@songsid/agend 2.3.4-beta.7 → 2.3.5-alpha.3

package/dist/native-mcp.js

@@ -0,0 +1,278 @@
+/** Per-turn, instance-bound MCP capabilities for native Windows CLI children. */
+import { nativeAgentAdmissionContext } from "./native-agent-admission.js";
+import { windowsCliEnabled } from "./windows-cli.js";
+import { createHash, randomBytes } from "node:crypto";
+import { dispatchAgentOperation } from "./agent-endpoint.js";
+import { TOOLS, OUTBOUND_TOOL_SCHEMAS } from "./channel/mcp-tools.js";
+import { dashboardRefusalIn } from "./dashboard-permissions.js";
+import { gatewayRequestContext } from "./web-request-context.js";
+import { readBoundedWebBody } from "./web-body.js";
+import { mayUseTool, resolveToolSet } from "./tool-permissions.js";
+const HEADER = "x-agend-native-token";
+const UUID = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/i;
+const TTL_MS = 6 * 60_000;
+const MAX_BYTES = 64 * 1024;
+const MAX_CALLS = 64;
+const OPS = Object.freeze({
+    list_instances: "list", describe_instance: "describe", task: "task", send_to_instance: "send",
+    delegate_task: "delegate", request_information: "ask", report_result: "report", delivery_status: "delivery-status",
+});
+const READ_TOOLS = new Set(["list_instances", "describe_instance", "task", "delivery_status"]);
+const READ_TASK_ACTIONS = ["list", "get", "mine", "projects"];
+function object(value) {
+    return !!value && typeof value === "object" && !Array.isArray(value);
+}
+function endpoint(value) {
+    const url = new URL(value);
+    if (url.protocol !== "http:" || !["127.0.0.1", "localhost", "[::1]"].includes(url.hostname)
+        || url.pathname !== "/agent" || url.search || url.hash || url.username || url.password)
+        throw Error("Native MCP requires the local agent endpoint");
+    return url.href;
+}
+function loopback(address) {
+    return address === "127.0.0.1" || address === "::1" || address === "::ffff:127.0.0.1";
+}
+function canonical(value, depth = 0) {
+    if (depth > 64)
+        throw Error("Native MCP arguments are too deeply nested");
+    if (Array.isArray(value))
+        return `[${value.map(item => canonical(item, depth + 1)).join(",")}]`;
+    if (object(value))
+        return `{${Object.keys(value).sort().map(key => `${JSON.stringify(key)}:${canonical(value[key], depth + 1)}`).join(",")}}`;
+    return JSON.stringify(value) ?? "null";
+}
+function toolError(message) { return { content: [{ type: "text", text: message.slice(0, 4000) }], isError: true }; }
+function failed(value) { return object(value) && value.error !== undefined; }
+function result(value) {
+    const text = typeof value === "string" ? value : JSON.stringify(value);
+    if (text === undefined)
+        return toolError("AgEnD returned no tool result");
+    const response = { content: [{ type: "text", text }], ...(failed(value) ? { isError: true } : {}) };
+    if (Buffer.byteLength(JSON.stringify(response)) > MAX_BYTES) {
+        const operation = object(value) && typeof value.operation_id === "string" ? ` Operation ID: ${value.operation_id}.` : "";
+        return toolError(`Tool result exceeds the native MCP response limit.${operation} Use a narrower query; do not repeat a mutation whose outcome is unknown.`);
+    }
+    return response;
+}
+function json(res, status, value) {
+    if (res.destroyed || res.writableEnded)
+        return;
+    res.writeHead(status, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-store" });
+    res.end(JSON.stringify(value));
+}
+function refuse(req, res, status, message) {
+    if (!res.destroyed && !res.writableEnded) {
+        res.writeHead(status, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-store", "Connection": "close" });
+        res.end(JSON.stringify({ error: message }));
+    }
+    req.resume();
+}
+export class NativeMcpSessions {
+    ctx;
+    sessions = new Map();
+    constructor(ctx) {
+        this.ctx = ctx;
+    }
+    grant(input) {
+        this.prune();
+        const config = this.ctx.fleetConfig?.instances[input.instance];
+        if (!windowsCliEnabled() || config?.runtime !== "windows" || !UUID.test(config.native_agent_id ?? "")
+            || !["codex", "claude-code"].includes(config.backend ?? "") || !UUID.test(input.requestId)
+            || !["read-only", "workspace-write"].includes(input.sandbox) || typeof input.stillCurrent !== "function")
+            throw Error("Native MCP requires an active supported Windows instance");
+        if (this.sessions.size >= 16 || [...this.sessions.values()].some(session => session.instance === input.instance))
+            throw Error("A native MCP session is already active or the session limit was reached");
+        const address = endpoint(input.endpoint), token = randomBytes(32).toString("hex");
+        const session = { token, instance: input.instance, requestId: input.requestId, agentId: config.native_agent_id, backend: config.backend, sandbox: input.sandbox,
+            expires: Date.now() + TTL_MS, stillCurrent: input.stillCurrent, closed: false, calls: new Map(), reported: new Map(),
+            timer: setTimeout(() => this.closeToken(token), TTL_MS) };
+        session.timer.unref?.();
+        this.sessions.set(token, session);
+        return { connection: { endpoint: address, token, tools: this.menu(session).map(tool => tool.name) }, close: () => this.closeToken(token),
+            reportedCorrelations: target => target === undefined ? [...new Set([...session.reported.values()].flatMap(ids => [...ids]))] : [...(session.reported.get(target) ?? [])] };
+    }
+    hasActive(instance) {
+        this.prune();
+        return [...this.sessions.values()].some(session => session.instance === instance);
+    }
+    closeInstance(instance) { for (const session of this.sessions.values())
+        if (session.instance === instance)
+            this.closeToken(session.token); }
+    closeAll() { for (const token of this.sessions.keys())
+        this.closeToken(token); }
+    closeToken(token) {
+        const session = this.sessions.get(token);
+        if (!session)
+            return;
+        session.closed = true;
+        clearTimeout(session.timer);
+        session.calls.clear();
+        this.sessions.delete(token);
+    }
+    current(session) {
+        const config = this.ctx.fleetConfig?.instances[session.instance];
+        let current = false;
+        try {
+            current = session.stillCurrent();
+        }
+        catch { /* a revoked owner is unavailable */ }
+        return !session.closed && Date.now() < session.expires && windowsCliEnabled() && current
+            && config?.runtime === "windows" && config.native_agent_id === session.agentId && config.backend === session.backend;
+    }
+    prune() { for (const session of this.sessions.values())
+        if (!this.current(session))
+            this.closeToken(session.token); }
+    readOnly(session) {
+        return session.sandbox === "read-only" || this.ctx.fleetConfig?.instances[session.instance]?.native_sandbox !== "workspace-write";
+    }
+    allowed(session, name) {
+        const config = this.ctx.fleetConfig?.instances[session.instance];
+        return Object.hasOwn(OPS, name) && (!this.readOnly(session) || READ_TOOLS.has(name))
+            && mayUseTool(resolveToolSet(config, session.instance), name) && !dashboardRefusalIn(this.ctx.fleetConfig, session.instance, name);
+    }
+    canCall(session, name, args) {
+        return this.allowed(session, name) && !(name === "task" && this.readOnly(session) && !READ_TASK_ACTIONS.includes(String(args.action)));
+    }
+    /**
+     * A handler may await before it commits a delivery or a task change. Keep the original turn's capability at
