@songsid/agend 2.3.4-beta.5 → 2.3.5-alpha.2

package/dist/runtime-client-store.js

@@ -0,0 +1,292 @@
+/** Private, bounded state for a standalone runtime. Input prompts and provider login credentials have no journal fields. */
+import { existsSync, lstatSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import { createHash } from "node:crypto";
+import { join } from "node:path";
+import { atomicWriteFileSync } from "./atomic-write.js";
+const MAX_JOBS = 128;
+/**
+ * M-2239 P2-1 (#2936 review): `used` is the replay tombstone (id → digest) — it was capped at 4096 and never pruned, so
+ * a long-lived runtime stopped. It now holds up to MAX_IDS, and beyond that the oldest tombstones older than
+ * ID_KEEP_MS (and with no job snapshot) give way; a younger one never does, so a replay is refused for at least that.
+ */
+const MAX_IDS = 65_536;
+const ID_KEEP_MS = 30 * 24 * 3_600_000;
+/** Kept free below MAX_STORE_BYTES when a job is accepted: its own later updates (≤ 64 KiB characters of output, UTF-8). */
+const BYTE_HEADROOM = 512 * 1024;
+const MAX_STORE_BYTES = 12 * 1024 * 1024;
+const ID = /^[A-Za-z0-9-]{16,80}$/;
+const UUID = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/i;
+function object(value) { return !!value && typeof value === "object" && !Array.isArray(value); }
+function canonical(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonical).join(",")}]`;
+    if (object(value))
+        return `{${Object.keys(value).sort().map(key => `${JSON.stringify(key)}:${canonical(value[key])}`).join(",")}}`;
+    return JSON.stringify(value) ?? "null";
+}
+export function runtimeJobDigest(value) { return createHash("sha256").update(canonical(value)).digest("hex"); }
+function privateDirectory(directory) {
+    mkdirSync(directory, { recursive: true, mode: 0o700 });
+    if (!lstatSync(directory).isDirectory() || lstatSync(directory).isSymbolicLink())
+        throw new Error("Runtime state must be a private real directory");
+}
+function readPrivate(path) {
+    const entry = lstatSync(path);
+    if (!entry.isFile() || entry.isSymbolicLink() || entry.size > MAX_STORE_BYTES)
+        throw new Error("Invalid runtime state file");
+    return JSON.parse(readFileSync(path, "utf8"));
+}
+function atomic(path, value) {
+    const text = JSON.stringify(value);
+    if (Buffer.byteLength(text) > MAX_STORE_BYTES)
+        throw new Error("Runtime state limit reached");
+    for (let attempt = 0;; attempt++) {
+        try {
+            atomicWriteFileSync(path, text, { mode: 0o600 });
+            return;
+        }
+        catch (error) {
+            if (process.platform !== "win32" || attempt >= 4 || !["EPERM", "EACCES", "EBUSY"].includes(error.code ?? ""))
+                throw error;
+            Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 10 * (attempt + 1));
+        }
+    }
+}
+export function validateRuntimeServer(value) {
+    const url = new URL(value);
+    const local = ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+    if (!["https:", ...(local ? ["http:"] : [])].includes(url.protocol) || url.username || url.password || url.search || url.hash
+        || url.pathname !== "/")
+        throw new Error("Runtime server must be an HTTPS origin (HTTP is allowed only on loopback)");
+    return url;
+}
+export class RuntimeClientStore {
+    directory;
+    now;
+    file;
+    data;
+    constructor(directory, now = Date.now) {
+        this.directory = directory;
+        this.now = now;
+        privateDirectory(directory);
+        this.file = join(directory, "jobs.json");
+        this.data = existsSync(this.file) ? this.validate(readPrivate(this.file)) : { version: 1, jobs: {}, used: {} };
+    }
+    /** Called only after acquiring the profile lock: reading status must not interrupt a live runtime. */
+    recoverInterrupted() {
+        let changed = false;
+        for (const job of Object.values(this.data.jobs)) {
+            if (!job.task.finishedAt || job.task.outcomeConfirmed === false) {
+                job.uncertain = true;
+                job.seq++;
+                job.task = { ...job.task, status: "failed", finishedAt: this.now(), outcomeConfirmed: false,
+                    error: "Runtime restarted before execution was confirmed stopped. Verify its processes before recovery; this job will not be replayed." };
+                changed = true;
+            }
+        }
+        if (changed)
+            this.save();
+    }
+    validate(raw) {
+        if (!object(raw) || raw.version !== 1 || !object(raw.jobs) || !object(raw.used)
