under its next unanswered sub-question, which\n   *   mismatches any non-sequential reply.\n   * @param requestId - Exact identity from the rendered question; never inferred from pending state.\n   *\n   * A multi-question ask stays parked until every sub-question has an answer:\n   * until the last one, the phase stays idle and {@link pendingQuestion} moves\n   * to the latest sub-question still open.\n   */\n  reply(answer: string, question?: string, requestId?: string): void {\n    // A reply to a stale card must not clear a newer request in this client.\n    if (this._pendingQuestion?.requestId && this._pendingQuestion.requestId !== requestId) return;\n    if (this._openQuestions.length > 0) {\n      this._ask.answer(question);\n      this._syncOpenQuestions();\n      if (question === undefined && this._openQuestions.length > 0) this._unnamedEchoesOwed++;\n    }\n    // Answering the last open question resumes the agent turn — restore the\n    // busy phase (mirrors prompt()) so the thinking indicator reappears at once\n    // rather than after the agent's first resumed event lands.\n    if (this._openQuestions.length === 0) this._phase = \"thinking\";\n    const command = {\n      type: \"reply\",\n      answer,\n      ...(question !== undefined ? { question } : {}),\n      ...(requestId !== undefined ? { requestId } : {}),\n    } as const;\n    this._appendMessage(command, \"user\");\n    this._options.send(command);\n    this._notify();\n  }\n\n  /**\n   * Cancel the current agent turn.\n   *\n   * Preserves partial streaming text in {@link cancelledText} so the UI can\n   * display it. Clears streaming state, sets phase to `\"cancelling\"` (not\n   * yet confirmed idle — see {@link AgentPhase}), and sends a `cancel`\n   * command to the agent.\n   */\n  cancel(): void {\n    // Preserve partial streaming text so the UI can still display it\n    this._cancelledText = this._streamingText;\n    this._streamingText = \"\";\n    this._streamingFlushed = true;\n    this._phase = \"cancelling\";\n    const userId = this._options.userId;\n    this._options.send(userId ? { type: \"cancel\", senderId: userId } : { type: \"cancel\" });\n    this._notify();\n  }\n\n  /**\n   * Update shared state for a store namespace.\n   *\n   * Sends a `state_update` command to the agent and optimistically\n   * updates local state so the change is reflected immediately.\n   *\n   * @param store - Store namespace (e.g. \"app\", \"component:render-123\").\n   * @param state - Full state snapshot (replaces previous).\n   */\n  updateState(store: string, state: Record<string, unknown>): void {\n    this._options.send({ type: \"state_update\", store, state });\n    if (isSameJsonValue(this._sharedState.get(store), state, true)) return;\n    // Optimistic local update\n    this._sharedState = new Map(this._sharedState);\n    this._sharedState.set(store, state);\n    this._notify();\n  }\n\n  /**\n   * Send an arbitrary command to the agent.\n   *\n   * Use this for commands that don't have a dedicated convenience method\n   * (e.g. `ui_interaction`). No local state changes — the command is\n   * forwarded as-is to the transport.\n   *\n   * @param cmd - The command to send.\n   */\n  send(cmd: AgentCommand): void {\n    this._options.send(cmd);\n  }\n\n  /**\n   * Load the previous page of messages and prepend them to the current list.\n   *\n   * No-op when `loadMessages` was not provided at construction time or when\n   * all history has already been loaded ({@link isAllLoaded} is true).\n   * Sets {@link isAllLoaded} to true once the server returns fewer messages\n   * than the configured page size.\n   */\n  async loadPreviousMessages(): Promise<void> {\n    if (!this._options.loadMessages || this._isAllLoaded) return;\n\n    const pageSize = this._options.pageSize ?? DEFAULT_PAGE_SIZE;\n    const before = this._messages.length > 0 ? this._messages[0].seq : undefined;\n    const older = await this._options.loadMessages({ before, limit: pageSize });\n\n    if (older.length < pageSize) this._isAllLoaded = true;\n\n    const existingIds = new Set(this._messages.map((m) => m.id));\n    const unique = older.filter((m) => !existingIds.has(m.id));\n    this._messages = [...unique, ...this._messages];\n\n    this._notify();\n  }\n\n  // -- External control ------------------------------------------------------\n\n  /**\n   * Programmatically update the connection status.\n   *\n   * Called by transport wrappers that cannot use the `onStatusChange`\n   * callback (e.g. tRPC subscriptions that track status externally).\n   *\n   * Writing the status the store already holds is a no-op: it neither rotates\n   * the snapshot nor notifies listeners.\n   *\n   * @param status - The new connection status.\n   */\n  setStatus(status: ConnectionStatus): void {\n    if (this._status === status) return;\n    this._status = status;\n    this._notify();\n  }\n\n  // -- useSyncExternalStore interface ----------------------------------------\n\n  /**\n   * Register a change listener. Called synchronously after every state change.\n   *\n   * Conforms to the `subscribe` parameter of React's `useSyncExternalStore`.\n   *\n   * @param listener - Callback invoked whenever state changes.\n   * @returns Unsubscribe function — call to stop receiving notifications.\n   */\n  subscribe = (listener: () => void): (() => void) => {\n    this._listeners.add(listener);\n    return () => this._listeners.delete(listener);\n  };\n\n  /**\n   * Return the current immutable state snapshot.\n   *\n   * A new object is produced lazily on the first call after each state change.\n   * Subsequent calls return the same cached object until the next change.\n   * Conforms to the `getSnapshot` parameter of React's `useSyncExternalStore`.\n   */\n  getSnapshot = (): AgentStoreSnapshot => {\n    if (!this._snapshot) {\n      this._snapshot = {\n        messages: this._messages,\n        streamingText: this._streamingText,\n        cancelledText: this._cancelledText,\n        status: this._status,\n        phase: this._phase,\n        pendingQuestion: this._pendingQuestion,\n        error: this._error,\n        isAllLoaded: this._isAllLoaded,\n        notSentPromptIds: this._notSentPromptIds,\n        sharedState: this._sharedState,\n        capabilities: this._capabilities,\n        activeRenderInvocations: this._activeRenderInvocations,\n        protocolInfo: this._protocolInfo,\n        incompatibleProtocol: this._incompatibleProtocol,\n      };\n    }\n    return this._snapshot;\n  };\n\n  // -- Cleanup ---------------------------------------------------------------\n\n  /**\n   * Unsubscribe from transport events and clear all change listeners.\n   *\n   * Call this when the component or service that owns the store unmounts or\n   * shuts down to prevent memory leaks.\n   */\n  dispose(): void {\n    this._unsubEvent();\n    this._unsubStatus?.();\n    this._listeners.clear();\n  }\n\n  // -- Factory ---------------------------------------------------------------\n\n  /**\n   * Create an {@link AgentStore} connected to a duck-typed agent client.\n   *\n   * Adapts the client's `send`/`onEvent`/`offEvent` API to the\n   * {@link StoreTransport} interface expected by the constructor, without\n   * creating a hard runtime dependency on `@skaile/workspaces/client`.\n   *\n   * @param client - Any object implementing {@link AgentClientLike}.\n   * @param opts - Optional store configuration.\n   * @param opts.sessionId - Session ID for message envelopes (defaults to a new UUID).\n   * @param opts.initialMessages - Messages to pre-populate the store with.\n   *\n   * @example\n   * ```ts\n   * const store = AgentStore.fromClient(agentClient, { sessionId: 'sess-123' })\n   * ```\n   */\n  static fromClient(\n    client: AgentClientLike,\n    opts?: { sessionId?: string; initialMessages?: Message[] },\n  ): AgentStore {\n    return new AgentStore({\n      sessionId: opts?.sessionId ?? crypto.randomUUID(),\n      send: (cmd) => client.send(cmd),\n      onEvent: (handler) => {\n        client.onEvent(handler);\n        return () => client.offEvent(handler);\n      },\n      initialMessages: opts?.initialMessages,\n    });\n  }\n\n  // -- Internal --------------------------------------------------------------\n\n  /** Re-derive the open sub-questions from the slot rule; `pendingQuestion` follows the latest one. */\n  private _syncOpenQuestions(): void {\n    this._openQuestions = this._ask.open.flatMap((q) => this._askEvents.get(q) ?? []);\n    this._pendingQuestion = this._openQuestions.at(-1) ?? null;\n    if (this._openQuestions.length === 0) this._clearAsk();\n  }\n\n  /** Drop the parked ask and everything bound to it. */\n  private _clearAsk(): void {\n    this._ask.clear();\n    this._askEvents.clear();\n    this._openQuestions = [];\n    this._pendingQuestion = null;\n    this._unnamedEchoesOwed = 0;\n  }\n\n  private _handleEvent(event: AgentEvent): void {\n    switch (event.type) {\n      case \"text\":\n        this._cancelledText = \"\";\n        this._streamingText += event.content;\n        this._streamingFlushed = false;\n        break;\n\n      case \"text_retract\":\n        // The driver abandoned an attempt mid-message and is replaying it. Cut\n        // only a matching tail: text already flushed into a message, or a\n        // stream that no longer ends in the fragment, is left as it is.\n        if (!event.content || !this._streamingText.endsWith(event.content)) return;\n        this._streamingText = this._streamingText.slice(\n          0,\n          this._streamingText.length - event.content.length,\n        );\n        break;\n\n      case \"finished\":\n        this._cancelledText = \"\";\n        this._flushStreaming();\n        this._appendMessage(event);\n        // A cancelled finished is synthetic (persisted immediately for reload-\n        // durability) and precedes the driver's real abort/kill sequence — stay\n        // \"cancelling\" until the later, genuine status event reports \"idle\".\n        if (!event.cancelled) this._phase = \"idle\";\n        this._clearAsk();\n        break;\n\n      case \"status\":\n        // While cancelling, the driver's interrupt/unwind window can still emit\n        // stale \"working\" statuses for already-buffered tool activity — ignore\n        // anything but the genuine idle confirmation.\n        if (this._phase === \"cancelling\" && event.phase !== \"idle\") return;\n        // A parked question is the same shape: the driver re-emits the turn's\n        // buffered tool activity — including one call for the question tool\n        // itself — while nothing is actually running. Only the genuine idle\n        // confirmation may move the phase until the user answers.\n        if (this._pendingQuestion !== null && event.phase !== \"idle\") return;\n        // The bridge re-emits phase:\"working\" on every tool call, so most status\n        // events in a turn carry the phase we already hold. `_notify()` rotates\n        // the snapshot, so notifying for them re-renders consumers for nothing.\n        if (this._phase === event.phase) return;\n        this._phase = event.phase;\n        break;\n\n      case \"user_message\":\n        // A peer's message mid-turn is a boundary: finalize the in-flight text\n        // so it renders before the interjection. Flush-only — the peer message\n        // is delivered via the host's history, not this transient echo. The\n        // flush is internally conditional, so an echo arriving while nothing is\n        // streaming (the common case — peers talk between turns) changed no\n        // state and notifying for it was a pure fanout.\n        if (!this._flushStreaming()) return;\n        break;\n\n      case \"question_reply\": {\n        // A peer answered: close its sub-question the same way `reply()` does.\n        // The runner echoes every reply to all clients, so the replier's own\n        // echo (its sub-question already closed) must leave this client\n        // untouched. A named echo finds nothing left to close; an unnamed one\n        // is matched by count. A complete arm rather than a fall through into\n        // the group below: sharing that body once let a tool_call clear the flag.\n        const pending = this._pendingQuestion;\n        if (pending === null) return;\n        if (pending.requestId !== undefined && pending.requestId !== event.requestId) return;\n        if (event.question !== undefined) {\n          // Only a sub-question still open can be closed by an echo.\n          if (!this._ask.isOpen(event.question)) return;\n        } else if (this._unnamedEchoesOwed > 0) {\n          this._unnamedEchoesOwed--;\n          return;\n        }\n        this._ask.answer(event.question);\n        this._syncOpenQuestions();\n        this._flushStreaming();\n        this._appendMessage(event);\n        break;\n      }\n\n      case \"tool_call\":\n      case \"tool_result\":\n      case \"file_changed\":\n      case \"subagent\":\n      case \"dev_server\":\n      case \"handoff\":\n        // Flush in-flight text first so each text block becomes its own\n        // Message, interleaved with tool activity in order — otherwise text\n        // before and after a tool call merges into one wall-of-text blob.\n        this._flushStreaming();\n        this._appendMessage(event);\n        break;\n\n      case \"question\":\n        // A pending question is a human-in-the-loop pause — the agent is waiting\n        // for the user, not working. Reset to idle (like finished/error) so any\n        // phase-derived busy indicator clears until the user replies.\n        this._flushStreaming();\n        this._phase = \"idle\";\n        // One event arrives per sub-question. A different requestId is a new\n        // ask; the same one (or none, as claude-sdk sends) extends the open set.\n        if (this._ask.add(event.question, event.requestId)) {\n          this._askEvents.clear();\n          this._unnamedEchoesOwed = 0;\n        }\n        this._askEvents.set(event.question, event);\n        this._syncOpenQuestions();\n        this._appendMessage(event);\n        break;\n\n      case \"error\":\n        this._error = { message: event.message, fatal: event.fatal };\n        this._streamingText = \"\";\n        this._streamingFlushed = true;\n        this._phase = \"idle\";\n        // A fatal error ends the turn like `finished`; a surviving question would\n        // keep the status gate shut. Non-fatal side-channel errors leave it parked.\n        if (event.fatal) this._clearAsk();\n        this._appendMessage(event);\n        break;\n\n      case \"state_changed\": {\n        // Accumulate state per store namespace (notify only — no message).\n        // Re-emits of unchanged state are routine, not exceptional: `serve.ts`\n        // replays every namespace on connect (`buildStoreSnapshotReplay`), on a\n        // seeded execution, on re-registering an already-registered store, and\n        // immediately after registration — and the `xstate-store` adapter is\n        // equality-free, so writing a key its current value emits too. Each of\n        // those rebuilt the Map and rotated the snapshot for identical state.\n        if (isSameJsonValue(this._sharedState.get(event.store), event.state)) return;\n        this._sharedState = new Map(this._sharedState);\n        this._sharedState.set(event.store, event.state);\n        break;\n      }\n\n      // ── Protocol v2 ────────────────────────────────────────────────────────\n\n      case \"capability_register\": {\n        // TRANSIENT — accumulate v2 capabilities into the registry (no message).\n        // The gateway replays the whole set on every (re)attach; a byte-identical\n        // replay must not rotate the Map identity or notify, or a reconnect storm\n        // compounds into an unbounded render loop in consumers.\n        if (\n          event.capabilities.every((cap) => isSameJsonValue(this._capabilities.get(cap.name), cap))\n        ) {\n          return;\n        }\n        this._capabilities = new Map(this._capabilities);\n        for (const cap of event.capabilities) {\n          this._capabilities.set(cap.name, cap);\n        }\n        break;\n      }\n\n      case \"capability_deregister\": {\n        // TRANSIENT — drop capabilities by name. Names we never had are a no-op:\n        // rebuilding the Map for them would notify with an identical registry.\n        const present = event.names.filter((name) => this._capabilities.has(name));\n        if (present.length === 0) return;\n        this._capabilities = new Map(this._capabilities);\n        for (const name of present) {\n          this._capabilities.delete(name);\n        }\n        break;\n      }\n\n      case \"render_invoked\":\n        // TRANSIENT — record latest render invocation (frontend pairs with\n        // the matching `Capability.render` for placement).\n        this._activeRenderInvocations = new Map(this._activeRenderInvocations);\n        this._activeRenderInvocations.set(event.callId, event);\n        break;\n\n      case \"protocol_info\": {\n        // TRANSIENT — runner announced its protocol version. It announces on\n        // every attach, so tab mounts, StrictMode remounts and SSE reconnects\n        // almost always carry the version we already hold. `ProtocolInfoEvent`\n        // is nothing but `version`, and `ProtocolVersion` is exactly three\n        // numbers, so the field comparison is complete, not conservative.