+     * those commit points, even if another turn for this instance has started in the same Fleet process meanwhile.
+     * Bind other methods to the real context so FleetManager's private state and getters keep their owner.
+     */
+    dispatcherContext(session, name, args) {
+        return nativeAgentAdmissionContext(this.ctx, {
+            instance: session.instance,
+            current: () => this.current(session) && this.canCall(session, name, args),
+            taskAllowed: value => this.canCall(session, "task", value),
+        });
+    }
+    menu(session) {
+        return TOOLS.filter(tool => this.allowed(session, tool.name)).map(tool => {
+            const readTask = tool.name === "task" && this.readOnly(session);
+            const scoped = readTask
+                ? { ...tool, description: `Read-only task lookup. Allowed actions: ${READ_TASK_ACTIONS.join(", ")}.`, inputSchema: { ...tool.inputSchema, properties: { ...tool.inputSchema.properties, action: { type: "string", enum: READ_TASK_ACTIONS } } } }
+                : tool;
+            return { ...scoped, annotations: { readOnlyHint: tool.name === "list_instances" || tool.name === "describe_instance" || tool.name === "delivery_status" || readTask } };
+        });
+    }
+    /** Consumes native-token requests even when invalid; they must never fall through to legacy credentials. */
+    handleRequest(req, res) {
+        const header = req.headers[HEADER];
+        if (header === undefined)
+            return false;
+        if (req.method !== "POST" || req.url !== "/agent") {
+            refuse(req, res, 405, "Native MCP requires POST /agent");
+            return true;
+        }
+        if (gatewayRequestContext(req) || req.headers.origin !== undefined || req.headers.cookie !== undefined || !loopback(req.socket?.remoteAddress)) {
+            refuse(req, res, 403, "Native MCP is available only to its local CLI child");
+            return true;
+        }
+        const session = typeof header === "string" && /^[a-f0-9]{64}$/.test(header) ? this.sessions.get(header) : undefined;
+        if (!session || !this.current(session)) {
+            if (session)
+                this.closeToken(session.token);
+            refuse(req, res, 401, "Native MCP capability is invalid or expired");
+            return true;
+        }
+        const declared = Number(req.headers["content-length"]);
+        if (Number.isFinite(declared) && declared > MAX_BYTES) {
+            refuse(req, res, 413, "Native MCP request is too large");
+            return true;
+        }
+        void this.readRequest(req, res, session);
+        return true;
+    }
+    async readRequest(req, res, session) {
+        try {
+            let raw;
+            try {
+                raw = await readBoundedWebBody(req, MAX_BYTES);
+            }
+            catch {
+                json(res, 413, { error: "Native MCP request could not be read within its limit" });
+                return;
+            }
+            if (!this.current(session)) {
+                json(res, 401, { error: "Native MCP capability is invalid or expired" });
+                return;
+            }
+            const body = JSON.parse(raw.toString("utf8"));
+            if (!object(body) || Object.keys(body).some(key => !["op", "method", "params", "callId"].includes(key)) || body.op !== "native-mcp"
+                || !["tools/list", "tools/call"].includes(String(body.method)) || !object(body.params)) {
+                json(res, 400, { error: "Invalid native MCP operation" });
+                return;
+            }
+            if (body.method === "tools/list") {
+                if (Object.keys(body.params).length || body.callId !== undefined) {
+                    json(res, 400, { error: "Invalid native MCP tool listing" });
+                    return;
+                }
+                json(res, 200, { tools: this.menu(session) });
+                return;
+            }
+            const params = body.params, name = params.name;
+            if (typeof body.callId !== "string" || !/^[A-Za-z0-9._:-]{1,128}$/.test(body.callId)
+                || Object.keys(params).some(key => !["name", "arguments"].includes(key)) || typeof name !== "string" || !object(params.arguments)) {
+                json(res, 400, { error: "Invalid native MCP tool call" });
+                return;
+            }
+            if (!this.allowed(session, name)) {
+                json(res, 403, { error: "This native MCP tool is not available to this instance or access mode" });
+                return;
+            }
+            const parsed = OUTBOUND_TOOL_SCHEMAS.get(name)?.safeParse(params.arguments);
+            if (!parsed?.success) {
+                json(res, 200, toolError("Invalid tool arguments"));
+                return;
+            }
+            const args = parsed.data;
+            if (name === "task" && this.readOnly(session) && !READ_TASK_ACTIONS.includes(String(args.action))) {
+                json(res, 403, { error: "Read-only native MCP permits task lookup only" });
+                return;
+            }
+            const digest = createHash("sha256").update(canonical([name, args])).digest("hex");
+            const old = session.calls.get(body.callId);
+            if (old && old.digest !== digest) {
+                json(res, 409, { error: "Native MCP callId belongs to different arguments" });
+                return;
+            }
+            if (!old && session.calls.size >= MAX_CALLS) {
+                json(res, 429, { error: "Native MCP turn call limit reached" });
+                return;
+            }
+            const call = old ?? { digest, result: Promise.resolve().then(async () => {
+                    if (!this.current(session) || !this.canCall(session, name, args))
+                        return toolError("Native MCP capability or tool access was revoked");
+                    try {
+                        const value = await dispatchAgentOperation(this.dispatcherContext(session, name, args), session.instance, OPS[name], args);
+                        if (name === "report_result" && !failed(value) && value !== undefined && typeof args.target_instance === "string" && args.target_instance
+                            && typeof args.correlation_id === "string" && args.correlation_id) {
+                            const reported = session.reported.get(args.target_instance) ?? new Set();
+                            reported.add(args.correlation_id);
+                            session.reported.set(args.target_instance, reported);
+                        }
+                        return result(value);
+                    }
+                    catch (error) {
+                        return toolError(error instanceof Error ? error.message : "AgEnD tool failed");
+                    }
+                }) };
+            if (!old)
+                session.calls.set(body.callId, call);
+            const response = await call.result;
+            if (!this.current(session)) {
+                json(res, 401, { error: "Native MCP capability is invalid or expired" });
+                return;
+            }
+            if (!this.canCall(session, name, args)) {
+                json(res, 403, { error: "Native MCP tool access was revoked" });
+                return;
+            }
+            json(res, 200, response);
+        }
+        catch (error) {
+            json(res, 400, { error: error instanceof SyntaxError ? "Invalid native MCP JSON" : "Invalid native MCP request" });
+        }
+    }
+}
+//# sourceMappingURL=native-mcp.js.map