+            || Object.keys(raw.jobs).length > MAX_JOBS || Object.keys(raw.used).length > MAX_IDS)
+            throw new Error("Invalid runtime job ledger");
+        for (const [id, digest] of Object.entries(raw.used))
+            if (!ID.test(id) || typeof digest !== "string" || !/^[a-f0-9]{64}$/.test(digest))
+                throw new Error("Invalid runtime job identity");
+        if (raw.usedAt !== undefined && (!object(raw.usedAt) || Object.entries(raw.usedAt).some(([id, at]) => !Object.hasOwn(raw.used, id) || typeof at !== "number" || !Number.isFinite(at))))
+            throw new Error("Invalid runtime job identity times");
+        for (const [id, value] of Object.entries(raw.jobs)) {
+            if (!ID.test(id) || !object(value) || !Number.isSafeInteger(value.seq) || value.seq < 1
+                || typeof value.uncertain !== "boolean" || !object(value.task) || value.task.id !== id || value.digest !== raw.used[id]
+                || typeof value.task.output !== "string" || value.task.output.length > 65_536)
+                throw new Error("Invalid runtime job snapshot");
+        }
+        return raw;
+    }
+    save() { atomic(this.file, this.data); }
+    /**
+     * #2945 review: the byte budget, not only the id count. Before a new job is saved the ledger must fit MAX_STORE_BYTES
+     * with BYTE_HEADROOM left for that job's own updates (its output is bounded at 64 KiB characters). Room comes first
+     * from settled job snapshots (finished, confirmed — never the new one, an uncertain or an unfinished one), oldest
+     * first; then from replay ids past ID_KEEP_MS with no snapshot. False when even that does not make room.
+     */
+    fitBytes(newId) {
+        const budget = MAX_STORE_BYTES - BYTE_HEADROOM, actual = () => Buffer.byteLength(JSON.stringify(this.data));
+        const bytes = (value) => Buffer.byteLength(JSON.stringify(value));
+        // Each removal subtracts what that member actually occupied (key, colon, value, comma; a usedAt member only when it
+        // exists). The estimate only paces the loop: whenever it says "fits", the real size is measured and, if still over,
+        // eviction goes on from the remaining candidates (#2945 R2: legacy ids without usedAt were over-counted).
+        let size = actual();
+        const fitted = () => { if (size > budget)
+            return false; size = actual(); return size <= budget; };
+        if (fitted())
+            return true;
+        const jobs = Object.values(this.data.jobs).filter(row => row.task.id !== newId && row.task.finishedAt && !row.uncertain && row.task.outcomeConfirmed !== false)
+            .sort((a, b) => a.task.startedAt - b.task.startedAt);
+        for (const row of jobs) {
+            size -= bytes(row.task.id) + 1 + bytes(row) + 1;
+            delete this.data.jobs[row.task.id];
+            if (fitted())
+                return true;
+        }
+        const now = this.now(), at = this.data.usedAt ?? {};
+        const old = Object.keys(this.data.used).filter(id => !this.data.jobs[id] && now - (at[id] ?? 0) > ID_KEEP_MS).sort((a, b) => (at[a] ?? 0) - (at[b] ?? 0));
+        for (const id of old) {
+            size -= bytes(id) + 1 + bytes(this.data.used[id]) + 1 + (Object.hasOwn(at, id) ? bytes(id) + 1 + bytes(at[id]) + 1 : 0);
+            delete this.data.used[id];
+            delete at[id];
+            if (fitted())
+                return true;
+        }
+        return actual() <= budget;
+    }
+    /** Oldest first; only past ID_KEEP_MS and with no job snapshot. An id from an older ledger (no time) counts as oldest. */
+    evictTombstones() {
+        const now = this.now(), at = this.data.usedAt ?? {};
+        const old = Object.keys(this.data.used).filter(id => !this.data.jobs[id] && now - (at[id] ?? 0) > ID_KEEP_MS)
+            .sort((a, b) => (at[a] ?? 0) - (at[b] ?? 0));
+        for (const id of old.slice(0, Object.keys(this.data.used).length - MAX_IDS + 1)) {
+            delete this.data.used[id];
+            delete at[id];
+        }
+    }
+    get(id) { const row = this.data.jobs[id]; return row ? structuredClone(row) : null; }
+    list() { return Object.values(this.data.jobs).map(job => structuredClone(job)); }
+    blocked() { return Object.values(this.data.jobs).some(job => job.uncertain || !job.task.finishedAt); }
+    accept(task, digest) {
+        if (!ID.test(task.id) || !/^[a-f0-9]{64}$/.test(digest))
+            throw new Error("Invalid runtime job");
+        const known = this.data.used[task.id];