\n        //\n        // A fresh announcement also retires any incompatibility notice: the\n        // platform restarts the session on `incompatible_protocol`, and this\n        // event is the replacement container introducing itself. Nothing cleared\n        // `_incompatibleProtocol` before, so the restart banner was sticky for\n        // the life of the store even though the platform's debug pane documents\n        // this clear as already happening. Guarding without clearing would make\n        // that permanent, since a repeat announcement would never get here.\n        const held = this._protocolInfo?.version;\n        const sameVersion =\n          held !== undefined &&\n          held.major === event.version.major &&\n          held.minor === event.version.minor &&\n          held.patch === event.version.patch;\n        if (sameVersion && this._incompatibleProtocol === null) return;\n        // Keep the held event object when the version is unchanged so consumers\n        // with an effect keyed on `snapshot.protocolInfo` do not re-fire.\n        if (!sameVersion) this._protocolInfo = event;\n        this._incompatibleProtocol = null;\n        break;\n      }\n\n      case \"queued_prompts_dropped\": {\n        // TRANSIENT — the runner dropped these queued prompts on a cancel.\n        // Ids already held are a no-op: no Set rebuild, no notify.\n        const fresh = event.messageIds.filter((id) => !this._notSentPromptIds.has(id));\n        if (fresh.length === 0) return;\n        this._notSentPromptIds = new Set([...this._notSentPromptIds, ...fresh]);\n        break;\n      }\n\n      case \"incompatible_protocol\":\n        // TRANSIENT — runner detected version drift; platform restarts session.\n        this._incompatibleProtocol = event;\n        break;\n\n      case \"capability_invoked\":\n        // Backend intercepts client-side invocations and dispatches them\n        // through V2CapabilityRegistryService — frontends should not see\n        // these. Drop silently if one slips through.\n        return;\n\n      case \"resource_response\":\n      case \"resources_available\":\n        // Transient — handled by ResourceClient, not AgentStore\n        return;\n\n      default:\n        // The switch names 24 of `AgentEvent`'s 61 members. The other 37 —\n        // `log_entry` above all, one per line of container output — hold no\n        // AgentStore state, so falling through to the trailing `_notify()`\n        // rotated the snapshot and re-rendered every consumer for state that\n        // had not changed. Unlike the guarded cases this was not a replay\n        // artifact: it happened on every single occurrence. Hosts that need\n        // these events (log panels, mount indicators, typing bubbles) read them\n        // off the transport upstream of the store, not out of the snapshot.\n        //\n        // Deliberately not an `assertNever` exhaustiveness check: that is a\n        // compile error while 37 members are unnamed, and naming all 61 would\n        // enumerate events the store holds no state for just to satisfy it.\n        return;\n    }\n\n    this._notify();\n  }\n\n  /**\n   * Finalize buffered streaming text as a `text` Message.\n   *\n   * @returns true when text was flushed; false when there was nothing to flush,\n   *   so callers can skip a notify that would change nothing.\n   */\n  private _flushStreaming(): boolean {\n    if (this._streamingFlushed || !this._streamingText) return false;\n    this._appendMessage({ type: \"text\", content: this._streamingText });\n    this._streamingText = \"\";\n    this._streamingFlushed = true;\n    return true;\n  }\n\n  private _appendMessage(\n    payload: AgentCommand | AgentEvent,\n    senderId?: string,\n    id: string = crypto.randomUUID(),\n  ): void {\n    this._seq++;\n    this._messages = [\n      ...this._messages,\n      {\n        id,\n        seq: this._seq,\n        timestamp: new Date().toISOString(),\n        sessionId: this._options.sessionId,\n        ...(senderId ? { senderId } : {}),\n        payload,\n      },\n    ];\n  }\n\n  private _notify(): void {\n    this._snapshot = null;\n    for (const listener of this._listeners) {\n      listener();\n    }\n  }\n}\n"]}
+{"version":3,"sources":["../store/src/resource-client.ts","../store/src/store.ts"],"names":[],"mappings":";;;AAuBA,IAAM,kBAAA,GAAqB,GAAA;AAOpB,IAAM,oBAAA,GAAN,cAAmC,KAAA,CAAM;AAAA,EACrC,IAAA;AAAA,EAET,WAAA,CAAY,SAAiB,IAAA,EAAqC;AAChE,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,sBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AACF;AAUO,IAAM,iBAAN,MAA0E;AAAA,EAC9D,KAAA;AAAA,EACT,UAAgC,EAAC;AAAA,EACjC,cAAwC,EAAC;AAAA;AAAA,EAGjD,eAAA,uBAAoD,GAAA,EAAI;AAAA,EAEhD,SAAA,GAA2C,IAAA;AAAA,EAClC,UAAA,uBAAiB,GAAA,EAAgB;AAAA,EACjC,gBAAA,uBAAuB,GAAA,EAOtC;AAAA,EACe,WAAA;AAAA;AAAA;AAAA;AAAA,EAKjB,YAAY,SAAA,EAA2B;AACrC,IAAA,IAAA,CAAK,QAAQ,SAAA,CAAU,IAAA;AACvB,IAAA,IAAA,CAAK,WAAA,GAAc,UAAU,OAAA,CAAQ,CAAC,UAAU,IAAA,CAAK,YAAA,CAAa,KAAK,CAAC,CAAA;AAAA,EAC1E;AAAA;AAAA;AAAA,EAKA,IAAI,MAAA,GAA+B;AACjC,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,UAAA,GAAuC;AACzC,IAAA,OAAO,IAAA,CAAK,WAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,IAAA,CAAK,WAAA,EAAqB,IAAA,EAAe,IAAA,EAA+C;AAC5F,IAAA,MAAM,WAAW,MAAM,IAAA,CAAK,SAAS,WAAA,EAAa,MAAA,EAAQ,MAAM,IAAI,CAAA;AACpE,IAAA,OAAQ,QAAA,CAAS,QAA6B,EAAC;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,IAAA,CAAK,WAAA,EAAqB,IAAA,EAAc,IAAA,EAA+C;AAC3F,IAAA,MAAM,WAAW,MAAM,IAAA,CAAK,SAAS,WAAA,EAAa,MAAA,EAAQ,MAAM,IAAI,CAAA;AACpE,IAAA,OAAO,QAAA,CAAS,IAAA;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,KAAA,CAAM,WAAA,EAAqB,IAAA,EAAc,OAAA,EAA0C;AACvF,IAAA,MAAM,KAAK,QAAA,CAAS,WAAA,EAAa,OAAA,EAAS,IAAA,EAAM,QAAW,OAAO,CAAA;AAAA,EACpE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,MAAA,CAAO,WAAA,EAAqB,IAAA,EAA6B;AAC7D,IAAA,MAAM,IAAA,CAAK,QAAA,CAAS,WAAA,EAAa,QAAA,EAAU,IAAI,CAAA;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,MAAA,CACJ,WAAA,EACA,KAAA,EACA,IAAA,EAC2B;AAC3B,IAAA,MAAM,WAAW,MAAM,IAAA,CAAK,SAAS,WAAA,EAAa,QAAA,EAAU,OAAO,IAAI,CAAA;AACvE,IAAA,OAAQ,QAAA,CAAS,QAA6B,EAAC;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,KAAA,CAAM,WAAA,EAAqB,IAAA,EAA6B;AAC5D,IAAA,MAAM,IAAA,CAAK,QAAA,CAAS,WAAA,EAAa,OAAA,EAAS,IAAI,CAAA;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,IAAA,CAAK,WAAA,EAAqB,IAAA,EAAe,IAAA,EAA4C;AACzF,IAAA,MAAM,WAAW,MAAM,IAAA,CAAK,SAAS,WAAA,EAAa,MAAA,EAAQ,MAAM,IAAI,CAAA;AACpE,IAAA,OAAO,QAAA,CAAS,IAAA;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,SAAA,GAAY,CAAC,QAAA,KAAuC;AAClD,IAAA,IAAA,CAAK,UAAA,CAAW,IAAI,QAAQ,CAAA;AAC5B,IAAA,OAAO,MAAM,IAAA,CAAK,UAAA,CAAW,MAAA,CAAO,QAAQ,CAAA;AAAA,EAC9C,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,cAAc,MAA8B;AAC1C,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACnB,MAAA,IAAA,CAAK,YAAY,EAAE,MAAA,EAAQ,KAAK,OAAA,EAAS,UAAA,EAAY,KAAK,WAAA,EAAY;AAAA,IACxE;AACA,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,aAAa,WAAA,EAKJ;AACP,IAAA,IAAA,CAAK,MAAM,EAAE,IAAA,EAAM,oBAAoB,MAAA,EAAQ,KAAA,EAAO,aAAa,CAAA;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBAAgB,WAAA,EAA2B;AACzC,IAAA,IAAA,CAAK,MAAM,EAAE,IAAA,EAAM,oBAAoB,MAAA,EAAQ,QAAA,EAAU,aAAa,CAAA;AAAA,EACxE;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,iBAAA,GAA0B;AACxB,IAAA,IAAA,CAAK,MAAM,EAAE,IAAA,EAAM,kBAAA,EAAoB,MAAA,EAAQ,WAAW,CAAA;AAAA,EAC5D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,OAAA,GAAgB;AACd,IAAA,IAAA,CAAK,WAAA,EAAY;AACjB,IAAA,KAAA,MAAW,GAAG,OAAO,CAAA,IAAK,KAAK,gBAAA,EAAkB;AAC/C,MAAA,YAAA,CAAa,QAAQ,KAAK,CAAA;AAC1B,MAAA,OAAA,CAAQ,MAAA,CAAO,IAAI,KAAA,CAAM,yBAAyB,CAAC,CAAA;AAAA,IACrD;AACA,IAAA,IAAA,CAAK,iBAAiB,KAAA,EAAM;AAC5B,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AAAA,EACxB;AAAA;AAAA,EAIQ,aAAa,KAAA,EAAyB;AAC5C,IAAA,IAAI,KAAA,CAAM,SAAS,kBAAA,EAAoB;AACrC,MAAA,MAAM,CAAA,GAAI,KAAA;AACV,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,eAAA,CAAgB,GAAA,CAAI,EAAE,WAAW,CAAA;AACvD,MAAA,MAAM,IAAA,GAAO,IAAI,GAAA,CAAI,IAAA,CAAK,eAAe,CAAA;AACzC,MAAA,IAAA,CAAK,GAAA,CAAI,EAAE,WAAA,EAAa;AAAA,QACtB,IAAI,CAAA,CAAE,WAAA;AAAA,QACN,MAAA,EACE,QAAA,EAAU,MAAA,IAAU,IAAA,CAAK,WAAA,CAAY,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,CAAA,CAAE,WAAW,GAAG,MAAA,IAAU,EAAA;AAAA,QACtF,OAAO,CAAA,CAAE,MAAA;AAAA,QACT,GAAI,EAAE,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,CAAA,CAAE,KAAA,EAAM,GAAI,EAAC;AAAA,QAClD,GAAI,EAAE,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,CAAA,CAAE,SAAA,EAAU,GAAI,EAAC;AAAA,QAC9D,GAAI,EAAE,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,CAAA,CAAE,SAAA,EAAU,GAAI,EAAC;AAAA,QAC9D,WAAA,sBAAiB,IAAA;AAAK,OACvB,CAAA;AACD,MAAA,IAAA,CAAK,eAAA,GAAkB,IAAA;AACvB,MAAA,KAAA,MAAW,QAAA,IAAY,KAAK,UAAA,EAAY;AACtC,QAAA,QAAA,EAAS;AAAA,MACX;AACA,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,KAAA,CAAM,SAAS,qBAAA,EAAuB;AACxC,MAAA,IAAA,CAAK,UAAU,KAAA,CAAM,MAAA;AACrB,MAAA,IAAA,CAAK,cAAc,KAAA,CAAM,UAAA;AACzB,MAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AACjB,MAAA,KAAA,MAAW,QAAA,IAAY,KAAK,UAAA,EAAY;AACtC,QAAA,QAAA,EAAS;AAAA,MACX;AACA,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,KAAA,CAAM,SAAS,mBAAA,EAAqB;AACtC,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,gBAAA,CAAiB,GAAA,CAAI,MAAM,SAAS,CAAA;AACzD,MAAA,IAAI,CAAC,OAAA,EAAS;AAEd,MAAA,YAAA,CAAa,QAAQ,KAAK,CAAA;AAC1B,MAAA,IAAA,CAAK,gBAAA,CAAiB,MAAA,CAAO,KAAA,CAAM,SAAS,CAAA;AAE5C,MAAA,IAAI,MAAM,KAAA,EAAO;AACf,QAAA,OAAA,CAAQ,OAAO,IAAI,oBAAA,CAAqB,MAAM,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,MAClE,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,QAAQ,KAAK,CAAA;AAAA,MACvB;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,QAAA,CACN,WAAA,EACA,SAAA,EACA,IAAA,EACA,SACA,OAAA,EACiC;AACjC,IAAA,MAAM,SAAA,GAAY,OAAO,UAAA,EAAW;AAEpC,IAAA,OAAO,IAAI,OAAA,CAAgC,CAAC,OAAA,EAAS,MAAA,KAAW;AAC9D,MAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC7B,QAAA,IAAA,CAAK,gBAAA,CAAiB,OAAO,SAAS,CAAA;AACtC,QAAA,MAAA;AAAA,UACE,IAAI,KAAA;AAAA,YACF,CAAA,iCAAA,EAAoC,kBAAkB,CAAA,IAAA,EAAO,SAAS,CAAA,CAAA,EAAI,WAAW,CAAA,EAAG,IAAA,GAAO,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,GAAK,EAAE,CAAA;AAAA;AAChH,SACF;AAAA,MACF,GAAG,kBAAkB,CAAA;AAErB,MAAA,IAAA,CAAK,iBAAiB,GAAA,CAAI,SAAA,EAAW,EAAE,OAAA,EAAS,MAAA,EAAQ,OAAO,CAAA;AAE/D,MAAA,IAAA,CAAK,KAAA,CAAM;AAAA,QACT,IAAA,EAAM,kBAAA;AAAA,QACN,SAAA;AAAA,QACA,WAAA;AAAA,QACA,SAAA;AAAA,QACA,GAAI,IAAA,KAAS,MAAA,GAAY,EAAE,IAAA,KAAS,EAAC;AAAA,QACrC,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY,EAAC;AAAA,QAC7B,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY;AAAC,OAC9B,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AACF;;;AC9UA,IAAM,iBAAA,GAAoB,EAAA;AAG1B,SAAS,eAAA,CAAmB,CAAA,EAAkB,CAAA,EAAM,wBAAA,GAA2B,KAAA,EAAgB;AAC7F,EAAA,MAAM,QAAA,uBAAe,OAAA,EAAgB;AACrC,EAAA,MAAM,QAAA,uBAAe,OAAA,EAAgB;AAErC,EAAA,MAAM,OAAA,GAAU,CAAC,IAAA,EAAe,KAAA,KAA4B;AAC1D,IAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,KAAA,KAAU,IAAA,SAAa,IAAA,KAAS,KAAA;AACrD,IAAA,IAAI,OAAO,IAAA,KAAS,OAAO,KAAA,EAAO,OAAO,KAAA;AAEzC,IAAA,QAAQ,OAAO,IAAA;AAAM,MACnB,KAAK,QAAA;AAAA,MACL,KAAK,SAAA;AACH,QAAA,OAAO,IAAA,KAAS,KAAA;AAAA,MAClB,KAAK,QAAA;AACH,QAAA,OACE,MAAA,CAAO,SAAS,IAAI,CAAA,IACpB,OAAO,QAAA,CAAS,KAAK,KACrB,CAAC,MAAA,CAAO,GAAG,IAAA,EAAM,EAAE,KACnB,CAAC,MAAA,CAAO,GAAG,KAAA,EAAO,EAAE,KACpB,IAAA,KAAS,KAAA;AAAA,MAEb,KAAK,QAAA;AACH,QAAA;AAAA,MACF;AACE,QAAA,OAAO,KAAA;AAAA;AAGX,IAAA,MAAM,UAAA,GAAa,IAAA;AACnB,IAAA,MAAM,WAAA,GAAc,KAAA;AACpB,IAAA,IAAI,QAAA,CAAS,IAAI,UAAU,CAAA,IAAK,SAAS,GAAA,CAAI,WAAW,GAAG,OAAO,KAAA;AAClE,IAAA,IAAI,wBAAA,EAA0B;AAC5B,MAAA,IAAI,UAAA,KAAe,eAAe,QAAA,CAAS,GAAA,CAAI,UAAU,CAAA,IAAK,QAAA,CAAS,GAAA,CAAI,WAAW,CAAA,EAAG;AACvF,QAAA,OAAO,KAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,QAAA,CAAS,IAAI,UAAU,CAAA;AACvB,IAAA,QAAA,CAAS,IAAI,WAAW,CAAA;AAExB,IAAA,MAAM,WAAA,GAAc,KAAA,CAAM,OAAA,CAAQ,UAAU,CAAA;AAC5C,IAAA,IAAI,WAAA,KAAgB,KAAA,CAAM,OAAA,CAAQ,WAAW,GAAG,OAAO,KAAA;AAEvD,IAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,cAAA,CAAe,UAAU,CAAA;AACtD,IAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,cAAA,CAAe,WAAW,CAAA;AACxD,IAAA,MAAM,qBAAA,GAAwB,cAC1B,aAAA,KAAkB,KAAA,CAAM,YACxB,aAAA,KAAkB,MAAA,CAAO,aAAa,aAAA,KAAkB,IAAA;AAC5D,IAAA,MAAM,sBAAA,GAAyB,cAC3B,cAAA,KAAmB,KAAA,CAAM,YACzB,cAAA,KAAmB,MAAA,CAAO,aAAa,cAAA,KAAmB,IAAA;AAC9D,IAAA,IACE,CAAC,qBAAA,IACD,CAAC,sBAAA,IACD,kBAAkB,cAAA,IAClB,CAAC,MAAA,CAAO,YAAA,CAAa,UAAU,CAAA,IAC/B,CAAC,MAAA,CAAO,YAAA,CAAa,WAAW,CAAA,EAChC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ,UAAU,CAAA;AAC3C,IAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA;AAC7C,IAAA,IACE,SAAS,MAAA,KAAW,SAAA,CAAU,UAC9B,QAAA,CAAS,IAAA,CAAK,CAAC,GAAA,KAAQ,OAAO,QAAQ,QAAQ,CAAA,IAC9C,UAAU,IAAA,CAAK,CAAC,QAAQ,OAAO,GAAA,KAAQ,QAAQ,CAAA,EAC/C;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,MAAM,oBAAA,GAAuB,MAAA,CAAO,wBAAA,CAAyB,UAAA,EAAY,QAAQ,CAAA;AACjF,MAAA,MAAM,qBAAA,GAAwB,MAAA,CAAO,wBAAA,CAAyB,WAAA,EAAa,QAAQ,CAAA;AACnF,MAAA,MAAM,aAAa,oBAAA,EAAsB,KAAA;AACzC,MAAA,MAAM,cAAc,qBAAA,EAAuB,KAAA;AAC3C,MAAA,IACE,CAAC,oBAAA,IACD,EAAE,OAAA,IAAW,yBACb,CAAC,oBAAA,CAAqB,QAAA,IACtB,oBAAA,CAAqB,UAAA,IACrB,oBAAA,CAAqB,YAAA,IACrB,CAAC,yBACD,EAAE,OAAA,IAAW,qBAAA,CAAA,IACb,CAAC,qBAAA,CAAsB,QAAA,IACvB,qBAAA,CAAsB,UAAA,IACtB,sBAAsB,YAAA,IACtB,OAAO,UAAA,KAAe,QAAA,IACtB,UAAA,KAAe,WAAA,IACf,QAAA,CAAS,MAAA,KAAW,aAAa,CAAA,EACjC;AACA,QAAA,OAAO,KAAA;AAAA,MACT;AAEA,MAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,UAAA,EAAY,KAAA,EAAA,EAAS;AAC/C,QAAA,MAAM,GAAA,GAAM,OAAO,KAAK,CAAA;AACxB,QAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,wBAAA,CAAyB,UAAA,EAAY,GAAG,CAAA;AACtE,QAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,wBAAA,CAAyB,WAAA,EAAa,GAAG,CAAA;AACxE,QAAA,IACE,CAAC,cAAA,EAAgB,UAAA,IACjB,EAAE,OAAA,IAAW,cAAA,CAAA,IACb,CAAC,cAAA,CAAe,QAAA,IAChB,CAAC,cAAA,CAAe,YAAA,IAChB,CAAC,eAAA,EAAiB,UAAA,IAClB,EAAE,OAAA,IAAW,eAAA,CAAA,IACb,CAAC,eAAA,CAAgB,QAAA,IACjB,CAAC,eAAA,CAAgB,YAAA,IACjB,CAAC,OAAA,CAAQ,cAAA,CAAe,KAAA,EAAO,eAAA,CAAgB,KAAK,CAAA,EACpD;AACA,UAAA,OAAO,KAAA;AAAA,QACT;AAAA,MACF;AACA,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,QAAA,CAAS,QAAQ,KAAA,EAAA,EAAS;AACpD,MAAA,MAAM,OAAA,GAAU,SAAS,KAAK,CAAA;AAC9B,MAAA,MAAM,QAAA,GAAW,UAAU,KAAK,CAAA;AAChC,MAAA,IAAI,OAAA,KAAY,UAAU,OAAO,KAAA;AAEjC,MAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,wBAAA,CAAyB,UAAA,EAAY,OAAO,CAAA;AAC1E,MAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,wBAAA,CAAyB,WAAA,EAAa,QAAQ,CAAA;AAC7E,MAAA,IACE,CAAC,cAAA,EAAgB,UAAA,IACjB,EAAE,OAAA,IAAW,cAAA,CAAA,IACb,CAAC,cAAA,CAAe,QAAA,IAChB,CAAC,cAAA,CAAe,YAAA,IAChB,CAAC,eAAA,EAAiB,UAAA,IAClB,EAAE,OAAA,IAAW,eAAA,CAAA,IACb,CAAC,eAAA,CAAgB,QAAA,IACjB,CAAC,eAAA,CAAgB,YAAA,IACjB,CAAC,OAAA,CAAQ,cAAA,CAAe,KAAA,EAAO,eAAA,CAAgB,KAAK,CAAA,EACpD;AACA,QAAA,OAAO,KAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,CAAA,EAAG,CAAC,CAAA;AACzB,IAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,wBAAA,EAA0B,OAAO,IAAA;AAC/C,IAAA,eAAA,CAAgB,CAAC,CAAA;AACjB,IAAA,eAAA,CAAgB,CAAC,CAAA;AACjB,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAYO,IAAM,UAAA,GAAN,MAAM,WAAA,CAA4D;AAAA,EACtD,QAAA;AAAA,EACT,SAAA;AAAA,EACA,cAAA,GAAiB,EAAA;AAAA,EACjB,cAAA,GAAiB,EAAA;AAAA,EACjB,OAAA,GAA4B,MAAA;AAAA,EAC5B,MAAA,GAAqB,MAAA;AAAA,EACrB,gBAAA,GAA0D,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAK1D,iBAAkC,EAAC;AAAA;AAAA,EAE1B,IAAA,GAAO,IAAI,QAAA,EAAS;AAAA;AAAA,EAEpB,UAAA,uBAAiB,GAAA,EAA2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMrD,kBAAA,GAAqB,CAAA;AAAA,EACrB,MAAA,GAAsC,IAAA;AAAA,EACtC,YAAA;AAAA;AAAA,EAEA,iBAAA,uBAA6C,GAAA,EAAI;AAAA,EACjD,IAAA;AAAA,EACA,iBAAA,GAAoB,IAAA;AAAA;AAAA,EAEpB,YAAA,uBAAyD,GAAA,EAAI;AAAA;AAAA,EAE7D,aAAA,uBAA6C,GAAA,EAAI;AAAA;AAAA,EAEjD,wBAAA,uBAAgE,GAAA,EAAI;AAAA;AAAA,EAEpE,aAAA,GAA0C,IAAA;AAAA;AAAA,EAE1C,qBAAA,GAA0D,IAAA;AAAA,EAE1D,SAAA,GAAuC,IAAA;AAAA,EAC9B,UAAA,uBAAiB,GAAA,EAAgB;AAAA,EACjC,WAAA;AAAA,EACA,YAAA;AAAA;AAAA;AAAA;AAAA,EAKjB,YAAY,OAAA,EAA4B;AACtC,IAAA,IAAA,CAAK,QAAA,GAAW,OAAA;AAChB,IAAA,IAAA,CAAK,SAAA,GAAY,QAAQ,eAAA,GAAkB,CAAC,GAAG,OAAA,CAAQ,eAAe,IAAI,EAAC;AAC3E,IAAA,IAAA,CAAK,YAAA,GAAe,CAAC,OAAA,CAAQ,YAAA;AAC7B,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,CAAC,GAAA,EAAK,CAAA,KAAM,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,CAAA,CAAE,GAAG,GAAG,CAAC,CAAA;AAErE,IAAA,IAAA,CAAK,WAAA,GAAc,QAAQ,OAAA,CAAQ,CAAC,UAAU,IAAA,CAAK,YAAA,CAAa,KAAK,CAAC,CAAA;AACtE,IAAA,IAAA,CAAK,YAAA,GAAe,QAAQ,cAAA,GAAiB,CAAC,WAAW,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA;AAAA,EACjF;AAAA;AAAA;AAAA,EAKA,IAAI,QAAA,GAA+B;AACjC,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,aAAA,GAAwB;AAC1B,IAAA,OAAO,IAAA,CAAK,cAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,MAAA,GAA2B;AAC7B,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,KAAA,GAAoB;AACtB,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,eAAA,GAAyD;AAC3D,IAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,KAAA,GAAqC;AACvC,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,aAAA,GAAwB;AAC1B,IAAA,OAAO,IAAA,CAAK,cAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,WAAA,GAAuB;AACzB,IAAA,OAAO,IAAA,CAAK,YAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,gBAAA,GAAwC;AAC1C,IAAA,OAAO,IAAA,CAAK,iBAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,gBAAgB,OAAA,EAA2B;AACzC,IAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,IAAA,OACE,OAAA,CAAQ,IAAA,KAAS,QAAA,IACjB,OAAO,OAAA,CAAQ,SAAA,KAAc,QAAA,IAC7B,IAAA,CAAK,iBAAA,CAAkB,GAAA,CAAI,OAAA,CAAQ,SAAS,CAAA;AAAA,EAEhD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,OAAO,IAAA,EAAoB;AAIzB,IAAA,IAAA,CAAK,eAAA,EAAgB;AACrB,IAAA,IAAA,CAAK,MAAA,GAAS,IAAA;AACd,IAAA,IAAA,CAAK,cAAA,GAAiB,EAAA;AACtB,IAAA,IAAA,CAAK,iBAAA,GAAoB,KAAA;AAGzB,IAAA,IAAA,CAAK,SAAA,EAAU;AACf,IAAA,IAAA,CAAK,MAAA,GAAS,UAAA;AACd,IAAA,MAAM,MAAA,GAAS,KAAK,QAAA,CAAS,MAAA;AAC7B,IAAA,IAAI,MAAA,EAAQ;AAGV,MAAA,MAAM,EAAA,GAAK,OAAO,UAAA,EAAW;AAC7B,MAAA,MAAM,OAAA,GAAU,EAAE,IAAA,EAAM,QAAA,EAAU,QAAQ,IAAA,EAAM,SAAA,EAAW,EAAA,EAAI,QAAA,EAAU,MAAA,EAAO;AAChF,MAAA,IAAA,CAAK,cAAA,CAAe,OAAA,EAAS,MAAA,EAAQ,EAAE,CAAA;AACvC,MAAA,IAAA,CAAK,QAAA,CAAS,KAAK,OAAO,CAAA;AAAA,IAC5B,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,eAAe,EAAE,IAAA,EAAM,UAAU,MAAA,EAAQ,IAAA,IAAQ,MAAM,CAAA;AAC5D,MAAA,IAAA,CAAK,SAAS,IAAA,CAAK,EAAE,MAAM,QAAA,EAAU,MAAA,EAAQ,MAAM,CAAA;AAAA,IACrD;AACA,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoBA,KAAA,CAAM,MAAA,EAAgB,QAAA,EAAmB,SAAA,EAA0B;AAEjE,IAAA,IAAI,KAAK,gBAAA,EAAkB,SAAA,IAAa,IAAA,CAAK,gBAAA,CAAiB,cAAc,SAAA,EAAW;AACvF,IAAA,IAAI,IAAA,CAAK,cAAA,CAAe,MAAA,GAAS,CAAA,EAAG;AAClC,MAAA,IAAA,CAAK,IAAA,CAAK,OAAO,QAAQ,CAAA;AACzB,MAAA,IAAA,CAAK,kBAAA,EAAmB;AACxB,MAAA,IAAI,aAAa,MAAA,IAAa,IAAA,CAAK,cAAA,CAAe,MAAA,GAAS,GAAG,IAAA,CAAK,kBAAA,EAAA;AAAA,IACrE;AAIA,IAAA,IAAI,IAAA,CAAK,cAAA,CAAe,MAAA,KAAW,CAAA,OAAQ,MAAA,GAAS,UAAA;AACpD,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,IAAA,EAAM,OAAA;AAAA,MACN,MAAA;AAAA,MACA,GAAI,QAAA,KAAa,MAAA,GAAY,EAAE,QAAA,KAAa,EAAC;AAAA,MAC7C,GAAI,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,KAAc;AAAC,KACjD;AACA,IAAA,IAAA,CAAK,cAAA,CAAe,SAAS,MAAM,CAAA;AACnC,IAAA,IAAA,CAAK,QAAA,CAAS,KAAK,OAAO,CAAA;AAC1B,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAA,GAAe;AAEb,IAAA,IAAA,CAAK,iBAAiB,IAAA,CAAK,cAAA;AAC3B,IAAA,IAAA,CAAK,cAAA,GAAiB,EAAA;AACtB,IAAA,IAAA,CAAK,iBAAA,GAAoB,IAAA;AACzB,IAAA,IAAA,CAAK,MAAA,GAAS,YAAA;AACd,IAAA,MAAM,MAAA,GAAS,KAAK,QAAA,CAAS,MAAA;AAC7B,IAAA,IAAA,CAAK,QAAA,CAAS,IAAA,CAAK,MAAA,GAAS,EAAE,IAAA,EAAM,QAAA,EAAU,QAAA,EAAU,MAAA,EAAO,GAAI,EAAE,IAAA,EAAM,QAAA,EAAU,CAAA;AACrF,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,WAAA,CAAY,OAAe,KAAA,EAAsC;AAC/D,IAAA,IAAA,CAAK,SAAS,IAAA,CAAK,EAAE,MAAM,cAAA,EAAgB,KAAA,EAAO,OAAO,CAAA;AACzD,IAAA,IAAI,eAAA,CAAgB,KAAK,YAAA,CAAa,GAAA,CAAI,KAAK,CAAA,EAAG,KAAA,EAAO,IAAI,CAAA,EAAG;AAEhE,IAAA,IAAA,CAAK,YAAA,GAAe,IAAI,GAAA,CAAI,IAAA,CAAK,YAAY,CAAA;AAC7C,IAAA,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,KAAA,EAAO,KAAK,CAAA;AAClC,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,KAAK,GAAA,EAAyB;AAC5B,IAAA,IAAA,CAAK,QAAA,CAAS,KAAK,GAAG,CAAA;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,oBAAA,GAAsC;AAC1C,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,YAAA,IAAgB,KAAK,YAAA,EAAc;AAEtD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,CAAS,QAAA,IAAY,iBAAA;AAC3C,IAAA,MAAM,MAAA,GAAS,KAAK,SAAA,CAAU,MAAA,GAAS,IAAI,IAAA,CAAK,SAAA,CAAU,CAAC,CAAA,CAAE,GAAA,GAAM,MAAA;AACnE,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,QAAA,CAAS,aAAa,EAAE,MAAA,EAAQ,KAAA,EAAO,QAAA,EAAU,CAAA;AAE1E,IAAA,IAAI,KAAA,CAAM,MAAA,GAAS,QAAA,EAAU,IAAA,CAAK,YAAA,GAAe,IAAA;AAEjD,IAAA,MAAM,WAAA,GAAc,IAAI,GAAA,CAAI,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,EAAE,CAAC,CAAA;AAC3D,IAAA,MAAM,MAAA,GAAS,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,WAAA,CAAY,GAAA,CAAI,CAAA,CAAE,EAAE,CAAC,CAAA;AACzD,IAAA,IAAA,CAAK,YAAY,CAAC,GAAG,MAAA,EAAQ,GAAG,KAAK,SAAS,CAAA;AAE9C,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,UAAU,MAAA,EAAgC;AACxC,IAAA,IAAI,IAAA,CAAK,YAAY,MAAA,EAAQ;AAC7B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AACf,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,SAAA,GAAY,CAAC,QAAA,KAAuC;AAClD,IAAA,IAAA,CAAK,UAAA,CAAW,IAAI,QAAQ,CAAA;AAC5B,IAAA,OAAO,MAAM,IAAA,CAAK,UAAA,CAAW,MAAA,CAAO,QAAQ,CAAA;AAAA,EAC9C,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,cAAc,MAA0B;AACtC,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACnB,MAAA,IAAA,CAAK,SAAA,GAAY;AAAA,QACf,UAAU,IAAA,CAAK,SAAA;AAAA,QACf,eAAe,IAAA,CAAK,cAAA;AAAA,QACpB,eAAe,IAAA,CAAK,cAAA;AAAA,QACpB,QAAQ,IAAA,CAAK,OAAA;AAAA,QACb,OAAO,IAAA,CAAK,MAAA;AAAA,QACZ,iBAAiB,IAAA,CAAK,gBAAA;AAAA,QACtB,OAAO,IAAA,CAAK,MAAA;AAAA,QACZ,aAAa,IAAA,CAAK,YAAA;AAAA,QAClB,kBAAkB,IAAA,CAAK,iBAAA;AAAA,QACvB,aAAa,IAAA,CAAK,YAAA;AAAA,QAClB,cAAc,IAAA,CAAK,aAAA;AAAA,QACnB,yBAAyB,IAAA,CAAK,wBAAA;AAAA,QAC9B,cAAc,IAAA,CAAK,aAAA;AAAA,QACnB,sBAAsB,IAAA,CAAK;AAAA,OAC7B;AAAA,IACF;AACA,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,OAAA,GAAgB;AACd,IAAA,IAAA,CAAK,WAAA,EAAY;AACjB,IAAA,IAAA,CAAK,YAAA,IAAe;AACpB,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAqBA,OAAO,UAAA,CACL,MAAA,EACA,IAAA,EACY;AACZ,IAAA,OAAO,IAAI,WAAA,CAAW;AAAA,MACpB,SAAA,EAAW,IAAA,EAAM,SAAA,IAAa,MAAA,CAAO,UAAA,EAAW;AAAA,MAChD,IAAA,EAAM,CAAC,GAAA,KAAQ,MAAA,CAAO,KAAK,GAAG,CAAA;AAAA,MAC9B,OAAA,EAAS,CAAC,OAAA,KAAY;AACpB,QAAA,MAAA,CAAO,QAAQ,OAAO,CAAA;AACtB,QAAA,OAAO,MAAM,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA;AAAA,MACtC,CAAA;AAAA,MACA,iBAAiB,IAAA,EAAM;AAAA,KACxB,CAAA;AAAA,EACH;AAAA;AAAA;AAAA,EAKQ,kBAAA,GAA2B;AACjC,IAAA,IAAA,CAAK,cAAA,GAAiB,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,CAAC,CAAA,KAAM,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,CAAC,CAAA,IAAK,EAAE,CAAA;AAChF,IAAA,IAAA,CAAK,gBAAA,GAAmB,IAAA,CAAK,cAAA,CAAe,EAAA,CAAG,EAAE,CAAA,IAAK,IAAA;AACtD,IAAA,IAAI,IAAA,CAAK,cAAA,CAAe,MAAA,KAAW,CAAA,OAAQ,SAAA,EAAU;AAAA,EACvD;AAAA;AAAA,EAGQ,SAAA,GAAkB;AACxB,IAAA,IAAA,CAAK,KAAK,KAAA,EAAM;AAChB,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,IAAA,IAAA,CAAK,iBAAiB,EAAC;AACvB,IAAA,IAAA,CAAK,gBAAA,GAAmB,IAAA;AACxB,IAAA,IAAA,CAAK,kBAAA,GAAqB,CAAA;AAAA,EAC5B;AAAA,EAEQ,aAAa,KAAA,EAAyB;AAC5C,IAAA,QAAQ,MAAM,IAAA;AAAM,MAClB,KAAK,MAAA;AACH,QAAA,IAAA,CAAK,cAAA,GAAiB,EAAA;AACtB,QAAA,IAAA,CAAK,kBAAkB,KAAA,CAAM,OAAA;AAC7B,QAAA,IAAA,CAAK,iBAAA,GAAoB,KAAA;AACzB,QAAA;AAAA,MAEF,KAAK,cAAA;AAIH,QAAA,IAAI,CAAC,MAAM,OAAA,IAAW,CAAC,KAAK,cAAA,CAAe,QAAA,CAAS,KAAA,CAAM,OAAO,CAAA,EAAG;AACpE,QAAA,IAAA,CAAK,cAAA,GAAiB,KAAK,cAAA,CAAe,KAAA;AAAA,UACxC,CAAA;AAAA,UACA,IAAA,CAAK,cAAA,CAAe,MAAA,GAAS,KAAA,CAAM,OAAA,CAAQ;AAAA,SAC7C;AACA,QAAA;AAAA,MAEF,KAAK,UAAA;AACH,QAAA,IAAA,CAAK,cAAA,GAAiB,EAAA;AACtB,QAAA,IAAA,CAAK,eAAA,EAAgB;AACrB,QAAA,IAAA,CAAK,eAAe,KAAK,CAAA;AAIzB,QAAA,IAAI,CAAC,KAAA,CAAM,SAAA,EAAW,IAAA,CAAK,MAAA,GAAS,MAAA;AACpC,QAAA,IAAA,CAAK,SAAA,EAAU;AACf,QAAA;AAAA,MAEF,KAAK,QAAA;AAIH,QAAA,IAAI,IAAA,CAAK,MAAA,KAAW,YAAA,IAAgB,KAAA,CAAM,UAAU,MAAA,EAAQ;AAK5D,QAAA,IAAI,IAAA,CAAK,gBAAA,KAAqB,IAAA,IAAQ,KAAA,CAAM,UAAU,MAAA,EAAQ;AAI9D,QAAA,IAAI,IAAA,CAAK,MAAA,KAAW,KAAA,CAAM,KAAA,EAAO;AACjC,QAAA,IAAA,CAAK,SAAS,KAAA,CAAM,KAAA;AACpB,QAAA;AAAA,MAEF,KAAK,cAAA;AAOH,QAAA,IAAI,CAAC,IAAA,CAAK,eAAA,EAAgB,EAAG;AAC7B,QAAA;AAAA,MAEF,KAAK,gBAAA,EAAkB;AAOrB,QAAA,MAAM,UAAU,IAAA,CAAK,gBAAA;AACrB,QAAA,IAAI,YAAY,IAAA,EAAM;AACtB,QAAA,IAAI,QAAQ,SAAA,KAAc,MAAA,IAAa,OAAA,CAAQ,SAAA,KAAc,MAAM,SAAA,EAAW;AAC9E,QAAA,IAAI,KAAA,CAAM,aAAa,MAAA,EAAW;AAEhC,UAAA,IAAI,CAAC,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,QAAQ,CAAA,EAAG;AAAA,QACzC,CAAA,MAAA,IAAW,IAAA,CAAK,kBAAA,GAAqB,CAAA,EAAG;AACtC,UAAA,IAAA,CAAK,kBAAA,EAAA;AACL,UAAA;AAAA,QACF;AACA,QAAA,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,QAAQ,CAAA;AAC/B,QAAA,IAAA,CAAK,kBAAA,EAAmB;AACxB,QAAA,IAAA,CAAK,eAAA,EAAgB;AACrB,QAAA,IAAA,CAAK,eAAe,KAAK,CAAA;AACzB,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,WAAA;AAAA,MACL,KAAK,aAAA;AAAA,MACL,KAAK,cAAA;AAAA,MACL,KAAK,UAAA;AAAA,MACL,KAAK,YAAA;AAAA,MACL,KAAK,SAAA;AAIH,QAAA,IAAA,CAAK,eAAA,EAAgB;AACrB,QAAA,IAAA,CAAK,eAAe,KAAK,CAAA;AACzB,QAAA;AAAA,MAEF,KAAK,UAAA;AAIH,QAAA,IAAA,CAAK,eAAA,EAAgB;AACrB,QAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAGd,QAAA,IAAI,KAAK,IAAA,CAAK,GAAA,CAAI,MAAM,QAAA,EAAU,KAAA,CAAM,SAAS,CAAA,EAAG;AAClD,UAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,UAAA,IAAA,CAAK,kBAAA,GAAqB,CAAA;AAAA,QAC5B;AACA,QAAA,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,KAAA,CAAM,QAAA,EAAU,KAAK,CAAA;AACzC,QAAA,IAAA,CAAK,kBAAA,EAAmB;AACxB,QAAA,IAAA,CAAK,eAAe,KAAK,CAAA;AACzB,QAAA;AAAA,MAEF,KAAK,OAAA;AACH,QAAA,IAAA,CAAK,SAAS,EAAE,OAAA,EAAS,MAAM,OAAA,EAAS,KAAA,EAAO,MAAM,KAAA,EAAM;AAC3D,QAAA,IAAA,CAAK,cAAA,GAAiB,EAAA;AACtB,QAAA,IAAA,CAAK,iBAAA,GAAoB,IAAA;AACzB,QAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAGd,QAAA,IAAI,KAAA,CAAM,KAAA,EAAO,IAAA,CAAK,SAAA,EAAU;AAChC,QAAA,IAAA,CAAK,eAAe,KAAK,CAAA;AACzB,QAAA;AAAA,MAEF,KAAK,eAAA,EAAiB;AAQpB,QAAA,IAAI,eAAA,CAAgB,KAAK,YAAA,CAAa,GAAA,CAAI,MAAM,KAAK,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,EAAG;AACtE,QAAA,IAAA,CAAK,YAAA,GAAe,IAAI,GAAA,CAAI,IAAA,CAAK,YAAY,CAAA;AAC7C,QAAA,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,KAAA,CAAM,KAAA,EAAO,MAAM,KAAK,CAAA;AAC9C,QAAA;AAAA,MACF;AAAA;AAAA,MAIA,KAAK,qBAAA,EAAuB;AAK1B,QAAA,IACE,KAAA,CAAM,YAAA,CAAa,KAAA,CAAM,CAAC,QAAQ,eAAA,CAAgB,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA,EAAG,GAAG,CAAC,CAAA,EACxF;AACA,UAAA;AAAA,QACF;AACA,QAAA,IAAA,CAAK,aAAA,GAAgB,IAAI,GAAA,CAAI,IAAA,CAAK,aAAa,CAAA;AAC/C,QAAA,KAAA,MAAW,GAAA,IAAO,MAAM,YAAA,EAAc;AACpC,UAAA,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,GAAA,CAAI,IAAA,EAAM,GAAG,CAAA;AAAA,QACtC;AACA,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,uBAAA,EAAyB;AAG5B,QAAA,MAAM,OAAA,GAAU,KAAA,CAAM,KAAA,CAAM,MAAA,CAAO,CAAC,SAAS,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,IAAI,CAAC,CAAA;AACzE,QAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AAC1B,QAAA,IAAA,CAAK,aAAA,GAAgB,IAAI,GAAA,CAAI,IAAA,CAAK,aAAa,CAAA;AAC/C,QAAA,KAAA,MAAW,QAAQ,OAAA,EAAS;AAC1B,UAAA,IAAA,CAAK,aAAA,CAAc,OAAO,IAAI,CAAA;AAAA,QAChC;AACA,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,gBAAA;AAGH,QAAA,IAAA,CAAK,wBAAA,GAA2B,IAAI,GAAA,CAAI,IAAA,CAAK,wBAAwB,CAAA;AACrE,QAAA,IAAA,CAAK,wBAAA,CAAyB,GAAA,CAAI,KAAA,CAAM,MAAA,EAAQ,KAAK,CAAA;AACrD,QAAA;AAAA,MAEF,KAAK,eAAA,EAAiB;AAcpB,QAAA,MAAM,IAAA,GAAO,KAAK,aAAA,EAAe,OAAA;AACjC,QAAA,MAAM,cACJ,IAAA,KAAS,MAAA,IACT,IAAA,CAAK,KAAA,KAAU,MAAM,OAAA,CAAQ,KAAA,IAC7B,IAAA,CAAK,KAAA,KAAU,MAAM,OAAA,CAAQ,KAAA,IAC7B,IAAA,CAAK,KAAA,KAAU,MAAM,OAAA,CAAQ,KAAA;AAC/B,QAAA,IAAI,WAAA,IAAe,IAAA,CAAK,qBAAA,KAA0B,IAAA,EAAM;AAGxD,QAAA,IAAI,CAAC,WAAA,EAAa,IAAA,CAAK,aAAA,GAAgB,KAAA;AACvC,QAAA,IAAA,CAAK,qBAAA,GAAwB,IAAA;AAC7B,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,wBAAA,EAA0B;AAG7B,QAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,UAAA,CAAW,MAAA,CAAO,CAAC,EAAA,KAAO,CAAC,IAAA,CAAK,iBAAA,CAAkB,GAAA,CAAI,EAAE,CAAC,CAAA;AAC7E,QAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,QAAA,IAAA,CAAK,iBAAA,uBAAwB,GAAA,CAAI,CAAC,GAAG,IAAA,CAAK,iBAAA,EAAmB,GAAG,KAAK,CAAC,CAAA;AACtE,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,uBAAA;AAEH,QAAA,IAAA,CAAK,qBAAA,GAAwB,KAAA;AAC7B,QAAA;AAAA,MAEF,KAAK,oBAAA;AAIH,QAAA;AAAA,MAEF,KAAK,mBAAA;AAAA,MACL,KAAK,qBAAA;AAEH,QAAA;AAAA,MAEF;AAaE,QAAA;AAAA;AAGJ,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,eAAA,GAA2B;AACjC,IAAA,IAAI,IAAA,CAAK,iBAAA,IAAqB,CAAC,IAAA,CAAK,gBAAgB,OAAO,KAAA;AAC3D,IAAA,IAAA,CAAK,eAAe,EAAE,IAAA,EAAM,QAAQ,OAAA,EAAS,IAAA,CAAK,gBAAgB,CAAA;AAClE,IAAA,IAAA,CAAK,cAAA,GAAiB,EAAA;AACtB,IAAA,IAAA,CAAK,iBAAA,GAAoB,IAAA;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEQ,eACN,OAAA,EACA,QAAA,EACA,EAAA,GAAa,MAAA,CAAO,YAAW,EACzB;AACN,IAAA,IAAA,CAAK,IAAA,EAAA;AACL,IAAA,IAAA,CAAK,SAAA,GAAY;AAAA,MACf,GAAG,IAAA,CAAK,SAAA;AAAA,MACR;AAAA,QACE,EAAA;AAAA,QACA,KAAK,IAAA,CAAK,IAAA;AAAA,QACV,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,QAClC,SAAA,EAAW,KAAK,QAAA,CAAS,SAAA;AAAA,QACzB,GAAI,QAAA,GAAW,EAAE,QAAA,KAAa,EAAC;AAAA,QAC/B;AAAA;AACF,KACF;AAAA,EACF;AAAA,EAEQ,OAAA,GAAgB;AACtB,IAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AACjB,IAAA,KAAA,MAAW,QAAA,IAAY,KAAK,UAAA,EAAY;AACtC,MAAA,QAAA,EAAS;AAAA,IACX;AAAA,EACF;AACF","file":"chunk-XKNXPLKR.js","sourcesContent":["import type {\n  AgentEvent,\n  ConnectorContent,\n  ConnectorEntry,\n  ConnectorInfo,\n  ConnectorOperation,\n  ConnectorResponseEvent,\n  ConnectorResponseFailureCode,\n  ConnectorStat,\n  ConnectorStatusEvent,\n  ListOptions,\n  MountInfo,\n  ReadOptions,\n  SearchOptions,\n  StatOptions,\n} from \"@skaile/workspaces/types\";\nimport type {\n  ConnectorStatus,\n  ResourceClientSnapshot,\n  StoreTransport,\n  SubscribableStore,\n} from \"./types.js\";\n\nconst DEFAULT_TIMEOUT_MS = 30_000;\n\n/**\n * Rejection for a `resource_response` that carried an `error`. `code` is the\n * runner's machine-readable failure class, absent from runners older than\n * protocol 4.2.0.\n */\nexport class ResourceRequestError extends Error {\n  readonly code: ConnectorResponseFailureCode | undefined;\n\n  constructor(message: string, code?: ConnectorResponseFailureCode) {\n    super(message);\n    this.name = \"ResourceRequestError\";\n    this.code = code;\n  }\n}\n\n/**\n * Lazy resource browser for agent connectors.\n *\n * Provides a reactive list of connected mounts and connectors, and\n * request/response methods for browsing connector contents. Shares\n * the same transport (`send` + `onEvent`) as `AgentStore`.\n * @docLink packages/store/concepts#resource-client\n */\nexport class ResourceClient implements SubscribableStore<ResourceClientSnapshot> {\n  private readonly _send: StoreTransport[\"send\"];\n  private _mounts: readonly MountInfo[] = [];\n  private _connectors: readonly ConnectorInfo[] = [];\n\n  /** Live connection status per connector, keyed by connector ID. Updated by connector_status events. */\n  connectorStatus: Map<string, ConnectorStatus> = new Map();\n\n  private _snapshot: ResourceClientSnapshot | null = null;\n  private readonly _listeners = new Set<() => void>();\n  private readonly _pendingRequests = new Map<\n    string,\n    {\n      resolve: (event: ConnectorResponseEvent) => void;\n      reject: (error: Error) => void;\n      timer: ReturnType<typeof setTimeout>;\n    }\n  >();\n  private readonly _unsubEvent: () => void;\n\n  /**\n   * @param transport - Shared transport (same instance as the AgentStore for this session).\n   */\n  constructor(transport: StoreTransport) {\n    this._send = transport.send;\n    this._unsubEvent = transport.onEvent((event) => this._handleEvent(event));\n  }\n\n  // -- Reactive state --------------------------------------------------------\n\n  /** Mounts available in this session, populated from `resources_available` events. */\n  get mounts(): readonly MountInfo[] {\n    return this._mounts;\n  }\n\n  /** Tool-based connectors available in this session, populated from `resources_available` events. */\n  get connectors(): readonly ConnectorInfo[] {\n    return this._connectors;\n  }\n\n  // -- Resource operations ---------------------------------------------------\n\n  /**\n   * List directory entries at the given path within a connector.\n   *\n   * @param connectorId - ID of the connector to query.\n   * @param path - Directory path to list. Omit for the connector root.\n   * @param opts - Optional pagination and filter options.\n   * @returns Array of entries (files, directories, etc.) at the given path.\n   * @throws If the request times out or the connector returns an error.\n   */\n  async list(connectorId: string, path?: string, opts?: ListOptions): Promise<ConnectorEntry[]> {\n    const response = await this._request(connectorId, \"list\", path, opts);\n    return (response.data as ConnectorEntry[]) ?? [];\n  }\n\n  /**\n   * Read the content of a single resource.\n   *\n   * @param connectorId - ID of the connector to query.\n   * @param path - Full path to the resource within the connector.\n   * @param opts - `{ encoding: \"binary\" }` asks a filesystem mount for base64\n   *   of the bytes instead of text guessed from a NUL sniff (protocol 4.6.0;\n   *   an older runner ignores it).\n   * @returns The resource content object.\n   * @throws If the request times out or the connector returns an error.\n   */\n  async read(connectorId: string, path: string, opts?: ReadOptions): Promise<ConnectorContent> {\n    const response = await this._request(connectorId, \"read\", path, opts);\n    return response.data as ConnectorContent;\n  }\n\n  /**\n   * Write content to a resource, creating it if it does not exist.\n   *\n   * @param connectorId - ID of the connector to write to.\n   * @param path - Full path to the resource within the connector.\n   * @param content - Content to write.\n   * @throws If the request times out or the connector returns an error.\n   */\n  async write(connectorId: string, path: string, content: ConnectorContent): Promise<void> {\n    await this._request(connectorId, \"write\", path, undefined, content);\n  }\n\n  /**\n   * Delete a resource from a connector.\n   *\n   * @param connectorId - ID of the connector to delete from.\n   * @param path - Full path to the resource within the connector.\n   * @throws If the request times out or the connector returns an error.\n   */\n  async delete(connectorId: string, path: string): Promise<void> {\n    await this._request(connectorId, \"delete\", path);\n  }\n\n  /**\n   * Full-text search within a connector.\n   *\n   * @param connectorId - ID of the connector to search.\n   * @param query - Search query string.\n   * @param opts - Optional search options (e.g. path prefix, result limit).\n   * @returns Matching entries, ordered by relevance as determined by the connector.\n   * @throws If the request times out or the connector returns an error.\n   */\n  async search(\n    connectorId: string,\n    query: string,\n    opts?: SearchOptions,\n  ): Promise<ConnectorEntry[]> {\n    const response = await this._request(connectorId, \"search\", query, opts);\n    return (response.data as ConnectorEntry[]) ?? [];\n  }\n\n  /**\n   * Create an empty directory on a filesystem mount, parents included.