package/dist/native-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-mcp.js","sourceRoot":"","sources":["../src/native-mcp.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAA6B,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGnE,MAAM,MAAM,GAAG,sBAAsB,CAAC;AACtC,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAC/E,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC;AAC1B,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5B,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,GAAG,GAAoC,MAAM,CAAC,MAAM,CAAC;IACzD,cAAc,EAAC,MAAM,EAAE,iBAAiB,EAAC,UAAU,EAAE,IAAI,EAAC,MAAM,EAAE,gBAAgB,EAAC,MAAM;IACzF,aAAa,EAAC,UAAU,EAAE,mBAAmB,EAAC,KAAK,EAAE,aAAa,EAAC,QAAQ,EAAE,eAAe,EAAC,iBAAiB;CAC/G,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAC,mBAAmB,EAAC,MAAM,EAAC,iBAAiB,CAAC,CAAC,CAAC;AAC5F,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAC,KAAK,EAAC,MAAM,EAAC,UAAU,CAAC,CAAC;AAiB3D,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AACD,SAAS,QAAQ,CAAC,KAAY;IAC5B,MAAM,GAAG,GAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,IAAG,GAAG,CAAC,QAAQ,KAAG,OAAO,IAAI,CAAC,CAAC,WAAW,EAAC,WAAW,EAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;WACjF,GAAG,CAAC,QAAQ,KAAG,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACpJ,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC;AACD,SAAS,QAAQ,CAAC,OAAwB;IACxC,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,kBAAkB,CAAC;AACxF,CAAC;AACD,SAAS,SAAS,CAAC,KAAa,EAAC,KAAK,GAAC,CAAC;IACtC,IAAG,KAAK,GAAC,EAAE;QAAC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACtE,IAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAC,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAA,EAAE,CAAA,SAAS,CAAC,IAAI,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACzF,IAAG,MAAM,CAAC,KAAK,CAAC;QAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAA,EAAE,CAAA,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAC,KAAK,GAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvI,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;AACzC,CAAC;AACD,SAAS,SAAS,CAAC,OAAc,IAAe,OAAO,EAAC,OAAO,EAAC,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAC,IAAI,CAAC,EAAC,CAAC,EAAC,OAAO,EAAC,IAAI,EAAC,CAAC,CAAC,CAAC;AAC3H,SAAS,MAAM,CAAC,KAAa,IAAY,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAG,SAAS,CAAC,CAAC,CAAC;AAC3F,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,IAAI,GAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrE,IAAG,IAAI,KAAG,SAAS;QAAC,OAAO,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAY,EAAC,OAAO,EAAC,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,CAAC,EAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,EAAC,OAAO,EAAC,IAAI,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC;IAC9F,IAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAC,SAAS,EAAE,CAAC;QACzD,MAAM,SAAS,GAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvH,OAAO,SAAS,CAAC,qDAAqD,SAAS,2EAA2E,CAAC,CAAC;IAC9J,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AACD,SAAS,IAAI,CAAC,GAAkB,EAAC,MAAa,EAAC,KAAa;IAC1D,IAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa;QAAC,OAAO;IAC7C,GAAG,CAAC,SAAS,CAAC,MAAM,EAAC,EAAC,cAAc,EAAC,iCAAiC,EAAC,eAAe,EAAC,UAAU,EAAC,CAAC,CAAC;IACpG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACjC,CAAC;AACD,SAAS,MAAM,CAAC,GAAmB,EAAC,GAAkB,EAAC,MAAa,EAAC,OAAc;IACjF,IAAG,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,aAAa,EAAC,CAAC;QAAA,GAAG,CAAC,SAAS,CAAC,MAAM,EAAC,EAAC,cAAc,EAAC,iCAAiC,EAAC,eAAe,EAAC,UAAU,EAAC,YAAY,EAAC,OAAO,EAAC,CAAC,CAAC;QAAA,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,KAAK,EAAC,OAAO,EAAC,CAAC,CAAC,CAAC;IAAA,CAAC;IAC5M,GAAG,CAAC,MAAM,EAAE,CAAC;AACf,CAAC;AAED,MAAM,OAAO,iBAAiB;IAEC,GAAG;IADf,QAAQ,GAAC,IAAI,GAAG,EAAkB,CAAC;IACpD,YAA6B,GAAwB;mBAAxB,GAAG;IAAwB,CAAC;IAEzD,KAAK,CAAC,KAAoB;QACxB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,MAAM,GAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAG,CAAC,iBAAiB,EAAE,IAAI,MAAM,EAAE,OAAO,KAAG,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;eAC7F,CAAC,CAAC,OAAO,EAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;eACtF,CAAC,CAAC,WAAW,EAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,CAAC,YAAY,KAAG,UAAU;YAAE,MAAM,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACjL,IAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAE,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAA,EAAE,CAAA,OAAO,CAAC,QAAQ,KAAG,KAAK,CAAC,QAAQ,CAAC;YAAE,MAAM,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAClM,MAAM,OAAO,GAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,GAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAS,EAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,SAAS,EAAC,KAAK,CAAC,SAAS,EAAC,OAAO,EAAC,MAAM,CAAC,eAAgB,EAAC,OAAO,EAAC,MAAM,CAAC,OAAQ,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO;YAC1J,OAAO,EAAC,IAAI,CAAC,GAAG,EAAE,GAAC,MAAM,EAAC,YAAY,EAAC,KAAK,CAAC,YAAY,EAAC,MAAM,EAAC,KAAK,EAAC,KAAK,EAAC,IAAI,GAAG,EAAE,EAAC,QAAQ,EAAC,IAAI,GAAG,EAAE;YACzG,KAAK,EAAC,UAAU,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAC,MAAM,CAAC,EAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAC,OAAO,CAAC,CAAC;QACzD,OAAO,EAAC,UAAU,EAAC,EAAC,QAAQ,EAAC,OAAO,EAAC,KAAK,EAAC,KAAK,EAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,IAAI,CAAC,EAAC,EAAC,KAAK,EAAC,GAAE,EAAE,CAAA,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YACxH,oBAAoB,EAAC,MAAM,CAAA,EAAE,CAAA,MAAM,KAAG,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,EAAC,CAAC;IACvK,CAAC;IACD,SAAS,CAAC,QAAe;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;QAAA,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAA,EAAE,CAAA,OAAO,CAAC,QAAQ,KAAG,QAAQ,CAAC,CAAC;IAC7F,CAAC;IACD,aAAa,CAAC,QAAe,IAAS,KAAI,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;QAAC,IAAG,OAAO,CAAC,QAAQ,KAAG,QAAQ;YAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClJ,QAAQ,KAAU,KAAI,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;QAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3E,UAAU,CAAC,KAAY;QAC7B,MAAM,OAAO,GAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAA,IAAG,CAAC,OAAO;YAAC,OAAO;QAC1D,OAAO,CAAC,MAAM,GAAC,IAAI,CAAC;QAAA,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAA,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAAA,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpG,CAAC;IACO,OAAO,CAAC,OAAe;QAC7B,MAAM,MAAM,GAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,OAAO,GAAC,KAAK,CAAC;QAAA,IAAG,CAAC;YAAA,OAAO,GAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAAA,CAAC;QAAA,MAAK,CAAC,CAAA,oCAAoC,CAAA,CAAC;QACjG,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAC,OAAO,CAAC,OAAO,IAAI,iBAAiB,EAAE,IAAI,OAAO;eACjF,MAAM,EAAE,OAAO,KAAG,SAAS,IAAI,MAAM,CAAC,eAAe,KAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAG,OAAO,CAAC,OAAO,CAAC;IACnH,CAAC;IACO,KAAK,KAAU,KAAI,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;QAAC,IAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtH,QAAQ,CAAC,OAAe;QAC9B,OAAO,OAAO,CAAC,OAAO,KAAG,