+        if (known !== undefined) {
+            if (known !== digest)
+                throw new Error("Execution ID belongs to different arguments");
+            const old = this.get(task.id);
+            if (!old)
+                throw new Error("Execution ID was already used and its snapshot expired; do not retry");
+            return { duplicate: true, job: old };
+        }
+        if (this.blocked())
+            throw new Error("Runtime already has an active or unconfirmed execution");
+        if (Object.keys(this.data.used).length >= MAX_IDS)
+            this.evictTombstones();
+        if (Object.keys(this.data.used).length >= MAX_IDS)
+            throw new Error("Runtime execution identity limit reached: every remembered execution is younger than 30 days");
+        const before = structuredClone(this.data);
+        const job = { digest, seq: 1, task: { ...task, output: task.output.slice(-65_536) }, uncertain: false };
+        this.data.jobs[task.id] = job;
+        this.data.used[task.id] = digest;
+        (this.data.usedAt ??= {})[task.id] = this.now();
+        while (Object.keys(this.data.jobs).length > MAX_JOBS) {
+            const oldest = Object.values(this.data.jobs).filter(row => row.task.id !== task.id && row.task.finishedAt && !row.uncertain)
+                .sort((a, b) => a.task.startedAt - b.task.startedAt)[0];
+            if (!oldest) {
+                this.data = before;
+                throw new Error("Runtime snapshot capacity reached");
+            }
+            delete this.data.jobs[oldest.task.id];
+        }
+        if (!this.fitBytes(task.id)) {
+            this.data = before;
+            throw new Error("Runtime state limit reached: every retained execution is unsettled or younger than 30 days");
+        }
+        try {
+            this.save();
+        }
+        catch (error) {
+            this.data = before;
+            throw error;
+        }
+        return { duplicate: false, job: structuredClone(job) };
+    }
+    update(task) {
+        const old = this.data.jobs[task.id];
+        if (!old)
+            throw new Error("Runtime execution was not durably accepted");
+        if (old.task.cli !== task.cli || old.task.cwd !== task.cwd || old.task.sandbox !== task.sandbox || old.task.model !== task.model)
+            throw new Error("Runtime execution identity changed");
+        const before = structuredClone(old);
+        old.task = { ...task, output: task.output.slice(-65_536), ...(task.error ? { error: task.error.slice(0, 8192) } : {}) };
+        old.uncertain = task.outcomeConfirmed === false;
+        old.seq++;
+        try {
+            this.save();
+        }
+        catch (error) {
+            this.data.jobs[task.id] = before;
+            throw error;
+        }
+        return structuredClone(old);
+    }
+    recover(id, confirmedStopped) {
+        const old = this.data.jobs[id];
+        if (!old?.uncertain || confirmedStopped !== true)
+            throw new Error("Confirm the disconnected execution stopped before recovery");
+        const before = structuredClone(old);
+        old.uncertain = false;
+        old.seq++;
+        old.task = { ...old.task, status: "failed", finishedAt: old.task.finishedAt ?? this.now(), outcomeConfirmed: true,
+            error: "Execution outcome was unknown; processes were manually confirmed stopped. This execution will not be replayed." };
+        try {
+            this.save();
+        }
+        catch (error) {
+            this.data.jobs[id] = before;
+            throw error;
+        }
+        return structuredClone(old);
+    }
+    credentials() {
+        const file = join(this.directory, "connection.json");
+        if (!existsSync(file))
+            return null;
+        const raw = readPrivate(file);
+        if (!object(raw) || typeof raw.server !== "string" || typeof raw.machineId !== "string" || !UUID.test(raw.machineId) || typeof raw.credential !== "string"
+            || !/^[a-f0-9]{64}$/.test(raw.credential) || typeof raw.name !== "string" || !raw.name.trim() || raw.name.length > 100
+            || raw.pendingCredential !== undefined && (typeof raw.pendingCredential !== "string" || !/^[a-f0-9]{64}$/.test(raw.pendingCredential) || raw.pendingCredential === raw.credential))
+            throw new Error("Invalid runtime connection");
+        validateRuntimeServer(raw.server);
+        return raw;
+    }
+    saveCredentials(value) {
+        validateRuntimeServer(value.server);