\n   *\n   * @param connectorId - ID of the mount.\n   * @param path - Directory path within the mount.\n   * @throws {ResourceRequestError} with `code: \"already_exists\"` if something\n   *   is already at `path`; also if the target is not a filesystem mount or the\n   *   runner predates protocol 4.2.0 (then `code` is absent).\n   */\n  async mkdir(connectorId: string, path: string): Promise<void> {\n    await this._request(connectorId, \"mkdir\", path);\n  }\n\n  /**\n   * Describe one path on a filesystem mount; with `opts.recursive`, a\n   * directory also carries capped recursive totals.\n   *\n   * @param connectorId - ID of the mount.\n   * @param path - Path within the mount; omit for the mount root.\n   * @param opts - Optional stat options.\n   * @throws If the path does not exist, the target is not a filesystem mount,\n   *   or the runner predates protocol 4.2.0.\n   */\n  async stat(connectorId: string, path?: string, opts?: StatOptions): Promise<ConnectorStat> {\n    const response = await this._request(connectorId, \"stat\", path, opts);\n    return response.data as ConnectorStat;\n  }\n\n  // -- useSyncExternalStore interface ----------------------------------------\n\n  /**\n   * Register a change listener. Called after every resource availability change.\n   *\n   * Conforms to the `subscribe` parameter of React's `useSyncExternalStore`.\n   *\n   * @param listener - Callback invoked whenever mounts or connectors change.\n   * @returns Unsubscribe function — call to stop receiving notifications.\n   */\n  subscribe = (listener: () => void): (() => void) => {\n    this._listeners.add(listener);\n    return () => this._listeners.delete(listener);\n  };\n\n  /**\n   * Return the current immutable resource snapshot.\n   *\n   * A new object is produced lazily after each `resources_available` event.\n   * Conforms to the `getSnapshot` parameter of React's `useSyncExternalStore`.\n   */\n  getSnapshot = (): ResourceClientSnapshot => {\n    if (!this._snapshot) {\n      this._snapshot = { mounts: this._mounts, connectors: this._connectors };\n    }\n    return this._snapshot;\n  };\n\n  // -- Connector config mutations --------------------------------------------\n\n  /**\n   * Send a `connector_config` add command to wire a new connector at runtime,\n   * without restarting the session. The runner receives this command and\n   * calls `ConnectorManager.connect()`, which fires a `connector_status` event\n   * back to the store once the connector is live.\n   *\n   * @param declaration - Connector declaration (id, driver, access level, options).\n   */\n  addConnector(declaration: {\n    id: string;\n    driver: string;\n    access?: \"read-only\" | \"read-write\";\n    options?: Record<string, unknown>;\n  }): void {\n    this._send({ type: \"connector_config\", action: \"add\", declaration });\n  }\n\n  /**\n   * Send a `connector_config` remove command to disconnect a connector by ID\n   * without restarting the session.\n   *\n   * @param connectorId - ID of the connector to disconnect and remove.\n   */\n  removeConnector(connectorId: string): void {\n    this._send({ type: \"connector_config\", action: \"remove\", connectorId });\n  }\n\n  /**\n   * Send a `connector_config` refresh command to reconnect all configured\n   * connectors (e.g. after a credentials change).\n   */\n  refreshConnectors(): void {\n    this._send({ type: \"connector_config\", action: \"refresh\" });\n  }\n\n  // -- Cleanup ---------------------------------------------------------------\n\n  /**\n   * Unsubscribe from transport events, reject all pending requests, and\n   * clear all change listeners.\n   *\n   * All in-flight resource requests will reject\n   * with `\"ResourceClient disposed\"`.\n   */\n  dispose(): void {\n    this._unsubEvent();\n    for (const [, pending] of this._pendingRequests) {\n      clearTimeout(pending.timer);\n      pending.reject(new Error(\"ResourceClient disposed\"));\n    }\n    this._pendingRequests.clear();\n    this._listeners.clear();\n  }\n\n  // -- Internal --------------------------------------------------------------\n\n  private _handleEvent(event: AgentEvent): void {\n    if (event.type === \"connector_status\") {\n      const e = event as ConnectorStatusEvent;\n      const existing = this.connectorStatus.get(e.connectorId);\n      const next = new Map(this.connectorStatus);\n      next.set(e.connectorId, {\n        id: e.connectorId,\n        driver:\n          existing?.driver ?? this._connectors.find((c) => c.id === e.connectorId)?.driver ?? \"\",\n        state: e.status,\n        ...(e.error !== undefined ? { error: e.error } : {}),\n        ...(e.errorKind !== undefined ? { errorKind: e.errorKind } : {}),\n        ...(e.latencyMs !== undefined ? { latencyMs: e.latencyMs } : {}),\n        lastUpdated: new Date(),\n      });\n      this.connectorStatus = next;\n      for (const listener of this._listeners) {\n        listener();\n      }\n      return;\n    }\n\n    if (event.type === \"resources_available\") {\n      this._mounts = event.mounts;\n      this._connectors = event.connectors;\n      this._snapshot = null;\n      for (const listener of this._listeners) {\n        listener();\n      }\n      return;\n    }\n\n    if (event.type === \"resource_response\") {\n      const pending = this._pendingRequests.get(event.requestId);\n      if (!pending) return;\n\n      clearTimeout(pending.timer);\n      this._pendingRequests.delete(event.requestId);\n\n      if (event.error) {\n        pending.reject(new ResourceRequestError(event.error, event.code));\n      } else {\n        pending.resolve(event);\n      }\n    }\n  }\n\n  private _request(\n    connectorId: string,\n    operation: ConnectorOperation,\n    path?: string,\n    options?: ListOptions | SearchOptions | StatOptions | ReadOptions,\n    content?: ConnectorContent,\n  ): Promise<ConnectorResponseEvent> {\n    const requestId = crypto.randomUUID();\n\n    return new Promise<ConnectorResponseEvent>((resolve, reject) => {\n      const timer = setTimeout(() => {\n        this._pendingRequests.delete(requestId);\n        reject(\n          new Error(\n            `Resource request timed out after ${DEFAULT_TIMEOUT_MS}ms: ${operation} ${connectorId}${path ? ` ${path}` : \"\"}`,\n          ),\n        );\n      }, DEFAULT_TIMEOUT_MS);\n\n      this._pendingRequests.set(requestId, { resolve, reject, timer });\n\n      this._send({\n        type: \"resource_request\",\n        requestId,\n        connectorId,\n        operation,\n        ...(path !== undefined ? { path } : {}),\n        ...(options ? { options } : {}),\n        ...(content ? { content } : {}),\n      });\n    });\n  }\n}\n","import type {\n  AgentCommand,\n  AgentEvent,\n  AgentPhase,\n  Capability,\n  IncompatibleProtocolEvent,\n  Message,\n  ProtocolInfoEvent,\n  QuestionEvent,\n  RenderInvokedEvent,\n} from \"@skaile/workspaces/types\";\nimport { AskSlots } from \"../../types/src/ask-slots.js\";\nimport type {\n  AgentClientLike,\n  AgentStoreOptions,\n  AgentStoreSnapshot,\n  ConnectionStatus,\n  SubscribableStore,\n} from \"./types.js\";\n\nconst DEFAULT_PAGE_SIZE = 50;\n\n/** Conservative equality for plain JSON data; unsupported or unverifiable values fail open. */\nfunction isSameJsonValue<T>(a: T | undefined, b: T, conservativeCommandInput = false): boolean {\n  const aObjects = new WeakSet<object>();\n  const bObjects = new WeakSet<object>();\n\n  const compare = (left: unknown, right: unknown): boolean => {\n    if (left === null || right === null) return left === right;\n    if (typeof left !== typeof right) return false;\n\n    switch (typeof left) {\n      case \"string\":\n      case \"boolean\":\n        return left === right;\n      case \"number\":\n        return (\n          Number.isFinite(left) &&\n          Number.isFinite(right) &&\n          !Object.is(left, -0) &&\n          !Object.is(right, -0) &&\n          left === right\n        );\n      case \"object\":\n        break;\n      default:\n        return false;\n    }\n\n    const leftObject = left as object;\n    const rightObject = right as object;\n    if (aObjects.has(leftObject) || bObjects.has(rightObject)) return false;\n    if (conservativeCommandInput) {\n      if (leftObject === rightObject || bObjects.has(leftObject) || aObjects.has(rightObject)) {\n        return false;\n      }\n    }\n    aObjects.add(leftObject);\n    bObjects.add(rightObject);\n\n    const leftIsArray = Array.isArray(leftObject);\n    if (leftIsArray !== Array.isArray(rightObject)) return false;\n\n    const leftPrototype = Object.getPrototypeOf(leftObject);\n    const rightPrototype = Object.getPrototypeOf(rightObject);\n    const leftHasPlainPrototype = leftIsArray\n      ? leftPrototype === Array.prototype\n      : leftPrototype === Object.prototype || leftPrototype === null;\n    const rightHasPlainPrototype = leftIsArray\n      ? rightPrototype === Array.prototype\n      : rightPrototype === Object.prototype || rightPrototype === null;\n    if (\n      !leftHasPlainPrototype ||\n      !rightHasPlainPrototype ||\n      leftPrototype !== rightPrototype ||\n      !Object.isExtensible(leftObject) ||\n      !Object.isExtensible(rightObject)\n    ) {\n      return false;\n    }\n\n    const leftKeys = Reflect.ownKeys(leftObject);\n    const rightKeys = Reflect.ownKeys(rightObject);\n    if (\n      leftKeys.length !== rightKeys.length ||\n      leftKeys.some((key) => typeof key !== \"string\") ||\n      rightKeys.some((key) => typeof key !== \"string\")\n    ) {\n      return false;\n    }\n\n    if (leftIsArray) {\n      const leftLengthDescriptor = Object.getOwnPropertyDescriptor(leftObject, \"length\");\n      const rightLengthDescriptor = Object.getOwnPropertyDescriptor(rightObject, \"length\");\n      const leftLength = leftLengthDescriptor?.value;\n      const rightLength = rightLengthDescriptor?.value;\n      if (\n        !leftLengthDescriptor ||\n        !(\"value\" in leftLengthDescriptor) ||\n        !leftLengthDescriptor.writable ||\n        leftLengthDescriptor.enumerable ||\n        leftLengthDescriptor.configurable ||\n        !rightLengthDescriptor ||\n        !(\"value\" in rightLengthDescriptor) ||\n        !rightLengthDescriptor.writable ||\n        rightLengthDescriptor.enumerable ||\n        rightLengthDescriptor.configurable ||\n        typeof leftLength !== \"number\" ||\n        leftLength !== rightLength ||\n        leftKeys.length !== leftLength + 1\n      ) {\n        return false;\n      }\n\n      for (let index = 0; index < leftLength; index++) {\n        const key = String(index);\n        const leftDescriptor = Object.getOwnPropertyDescriptor(leftObject, key);\n        const rightDescriptor = Object.getOwnPropertyDescriptor(rightObject, key);\n        if (\n          !leftDescriptor?.enumerable ||\n          !(\"value\" in leftDescriptor) ||\n          !leftDescriptor.writable ||\n          !leftDescriptor.configurable ||\n          !rightDescriptor?.enumerable ||\n          !(\"value\" in rightDescriptor) ||\n          !rightDescriptor.writable ||\n          !rightDescriptor.configurable ||\n          !compare(leftDescriptor.value, rightDescriptor.value)\n        ) {\n          return false;\n        }\n      }\n      return true;\n    }\n\n    for (let index = 0; index < leftKeys.length; index++) {\n      const leftKey = leftKeys[index] as string;\n      const rightKey = rightKeys[index] as string;\n      if (leftKey !== rightKey) return false;\n\n      const leftDescriptor = Object.getOwnPropertyDescriptor(leftObject, leftKey);\n      const rightDescriptor = Object.getOwnPropertyDescriptor(rightObject, rightKey);\n      if (\n        !leftDescriptor?.enumerable ||\n        !(\"value\" in leftDescriptor) ||\n        !leftDescriptor.writable ||\n        !leftDescriptor.configurable ||\n        !rightDescriptor?.enumerable ||\n        !(\"value\" in rightDescriptor) ||\n        !rightDescriptor.writable ||\n        !rightDescriptor.configurable ||\n        !compare(leftDescriptor.value, rightDescriptor.value)\n      ) {\n        return false;\n      }\n    }\n    return true;\n  };\n\n  try {\n    const same = compare(a, b);\n    if (!same || !conservativeCommandInput) return same;\n    structuredClone(a);\n    structuredClone(b);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Headless reactive store for agent conversation state.\n *\n * Framework-agnostic — works with React (`useSyncExternalStore`),\n * Vue (`shallowRef` + `subscribe`), or any other UI framework.\n *\n * Accepts a minimal transport interface (`send` + `onEvent`) so it works\n * with WebSocket, tRPC, SSE, or any other delivery mechanism.\n * @docLink packages/store/concepts#agent-store\n */\nexport class AgentStore implements SubscribableStore<AgentStoreSnapshot> {\n  private readonly _options: AgentStoreOptions;\n  private _messages: Message[];\n  private _streamingText = \"\";\n  private _cancelledText = \"\";\n  private _status: ConnectionStatus = \"idle\";\n  private _phase: AgentPhase = \"idle\";\n  private _pendingQuestion: AgentStoreSnapshot[\"pendingQuestion\"] = null;\n  /**\n   * Unanswered sub-questions of the parked ask, oldest first. Harnesses resume\n   * only once every one has an answer; `_pendingQuestion` is its last entry.\n   */\n  private _openQuestions: QuestionEvent[] = [];\n  /** Slot rule of the parked ask, shared with the harnesses and the SDK session. */\n  private readonly _ask = new AskSlots();\n  /** Latest `question` event per sub-question text of the parked ask. */\n  private readonly _askEvents = new Map<string, QuestionEvent>();\n  /**\n   * Own unnamed replies whose runner echo has not arrived yet. Best effort: a\n   * reply the harness rejects is never echoed, and its count lingers until the\n   * ask ends.\n   */\n  private _unnamedEchoesOwed = 0;\n  private _error: AgentStoreSnapshot[\"error\"] = null;\n  private _isAllLoaded: boolean;\n  /** Prompts a cancel dropped before they ran; new Set on every change. */\n  private _notSentPromptIds: ReadonlySet<string> = new Set();\n  private _seq: number;\n  private _streamingFlushed = true;\n  /** Shared state per store namespace — new Map instance on every mutation. */\n  private _sharedState: Map<string, Record<string, unknown>> = new Map();\n  /** Protocol v2 capability registry — new Map instance on every mutation. */\n  private _capabilities: Map<string, Capability> = new Map();\n  /** Protocol v2 active render invocations — new Map instance on every mutation. */\n  private _activeRenderInvocations: Map<string, RenderInvokedEvent> = new Map();\n  /** Protocol v2 — most recent `protocol_info` event from the runner. */\n  private _protocolInfo: ProtocolInfoEvent | null = null;\n  /** Protocol v2 — latest incompatible-protocol notice. */\n  private _incompatibleProtocol: IncompatibleProtocolEvent | null = null;\n\n  private _snapshot: AgentStoreSnapshot | null = null;\n  private readonly _listeners = new Set<() => void>();\n  private readonly _unsubEvent: () => void;\n  private readonly _unsubStatus: (() => void) | undefined;\n\n  /**\n   * @param options - Store configuration including transport and optional pagination support.\n   */\n  constructor(options: AgentStoreOptions) {\n    this._options = options;\n    this._messages = options.initialMessages ? [...options.initialMessages] : [];\n    this._isAllLoaded = !options.loadMessages;\n    this._seq = this._messages.reduce((max, m) => Math.max(max, m.seq), 0);\n\n    this._unsubEvent = options.onEvent((event) => this._handleEvent(event));\n    this._unsubStatus = options.onStatusChange?.((status) => this.setStatus(status));\n  }\n\n  // -- Reactive state --------------------------------------------------------\n\n  /** Accumulated conversation messages, oldest first. */\n  get messages(): readonly Message[] {\n    return this._messages;\n  }\n\n  /** Text currently streaming from the agent. Empty when not streaming. */\n  get streamingText(): string {\n    return this._streamingText;\n  }\n\n  /** Current connection lifecycle state. */\n  get status(): ConnectionStatus {\n    return this._status;\n  }\n\n  /** Current agent execution phase (e.g. `\"idle\"`, `\"thinking\"`, `\"executing\"`). */\n  get phase(): AgentPhase {\n    return this._phase;\n  }\n\n  /** The pending question the agent is waiting for the user to answer, or null. */\n  get pendingQuestion(): AgentStoreSnapshot[\"pendingQuestion\"] {\n    return this._pendingQuestion;\n  }\n\n  /** Most recent error, or null when no error is active. */\n  get error(): AgentStoreSnapshot[\"error\"] {\n    return this._error;\n  }\n\n  /** Partial text that was visible when the user cancelled. Empty when not cancelled. */\n  get cancelledText(): string {\n    return this._cancelledText;\n  }\n\n  /** True when there are no more older messages to load via pagination. */\n  get isAllLoaded(): boolean {\n    return this._isAllLoaded;\n  }\n\n  /** `messageId`s of prompts a cancel dropped before they ran. */\n  get notSentPromptIds(): ReadonlySet<string> {\n    return this._notSentPromptIds;\n  }\n\n  /**\n   * Whether `message` is a prompt a cancel dropped before it ran, so the UI\n   * shows it as \"Not sent\". Matches on the prompt payload's `messageId`.