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,cAAc,KAAG,iBAAiB,CAAC;IAChI,CAAC;IACO,OAAO,CAAC,OAAe,EAAC,IAAW;QACzC,MAAM,MAAM,GAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;eAC9E,UAAU,CAAC,cAAc,CAAC,MAAM,EAAC,OAAO,CAAC,QAAQ,CAAC,EAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAC,OAAO,CAAC,QAAQ,EAAC,IAAI,CAAC,CAAC;IACnI,CAAC;IACO,OAAO,CAAC,OAAe,EAAC,IAAW,EAAC,IAA2B;QACrE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtI,CAAC;IACD;;;;OAIG;IACK,iBAAiB,CAAC,OAAe,EAAC,IAAW,EAAC,IAA2B;QAC/E,OAAO,2BAA2B,CAAC,IAAI,CAAC,GAAG,EAAE;YAC3C,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;YACzE,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC;SAC3D,CAAC,CAAC;IACL,CAAC;IAEO,IAAI,CAAC,OAAe;QAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAA,EAAE;YACnE,MAAM,QAAQ,GAAC,IAAI,CAAC,IAAI,KAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAC,QAAQ;gBACnB,CAAC,CAAC,EAAC,GAAG,IAAI,EAAC,WAAW,EAAC,2CAA2C,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,WAAW,EAAC,EAAC,GAAG,IAAI,CAAC,WAAW,EAAC,UAAU,EAAC,EAAC,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,EAAC,MAAM,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,iBAAiB,EAAC,EAAC,EAAC,EAAC;gBAC9N,CAAC,CAAC,IAAI,CAAC;YACT,OAAO,EAAC,GAAG,MAAM,EAAC,WAAW,EAAC,EAAC,YAAY,EAAC,IAAI,CAAC,IAAI,KAAG,gBAAgB,IAAI,IAAI,CAAC,IAAI,KAAG,mBAAmB,IAAI,IAAI,CAAC,IAAI,KAAG,iBAAiB,IAAI,QAAQ,EAAC,EAAC,CAAC;QAC7J,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4GAA4G;IAC5G,aAAa,CAAC,GAAmB,EAAC,GAAkB;QAClD,MAAM,MAAM,GAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAA,IAAG,MAAM,KAAG,SAAS;YAAC,OAAO,KAAK,CAAC;QACpE,IAAG,GAAG,CAAC,MAAM,KAAG,MAAM,IAAI,GAAG,CAAC,GAAG,KAAG,QAAQ,EAAC,CAAC;YAAA,MAAM,CAAC,GAAG,EAAC,GAAG,EAAC,GAAG,EAAC,iCAAiC,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;QACjH,IAAG,qBAAqB,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAG,SAAS,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAG,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;YAC1I,MAAM,CAAC,GAAG,EAAC,GAAG,EAAC,GAAG,EAAC,qDAAqD,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QACxF,CAAC;QACD,MAAM,OAAO,GAAC,OAAO,MAAM,KAAG,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChH,IAAG,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,CAAC;YAAA,IAAG,OAAO;gBAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAAA,MAAM,CAAC,GAAG,EAAC,GAAG,EAAC,GAAG,EAAC,6CAA6C,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;QAChK,MAAM,QAAQ,GAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACrD,IAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAC,SAAS,EAAC,CAAC;YAAA,MAAM,CAAC,GAAG,EAAC,GAAG,EAAC,GAAG,EAAC,iCAAiC,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;QACvH,KAAK,IAAI,CAAC,WAAW,CAAC,GAAG,EAAC,GAAG,EAAC,OAAO,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACO,KAAK,CAAC,WAAW,CAAC,GAAmB,EAAC,GAAkB,EAAC,OAAe;QAC9E,IAAI,CAAC;YACH,IAAI,GAAU,CAAC;YAAA,IAAG,CAAC;gBAAA,GAAG,GAAC,MAAM,kBAAkB,CAAC,GAAG,EAAC,SAAS,CAAC,CAAC;YAAA,CAAC;YAAA,MAAK,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,uDAAuD,EAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAC5J,IAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,6CAA6C,EAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YACvG,MAAM,IAAI,GAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACpD,IAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,CAAC,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,KAAG,YAAY;mBACtH,CAAC,CAAC,YAAY,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,8BAA8B,EAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YACvJ,IAAG,IAAI,CAAC,MAAM,KAAG,YAAY,EAAE,CAAC;gBAC9B,IAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAG,SAAS,EAAC,CAAC;oBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,iCAAiC,EAAC,CAAC,CAAC;oBAAA,OAAO;gBAAA,CAAC;gBAC/H,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAC,CAAC,CAAC;gBAAA,OAAO;YAClD,CAAC;YACD,MAAM,MAAM,GAAC,IAAI,CAAC,MAAM,EAAC,IAAI,GAAC,MAAM,CAAC,IAAI,CAAC;YAC1C,IAAG,OAAO,IAAI,CAAC,MAAM,KAAG,QAAQ,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;mBAC5E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,EAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,IAAI,KAAG,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/H,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,8BAA8B,EAAC,CAAC,CAAC;gBAAA,OAAO;YAC9D,CAAC;YACD,IAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,IAAI,CAAC,EAAC,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,uEAAuE,EAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YACtI,MAAM,MAAM,GAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1E,IAAG,CAAC,MAAM,EAAE,OAAO,EAAC,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAC/E,MAAM,IAAI,GAAC,MAAM,CAAC,IAA8B,CAAC;YACjD,IAAG,IAAI,KAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC/F,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,+CAA+C,EAAC,CAAC,CAAC;gBAAA,OAAO;YAC/E,CAAC;YACD,MAAM,MAAM,GAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/E,MAAM,GAAG,GAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,IAAG,GAAG,IAAI,GAAG,CAAC,MAAM,KAAG,MAAM,EAAC,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,kDAAkD,EAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAChH,IAAG,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,IAAE,SAAS,EAAC,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,oCAAoC,EAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAC7G,MAAM,IAAI,GAAC,GAAG,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAE,EAAE;oBAC/D,IAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,IAAI,EAAC,IAAI,CAAC;wBAAC,OAAO,SAAS,CAAC,kDAAkD,CAAC,CAAC;oBACnI,IAAI,CAAC;wBACH,MAAM,KAAK,GAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAC,IAAI,EAAC,IAAI,CAAC,EAAC,OAAO,CAAC,QAAQ,EAAC,GAAG,CAAC,IAAI,CAAE,EAAC,IAAI,CAAC,CAAC;wBACrH,IAAG,IAAI,KAAG,eAAe,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,KAAG,SAAS,IAAI,OAAO,IAAI,CAAC,eAAe,KAAG,QAAQ,IAAI,IAAI,CAAC,eAAe;+BAC7H,OAAO,IAAI,CAAC,cAAc,KAAG,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;4BAClE,MAAM,QAAQ,GAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;4BAC/E,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;4BAAA,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,EAAC,QAAQ,CAAC,CAAC;wBACxF,CAAC;wBACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;oBACvB,CAAC;oBAAC,OAAM,KAAK,EAAC,CAAC;wBAAA,OAAO,SAAS,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;oBAAA,CAAC;gBACjG,CAAC,CAAC,EAAC,CAAC;YACJ,IAAG,CAAC,GAAG;gBAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAC,MAAM,IAAI,CAAC,MAAM,CAAC;YACjC,IAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,6CAA6C,EAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YACvG,IAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,IAAI,EAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,oCAAoC,EAAC,CAAC,CAAC;gBAAA,OAAO;YACpE,CAAC;YACD,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAAC,OAAM,KAAK,EAAE,CAAC;YAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,4BAA4B,EAAC,CAAC,CAAC;QAAA,CAAC;IACjI,CAAC;CACF"}