+        if (!UUID.test(value.machineId) || !/^[a-f0-9]{64}$/.test(value.credential) || !value.name.trim() || value.name.length > 100
+            || value.pendingCredential !== undefined && (!/^[a-f0-9]{64}$/.test(value.pendingCredential) || value.pendingCredential === value.credential))
+            throw new Error("Invalid runtime credential");
+        atomic(join(this.directory, "connection.json"), value);
+    }
+    forgetCredentials() { const file = join(this.directory, "connection.json"); if (existsSync(file))
+        unlinkSync(file); }
+    lock(bootId, systemBootId) {
+        if (systemBootId !== undefined && (typeof systemBootId !== "string" || !/^[a-f0-9]{64}$/.test(systemBootId)))
+            throw Error("Invalid Windows boot proof");
+        const path = join(this.directory, "runtime.lock");
+        if (existsSync(path)) {
+            const old = readPrivate(path);
+            if (!object(old) || !Number.isSafeInteger(old.pid) || old.pid <= 0)
+                throw new Error("Invalid runtime lock; inspect it before restarting");
+            if (old.systemBootId !== undefined && (typeof old.systemBootId !== "string" || !/^[a-f0-9]{64}$/.test(old.systemBootId)))
+                throw Error("Invalid runtime boot proof");
+            let alive = !(systemBootId && old.systemBootId && systemBootId !== old.systemBootId);
+            try {
+                if (alive)
+                    process.kill(old.pid, 0);
+            }
+            catch (error) {
+                if (error.code === "ESRCH")
+                    alive = false;
+            }
+            if (alive)
+                throw new Error("Another runtime already uses this profile");
+            unlinkSync(path);
+        }
+        writeFileSync(path, JSON.stringify({ pid: process.pid, bootId, ...(systemBootId ? { systemBootId } : {}) }), { flag: "wx", mode: 0o600 });
+        return () => { try {
+            const current = readPrivate(path);
+            if (object(current) && current.bootId === bootId)
+                unlinkSync(path);
+        }
+        catch { /* already released */ } };
+    }
+}
+//# sourceMappingURL=runtime-client-store.js.map

package/dist/runtime-client-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-client-store.js","sourceRoot":"","sources":["../src/runtime-client-store.ts"],"names":[],"mappings":"AAAA,4HAA4H;AAC5H,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB;;;;GAIG;AACH,MAAM,OAAO,GAAG,MAAM,CAAC;AACvB,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;AACvC,4HAA4H;AAC5H,MAAM,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC;AACjC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,EAAE,GAAG,uBAAuB,CAAC;AACnC,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAK/E,SAAS,MAAM,CAAC,KAAc,IAAsC,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3I,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvE,IAAI,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnI,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;AACzC,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,KAAc,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAChI,SAAS,gBAAgB,CAAC,SAAiB;IACzC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;AACtJ,CAAC;AACD,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC7H,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC;AACD,SAAS,MAAM,CAAC,IAAY,EAAE,KAAc;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9F,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC;YAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACjE,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC;gBAAE,MAAM,KAAK,CAAC;YACrJ,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;AACH,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;WACxH,GAAG,CAAC,QAAQ,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IACxH,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,OAAO,kBAAkB;IAGR,SAAS;IAA2B,GAAG;IAF3C,IAAI,CAAS;IACtB,IAAI,CAAS;IACrB,YAAqB,SAAiB,EAAmB,GAAG,GAAiB,IAAI,CAAC,GAAG;yBAAhE,SAAS;mBAA2B,GAAG;QAC1D,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACjH,CAAC;IACD,sGAAsG;IACtG,kBAAkB;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;gBAChE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;gBAAC,GAAG,CAAC,GAAG,EAAE,CAAC;gBAChC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,KAAK;oBACzF,KAAK,EAAE,gIAAgI,EAAE,CAAC;gBAC5I,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,OAAO;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IACO,QAAQ,CAAC,GAAY;QAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;eAC1E,