\n   */\n  isPromptNotSent(message: Message): boolean {\n    const payload = message.payload as { type: string; messageId?: unknown };\n    return (\n      payload.type === \"prompt\" &&\n      typeof payload.messageId === \"string\" &&\n      this._notSentPromptIds.has(payload.messageId)\n    );\n  }\n\n  // -- Commands --------------------------------------------------------------\n\n  /**\n   * Send a user prompt to the agent and optimistically update local state.\n   *\n   * Clears any previous error and cancelled text, sets phase to `\"thinking\"`,\n   * and appends the prompt as a local message before forwarding to the agent.\n   *\n   * @param text - The user's prompt text.\n   */\n  prompt(text: string): void {\n    // A prompt sent mid-turn (sender interjecting while the agent streams) is a\n    // boundary: finalize the in-flight text before this prompt so the two don't\n    // merge into one bubble. No-op at turn start (nothing streaming).\n    this._flushStreaming();\n    this._error = null;\n    this._cancelledText = \"\";\n    this._streamingFlushed = false;\n    // A free-form prompt abandons any unanswered question: the turn it belonged\n    // to is over. Left set, it would gate every status of the new turn.\n    this._clearAsk();\n    this._phase = \"thinking\";\n    const userId = this._options.userId;\n    if (userId) {\n      // The local message id doubles as the receipt token, so a drop report\n      // for this prompt finds its message.\n      const id = crypto.randomUUID();\n      const command = { type: \"prompt\", prompt: text, messageId: id, senderId: userId } as const;\n      this._appendMessage(command, \"user\", id);\n      this._options.send(command);\n    } else {\n      this._appendMessage({ type: \"prompt\", prompt: text }, \"user\");\n      this._options.send({ type: \"prompt\", prompt: text });\n    }\n    this._notify();\n  }\n\n  /**\n   * Send a reply to the agent's pending question.\n   *\n   * Closes the answered sub-question locally before forwarding the reply command.\n   *\n   * @param answer - The user's answer text.\n   * @param question - The sub-question being answered, verbatim from its\n   *   `question` event. Required for correctness in hosts that surface several\n   *   queued questions at once ({@link pendingQuestion} tracks only the latest,\n   *   so those hosts drive this from their own message history): without it the\n   *   agent files the answer under its next unanswered sub-question, which\n   *   mismatches any non-sequential reply.\n   * @param requestId - Exact identity from the rendered question; never inferred from pending state.\n   *\n   * A multi-question ask stays parked until every sub-question has an answer:\n   * until the last one, the phase stays idle and {@link pendingQuestion} moves\n   * to the latest sub-question still open.\n   */\n  reply(answer: string, question?: string, requestId?: string): void {\n    // A reply to a stale card must not clear a newer request in this client.\n    if (this._pendingQuestion?.requestId && this._pendingQuestion.requestId !== requestId) return;\n    if (this._openQuestions.length > 0) {\n      this._ask.answer(question);\n      this._syncOpenQuestions();\n      if (question === undefined && this._openQuestions.length > 0) this._unnamedEchoesOwed++;\n    }\n    // Answering the last open question resumes the agent turn — restore the\n    // busy phase (mirrors prompt()) so the thinking indicator reappears at once\n    // rather than after the agent's first resumed event lands.\n    if (this._openQuestions.length === 0) this._phase = \"thinking\";\n    const command = {\n      type: \"reply\",\n      answer,\n      ...(question !== undefined ? { question } : {}),\n      ...(requestId !== undefined ? { requestId } : {}),\n    } as const;\n    this._appendMessage(command, \"user\");\n    this._options.send(command);\n    this._notify();\n  }\n\n  /**\n   * Cancel the current agent turn.\n   *\n   * Preserves partial streaming text in {@link cancelledText} so the UI can\n   * display it. Clears streaming state, sets phase to `\"cancelling\"` (not\n   * yet confirmed idle — see {@link AgentPhase}), and sends a `cancel`\n   * command to the agent.\n   */\n  cancel(): void {\n    // Preserve partial streaming text so the UI can still display it\n    this._cancelledText = this._streamingText;\n    this._streamingText = \"\";\n    this._streamingFlushed = true;\n    this._phase = \"cancelling\";\n    const userId = this._options.userId;\n    this._options.send(userId ? { type: \"cancel\", senderId: userId } : { type: \"cancel\" });\n    this._notify();\n  }\n\n  /**\n   * Update shared state for a store namespace.\n   *\n   * Sends a `state_update` command to the agent and optimistically\n   * updates local state so the change is reflected immediately.\n   *\n   * @param store - Store namespace (e.g. \"app\", \"component:render-123\").\n   * @param state - Full state snapshot (replaces previous).\n   */\n  updateState(store: string, state: Record<string, unknown>): void {\n    this._options.send({ type: \"state_update\", store, state });\n    if (isSameJsonValue(this._sharedState.get(store), state, true)) return;\n    // Optimistic local update\n    this._sharedState = new Map(this._sharedState);\n    this._sharedState.set(store, state);\n    this._notify();\n  }\n\n  /**\n   * Send an arbitrary command to the agent.\n   *\n   * Use this for commands that don't have a dedicated convenience method\n   * (e.g. `ui_interaction`). No local state changes — the command is\n   * forwarded as-is to the transport.\n   *\n   * @param cmd - The command to send.\n   */\n  send(cmd: AgentCommand): void {\n    this._options.send(cmd);\n  }\n\n  /**\n   * Load the previous page of messages and prepend them to the current list.\n   *\n   * No-op when `loadMessages` was not provided at construction time or when\n   * all history has already been loaded ({@link isAllLoaded} is true).\n   * Sets {@link isAllLoaded} to true once the server returns fewer messages\n   * than the configured page size.\n   */\n  async loadPreviousMessages(): Promise<void> {\n    if (!this._options.loadMessages || this._isAllLoaded) return;\n\n    const pageSize = this._options.pageSize ?? DEFAULT_PAGE_SIZE;\n    const before = this._messages.length > 0 ? this._messages[0].seq : undefined;\n    const older = await this._options.loadMessages({ before, limit: pageSize });\n\n    if (older.length < pageSize) this._isAllLoaded = true;\n\n    const existingIds = new Set(this._messages.map((m) => m.id));\n    const unique = older.filter((m) => !existingIds.has(m.id));\n    this._messages = [...unique, ...this._messages];\n\n    this._notify();\n  }\n\n  // -- External control ------------------------------------------------------\n\n  /**\n   * Programmatically update the connection status.\n   *\n   * Called by transport wrappers that cannot use the `onStatusChange`\n   * callback (e.g. tRPC subscriptions that track status externally).\n   *\n   * Writing the status the store already holds is a no-op: it neither rotates\n   * the snapshot nor notifies listeners.\n   *\n   * @param status - The new connection status.\n   */\n  setStatus(status: ConnectionStatus): void {\n    if (this._status === status) return;\n    this._status = status;\n    this._notify();\n  }\n\n  // -- useSyncExternalStore interface ----------------------------------------\n\n  /**\n   * Register a change listener. Called synchronously after every state change.\n   *\n   * Conforms to the `subscribe` parameter of React's `useSyncExternalStore`.\n   *\n   * @param listener - Callback invoked whenever state changes.\n   * @returns Unsubscribe function — call to stop receiving notifications.\n   */\n  subscribe = (listener: () => void): (() => void) => {\n    this._listeners.add(listener);\n    return () => this._listeners.delete(listener);\n  };\n\n  /**\n   * Return the current immutable state snapshot.\n   *\n   * A new object is produced lazily on the first call after each state change.\n   * Subsequent calls return the same cached object until the next change.\n   * Conforms to the `getSnapshot` parameter of React's `useSyncExternalStore`.\n   */\n  getSnapshot = (): AgentStoreSnapshot => {\n    if (!this._snapshot) {\n      this._snapshot = {\n        messages: this._messages,\n        streamingText: this._streamingText,\n        cancelledText: this._cancelledText,\n        status: this._status,\n        phase: this._phase,\n        pendingQuestion: this._pendingQuestion,\n        error: this._error,\n        isAllLoaded: this._isAllLoaded,\n        notSentPromptIds: this._notSentPromptIds,\n        sharedState: this._sharedState,\n        capabilities: this._capabilities,\n        activeRenderInvocations: this._activeRenderInvocations,\n        protocolInfo: this._protocolInfo,\n        incompatibleProtocol: this._incompatibleProtocol,\n      };\n    }\n    return this._snapshot;\n  };\n\n  // -- Cleanup ---------------------------------------------------------------\n\n  /**\n   * Unsubscribe from transport events and clear all change listeners.\n   *\n   * Call this when the component or service that owns the store unmounts or\n   * shuts down to prevent memory leaks.\n   */\n  dispose(): void {\n    this._unsubEvent();\n    this._unsubStatus?.();\n    this._listeners.clear();\n  }\n\n  // -- Factory ---------------------------------------------------------------\n\n  /**\n   * Create an {@link AgentStore} connected to a duck-typed agent client.\n   *\n   * Adapts the client's `send`/`onEvent`/`offEvent` API to the\n   * {@link StoreTransport} interface expected by the constructor, without\n   * creating a hard runtime dependency on `@skaile/workspaces/client`.\n   *\n   * @param client - Any object implementing {@link AgentClientLike}.\n   * @param opts - Optional store configuration.\n   * @param opts.sessionId - Session ID for message envelopes (defaults to a new UUID).\n   * @param opts.initialMessages - Messages to pre-populate the store with.\n   *\n   * @example\n   * ```ts\n   * const store = AgentStore.fromClient(agentClient, { sessionId: 'sess-123' })\n   * ```\n   */\n  static fromClient(\n    client: AgentClientLike,\n    opts?: { sessionId?: string; initialMessages?: Message[] },\n  ): AgentStore {\n    return new AgentStore({\n      sessionId: opts?.sessionId ?? crypto.randomUUID(),\n      send: (cmd) => client.send(cmd),\n      onEvent: (handler) => {\n        client.onEvent(handler);\n        return () => client.offEvent(handler);\n      },\n      initialMessages: opts?.initialMessages,\n    });\n  }\n\n  // -- Internal --------------------------------------------------------------\n\n  /** Re-derive the open sub-questions from the slot rule; `pendingQuestion` follows the latest one. */\n  private _syncOpenQuestions(): void {\n    this._openQuestions = this._ask.open.flatMap((q) => this._askEvents.get(q) ?? []);\n    this._pendingQuestion = this._openQuestions.at(-1) ?? null;\n    if (this._openQuestions.length === 0) this._clearAsk();\n  }\n\n  /** Drop the parked ask and everything bound to it. */\n  private _clearAsk(): void {\n    this._ask.clear();\n    this._askEvents.clear();\n    this._openQuestions = [];\n    this._pendingQuestion = null;\n    this._unnamedEchoesOwed = 0;\n  }\n\n  private _handleEvent(event: AgentEvent): void {\n    switch (event.type) {\n      case \"text\":\n        this._cancelledText = \"\";\n        this._streamingText += event.content;\n        this._streamingFlushed = false;\n        break;\n\n      case \"text_retract\":\n        // The harness abandoned an attempt mid-message and is replaying it. Cut\n        // only a matching tail: text already flushed into a message, or a\n        // stream that no longer ends in the fragment, is left as it is.\n        if (!event.content || !this._streamingText.endsWith(event.content)) return;\n        this._streamingText = this._streamingText.slice(\n          0,\n          this._streamingText.length - event.content.length,\n        );\n        break;\n\n      case \"finished\":\n        this._cancelledText = \"\";\n        this._flushStreaming();\n        this._appendMessage(event);\n        // A cancelled finished is synthetic (persisted immediately for reload-\n        // durability) and precedes the harness's real abort/kill sequence — stay\n        // \"cancelling\" until the later, genuine status event reports \"idle\".\n        if (!event.cancelled) this._phase = \"idle\";\n        this._clearAsk();\n        break;\n\n      case \"status\":\n        // While cancelling, the harness's interrupt/unwind window can still emit\n        // stale \"working\" statuses for already-buffered tool activity — ignore\n        // anything but the genuine idle confirmation.\n        if (this._phase === \"cancelling\" && event.phase !== \"idle\") return;\n        // A parked question is the same shape: the harness re-emits the turn's\n        // buffered tool activity — including one call for the question tool\n        // itself — while nothing is actually running. Only the genuine idle\n        // confirmation may move the phase until the user answers.\n        if (this._pendingQuestion !== null && event.phase !== \"idle\") return;\n        // The bridge re-emits phase:\"working\" on every tool call, so most status\n        // events in a turn carry the phase we already hold. `_notify()` rotates\n        // the snapshot, so notifying for them re-renders consumers for nothing.\n        if (this._phase === event.phase) return;\n        this._phase = event.phase;\n        break;\n\n      case \"user_message\":\n        // A peer's message mid-turn is a boundary: finalize the in-flight text\n        // so it renders before the interjection. Flush-only — the peer message\n        // is delivered via the host's history, not this transient echo. The\n        // flush is internally conditional, so an echo arriving while nothing is\n        // streaming (the common case — peers talk between turns) changed no\n        // state and notifying for it was a pure fanout.\n        if (!this._flushStreaming()) return;\n        break;\n\n      case \"question_reply\": {\n        // A peer answered: close its sub-question the same way `reply()` does.\n        // The runner echoes every reply to all clients, so the replier's own\n        // echo (its sub-question already closed) must leave this client\n        // untouched. A named echo finds nothing left to close; an unnamed one\n        // is matched by count. A complete arm rather than a fall through into\n        // the group below: sharing that body once let a tool_call clear the flag.\n        const pending = this._pendingQuestion;\n        if (pending === null) return;\n        if (pending.requestId !== undefined && pending.requestId !== event.requestId) return;\n        if (event.question !== undefined) {\n          // Only a sub-question still open can be closed by an echo.\n          if (!this._ask.isOpen(event.question)) return;\n        } else if (this._unnamedEchoesOwed > 0) {\n          this._unnamedEchoesOwed--;\n          return;\n        }\n        this._ask.answer(event.question);\n        this._syncOpenQuestions();\n        this._flushStreaming();\n        this._appendMessage(event);\n        break;\n      }\n\n      case \"tool_call\":\n      case \"tool_result\":\n      case \"file_changed\":\n      case \"subagent\":\n      case \"dev_server\":\n      case \"handoff\":\n        // Flush in-flight text first so each text block becomes its own\n        // Message, interleaved with tool activity in order — otherwise text\n        // before and after a tool call merges into one wall-of-text blob.\n        this._flushStreaming();\n        this._appendMessage(event);\n        break;\n\n      case \"question\":\n        // A pending question is a human-in-the-loop pause — the agent is waiting\n        // for the user, not working. Reset to idle (like finished/error) so any\n        // phase-derived busy indicator clears until the user replies.\n        this._flushStreaming();\n        this._phase = \"idle\";\n        // One event arrives per sub-question. A different requestId is a new\n        // ask; the same one (or none, as claude-sdk sends) extends the open set.\n        if (this._ask.add(event.question, event.requestId)) {\n          this._askEvents.clear();\n          this._unnamedEchoesOwed = 0;\n        }\n        this._askEvents.set(event.question, event);\n        this._syncOpenQuestions();\n        this._appendMessage(event);\n        break;\n\n      case \"error\":\n        this._error = { message: event.message, fatal: event.fatal };\n        this._streamingText = \"\";\n        this._streamingFlushed = true;\n        this._phase = \"idle\";\n        // A fatal error ends the turn like `finished`; a surviving question would\n        // keep the status gate shut. Non-fatal side-channel errors leave it parked.\n        if (event.fatal) this._clearAsk();\n        this._appendMessage(event);\n        break;\n\n      case \"state_changed\": {\n        // Accumulate state per store namespace (notify only — no message).\n        // Re-emits of unchanged state are routine, not exceptional: `serve.ts`\n        // replays every namespace on connect (`buildStoreSnapshotReplay`), on a\n        // seeded execution, on re-registering an already-registered store, and\n        // immediately after registration — and the `xstate-store` adapter is\n        // equality-free, so writing a key its current value emits too. Each of\n        // those rebuilt the Map and rotated the snapshot for identical state.