package/dist/native-model-catalog.d.ts

@@ -0,0 +1,5 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { WebApiContext } from "./web-api.js";
+import { type WindowsCliBridge } from "./windows-cli.js";
+/** Caller validates the ordinary dashboard gate and the query shape first. */
+export declare function handleNativeModelCatalog(req: IncomingMessage, res: ServerResponse, url: URL, ctx: WebApiContext, bridge?: WindowsCliBridge): boolean;

package/dist/native-model-catalog.js

@@ -0,0 +1,76 @@
+/** Model discovery for the native runtime, behind the shared Settings surface. */
+import { remoteRuntimeEnabled } from "./runtime-switches.js";
+import { nativeCliAuthorization } from "./windows-cli-api.js";
+import { windowsBridgeFor, windowsCliEnabled } from "./windows-cli.js";
+import { isNativeProviderId } from "./windows-cli-providers.js";
+import { isWindowsInstance } from "./native-instance-registry.js";
+function json(res, status, body) {
+    if (res.destroyed || res.writableEnded)
+        return;
+    res.writeHead(status, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-store" });
+    res.end(JSON.stringify(body));
+}
+/** Caller validates the ordinary dashboard gate and the query shape first. */
+export function handleNativeModelCatalog(req, res, url, ctx, bridge) {
+    const instance = url.searchParams.get("instance");
+    const config = instance ? ctx.fleetConfig?.instances[instance] : undefined;
+    const requestedMachine = url.searchParams.get("machineId"), machineId = requestedMachine ?? config?.machine_id;
+    if (url.searchParams.get("runtime") !== "windows" && !isWindowsInstance(config)) {
+        if (requestedMachine !== null) {
+            json(res, 400, { error: "A machine model catalog requires a Windows runtime" });
+            return true;
+        }
+        return false;
+    }
+    if (!windowsCliEnabled()) {
+        json(res, 404, { error: "Windows runtime is not enabled" });
+        return true;
+    }
+    const allowed = () => nativeCliAuthorization(req, url, ctx);
+    if (!allowed()) {
+        json(res, 403, { error: "Windows model discovery requires an administrator on the local dashboard" });
+        return true;
+    }
+    const backend = url.searchParams.get("backend") ?? "";
+    if (!isNativeProviderId(backend)) {
+        json(res, 400, { error: "Unknown Windows CLI provider" });
+        return true;
+    }
+    if (url.searchParams.get("runtime") === "wsl" || instance && (!isWindowsInstance(config) || config?.backend !== backend)) {
+        json(res, 400, { error: "The selected runtime and CLI do not match this instance" });
+        return true;
+    }
+    if (instance && requestedMachine !== null && requestedMachine !== config?.machine_id) {
+        json(res, 400, { error: "The selected machine does not own this conversation" });
+        return true;
+    }
+    void (async () => {
+        // M-2239 P1-2: a GET reads the administrator's last detection, including remote machines.
+        // Detection is an explicit administrator POST; a model-list `refresh` never launches a CLI.
+        let catalog;
+        if (machineId) {
+            if (!remoteRuntimeEnabled() || !ctx.runtimeCoordinator)
+                throw new Error("Remote runtimes are not enabled");
+            const hub = ctx.runtimeCoordinator(), machine = hub.machine(machineId);
+            if (!machine || machine.status === "pending" || machine.status === "revoked")
+                throw new Error("Unknown runtime machine");
+            catalog = machine.inventory;
+            if (!catalog)
+                throw new Error("Runtime inventory is not ready");
+        }
+        else
+            catalog = await (bridge ?? windowsBridgeFor(ctx)).probe();
+        if (!allowed()) {
+            json(res, 403, { error: "Authorization expired" });
+            return;
+        }
+        const cli = catalog.clis.find(row => row.id === backend);
+        json(res, 200, {
+            backend, runtime: "windows", ...(machineId ? { machineId } : {}),
+            models: (cli?.models ?? []).map(model => ({ id: model.id, label: model.name ?? model.id, ...(model.description ? { description: model.description } : {}) })),
+            source: cli?.modelsSource ?? (cli?.models.length ? "cli-list" : "unavailable"),
+        });
+    })().catch(() => json(res, allowed() ? 503 : 403, { error: allowed() ? "Windows model discovery failed. Retry the CLI inventory." : "Authorization expired" }));
+    return true;
+}
+//# sourceMappingURL=native-model-catalog.js.map