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACtI,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACvL,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxP,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAK,KAAK,CAAC,GAAc,GAAG,CAAC;mBAC9F,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;mBACpH,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACnI,CAAC;QACD,OAAO,GAAwB,CAAC;IAClC,CAAC;IACO,IAAI,KAAW,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtD;;;;;OAKG;IACK,QAAQ,CAAC,KAAa;QAC5B,MAAM,MAAM,GAAG,eAAe,GAAG,aAAa,EAAE,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5G,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,oHAAoH;QACpH,oHAAoH;QACpH,0GAA0G;QAC1G,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,GAAY,EAAE,GAAG,IAAI,IAAI,GAAG,MAAM;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3G,IAAI,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,KAAK,CAAC;aAC5J,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC5B,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1J,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxH,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YACzC,IAAI,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC5B,CAAC;QACD,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC;IAC5B,CAAC;IACD,0HAA0H;IAClH,eAAe;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC;aAC1G,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/C,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IAChI,CAAC;IACD,GAAG,CAAC,EAAU,IAA6B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtH,IAAI,KAAyB,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,OAAO,KAAc,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC/G,MAAM,CAAC,IAAoB,EAAE,MAAc;QACzC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChG,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,KAAK,KAAK,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACrF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;YACjI,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC9F,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO;YAAE,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1E,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;QACnK,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAqB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC1H,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;QAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACjH,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;iBACzH,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAAC,CAAC;YAC1F,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;QAAC,CAAC;QACnK,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QACvE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,CAAC,IAAoB;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC7G,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;YAC9H,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACxH,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,gBAAgB,KAAK,KAAK,CAAC;QAChD,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QACrF,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,CAAC,EAAU,EAAE,gBAAyB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,SAAS,IAAI,gBAAgB,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChI,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;QAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI;YAC/G,KAAK,EAAE,gHAAgH,EAAE,CAAC;QAC5H,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QAChF,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,WAAW;QACT,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACzF,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;eACrJ,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG;eACnH,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,iBAAiB,KAAK,GAAG,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACpO,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,GAAoC,CAAC;IACjF,CAAC;IACD,eAAe,CAAC,KAAyB;QACvC,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG;eACvH,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,iBAAiB,KAAK,KAAK,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC/L,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;IACD,iBAAiB,KAAW,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3H,IAAI,CAAC,MAAc,EAAE,YAAqB;QACxC,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACxJ,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAClD,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAK,GAAG,CAAC,GAAc,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACtJ,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACpK,IAAI,KAAK,GAAG,CAAC,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,IAAI,YAAY,KAAK,GAAG,CAAC,YAAY,CAAC,CAAC;YACrF,IAAI,CAAC;gBAAC,IAAI,KAAK;oBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAa,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;oBAAE,KAAK,GAAG,KAAK,CAAC;YAAC,CAAC;YAC9I,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YACxE,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAC,YAAY,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxI,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;gBAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;IACnK,CAAC;CACF"}