\n        if (isSameJsonValue(this._sharedState.get(event.store), event.state)) return;\n        this._sharedState = new Map(this._sharedState);\n        this._sharedState.set(event.store, event.state);\n        break;\n      }\n\n      // ── Protocol v2 ────────────────────────────────────────────────────────\n\n      case \"capability_register\": {\n        // TRANSIENT — accumulate v2 capabilities into the registry (no message).\n        // The gateway replays the whole set on every (re)attach; a byte-identical\n        // replay must not rotate the Map identity or notify, or a reconnect storm\n        // compounds into an unbounded render loop in consumers.\n        if (\n          event.capabilities.every((cap) => isSameJsonValue(this._capabilities.get(cap.name), cap))\n        ) {\n          return;\n        }\n        this._capabilities = new Map(this._capabilities);\n        for (const cap of event.capabilities) {\n          this._capabilities.set(cap.name, cap);\n        }\n        break;\n      }\n\n      case \"capability_deregister\": {\n        // TRANSIENT — drop capabilities by name. Names we never had are a no-op:\n        // rebuilding the Map for them would notify with an identical registry.\n        const present = event.names.filter((name) => this._capabilities.has(name));\n        if (present.length === 0) return;\n        this._capabilities = new Map(this._capabilities);\n        for (const name of present) {\n          this._capabilities.delete(name);\n        }\n        break;\n      }\n\n      case \"render_invoked\":\n        // TRANSIENT — record latest render invocation (frontend pairs with\n        // the matching `Capability.render` for placement).\n        this._activeRenderInvocations = new Map(this._activeRenderInvocations);\n        this._activeRenderInvocations.set(event.callId, event);\n        break;\n\n      case \"protocol_info\": {\n        // TRANSIENT — runner announced its protocol version. It announces on\n        // every attach, so tab mounts, StrictMode remounts and SSE reconnects\n        // almost always carry the version we already hold. `ProtocolInfoEvent`\n        // is nothing but `version`, and `ProtocolVersion` is exactly three\n        // numbers, so the field comparison is complete, not conservative.\n        //\n        // A fresh announcement also retires any incompatibility notice: the\n        // platform restarts the session on `incompatible_protocol`, and this\n        // event is the replacement container introducing itself. Nothing cleared\n        // `_incompatibleProtocol` before, so the restart banner was sticky for\n        // the life of the store even though the platform's debug pane documents\n        // this clear as already happening. Guarding without clearing would make\n        // that permanent, since a repeat announcement would never get here.\n        const held = this._protocolInfo?.version;\n        const sameVersion =\n          held !== undefined &&\n          held.major === event.version.major &&\n          held.minor === event.version.minor &&\n          held.patch === event.version.patch;\n        if (sameVersion && this._incompatibleProtocol === null) return;\n        // Keep the held event object when the version is unchanged so consumers\n        // with an effect keyed on `snapshot.protocolInfo` do not re-fire.\n        if (!sameVersion) this._protocolInfo = event;\n        this._incompatibleProtocol = null;\n        break;\n      }\n\n      case \"queued_prompts_dropped\": {\n        // TRANSIENT — the runner dropped these queued prompts on a cancel.\n        // Ids already held are a no-op: no Set rebuild, no notify.\n        const fresh = event.messageIds.filter((id) => !this._notSentPromptIds.has(id));\n        if (fresh.length === 0) return;\n        this._notSentPromptIds = new Set([...this._notSentPromptIds, ...fresh]);\n        break;\n      }\n\n      case \"incompatible_protocol\":\n        // TRANSIENT — runner detected version drift; platform restarts session.\n        this._incompatibleProtocol = event;\n        break;\n\n      case \"capability_invoked\":\n        // Backend intercepts client-side invocations and dispatches them\n        // through V2CapabilityRegistryService — frontends should not see\n        // these. Drop silently if one slips through.\n        return;\n\n      case \"resource_response\":\n      case \"resources_available\":\n        // Transient — handled by ResourceClient, not AgentStore\n        return;\n\n      default:\n        // The switch names 24 of `AgentEvent`'s 61 members. The other 37 —\n        // `log_entry` above all, one per line of container output — hold no\n        // AgentStore state, so falling through to the trailing `_notify()`\n        // rotated the snapshot and re-rendered every consumer for state that\n        // had not changed. Unlike the guarded cases this was not a replay\n        // artifact: it happened on every single occurrence. Hosts that need\n        // these events (log panels, mount indicators, typing bubbles) read them\n        // off the transport upstream of the store, not out of the snapshot.\n        //\n        // Deliberately not an `assertNever` exhaustiveness check: that is a\n        // compile error while 37 members are unnamed, and naming all 61 would\n        // enumerate events the store holds no state for just to satisfy it.\n        return;\n    }\n\n    this._notify();\n  }\n\n  /**\n   * Finalize buffered streaming text as a `text` Message.\n   *\n   * @returns true when text was flushed; false when there was nothing to flush,\n   *   so callers can skip a notify that would change nothing.\n   */\n  private _flushStreaming(): boolean {\n    if (this._streamingFlushed || !this._streamingText) return false;\n    this._appendMessage({ type: \"text\", content: this._streamingText });\n    this._streamingText = \"\";\n    this._streamingFlushed = true;\n    return true;\n  }\n\n  private _appendMessage(\n    payload: AgentCommand | AgentEvent,\n    senderId?: string,\n    id: string = crypto.randomUUID(),\n  ): void {\n    this._seq++;\n    this._messages = [\n      ...this._messages,\n      {\n        id,\n        seq: this._seq,\n        timestamp: new Date().toISOString(),\n        sessionId: this._options.sessionId,\n        ...(senderId ? { senderId } : {}),\n        payload,\n      },\n    ];\n  }\n\n  private _notify(): void {\n    this._snapshot = null;\n    for (const listener of this._listeners) {\n      listener();\n    }\n  }\n}\n"]}

package/dist/{chunk-7XSAW5OC.js → chunk-YLLVSR2U.js}

@@ -1,5 +1,5 @@
-import { compositeSha256 } from './chunk-UQ33Y4DM.js';
-import { parseAssetRef } from './chunk-WDXZA7QW.js';
+import { compositeSha256 } from './chunk-ZBHZLWV3.js';
+import { parseAssetRef } from './chunk-LSSYC5IC.js';
 import { createHash } from 'crypto';
 import { rm, mkdir, writeFile } from 'fs/promises';
 import { isAbsolute, resolve, sep, join, dirname } from 'path';
@@ -123,5 +123,5 @@ async function installFlat(manifest, targetDir, fetcher) {
 }
 
 export { assertSafeManifestPath, installFromManifest, longestCommonDirPrefix };
-//# sourceMappingURL=chunk-7XSAW5OC.js.map
-//# sourceMappingURL=chunk-7XSAW5OC.js.map
+//# sourceMappingURL=chunk-YLLVSR2U.js.map
+//# sourceMappingURL=chunk-YLLVSR2U.js.map

package/dist/{chunk-7XSAW5OC.js.map → chunk-YLLVSR2U.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../library/src/install/install-from-manifest.ts"],"names":[],"mappings":";;;;;;AAgDO,SAAS,sBAAA,CAAuB,aAAqB,CAAA,EAAiB;AAC3E,EAAA,MAAM,MAAM,MAAa;AACvB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yBAAA,EAA4B,CAAC,CAAA,CAAE,CAAA;AAAA,EACjD,CAAA;AACA,EAAA,IAAI,CAAC,CAAA,IAAK,CAAA,CAAE,MAAA,KAAW,GAAG,GAAA,EAAI;AAC9B,EAAA,IAAI,UAAA,CAAW,CAAC,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,GAAG,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,IAAI,CAAA,EAAG,GAAA,EAAI;AAClE,EAAA,MAAM,QAAA,GAAW,CAAA,CAAE,KAAA,CAAM,OAAO,CAAA;AAChC,EAAA,IAAI,SAAS,IAAA,CAAK,CAAC,MAAM,CAAA,KAAM,IAAI,GAAG,GAAA,EAAI;AAC1C,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,WAAA,EAAa,CAAC,CAAA;AACvC,EAAA,IAAI,QAAA,KAAa,eAAe,CAAC,QAAA,CAAS,WAAW,WAAA,GAAc,GAAG,GAAG,GAAA,EAAI;AAC/E;AAgBA,SAAS,sBAAA,CAAuB,MAAc,KAAA,EAAqB;AAIjE,EAAA,MAAM,cAAA,GAAiB,CAAC,GAAG,KAAK,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,CAAC,CAAA,GAAI,EAAI,CAAA;AACpE,EAAA,IAAI,CAAC,KAAA,IAAS,KAAA,CAAM,UAAA,CAAW,GAAG,KAAK,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA,IAAK,cAAA,EAAgB;AAC5E,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,WAAA,EAAc,IAAI,CAAA,yBAAA,EAA4B,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,EACxE;AACF;AAcO,SAAS,uBAAuB,KAAA,EAAkC;AACvE,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,EAAA;AAC/B,EAAA,MAAM,WAAA,GAAc,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA;AAC9D,EAAA,IAAI,MAAA,GAAS,YAAY,CAAC,CAAA;AAC1B,EAAA,KAAA,IAAS,CAAA,GAAI,GAAG,CAAA,GAAI,WAAA,CAAY,UAAU,MAAA,CAAO,MAAA,GAAS,GAAG,CAAA,EAAA,EAAK;AAChE,IAAA,MAAM,IAAA,GAAO,YAAY,CAAC,CAAA;AAC1B,IAAA,IAAI,CAAA,GAAI,CAAA;AACR,IAAA,OAAO,CAAA,GAAI,MAAA,CAAO,MAAA,IAAU,CAAA,GAAI,IAAA,CAAK,MAAA,IAAU,MAAA,CAAO,CAAC,CAAA,KAAM,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,EAAA;AACtE,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA;AAAA,EAC5B;AACA,EAAA,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACxB;AAsDA,eAAsB,oBAAoB,IAAA,EAA2C;AACnF,EAAA,MAAM,EAAE,QAAA,EAAU,WAAA,EAAY,GAAI,IAAA;AAClC,EAAA,MAAM,UACJ,IAAA,CAAK,OAAA,IAAA,CAAY,MAAM,OAAO,mCAA0B,CAAA,EAAG,yBAAA;AAK7D,EAAA,IAAI,IAAA,CAAK,cAAc,MAAA,EAAW;AAChC,IAAA,OAAO,WAAA,CAAY,QAAA,EAAU,IAAA,CAAK,SAAA,EAAW,OAAO,CAAA;AAAA,EACtD;AAQA,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,aAAA,CAAc,SAAS,GAAG,CAAA;AAAA,EACrC,SAAS,CAAA,EAAG;AACV,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,aAAA,EAAgB,QAAA,CAAS,GAAG,CAAA,EAAA,EAAK,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,EAC/F;AACA,EAAA,MAAM,YAAY,MAAA,CAAO,SAAA;AACzB,EAAA,MAAM,OAAO,MAAA,CAAO,IAAA;AACpB,EAAA,MAAM,UAAU,MAAA,CAAO,GAAA;AACvB,EAAA,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,CAAA,aAAA,EAAgB,QAAA,CAAS,GAAG,CAAA,oBAAA,CAAsB,CAAA;AAClF,EAAA,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,CAAA,aAAA,EAAgB,QAAA,CAAS,GAAG,CAAA,sBAAA,CAAwB,CAAA;AAClF,EAAA,sBAAA,CAAuB,aAAa,SAAS,CAAA;AAC7C,EAAA,sBAAA,CAAuB,QAAQ,IAAI,CAAA;AACnC,EAAA,sBAAA,CAAuB,WAAW,OAAO,CAAA;AACzC,EAAA,MAAM,IAAA,GAAO,QAAQ,WAAW,CAAA;AAChC,EAAA,MAAM,WAAA,GAAc,QAAQ,IAAA,CAAK,IAAA,EAAM,IAAI,SAAS,CAAA,CAAA,EAAI,IAAA,EAAM,OAAO,CAAC,CAAA;AAGtE,EAAA,IAAI,gBAAgB,IAAA,IAAQ,CAAC,YAAY,UAAA,CAAW,IAAA,GAAO,GAAG,CAAA,EAAG;AAC/D,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,0BAAA,EAA6B,QAAA,CAAS,GAAG,CAAA,mCAAA,CAAqC,CAAA;AAAA,EAChG;AAKA,EAAA,KAAA,MAAW,CAAA,IAAK,SAAS,KAAA,EAAO;AAC9B,IAAA,sBAAA,CAAuB,WAAA,EAAa,EAAE,IAAI,CAAA;AAAA,EAC5C;AAGA,EAAA,MAAM,QAAQ,QAAA,CAAS,KAAA,CAAM,IAAI,CAAC,CAAA,KAAM,EAAE,IAAI,CAAA;AAC9C,EAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ;AAAA,IAC1B,GAAA,EAAK,SAAS,MAAA,CAAO,GAAA;AAAA,IACrB,SAAA,EAAW,SAAS,MAAA,CAAO,SAAA;AAAA,IAC3B;AAAA,GACD,CAAA;AAID,EAAA,KAAA,MAAW,CAAA,IAAK,SAAS,KAAA,EAAO;AAC9B,IAAA,sBAAA,CAAuB,WAAA,EAAa,EAAE,IAAI,CAAA;AAC1C,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,CAAA,CAAE,IAAI,CAAA;AACxB,IAAA,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,CAAA,8BAAA,EAAiC,CAAA,CAAE,IAAI,CAAA,CAAE,CAAA;AACnE,IAAA,MAAM,MAAA,GAAS,WAAW,QAAQ,CAAA,CAAE,OAAO,GAAG,CAAA,CAAE,OAAO,KAAK,CAAA;AAC5D,IAAA,IAAI,MAAA,KAAW,EAAE,MAAA,EAAQ;AACvB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kBAAA,EAAqB,CAAA,CAAE,IAAI,cAAc,CAAA,CAAE,MAAM,CAAA,MAAA,EAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IACpF;AAAA,EACF;AAGA,EAAA,MAAM,eAAA,GAAkB,eAAA,CAAgB,QAAA,CAAS,KAAK,CAAA;AACtD,EAAA,IAAI,eAAA,KAAoB,SAAS,MAAA,EAAQ;AACvC,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,SAAS,MAAM,CAAA,MAAA,EAAS,eAAe,CAAA,CAAE,CAAA;AAAA,EAChG;AAMA,EAAA,MAAM,GAAG,WAAA,EAAa,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AACtD,EAAA,IAAI;AACF,IAAA,KAAA,MAAW,CAAA,IAAK,SAAS,KAAA,EAAO;AAC9B,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,WAAA,EAAa,CAAA,CAAE,IAAI,CAAA;AACvC,MAAA,MAAM,MAAM,OAAA,CAAQ,MAAM,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAChD,MAAA,MAAM,SAAA,CAAU,MAAA,EAAQ,KAAA,CAAM,CAAA,CAAE,IAAI,CAAE,CAAA;AAAA,IACxC;AAAA,EACF,SAAS,CAAA,EAAG;AACV,IAAA,MAAM,EAAA,CAAG,WAAA,EAAa,EAAE,SAAA,EAAW,IAAA,EAAM,OAAO,IAAA,EAAM,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,IAAC,CAAC,CAAA;AACtE,IAAA,MAAM,CAAA;AAAA,EACR;AAEA,EAAA,OAAO,EAAE,WAAA,EAAY;AACvB;AASA,eAAe,WAAA,CACb,QAAA,EACA,SAAA,EACA,OAAA,EACwB;AACxB,EAAA,MAAM,MAAA,GAAS,QAAQ,SAAS,CAAA;AAGhC,EAAA,KAAA,MAAW,CAAA,IAAK,SAAS,KAAA,EAAO;AAC9B,IAAA,sBAAA,CAAuB,MAAA,EAAQ,EAAE,IAAI,CAAA;AAAA,EACvC;AAGA,EAAA,MAAM,QAAQ,QAAA,CAAS,KAAA,CAAM,IAAI,CAAC,CAAA,KAAM,EAAE,IAAI,CAAA;AAC9C,EAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ;AAAA,IAC1B,GAAA,EAAK,SAAS,MAAA,CAAO,GAAA;AAAA,IACrB,SAAA,EAAW,SAAS,MAAA,CAAO,SAAA;AAAA,IAC3B;AAAA,GACD,CAAA;AAKD,EAAA,MAAM,SAAA,GAAY,uBAAuB,KAAK,CAAA;AAE9C,EAAA,KAAA,MAAW,CAAA,IAAK,SAAS,KAAA,EAAO;AAC9B,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,CAAA,CAAE,IAAI,CAAA;AACxB,IAAA,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,CAAA,8BAAA,EAAiC,CAAA,CAAE,IAAI,CAAA,CAAE,CAAA;AACnE,IAAA,MAAM,MAAA,GAAS,WAAW,QAAQ,CAAA,CAAE,OAAO,GAAG,CAAA,CAAE,OAAO,KAAK,CAAA;AAC5D,IAAA,IAAI,MAAA,KAAW,EAAE,MAAA,EAAQ;AACvB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kBAAA,EAAqB,CAAA,CAAE,IAAI,cAAc,CAAA,CAAE,MAAM,CAAA,MAAA,EAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IACpF;AACA,IAAA,MAAM,OAAA,GAAU,YAAY,CAAA,CAAE,IAAA,CAAK,MAAM,SAAA,CAAU,MAAA,GAAS,CAAC,CAAA,GAAI,CAAA,CAAE,IAAA;AAEnE,IAAA,sBAAA,CAAuB,QAAQ,OAAO,CAAA;AACtC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,EAAQ,OAAO,CAAA;AACjC,IAAA,MAAM,MAAM,OAAA,CAAQ,IAAI,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9C,IAAA,MAAM,SAAA,CAAU,MAAM,GAAG,CAAA;AAAA,EAC3B;AAEA,EAAA,OAAO,EAAE,aAAa,MAAA,EAAO;AAC/B","file":"chunk-7XSAW5OC.js","sourcesContent":["/**\n * Pointer-only install path.\n *\n * Given an {@link InstallManifest} (the Pointer Triple the Catalog hands\n * clients), this:\n *\n *   1. fetches the asset bytes directly from the upstream repo at the pinned\n *      commit (via an injectable fetcher, default {@link fetchAssetFilesFromGitHub});\n *   2. verifies EVERY per-file SHA256 against `manifest.files[].sha256`;\n *   3. verifies the composite SHA256 rollup over the sorted\n *      `<path>:<sha256>\\n` lines against `manifest.sha256`;\n *   4. writes the verified bytes under `<libraryRoot>/@<publisher>/<name>/<version>`.\n *\n * Any hash mismatch is a hard failure — bytes are not written if per-file\n * verification fails, and the composite check is the second gate.\n *\n * @docLink packages/library/concepts#install\n */\n\nimport { createHash } from \"node:crypto\";\nimport { mkdir, rm, writeFile } from \"node:fs/promises\";\nimport { dirname, isAbsolute, join, resolve, sep } from \"node:path\";\nimport type { InstallManifest } from \"@skaile/workspaces/types\";\n// Narrow module, not the `core` barrel: the barrel's chunks carry `import.meta`,\n// which breaks consumers that transpile this entry to CommonJS.\nimport { parseAssetRef } from \"../../../core/src/models.js\";\nimport { compositeSha256 } from \"../../../core/src/publish-manifest.js\";\n\n/**\n * Validate a single manifest-supplied file path against path traversal.\n *\n * `manifest.files[].path` comes off the network — the attacker controls the\n * entire manifest (and therefore every hash in it), so hash verification can\n * NEVER mitigate a malicious *destination*. A path like\n * `../../../../home/user/.bashrc` or an absolute path would escape\n * `installPath` and yield an arbitrary file write. Every path is checked\n * BEFORE any fetch or write happens; the first bad path aborts the entire\n * install with a hard throw.\n *\n * A path is rejected if ANY of:\n *   - it is empty;\n *   - it is absolute (`path.isAbsolute`) or has a leading slash;\n *   - it contains a `..` segment;\n *   - `path.resolve(installPath, p)` is not `installPath` itself and does not\n *     start with `installPath + path.sep` (escapes the install dir).\n *\n * @throws An error matching `/unsafe path in manifest/` on the first bad path.\n */\nexport function assertSafeManifestPath(installPath: string, p: string): void {\n  const bad = (): never => {\n    throw new Error(`unsafe path in manifest: ${p}`);\n  };\n  if (!p || p.length === 0) bad();\n  if (isAbsolute(p) || p.startsWith(\"/\") || p.startsWith(\"\\\\\")) bad();\n  const segments = p.split(/[/\\\\]/);\n  if (segments.some((s) => s === \"..\")) bad();\n  const resolved = resolve(installPath, p);\n  if (resolved !== installPath && !resolved.startsWith(installPath + sep)) bad();\n}\n\n/**\n * Validate one component (publisher / name / version) of the attacker-controlled\n * `manifest.ref`.\n *\n * `installPath` is built by joining these components onto `libraryRoot`. A\n * component containing a path separator or a `..` / leading-dot segment would\n * let `installPath` itself escape `libraryRoot` — yielding an arbitrary file\n * write AND, via the pre-write `rm(installPath, { recursive })`, an arbitrary\n * recursive delete. The per-file `assertSafeManifestPath` guard cannot catch\n * this: it only validates each `f.path` *relative to* `installPath`, never\n * `installPath` itself. Components must be plain identifier-like strings.