package/dist/native-model-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-model-catalog.js","sourceRoot":"","sources":["../src/native-model-catalog.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAG7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAyB,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,SAAS,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAC9D,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa;QAAE,OAAO;IAC/C,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IAC1G,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,wBAAwB,CAAC,GAAoB,EAAE,GAAmB,EAAE,GAAQ,EAAE,GAAkB,EAAE,MAAyB;IACzI,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,MAAM,gBAAgB,GAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,SAAS,GAAC,gBAAgB,IAAI,MAAM,EAAE,UAAU,CAAC;IAC3G,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChF,IAAG,gBAAgB,KAAG,IAAI,EAAC,CAAC;YAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,oDAAoD,EAAC,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;QACpH,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACvG,MAAM,OAAO,GAAG,GAAY,EAAE,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACrE,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,0EAA0E,EAAE,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACvI,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC7G,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK,IAAI,QAAQ,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,EAAE,CAAC;QACzH,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,yDAAyD,EAAE,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IACpG,CAAC;IACD,IAAI,QAAQ,IAAI,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,KAAK,MAAM,EAAE,UAAU,EAAE,CAAC;QACrF,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,qDAAqD,EAAC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAC1F,CAAC;IACD,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,0FAA0F;QAC1F,4FAA4F;QAC5F,IAAI,OAAO,CAAC;QACZ,IAAG,SAAS,EAAC,CAAC;YACZ,IAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB;gBAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACzG,MAAM,GAAG,GAAC,GAAG,CAAC,kBAAkB,EAAE,EAAE,OAAO,GAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACnE,IAAG,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAG,SAAS,IAAI,OAAO,CAAC,MAAM,KAAG,SAAS;gBAAC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACnH,OAAO,GAAC,OAAO,CAAC,SAAS,CAAC;YAC1B,IAAG,CAAC,OAAO;gBAAC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAChE,CAAC;;YAAM,OAAO,GAAG,MAAM,CAAC,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QACjE,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC/E,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;YACb,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAC,SAAS,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7J,MAAM,EAAE,GAAG,EAAE,YAAY,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;SAC/E,CAAC,CAAC;IACL,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,0DAA0D,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;IAChK,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/native-pane-crash-budget.d.ts

@@ -0,0 +1,20 @@
+export interface NativeRestartPolicy {
+    max_retries: number;
+    backoff: "linear" | "exponential";
+    reset_after: number;
+}
+export type NativeRestartDecision = {
+    kind: "normal" | "disabled" | "loop" | "exhausted";
+    count: number;
+} | {
+    kind: "retry";
+    count: number;
+    delay: number;
+};
+export declare class NativePaneCrashBudget {
+    private file;
+    constructor(file: string);
+    private load;
+    reset(sessionId: string): void;
+    observe(sessionId: string, exitCode: number | undefined, policy: NativeRestartPolicy, now?: number): NativeRestartDecision;
+}

package/dist/native-pane-crash-budget.js

@@ -0,0 +1,60 @@
+/** Metadata-only crash budget survives replacement native daemons; it never discards a conversation. */
+import { lstatSync, readFileSync } from "node:fs";
+import { atomicWriteFileSync } from "./atomic-write.js";
+const UUID = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/i;
+export class NativePaneCrashBudget {
+    file;
+    constructor(file) {
+        this.file = file;
+    }
+    load() {
+        try {
+            const stat = lstatSync(this.file);
+            if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 4096 || process.getuid && (stat.uid !== process.getuid() || !!(stat.mode & 0o077)))
+                throw Error("Native crash budget is not an owned private file");
+            const value = JSON.parse(readFileSync(this.file, "utf8"));
+            if (value?.version !== 1 || !UUID.test(value.sessionId) || !Number.isSafeInteger(value.count) || value.count < 0 || value.count > 100000
+                || !Number.isSafeInteger(value.lastAt) || value.lastAt < 0 || !Array.isArray(value.crashes) || value.crashes.length > 16
+                || value.crashes.some(at => !Number.isSafeInteger(at) || at < 0) || Object.keys(value).some(key => !["version", "sessionId", "count", "lastAt", "crashes"].includes(key)))
+                throw Error("Native crash budget is invalid; automatic resume is held");
+            return value;
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return null;
+            throw error;
+        }
+    }
+    reset(sessionId) {
+        if (!UUID.test(sessionId))
+            throw Error("Native crash budget requires a pinned conversation");
+        this.load();
+        atomicWriteFileSync(this.file, JSON.stringify({ version: 1, sessionId, count: 0, lastAt: 0, crashes: [] }), { mode: 0o600 });
+    }
+    observe(sessionId, exitCode, policy, now = Date.now()) {
+        if (!UUID.test(sessionId))
+            throw Error("Native recovery requires its exact pinned conversation");
+        if (!Number.isSafeInteger(now) || now < 0 || !Number.isFinite(policy.max_retries) || !Number.isFinite(policy.reset_after))
+            throw Error("Invalid native restart policy or clock");
+        if (exitCode === 0)
+            return { kind: "normal", count: 0 };
+        const saved = this.load(), state = saved?.sessionId === sessionId ? saved : { version: 1, sessionId, count: 0, lastAt: 0, crashes: [] };
+        if (policy.reset_after > 0 && now - state.lastAt > policy.reset_after)
+            state.count = 0;
+        state.count++;
+        state.lastAt = now;
+        state.crashes = state.crashes.filter(at => at > now - 300000);
+        state.crashes.push(now);
+        state.crashes = state.crashes.slice(-16);
+        atomicWriteFileSync(this.file, JSON.stringify(state), { mode: 0o600 });
+        if (policy.max_retries <= 0)
+            return { kind: "disabled", count: state.count };
+        if (state.crashes.length >= 3)
+            return { kind: "loop", count: state.count };
+        if (state.count > policy.max_retries)
+            return { kind: "exhausted", count: state.count };
+        const delay = policy.backoff === "exponential" ? Math.min(2 ** Math.min(state.count - 1, 16) * 1000, 60000) : state.count * 1000;
+        return { kind: "retry", count: state.count, delay };
+    }
+}
+//# sourceMappingURL=native-pane-crash-budget.js.map