package/dist/runtime-client.d.ts

@@ -0,0 +1,100 @@
+/** Standalone, outbound-only native runtime. Imports no Fleet, database, bot or Linux native dependency. */
+import WebSocket from "ws";
+import { type WindowsCliProbe, type WindowsCliTask, type WindowsRunOptions } from "./windows-cli.js";
+import { RuntimeClientStore, type RuntimeCredentials } from "./runtime-client-store.js";
+import type { PaneLinkOptions } from "./runtime-pane-link.js";
+import type { RuntimePaneLink } from "./runtime-pane-link.js";
+import type { RuntimePaneHost } from "./runtime-pane-host.js";
+import type { RuntimePaneHostOptions } from "./runtime-pane-host.js";
+export { RUNTIME_PANE_MODULES } from "./runtime-pane-assets.js";
+export interface RuntimeBridge {
+    probe(options?: {
+        force?: boolean;
+    }): Promise<WindowsCliProbe>;
+    prepareWorkspace(agentId: string): Promise<string>;
+    start(value: unknown, authorized?: () => boolean, options?: WindowsRunOptions): WindowsCliTask;
+    get(id: string): WindowsCliTask | null;
+    cancel(id: string): WindowsCliTask;
+    close(): void;
+    releaseUnknown(id: string): void;
+}
+export interface RuntimeClientOptions {
+    store: RuntimeClientStore;
+    bridge?: RuntimeBridge;
+    report?: (message: string) => void;
+    reconnectMs?: number;
+    disconnectGraceMs?: number;
+    pollMs?: number;
+    /** Tests may use an isolated fake worker. Production always uses the Windows bridge. */
+    socketFactory?: (url: string, credential: string) => WebSocket;
+    /** Offline transport acceptance supplies its own process factory, never a public configuration field. */
+    openPaneLink?: (options: PaneLinkOptions) => Promise<RuntimePaneLink>;
+    createPaneHost?: (options: RuntimePaneHostOptions) => RuntimePaneHost;
+}
+export declare class RuntimeClient {
+    private readonly options;
+    readonly bootId: `${string}-${string}-${string}-${string}-${string}`;
+    private readonly bridge;
+    private socket;
+    private welcomed;
+    private stopped;
+    private closed;
+    private unlock;
+    private reconnectTimer;
+    private reconnectAttempt;
+    private graceTimer;
+    private pollTimer;
+    private credentials;
+    private startupRotation;
+    private paneHost;
+    private paneOpening;
+    private machinePaneLimit;
+    private paneEpoch;
+    private readonly active;
+    private readonly snapshots;
+    private readonly pendingPaneTools;
+    private readonly pendingTools;
+    private readonly mcpTokens;
+    private mcpServer;
+    private mcpOpening;
+    private mcpPort;
+    private inventory;
+    private readonly stoppedListeners;
+    constructor(options: RuntimeClientOptions);
+    private report;
+    online(): boolean;
+    waitUntilStopped(): Promise<void>;
+    start(): Promise<void>;
+    private connect;
+    private send;
+    private receive;
+    private publish;
+    private panes;
+    private paneMcp;
+    private update;
+    private poll;
+    private refreshInventory;
+    /** Testable command surface. Mutation identity is committed before calling the native bridge. */
+    operation(operation: string, payload: Record<string, unknown>): Promise<unknown>;
+    private openMcp;
+    private closeMcp;
+    private toolCall;
+    private rejectTools;
+    stop(options?: {
+        retirePanes?: boolean;
+    }): Promise<void>;
+}
+/** Caller holds the profile lock. Persist the candidate before wire; either credential can recover a lost response. */
+export declare function rotateRuntimeCredentials(input: {
+    store: RuntimeClientStore;
+    signal?: AbortSignal;
+}): Promise<RuntimeCredentials>;
+export declare function pairRuntime(input: {
+    server: string;
+    code: string;
+    name: string;
+    store: RuntimeClientStore;
+    signal?: AbortSignal;
+    report?: (text: string) => void;
+    pollMs?: number;
+}): Promise<RuntimeCredentials>;