\n *\n * @throws An error matching `/unsafe ref/` on a bad component.\n */\nfunction assertSafeRefComponent(kind: string, value: string): void {\n  // Reject empty, leading-dot (covers `.` and `..`), path separators, and\n  // ASCII control characters (NUL et al.) — fails a malformed segment fast\n  // with a domain-specific error rather than a raw EINVAL deeper in.\n  const hasControlChar = [...value].some((c) => c.charCodeAt(0) < 0x20);\n  if (!value || value.startsWith(\".\") || /[/\\\\]/.test(value) || hasControlChar) {\n    throw new Error(`unsafe ref ${kind} component in manifest: '${value}'`);\n  }\n}\n\n/**\n * Longest common **directory** prefix across manifest paths, compared by whole\n * slash-delimited segments (never raw-string — so `app/` and `app-data/` never\n * collide). Each path's basename is excluded, so the result is always a\n * directory prefix and every path keeps a non-empty remainder after stripping.\n *\n * Used by flat mode to reproduce the platform pointer-installer's asset-rooting:\n * the store persists repo-root-relative paths (e.g. `skaile-platform/mcpo/xls/MCP.md`)\n * but the runner scans `.skaile/assets/<kind>/<name>/` for immediate-child files,\n * so this prefix is stripped from the WRITE path while the fetch keeps the full\n * repo path. Returns `''` when there is no common directory (a no-op strip).\n */\nexport function longestCommonDirPrefix(paths: readonly string[]): string {\n  if (paths.length === 0) return \"\";\n  const dirSegments = paths.map((p) => p.split(\"/\").slice(0, -1));\n  let common = dirSegments[0]!;\n  for (let i = 1; i < dirSegments.length && common.length > 0; i++) {\n    const segs = dirSegments[i]!;\n    let n = 0;\n    while (n < common.length && n < segs.length && common[n] === segs[n]) n++;\n    common = common.slice(0, n);\n  }\n  return common.join(\"/\");\n}\n\n/**\n * Fetcher signature — fetches `{ path → Buffer }` for the requested paths at\n * a pinned upstream commit. {@link fetchAssetFilesFromGitHub} is the default\n * production implementation; tests inject a mock.\n */\nexport type AssetFetcher = (opts: {\n  url: string;\n  commitSha: string;\n  paths: string[];\n}) => Promise<Record<string, Buffer>>;\n\n/**\n * Options for {@link installFromManifest}.\n */\nexport interface InstallOpts {\n  /** The pointer-only install manifest from the Catalog. */\n  manifest: InstallManifest;\n  /** Filesystem root the asset is installed under (ref-derived mode). */\n  libraryRoot: string;\n  /**\n   * Pluggable fetcher so tests can inject mock data. Defaults to\n   * {@link fetchAssetFilesFromGitHub} in production.\n   */\n  fetcher?: AssetFetcher;\n  /**\n   * Flat-layout mode. When set, install-core reproduces the platform\n   * pointer-installer's behavior: it ignores `libraryRoot`/ref-derivation, does\n   * NOT parse `manifest.ref` and does NOT verify the composite sha256, strips\n   * the longest-common-dir prefix from each path, per-file sha256-verifies, and\n   * writes the stripped paths as immediate children of `targetDir` (what the\n   * runner's `.skaile/assets/<kind>/<name>/` scan requires). `installPath` is\n   * `targetDir`. Absent → unchanged ref-derived `@<pub>/name/version/<path>`\n   * layout with composite verify.\n   */\n  targetDir?: string;\n}\n\n/**\n * Result of a successful {@link installFromManifest} call.\n */\nexport interface InstallResult {\n  /** Absolute path the asset files were written to. */\n  installPath: string;\n}\n\n/**\n * Fetch, verify, and write an asset's files per its {@link InstallManifest}.\n *\n * @throws An error matching `/hash mismatch/i` if any per-file SHA256 differs.\n * @throws An error matching `/composite hash mismatch/i` if the rollup differs.\n * @throws An error if the ref is malformed or the fetcher omits a file.\n */\nexport async function installFromManifest(opts: InstallOpts): Promise<InstallResult> {\n  const { manifest, libraryRoot } = opts;\n  const fetcher =\n    opts.fetcher ?? (await import(\"./source-fetch-github.js\")).fetchAssetFilesFromGitHub;\n\n  // Flat mode: reproduce the platform pointer-installer's asset-rooted layout.\n  // No ref parse, no composite verify — the platform store may not satisfy a\n  // ref-grammar or composite, and the runner only needs immediate-child files.\n  if (opts.targetDir !== undefined) {\n    return installFlat(manifest, opts.targetDir, fetcher);\n  }\n\n  // 1. Parse ref into install path: `skill:@x/git#1.0.0` → `<root>/@x/git/1.0.0`.\n  // Done first so the C1 path-traversal guard can resolve against installPath\n  // BEFORE any network fetch happens. The ref is attacker-controlled, so each\n  // segment is further validated as a safe path component (H1) after parsing.\n  // `parseAssetRef` is the single canonical grammar (`kind:@publisher/name#version`);\n  // the legacy trailing-`@version` shape was removed in core and is rejected here.\n  let parsed: ReturnType<typeof parseAssetRef>;\n  try {\n    parsed = parseAssetRef(manifest.ref);\n  } catch (e) {\n    throw new Error(`invalid ref: ${manifest.ref}: ${e instanceof Error ? e.message : String(e)}`);\n  }\n  const publisher = parsed.publisher;\n  const name = parsed.name;\n  const version = parsed.pin;\n  if (!publisher) throw new Error(`invalid ref: ${manifest.ref} (missing publisher)`);\n  if (!version) throw new Error(`invalid ref: ${manifest.ref} (missing version pin)`);\n  assertSafeRefComponent(\"publisher\", publisher);\n  assertSafeRefComponent(\"name\", name);\n  assertSafeRefComponent(\"version\", version);\n  const root = resolve(libraryRoot);\n  const installPath = resolve(join(root, `@${publisher}`, name, version));\n  // Defense in depth: even with the segment guards above, assert the built\n  // installPath stays strictly inside libraryRoot before any write or `rm`.\n  if (installPath !== root && !installPath.startsWith(root + sep)) {\n    throw new Error(`unsafe install path: ref '${manifest.ref}' resolves outside the library root`);\n  }\n\n  // 2. [C1] Validate EVERY manifest path against traversal BEFORE fetching.\n  // The attacker controls the manifest (and thus all hashes) — hashes verify\n  // content, never destination. Reject the whole install on the first bad path.\n  for (const f of manifest.files) {\n    assertSafeManifestPath(installPath, f.path);\n  }\n\n  // 3. Fetch all files at the pinned commit.\n  const paths = manifest.files.map((f) => f.path);\n  const bytes = await fetcher({\n    url: manifest.source.url,\n    commitSha: manifest.source.commitSha,\n    paths,\n  });\n\n  // 4. Verify per-file SHA256 — hard fail before writing anything. The path\n  // key used to read from the fetcher result is re-guarded as defense in depth.\n  for (const f of manifest.files) {\n    assertSafeManifestPath(installPath, f.path);\n    const buf = bytes[f.path];\n    if (!buf) throw new Error(`fetcher returned no bytes for ${f.path}`);\n    const actual = createHash(\"sha256\").update(buf).digest(\"hex\");\n    if (actual !== f.sha256) {\n      throw new Error(`hash mismatch for ${f.path}: expected ${f.sha256}, got ${actual}`);\n    }\n  }\n\n  // 5. Verify composite SHA256 over the sorted `<path>:<sha256>\\n` lines.\n  const actualComposite = compositeSha256(manifest.files);\n  if (actualComposite !== manifest.sha256) {\n    throw new Error(`composite hash mismatch: expected ${manifest.sha256}, got ${actualComposite}`);\n  }\n\n  // 6. [M1] Write all verified files. A failed install must leave NO partial\n  // directory: any prior `installPath` is removed first (clean overwrite), and\n  // a mid-loop write failure removes the partially-written tree before\n  // rethrowing.\n  await rm(installPath, { recursive: true, force: true });\n  try {\n    for (const f of manifest.files) {\n      const target = join(installPath, f.path);\n      await mkdir(dirname(target), { recursive: true });\n      await writeFile(target, bytes[f.path]!);\n    }\n  } catch (e) {\n    await rm(installPath, { recursive: true, force: true }).catch(() => {});\n    throw e;\n  }\n\n  return { installPath };\n}\n\n/**\n * Flat-layout install — the platform pointer-installer's behavior, made canonical\n * in install-core. Validates every path, fetches with the FULL repo paths, per-file\n * sha256-verifies, then strips the longest-common-dir prefix and writes each file\n * as `join(targetDir, path.slice(assetRoot.length + 1))` — immediate children of\n * `targetDir`. No ref parse, no composite check.\n */\nasync function installFlat(\n  manifest: InstallManifest,\n  targetDir: string,\n  fetcher: AssetFetcher,\n): Promise<InstallResult> {\n  const target = resolve(targetDir);\n\n  // Gate every path before any fetch — the attacker controls the whole manifest.\n  for (const f of manifest.files) {\n    assertSafeManifestPath(target, f.path);\n  }\n\n  // Fetch keys off the FULL repo path (matches the upstream tree).\n  const paths = manifest.files.map((f) => f.path);\n  const bytes = await fetcher({\n    url: manifest.source.url,\n    commitSha: manifest.source.commitSha,\n    paths,\n  });\n\n  // Strip the asset-root dir prefix from the WRITE path only — the fetch above\n  // still keyed off the full repo path. Stripping removes leading whole segments\n  // (never the basename), so a non-empty remainder always survives.\n  const assetRoot = longestCommonDirPrefix(paths);\n\n  for (const f of manifest.files) {\n    const buf = bytes[f.path];\n    if (!buf) throw new Error(`fetcher returned no bytes for ${f.path}`);\n    const actual = createHash(\"sha256\").update(buf).digest(\"hex\");\n    if (actual !== f.sha256) {\n      throw new Error(`hash mismatch for ${f.path}: expected ${f.sha256}, got ${actual}`);\n    }\n    const relPath = assetRoot ? f.path.slice(assetRoot.length + 1) : f.path;\n    // Re-guard the post-strip destination — it is what we actually write.\n    assertSafeManifestPath(target, relPath);\n    const dest = join(target, relPath);\n    await mkdir(dirname(dest), { recursive: true });\n    await writeFile(dest, buf);\n  }\n\n  return { installPath: target };\n}\n"]}
+{"version":3,"sources":["../library/src/install/install-from-manifest.ts"],"names":[],"mappings":";;;;;;AAgDO,SAAS,sBAAA,CAAuB,aAAqB,CAAA,EAAiB;AAC3E,EAAA,MAAM,MAAM,MAAa;AACvB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yBAAA,EAA4B,CAAC,CAAA,CAAE,CAAA;AAAA,EACjD,CAAA;AACA,EAAA,IAAI,CAAC,CAAA,IAAK,CAAA,CAAE,MAAA,KAAW,GAAG,GAAA,EAAI;AAC9B,EAAA,IAAI,UAAA,CAAW,CAAC,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,GAAG,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,IAAI,CAAA,EAAG,GAAA,EAAI;AAClE,EAAA,MAAM,QAAA,GAAW,CAAA,CAAE,KAAA,CAAM,OAAO,CAAA;AAChC,EAAA,IAAI,SAAS,IAAA,CAAK,CAAC,MAAM,CAAA,KAAM,IAAI,GAAG,GAAA,EAAI;AAC1C,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,WAAA,EAAa,CAAC,CAAA;AACvC,EAAA,IAAI,QAAA,KAAa,eAAe,CAAC,QAAA,CAAS,WAAW,WAAA,GAAc,GAAG,GAAG,GAAA,EAAI;AAC/E;AAgBA,SAAS,sBAAA,CAAuB,MAAc,KAAA,EAAqB;AAIjE,EAAA,MAAM,cAAA,GAAiB,CAAC,GAAG,KAAK,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,CAAC,CAAA,GAAI,EAAI,CAAA;AACpE,EAAA,IAAI,CAAC,KAAA,IAAS,KAAA,CAAM,UAAA,CAAW,GAAG,KAAK,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA,IAAK,cAAA,EAAgB;AAC5E,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,WAAA,EAAc,IAAI,CAAA,yBAAA,EAA4B,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,EACxE;AACF;AAcO,SAAS,uBAAuB,KAAA,EAAkC;AACvE,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,EAAA;AAC/B,EAAA,MAAM,WAAA,GAAc,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA;AAC9D,EAAA,IAAI,MAAA,GAAS,YAAY,CAAC,CAAA;AAC1B,EAAA,KAAA,IAAS,CAAA,GAAI,GAAG,CAAA,GAAI,WAAA,CAAY,UAAU,MAAA,CAAO,MAAA,GAAS,GAAG,CAAA,EAAA,EAAK;AAChE,IAAA,MAAM,IAAA,GAAO,YAAY,CAAC,CAAA;AAC1B,IAAA,IAAI,CAAA,GAAI,CAAA;AACR,IAAA,OAAO,CAAA,GAAI,MAAA,CAAO,MAAA,IAAU,CAAA,GAAI,IAAA,CAAK,MAAA,IAAU,MAAA,CAAO,CAAC,CAAA,KAAM,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,EAAA;AACtE,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA;AAAA,EAC5B;AACA,EAAA,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACxB;AAsDA,eAAsB,oBAAoB,IAAA,EAA2C;AACnF,EAAA,MAAM,EAAE,QAAA,EAAU,WAAA,EAAY,GAAI,IAAA;AAClC,EAAA,MAAM,UACJ,IAAA,CAAK,OAAA,IAAA,CAAY,MAAM,OAAO,mCAA0B,CAAA,EAAG,yBAAA;AAK7D,EAAA,IAAI,IAAA,CAAK,cAAc,MAAA,EAAW;AAChC,IAAA,OAAO,WAAA,CAAY,QAAA,EAAU,IAAA,CAAK,SAAA,EAAW,OAAO,CAAA;AAAA,EACtD;AAQA,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,aAAA,CAAc,SAAS,GAAG,CAAA;AAAA,EACrC,SAAS,CAAA,EAAG;AACV,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,aAAA,EAAgB,QAAA,CAAS,GAAG,CAAA,EAAA,EAAK,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,EAC/F;AACA,EAAA,MAAM,YAAY,MAAA,CAAO,SAAA;AACzB,EAAA,MAAM,OAAO,MAAA,CAAO,IAAA;AACpB,EAAA,MAAM,UAAU,MAAA,CAAO,GAAA;AACvB,EAAA,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,CAAA,aAAA,EAAgB,QAAA,CAAS,GAAG,CAAA,oBAAA,CAAsB,CAAA;AAClF,EAAA,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,CAAA,aAAA,EAAgB,QAAA,CAAS,GAAG,CAAA,sBAAA,CAAwB,CAAA;AAClF,EAAA,sBAAA,CAAuB,aAAa,SAAS,CAAA;AAC7C,EAAA,sBAAA,CAAuB,QAAQ,IAAI,CAAA;AACnC,EAAA,sBAAA,CAAuB,WAAW,OAAO,CAAA;AACzC,EAAA,MAAM,IAAA,GAAO,QAAQ,WAAW,CAAA;AAChC,EAAA,MAAM,WAAA,GAAc,QAAQ,IAAA,CAAK,IAAA,EAAM,IAAI,SAAS,CAAA,CAAA,EAAI,IAAA,EAAM,OAAO,CAAC,CAAA;AAGtE,EAAA,IAAI,gBAAgB,IAAA,IAAQ,CAAC,YAAY,UAAA,CAAW,IAAA,GAAO,GAAG,CAAA,EAAG;AAC/D,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,0BAAA,EAA6B,QAAA,CAAS,GAAG,CAAA,mCAAA,CAAqC,CAAA;AAAA,EAChG;AAKA,EAAA,KAAA,MAAW,CAAA,IAAK,SAAS,KAAA,EAAO;AAC9B,IAAA,sBAAA,CAAuB,WAAA,EAAa,EAAE,IAAI,CAAA;AAAA,EAC5C;AAGA,EAAA,MAAM,QAAQ,QAAA,CAAS,KAAA,CAAM,IAAI,CAAC,CAAA,KAAM,EAAE,IAAI,CAAA;AAC9C,EAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ;AAAA,IAC1B,GAAA,EAAK,SAAS,MAAA,CAAO,GAAA;AAAA,IACrB,SAAA,EAAW,SAAS,MAAA,CAAO,SAAA;AAAA,IAC3B;AAAA,GACD,CAAA;AAID,EAAA,KAAA,MAAW,CAAA,IAAK,SAAS,KAAA,EAAO;AAC9B,IAAA,sBAAA,CAAuB,WAAA,EAAa,EAAE,IAAI,CAAA;AAC1C,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,CAAA,CAAE,IAAI,CAAA;AACxB,IAAA,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,CAAA,8BAAA,EAAiC,CAAA,CAAE,IAAI,CAAA,CAAE,CAAA;AACnE,IAAA,MAAM,MAAA,GAAS,WAAW,QAAQ,CAAA,CAAE,OAAO,GAAG,CAAA,CAAE,OAAO,KAAK,CAAA;AAC5D,IAAA,IAAI,MAAA,KAAW,EAAE,MAAA,EAAQ;AACvB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kBAAA,EAAqB,CAAA,CAAE,IAAI,cAAc,CAAA,CAAE,MAAM,CAAA,MAAA,EAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IACpF;AAAA,EACF;AAGA,EAAA,MAAM,eAAA,GAAkB,eAAA,CAAgB,QAAA,CAAS,KAAK,CAAA;AACtD,EAAA,IAAI,eAAA,KAAoB,SAAS,MAAA,EAAQ;AACvC,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,SAAS,MAAM,CAAA,MAAA,EAAS,eAAe,CAAA,CAAE,CAAA;AAAA,EAChG;AAMA,EAAA,MAAM,GAAG,WAAA,EAAa,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AACtD,EAAA,IAAI;AACF,IAAA,KAAA,MAAW,CAAA,IAAK,SAAS,KAAA,EAAO;AAC9B,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,WAAA,EAAa,CAAA,CAAE,IAAI,CAAA;AACvC,MAAA,MAAM,MAAM,OAAA,CAAQ,MAAM,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAChD,MAAA,MAAM,SAAA,CAAU,MAAA,EAAQ,KAAA,CAAM,CAAA,CAAE,IAAI,CAAE,CAAA;AAAA,IACxC;AAAA,EACF,SAAS,CAAA,EAAG;AACV,IAAA,MAAM,EAAA,CAAG,WAAA,EAAa,EAAE,SAAA,EAAW,IAAA,EAAM,OAAO,IAAA,EAAM,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,IAAC,CAAC,CAAA;AACtE,IAAA,MAAM,CAAA;AAAA,EACR;AAEA,EAAA,OAAO,EAAE,WAAA,EAAY;AACvB;AASA,eAAe,WAAA,CACb,QAAA,EACA,SAAA,EACA,OAAA,EACwB;AACxB,EAAA,MAAM,MAAA,GAAS,QAAQ,SAAS,CAAA;AAGhC,EAAA,KAAA,MAAW,CAAA,IAAK,SAAS,KAAA,EAAO;AAC9B,IAAA,sBAAA,CAAuB,MAAA,EAAQ,EAAE,IAAI,CAAA;AAAA,EACvC;AAGA,EAAA,MAAM,QAAQ,QAAA,CAAS,KAAA,CAAM,IAAI,CAAC,CAAA,KAAM,EAAE,IAAI,CAAA;AAC9C,EAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ;AAAA,IAC1B,GAAA,EAAK,SAAS,MAAA,CAAO,GAAA;AAAA,IACrB,SAAA,EAAW,SAAS,MAAA,CAAO,SAAA;AAAA,IAC3B;AAAA,GACD,CAAA;AAKD,EAAA,MAAM,SAAA,GAAY,uBAAuB,KAAK,CAAA;AAE9C,EAAA,KAAA,MAAW,CAAA,IAAK,SAAS,KAAA,EAAO;AAC9B,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,CAAA,CAAE,IAAI,CAAA;AACxB,IAAA,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,CAAA,8BAAA,EAAiC,CAAA,CAAE,IAAI,CAAA,CAAE,CAAA;AACnE,IAAA,MAAM,MAAA,GAAS,WAAW,QAAQ,CAAA,CAAE,OAAO,GAAG,CAAA,CAAE,OAAO,KAAK,CAAA;AAC5D,IAAA,IAAI,MAAA,KAAW,EAAE,MAAA,EAAQ;AACvB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kBAAA,EAAqB,CAAA,CAAE,IAAI,cAAc,CAAA,CAAE,MAAM,CAAA,MAAA,EAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IACpF;AACA,IAAA,MAAM,OAAA,GAAU,YAAY,CAAA,CAAE,IAAA,CAAK,MAAM,SAAA,CAAU,MAAA,GAAS,CAAC,CAAA,GAAI,CAAA,CAAE,IAAA;AAEnE,IAAA,sBAAA,CAAuB,QAAQ,OAAO,CAAA;AACtC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,EAAQ,OAAO,CAAA;AACjC,IAAA,MAAM,MAAM,OAAA,CAAQ,IAAI,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9C,IAAA,MAAM,SAAA,CAAU,MAAM,GAAG,CAAA;AAAA,EAC3B;AAEA,EAAA,OAAO,EAAE,aAAa,MAAA,EAAO;AAC/B","file":"chunk-YLLVSR2U.js","sourcesContent":["/**\n * Pointer-only install path.\n *\n * Given an {@link InstallManifest} (the Pointer Triple the Catalog hands\n * clients), this:\n *\n *   1. fetches the asset bytes directly from the upstream repo at the pinned\n *      commit (via an injectable fetcher, default {@link fetchAssetFilesFromGitHub});\n *   2. verifies EVERY per-file SHA256 against `manifest.files[].sha256`;\n *   3. verifies the composite SHA256 rollup over the sorted\n *      `<path>:<sha256>\\n` lines against `manifest.sha256`;\n *   4. writes the verified bytes under `<libraryRoot>/@<publisher>/<name>/<version>`.