package/dist/native-pane-crash-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-pane-crash-budget.js","sourceRoot":"","sources":["../src/native-pane-crash-budget.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAIxD,MAAM,IAAI,GAAC,iEAAiE,CAAC;AAC7E,MAAM,OAAO,qBAAqB;IACb,IAAI;IAAxB,YAAoB,IAAW;oBAAX,IAAI;IAAS,CAAC;IAC1B,IAAI;QACX,IAAG,CAAC;YACH,MAAM,IAAI,GAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,cAAc,EAAE,IAAE,IAAI,CAAC,IAAI,GAAC,IAAI,IAAE,OAAO,CAAC,MAAM,IAAE,CAAC,IAAI,CAAC,GAAG,KAAG,OAAO,CAAC,MAAM,EAAE,IAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAC,KAAK,CAAC,CAAC;gBAAC,MAAM,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAC7L,MAAM,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAC,MAAM,CAAC,CAAU,CAAC;YAChE,IAAG,KAAK,EAAE,OAAO,KAAG,CAAC,IAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,IAAE,KAAK,CAAC,KAAK,GAAC,CAAC,IAAE,KAAK,CAAC,KAAK,GAAC,MAAM;mBACtH,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAE,KAAK,CAAC,MAAM,GAAC,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAE,KAAK,CAAC,OAAO,CAAC,MAAM,GAAC,EAAE;mBAC3G,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAA,EAAE,CAAA,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,IAAE,EAAE,GAAC,CAAC,CAAC,IAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,EAAC,WAAW,EAAC,OAAO,EAAC,QAAQ,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAAC,MAAM,KAAK,CAAC,0DAA0D,CAAC,CAAC;YACpO,OAAO,KAAK,CAAC;QACd,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;gBAAC,OAAO,IAAI,CAAC;YAAA,MAAM,KAAK,CAAC;QAAA,CAAC;IAC5F,CAAC;IACD,KAAK,CAAC,SAAgB;QACrB,IAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YAAC,MAAM,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC3F,IAAI,CAAC,IAAI,EAAE,CAAC;QAAA,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,SAAS,EAAC,KAAK,EAAC,CAAC,EAAC,MAAM,EAAC,CAAC,EAAC,OAAO,EAAC,EAAE,EAAC,CAAC,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;IAC3H,CAAC;IACD,OAAO,CAAC,SAAgB,EAAC,QAAyB,EAAC,MAA0B,EAAC,GAAG,GAAC,IAAI,CAAC,GAAG,EAAE;QAC3F,IAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YAAC,MAAM,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC/F,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAE,GAAG,GAAC,CAAC,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC;YAAC,MAAM,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACvK,IAAG,QAAQ,KAAG,CAAC;YAAC,OAAM,EAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,CAAC,EAAC,CAAC;QAC9C,MAAM,KAAK,GAAC,IAAI,CAAC,IAAI,EAAE,EAAC,KAAK,GAAO,KAAK,EAAE,SAAS,KAAG,SAAS,CAAA,CAAC,CAAA,KAAK,CAAA,CAAC,CAAA,EAAC,OAAO,EAAC,CAAC,EAAC,SAAS,EAAC,KAAK,EAAC,CAAC,EAAC,MAAM,EAAC,CAAC,EAAC,OAAO,EAAC,EAAE,EAAC,CAAC;QACzH,IAAG,MAAM,CAAC,WAAW,GAAC,CAAC,IAAE,GAAG,GAAC,KAAK,CAAC,MAAM,GAAC,MAAM,CAAC,WAAW;YAAC,KAAK,CAAC,KAAK,GAAC,CAAC,CAAC;QAC3E,KAAK,CAAC,KAAK,EAAE,CAAC;QAAA,KAAK,CAAC,MAAM,GAAC,GAAG,CAAC;QAAA,KAAK,CAAC,OAAO,GAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAA,EAAE,CAAA,EAAE,GAAC,GAAG,GAAC,MAAM,CAAC,CAAC;QAAA,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAA,KAAK,CAAC,OAAO,GAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACpJ,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;QAClE,IAAG,MAAM,CAAC,WAAW,IAAE,CAAC;YAAC,OAAM,EAAC,IAAI,EAAC,UAAU,EAAC,KAAK,EAAC,KAAK,CAAC,KAAK,EAAC,CAAC;QACnE,IAAG,KAAK,CAAC,OAAO,CAAC,MAAM,IAAE,CAAC;YAAC,OAAM,EAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,KAAK,CAAC,KAAK,EAAC,CAAC;QACjE,IAAG,KAAK,CAAC,KAAK,GAAC,MAAM,CAAC,WAAW;YAAC,OAAM,EAAC,IAAI,EAAC,WAAW,EAAC,KAAK,EAAC,KAAK,CAAC,KAAK,EAAC,CAAC;QAC7E,MAAM,KAAK,GAAC,MAAM,CAAC,OAAO,KAAG,aAAa,CAAA,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,CAAC,IAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAC,CAAC,EAAC,EAAE,CAAC,GAAC,IAAI,EAAC,KAAK,CAAC,CAAA,CAAC,CAAA,KAAK,CAAC,KAAK,GAAC,IAAI,CAAC;QAC/G,OAAM,EAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAC,KAAK,CAAC,KAAK,EAAC,KAAK,EAAC,CAAC;IAC9C,CAAC;CACD"}

package/dist/native-pane-create.d.ts

@@ -0,0 +1,26 @@
+/** Approved native-pane creation. Compensation never retires a replacement launch or deletes a referenced topic. */
+import type { FleetConfig, InstanceConfig } from './types.js';
+import type { FleetWindowsRuntime } from './fleet-windows-runtime.js';
+import type { SettingsExecution } from './settings-transaction.js';
+import { nativePaneTopicTarget } from './native-instance-input.js';
+type Target = NonNullable<ReturnType<typeof nativePaneTopicTarget>>;
+export interface NativePaneCreateHost {
+    fleet(): FleetConfig | null;
+    runtime: FleetWindowsRuntime;
+    topic(target: Target): {
+        current(): boolean;
+        create(name: string): Promise<number | string>;
+        remove(id: number | string): Promise<void>;
+    };
+    epoch(name: string): number;
+    start(name: string, config: InstanceConfig, current: () => boolean): Promise<void>;
+    close(name: string, config: InstanceConfig, epoch: number): Promise<boolean>;
+    routes(): void;
+    warn(error: unknown): void;
+}
+export declare function createNativePane(host: NativePaneCreateHost, profile: Record<string, unknown>, channelId: string | undefined, authorized: () => boolean, execution: SettingsExecution): Promise<{
+    name: string;
+    runtime: "windows";
+    agent: import("./windows-agents.js").WindowsAgent;
+}>;
+export {};

package/dist/native-pane-create.js

@@ -0,0 +1,53 @@
+import { nativePaneTopicTarget } from './native-instance-input.js';
+export async function createNativePane(host, profile, channelId, authorized, execution) {
+    const fleet = host.fleet();
+    if (!fleet)
+        throw Error('Fleet configuration is unavailable');
+    const target = nativePaneTopicTarget(fleet, channelId), topic = target ? host.topic(target) : null;
+    const current = () => authorized() && execution.current() && host.fleet() === fleet && (!topic || topic.current());
+    const check = () => { if (!current())
+        throw Error('Native pane creation authority or topic destination changed'); };
+    check();
+    let topicId, created, config, epoch;
+    try {
+        if (topic) {
+            topicId = await topic.create(String(profile.name));
+            check();
+        }
+        // Complete only after the ordinary persistent Daemon is published, not at the profile commit point.
+        created = await host.runtime.create(profile, current, { mutate: effect => execution.mutate(effect), complete: () => { } }, { native_adapter: 'pane', ...(topicId !== undefined && target ? { topic_id: topicId, channel_id: target.id } : {}) });
+        config = fleet.instances[created.name];
+        epoch = host.epoch(created.name);
+        check();
+        host.routes();
+        await host.start(created.name, config, () => current() && fleet.instances[created.name] === config && host.epoch(created.name) === epoch);
+        check();
+        if (fleet.instances[created.name] !== config || host.epoch(created.name) !== epoch)
+            throw Error('Native pane creation was superseded');
+        execution.complete();
+        return created;
+    }
+    catch (error) {
+        if (created && config && epoch !== undefined && fleet.instances[created.name] === config && host.fleet() === fleet) {
+            try {
+                if (await host.close(created.name, config, epoch) && fleet.instances[created.name] === config) {
+                    host.runtime.remove(created.name, () => host.fleet() === fleet && fleet.instances[created.name] === config);
+                    host.routes();
+                }
+            }
+            catch (cleanup) {
+                host.warn(cleanup);
+            } // Unknown close keeps the profile, config, topic and launch receipt together.
+        }
+        const referenced = topicId !== undefined && Object.values(host.fleet()?.instances ?? {}).some(row => String(row.topic_id) === String(topicId) && (row.channel_id == null || row.channel_id === target?.id));
+        if (topic && topicId !== undefined && !referenced)
+            try {
+                await topic.remove(topicId);
+            }
+            catch (cleanup) {
+                host.warn(cleanup);
+            }
+        throw error;
+    }
+}
+//# sourceMappingURL=native-pane-create.js.map

package/dist/native-pane-create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-pane-create.js","sourceRoot":"","sources":["../src/native-pane-create.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAYnE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAyB,EAAC,OAA8B,EAAC,SAA0B,EAAC,UAAsB,EAAC,SAA2B;IAC5K,MAAM,KAAK,GAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAAA,IAAG,CAAC,KAAK;QAAC,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAC,qBAAqB,CAAC,KAAK,EAAC,SAAS,CAAC,EAAC,KAAK,GAAC,MAAM,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC;IACzF,MAAM,OAAO,GAAC,GAAE,EAAE,CAAA,UAAU,EAAE,IAAE,SAAS,CAAC,OAAO,EAAE,IAAE,IAAI,CAAC,KAAK,EAAE,KAAG,KAAK,IAAE,CAAC,CAAC,KAAK,IAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACrG,MAAM,KAAK,GAAC,GAAE,EAAE,GAAC,IAAG,CAAC,OAAO,EAAE;QAAC,MAAM,KAAK,CAAC,6DAA6D,CAAC,CAAC,CAAA,CAAC,CAAC;IAC5G,KAAK,EAAE,CAAC;IAAA,IAAI,OAA+B,EAAC,OAAoE,EAAC,MAA+B,EAAC,KAAsB,CAAC;IACxK,IAAG,CAAC;QACH,IAAG,KAAK,EAAC,CAAC;YAAA,OAAO,GAAC,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAAA,KAAK,EAAE,CAAC;QAAA,CAAC;QACpE,oGAAoG;QACpG,OAAO,GAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAC,OAAO,EAAC,EAAC,MAAM,EAAC,MAAM,CAAA,EAAE,CAAA,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAC,GAAE,EAAE,GAAC,CAAC,EAAC,EAC1G,EAAC,cAAc,EAAC,MAAM,EAAC,GAAG,CAAC,OAAO,KAAG,SAAS,IAAE,MAAM,CAAA,CAAC,CAAA,EAAC,QAAQ,EAAC,OAAO,EAAC,UAAU,EAAC,MAAM,CAAC,EAAE,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAC;QACtG,MAAM,GAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAAA,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAAA,KAAK,EAAE,CAAC;QAAA,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1F,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAC,MAAM,EAAC,GAAE,EAAE,CAAA,OAAO,EAAE,IAAE,KAAK,CAAC,SAAS,CAAC,OAAQ,CAAC,IAAI,CAAC,KAAG,MAAM,IAAE,IAAI,CAAC,KAAK,CAAC,OAAQ,CAAC,IAAI,CAAC,KAAG,KAAK,CAAC,CAAC;QAChI,KAAK,EAAE,CAAC;QAAA,IAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAG,MAAM,IAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAG,KAAK;YAAC,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACvI,SAAS,CAAC,QAAQ,EAAE,CAAC;QAAA,OAAO,OAAO,CAAC;IACrC,CAAC;IAAA,OAAM,KAAK,EAAC,CAAC;QACb,IAAG,OAAO,IAAE,MAAM,IAAE,KAAK,KAAG,SAAS,IAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAG,MAAM,IAAE,IAAI,CAAC,KAAK,EAAE,KAAG,KAAK,EAAC,CAAC;YACpG,IAAG,CAAC;gBACH,IAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAC,MAAM,EAAC,KAAK,CAAC,IAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAG,MAAM,EAAC,CAAC;oBACvF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAC,GAAE,EAAE,CAAA,IAAI,CAAC,KAAK,EAAE,KAAG,KAAK,IAAE,KAAK,CAAC,SAAS,CAAC,OAAQ,CAAC,IAAI,CAAC,KAAG,MAAM,CAAC,CAAC;oBACpG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACf,CAAC;YACF,CAAC;YAAA,OAAM,OAAO,EAAC,CAAC;gBAAA,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAAA,CAAC,CAAC,8EAA8E;QACpH,CAAC;QACD,MAAM,UAAU,GAAC,OAAO,KAAG,SAAS,IAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,SAAS,IAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAG,MAAM,CAAC,OAAO,CAAC,IAAE,CAAC,GAAG,CAAC,UAAU,IAAE,IAAI,IAAE,GAAG,CAAC,UAAU,KAAG,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QACxL,IAAG,KAAK,IAAE,OAAO,KAAG,SAAS,IAAE,CAAC,UAAU;YAAC,IAAG,CAAC;gBAAA,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAAA,CAAC;YAAA,OAAM,OAAO,EAAC,CAAC;gBAAA,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAAA,CAAC;QAC/G,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC"}