\n *\n * Any hash mismatch is a hard failure — bytes are not written if per-file\n * verification fails, and the composite check is the second gate.\n *\n * @docLink packages/library/concepts#install\n */\n\nimport { createHash } from \"node:crypto\";\nimport { mkdir, rm, writeFile } from \"node:fs/promises\";\nimport { dirname, isAbsolute, join, resolve, sep } from \"node:path\";\nimport type { InstallManifest } from \"@skaile/workspaces/types\";\n// Narrow module, not the `core` barrel: the barrel's chunks carry `import.meta`,\n// which breaks consumers that transpile this entry to CommonJS.\nimport { parseAssetRef } from \"../../../core/src/models.js\";\nimport { compositeSha256 } from \"../../../core/src/publish-manifest.js\";\n\n/**\n * Validate a single manifest-supplied file path against path traversal.\n *\n * `manifest.files[].path` comes off the network — the attacker controls the\n * entire manifest (and therefore every hash in it), so hash verification can\n * NEVER mitigate a malicious *destination*. A path like\n * `../../../../home/user/.bashrc` or an absolute path would escape\n * `installPath` and yield an arbitrary file write. Every path is checked\n * BEFORE any fetch or write happens; the first bad path aborts the entire\n * install with a hard throw.\n *\n * A path is rejected if ANY of:\n *   - it is empty;\n *   - it is absolute (`path.isAbsolute`) or has a leading slash;\n *   - it contains a `..` segment;\n *   - `path.resolve(installPath, p)` is not `installPath` itself and does not\n *     start with `installPath + path.sep` (escapes the install dir).\n *\n * @throws An error matching `/unsafe path in manifest/` on the first bad path.\n */\nexport function assertSafeManifestPath(installPath: string, p: string): void {\n  const bad = (): never => {\n    throw new Error(`unsafe path in manifest: ${p}`);\n  };\n  if (!p || p.length === 0) bad();\n  if (isAbsolute(p) || p.startsWith(\"/\") || p.startsWith(\"\\\\\")) bad();\n  const segments = p.split(/[/\\\\]/);\n  if (segments.some((s) => s === \"..\")) bad();\n  const resolved = resolve(installPath, p);\n  if (resolved !== installPath && !resolved.startsWith(installPath + sep)) bad();\n}\n\n/**\n * Validate one component (publisher / name / version) of the attacker-controlled\n * `manifest.ref`.\n *\n * `installPath` is built by joining these components onto `libraryRoot`. A\n * component containing a path separator or a `..` / leading-dot segment would\n * let `installPath` itself escape `libraryRoot` — yielding an arbitrary file\n * write AND, via the pre-write `rm(installPath, { recursive })`, an arbitrary\n * recursive delete. The per-file `assertSafeManifestPath` guard cannot catch\n * this: it only validates each `f.path` *relative to* `installPath`, never\n * `installPath` itself. Components must be plain identifier-like strings.\n *\n * @throws An error matching `/unsafe ref/` on a bad component.\n */\nfunction assertSafeRefComponent(kind: string, value: string): void {\n  // Reject empty, leading-dot (covers `.` and `..`), path separators, and\n  // ASCII control characters (NUL et al.) — fails a malformed segment fast\n  // with a domain-specific error rather than a raw EINVAL deeper in.\n  const hasControlChar = [...value].some((c) => c.charCodeAt(0) < 0x20);\n  if (!value || value.startsWith(\".\") || /[/\\\\]/.test(value) || hasControlChar) {\n    throw new Error(`unsafe ref ${kind} component in manifest: '${value}'`);\n  }\n}\n\n/**\n * Longest common **directory** prefix across manifest paths, compared by whole\n * slash-delimited segments (never raw-string — so `app/` and `app-data/` never\n * collide). Each path's basename is excluded, so the result is always a\n * directory prefix and every path keeps a non-empty remainder after stripping.\n *\n * Used by flat mode to reproduce the platform pointer-installer's asset-rooting:\n * the store persists repo-root-relative paths (e.g. `skaile-platform/mcpo/xls/MCP.md`)\n * but the runner scans `.skaile/assets/<kind>/<name>/` for immediate-child files,\n * so this prefix is stripped from the WRITE path while the fetch keeps the full\n * repo path. Returns `''` when there is no common directory (a no-op strip).\n */\nexport function longestCommonDirPrefix(paths: readonly string[]): string {\n  if (paths.length === 0) return \"\";\n  const dirSegments = paths.map((p) => p.split(\"/\").slice(0, -1));\n  let common = dirSegments[0]!;\n  for (let i = 1; i < dirSegments.length && common.length > 0; i++) {\n    const segs = dirSegments[i]!;\n    let n = 0;\n    while (n < common.length && n < segs.length && common[n] === segs[n]) n++;\n    common = common.slice(0, n);\n  }\n  return common.join(\"/\");\n}\n\n/**\n * Fetcher signature — fetches `{ path → Buffer }` for the requested paths at\n * a pinned upstream commit. {@link fetchAssetFilesFromGitHub} is the default\n * production implementation; tests inject a mock.\n */\nexport type AssetFetcher = (opts: {\n  url: string;\n  commitSha: string;\n  paths: string[];\n}) => Promise<Record<string, Buffer>>;\n\n/**\n * Options for {@link installFromManifest}.\n */\nexport interface InstallOpts {\n  /** The pointer-only install manifest from the Catalog. */\n  manifest: InstallManifest;\n  /** Filesystem root the asset is installed under (ref-derived mode). */\n  libraryRoot: string;\n  /**\n   * Pluggable fetcher so tests can inject mock data. Defaults to\n   * {@link fetchAssetFilesFromGitHub} in production.\n   */\n  fetcher?: AssetFetcher;\n  /**\n   * Flat-layout mode. When set, install-core reproduces the platform\n   * pointer-installer's behavior: it ignores `libraryRoot`/ref-derivation, does\n   * NOT parse `manifest.ref` and does NOT verify the composite sha256, strips\n   * the longest-common-dir prefix from each path, per-file sha256-verifies, and\n   * writes the stripped paths as immediate children of `targetDir` (what the\n   * runner's `.skaile/assets/<kind>/<name>/` scan requires). `installPath` is\n   * `targetDir`. Absent → unchanged ref-derived `@<pub>/name/version/<path>`\n   * layout with composite verify.\n   */\n  targetDir?: string;\n}\n\n/**\n * Result of a successful {@link installFromManifest} call.\n */\nexport interface InstallResult {\n  /** Absolute path the asset files were written to. */\n  installPath: string;\n}\n\n/**\n * Fetch, verify, and write an asset's files per its {@link InstallManifest}.\n *\n * @throws An error matching `/hash mismatch/i` if any per-file SHA256 differs.\n * @throws An error matching `/composite hash mismatch/i` if the rollup differs.\n * @throws An error if the ref is malformed or the fetcher omits a file.\n */\nexport async function installFromManifest(opts: InstallOpts): Promise<InstallResult> {\n  const { manifest, libraryRoot } = opts;\n  const fetcher =\n    opts.fetcher ?? (await import(\"./source-fetch-github.js\")).fetchAssetFilesFromGitHub;\n\n  // Flat mode: reproduce the platform pointer-installer's asset-rooted layout.\n  // No ref parse, no composite verify — the platform store may not satisfy a\n  // ref-grammar or composite, and the runner only needs immediate-child files.\n  if (opts.targetDir !== undefined) {\n    return installFlat(manifest, opts.targetDir, fetcher);\n  }\n\n  // 1. Parse ref into install path: `skill:@x/git#1.0.0` → `<root>/@x/git/1.0.0`.\n  // Done first so the C1 path-traversal guard can resolve against installPath\n  // BEFORE any network fetch happens. The ref is attacker-controlled, so each\n  // segment is further validated as a safe path component (H1) after parsing.\n  // `parseAssetRef` is the single canonical grammar (`kind:@publisher/name#version`);\n  // the legacy trailing-`@version` shape was removed in core and is rejected here.\n  let parsed: ReturnType<typeof parseAssetRef>;\n  try {\n    parsed = parseAssetRef(manifest.ref);\n  } catch (e) {\n    throw new Error(`invalid ref: ${manifest.ref}: ${e instanceof Error ? e.message : String(e)}`);\n  }\n  const publisher = parsed.publisher;\n  const name = parsed.name;\n  const version = parsed.pin;\n  if (!publisher) throw new Error(`invalid ref: ${manifest.ref} (missing publisher)`);\n  if (!version) throw new Error(`invalid ref: ${manifest.ref} (missing version pin)`);\n  assertSafeRefComponent(\"publisher\", publisher);\n  assertSafeRefComponent(\"name\", name);\n  assertSafeRefComponent(\"version\", version);\n  const root = resolve(libraryRoot);\n  const installPath = resolve(join(root, `@${publisher}`, name, version));\n  // Defense in depth: even with the segment guards above, assert the built\n  // installPath stays strictly inside libraryRoot before any write or `rm`.\n  if (installPath !== root && !installPath.startsWith(root + sep)) {\n    throw new Error(`unsafe install path: ref '${manifest.ref}' resolves outside the library root`);\n  }\n\n  // 2. [C1] Validate EVERY manifest path against traversal BEFORE fetching.\n  // The attacker controls the manifest (and thus all hashes) — hashes verify\n  // content, never destination. Reject the whole install on the first bad path.\n  for (const f of manifest.files) {\n    assertSafeManifestPath(installPath, f.path);\n  }\n\n  // 3. Fetch all files at the pinned commit.\n  const paths = manifest.files.map((f) => f.path);\n  const bytes = await fetcher({\n    url: manifest.source.url,\n    commitSha: manifest.source.commitSha,\n    paths,\n  });\n\n  // 4. Verify per-file SHA256 — hard fail before writing anything. The path\n  // key used to read from the fetcher result is re-guarded as defense in depth.\n  for (const f of manifest.files) {\n    assertSafeManifestPath(installPath, f.path);\n    const buf = bytes[f.path];\n    if (!buf) throw new Error(`fetcher returned no bytes for ${f.path}`);\n    const actual = createHash(\"sha256\").update(buf).digest(\"hex\");\n    if (actual !== f.sha256) {\n      throw new Error(`hash mismatch for ${f.path}: expected ${f.sha256}, got ${actual}`);\n    }\n  }\n\n  // 5. Verify composite SHA256 over the sorted `<path>:<sha256>\\n` lines.\n  const actualComposite = compositeSha256(manifest.files);\n  if (actualComposite !== manifest.sha256) {\n    throw new Error(`composite hash mismatch: expected ${manifest.sha256}, got ${actualComposite}`);\n  }\n\n  // 6. [M1] Write all verified files. A failed install must leave NO partial\n  // directory: any prior `installPath` is removed first (clean overwrite), and\n  // a mid-loop write failure removes the partially-written tree before\n  // rethrowing.\n  await rm(installPath, { recursive: true, force: true });\n  try {\n    for (const f of manifest.files) {\n      const target = join(installPath, f.path);\n      await mkdir(dirname(target), { recursive: true });\n      await writeFile(target, bytes[f.path]!);\n    }\n  } catch (e) {\n    await rm(installPath, { recursive: true, force: true }).catch(() => {});\n    throw e;\n  }\n\n  return { installPath };\n}\n\n/**\n * Flat-layout install — the platform pointer-installer's behavior, made canonical\n * in install-core. Validates every path, fetches with the FULL repo paths, per-file\n * sha256-verifies, then strips the longest-common-dir prefix and writes each file\n * as `join(targetDir, path.slice(assetRoot.length + 1))` — immediate children of\n * `targetDir`. No ref parse, no composite check.\n */\nasync function installFlat(\n  manifest: InstallManifest,\n  targetDir: string,\n  fetcher: AssetFetcher,\n): Promise<InstallResult> {\n  const target = resolve(targetDir);\n\n  // Gate every path before any fetch — the attacker controls the whole manifest.\n  for (const f of manifest.files) {\n    assertSafeManifestPath(target, f.path);\n  }\n\n  // Fetch keys off the FULL repo path (matches the upstream tree).\n  const paths = manifest.files.map((f) => f.path);\n  const bytes = await fetcher({\n    url: manifest.source.url,\n    commitSha: manifest.source.commitSha,\n    paths,\n  });\n\n  // Strip the asset-root dir prefix from the WRITE path only — the fetch above\n  // still keyed off the full repo path. Stripping removes leading whole segments\n  // (never the basename), so a non-empty remainder always survives.\n  const assetRoot = longestCommonDirPrefix(paths);\n\n  for (const f of manifest.files) {\n    const buf = bytes[f.path];\n    if (!buf) throw new Error(`fetcher returned no bytes for ${f.path}`);\n    const actual = createHash(\"sha256\").update(buf).digest(\"hex\");\n    if (actual !== f.sha256) {\n      throw new Error(`hash mismatch for ${f.path}: expected ${f.sha256}, got ${actual}`);\n    }\n    const relPath = assetRoot ? f.path.slice(assetRoot.length + 1) : f.path;\n    // Re-guard the post-strip destination — it is what we actually write.\n    assertSafeManifestPath(target, relPath);\n    const dest = join(target, relPath);\n    await mkdir(dirname(dest), { recursive: true });\n    await writeFile(dest, buf);\n  }\n\n  return { installPath: target };\n}\n"]}

package/dist/{chunk-6Z5KTFJT.js → chunk-Z3VKUWAX.js}

@@ -1,4 +1,4 @@
-import { findAiAssetsRoot } from './chunk-H6UVIKQ2.js';
+import { findAiAssetsRoot } from './chunk-VYVTEMAW.js';
 
 // workspace-plugin/src/utils/ai-assets.ts
 function findAiAssetsRoot2(startDir) {
@@ -6,5 +6,5 @@ function findAiAssetsRoot2(startDir) {
 }
 
 export { findAiAssetsRoot2 as findAiAssetsRoot };
-//# sourceMappingURL=chunk-6Z5KTFJT.js.map
-//# sourceMappingURL=chunk-6Z5KTFJT.js.map
+//# sourceMappingURL=chunk-Z3VKUWAX.js.map
+//# sourceMappingURL=chunk-Z3VKUWAX.js.map

package/dist/{chunk-6Z5KTFJT.js.map → chunk-Z3VKUWAX.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../workspace-plugin/src/utils/ai-assets.ts"],"names":["findAiAssetsRoot"],"mappings":";;;AA+BO,SAASA,kBAAiB,QAAA,EAA0C;AACzE,EAAA,OAAO,iBAAuB,QAAQ,CAAA;AACxC","file":"chunk-6Z5KTFJT.js","sourcesContent":["// utils/ai-assets.ts\n// Shared utility for locating the ai-assets root directory.\n//\n// This is NOT a startup path (an earlier comment here claimed it was). Every\n// caller is an agent-invokable tool in `tools/flows.ts` / `tools/skills.ts`, so\n// the walk runs on a request path inside the long-lived `skaile serve` process,\n// once per tool invocation. With `projectDir = /skaile` the upward walk passes\n// directly beside the rclone FUSE workspace mount, so a synchronous `statSync`\n// here parks the whole event loop when that mount wedges — the failure mode\n// behind the 2026-08-07 outages. See issue #454.\nimport { findAiAssetsRoot as findAiAssetsRootShared } from \"@skaile/workspaces/asset-manager/catalog-deployer\";\n\n/**\n * Walk up from `startDir` looking for an `ai-assets/` directory.\n *\n * Delegates to the shared implementation in `asset-manager/catalog-deployer`,\n * which is async, deadline-bounded, level-capped, and refuses a candidate that\n * resolves at or under a workspace mount (continuing upward so a legitimate\n * parent still wins).\n *\n * @param startDir - Absolute path to begin the upward search from (typically\n *   the skaile `projectDir`).\n * Note the upward walk is now level-capped rather than running to the\n * filesystem root. Six levels covers every real layout and stops an\n * unbounded climb across mount boundaries.\n *\n * @returns Absolute path to the first usable `ai-assets/` directory found, or\n *   `null` if no match exists within the cap.\n *\n * @docLink packages/workspace-plugin/concepts#workspaceplugin-lifecycle\n */\nexport function findAiAssetsRoot(startDir: string): Promise<string | null> {\n  return findAiAssetsRootShared(startDir);\n}\n"]}
+{"version":3,"sources":["../workspace-plugin/src/utils/ai-assets.ts"],"names":["findAiAssetsRoot"],"mappings":";;;AA+BO,SAASA,kBAAiB,QAAA,EAA0C;AACzE,EAAA,OAAO,iBAAuB,QAAQ,CAAA;AACxC","file":"chunk-Z3VKUWAX.js","sourcesContent":["// utils/ai-assets.ts\n// Shared utility for locating the ai-assets root directory.\n//\n// This is NOT a startup path (an earlier comment here claimed it was). Every\n// caller is an agent-invokable tool in `tools/flows.ts` / `tools/skills.ts`, so\n// the walk runs on a request path inside the long-lived `skaile serve` process,\n// once per tool invocation. With `projectDir = /skaile` the upward walk passes\n// directly beside the rclone FUSE workspace mount, so a synchronous `statSync`\n// here parks the whole event loop when that mount wedges — the failure mode\n// behind the 2026-08-07 outages. See issue #454.\nimport { findAiAssetsRoot as findAiAssetsRootShared } from \"@skaile/workspaces/asset-manager/catalog-deployer\";\n\n/**\n * Walk up from `startDir` looking for an `ai-assets/` directory.\n *\n * Delegates to the shared implementation in `asset-manager/catalog-deployer`,\n * which is async, deadline-bounded, level-capped, and refuses a candidate that\n * resolves at or under a workspace mount (continuing upward so a legitimate\n * parent still wins).\n *\n * @param startDir - Absolute path to begin the upward search from (typically\n *   the skaile `projectDir`).\n * Note the upward walk is now level-capped rather than running to the\n * filesystem root. Six levels covers every real layout and stops an\n * unbounded climb across mount boundaries.\n *\n * @returns Absolute path to the first usable `ai-assets/` directory found, or\n *   `null` if no match exists within the cap.\n *\n * @docLink packages/workspace-plugin/concepts#workspaceplugin-lifecycle\n */\nexport function findAiAssetsRoot(startDir: string): Promise<string | null> {\n  return findAiAssetsRootShared(startDir);\n}\n"]}