@songsid/agend 2.3.5-alpha.4 → 2.3.5-alpha.5

package/dist/hub/execution/model-broker.js

@@ -0,0 +1,208 @@
+/** The member owns credentials and destinations. No URL/header supplied by a CLI is forwarded. */
+import { z } from "zod";
+import { parseStrictJson, HubProtocolError } from "../validation.js";
+import { HubProviderSetupError } from "./provider-setup.js";
+export const HUB_CLI_TOOLS = ["mcp__hub_documents__documents_list", "mcp__hub_documents__documents_read"];
+export const MODEL_WIRE_LIMIT = 1024 * 1024;
+const answerFormat = 'For the final answer return only a JSON object {"answer":"your answer","proposal":null}. For a requested action beyond document reads, put {"action":"exact action","arguments":{},"consequences":"exact consequences"} in proposal instead of executing it. This is a proposal for local owner review and grants no authority.';
+const record = (v) => z.record(z.string(), z.unknown()).parse(v);
+export function documentTool(name) {
+    if (name === HUB_CLI_TOOLS[0])
+        return "documents.list";
+    if (name === HUB_CLI_TOOLS[1])
+        return "documents.read";
+    throw new HubProtocolError("denied");
+}
+export function documentArguments(name, args) {
+    return name === "documents.list" ? z.strictObject({}).parse(args)
+        : name === "documents.read" ? z.strictObject({ documentId: z.string().min(1).max(128).regex(/^[A-Za-z0-9][A-Za-z0-9._:-]*$/) }).parse(args)
+            : (() => { throw new HubProtocolError("denied"); })();
+}
+/** Rebuild the request rather than forwarding ambient CLI settings, hosted tools, history IDs or headers. */
+export function restrictedModelRequest(backend, model, value) {
+    const input = record(value), tools = z.array(z.unknown()).max(512).parse(input.tools ?? []);
+    const namespaces = tools.map(record).filter(t => t.type === "namespace" && t.name === "mcp__hub_documents");
+    const nested = backend === "codex" && namespaces.length === 1;
+    const offered = nested ? z.array(z.unknown()).max(2).parse(namespaces[0].tools).map(record).map(t => ({ ...t, name: `mcp__hub_documents__${t.name}` })) : tools.map(record);
+    const selected = offered.filter(t => HUB_CLI_TOOLS.includes(t.name));
+    if (selected.length !== 2 || new Set(selected.map(t => t.name)).size !== 2)
+        throw new HubProtocolError("incompatible");
+    const schema = (name) => name === HUB_CLI_TOOLS[0]
+        ? { type: "object", properties: {}, additionalProperties: false }
+        : { type: "object", properties: { documentId: { type: "string" } }, required: ["documentId"], additionalProperties: false };
+    const safeTools = selected.map(t => backend === "claude"
+        ? { name: t.name, description: "Read only from the owner-approved document snapshot.", input_schema: schema(t.name) }
+        : { type: "function", name: nested ? t.name.slice("mcp__hub_documents__".length) : t.name, description: "Read only from the owner-approved document snapshot.", parameters: schema(t.name) });
+    const wireTools = nested ? [{ type: "namespace", name: "mcp__hub_documents", description: "Owner-approved document reads.", tools: safeTools }] : safeTools;
+    const history = backend === "claude" ? input.messages : input.input;
+    if (!Array.isArray(history))
+        throw new HubProtocolError("invalid");
+    // Do not allow the API itself to fetch media/files/URLs on behalf of an untrusted CLI.
+    const historyTypes = new Set(["message", "text", "input_text", "output_text", "tool_use", "tool_result", "function_call", "function_call_output", "reasoning", "summary_text", "ephemeral"]);
+    const walk = (v) => {
+        if (Array.isArray(v)) {
+            v.forEach(walk);
+            return;
+        }
+        if (!v || typeof v !== "object")
+            return;
+        const o = record(v);
+        if (typeof o.type === "string" && !historyTypes.has(o.type))
+            throw new HubProtocolError("denied");
+        Object.values(o).forEach(walk);
+    };
+    walk(history);
+    const systemInput = Array.isArray(input.system) ? input.system : typeof input.system === "string" ? [{ type: "text", text: input.system }] : [];
+    const system = systemInput.map(value => { const block = record(value); if (block.type !== "text" || typeof block.text !== "string")
+        throw new HubProtocolError("denied"); return { type: "text", text: block.text }; });
+    return backend === "claude"
+        ? { model, messages: history, system: [...system, { type: "text", text: answerFormat }], tools: wireTools, stream: true, max_tokens: 4096 }
+        : { model, input: history, instructions: `${typeof input.instructions === "string" ? input.instructions : ""}\n${answerFormat}`,
+            tools: wireTools, stream: true, store: false, parallel_tool_calls: false, max_output_tokens: 4096 };
+}
+export class HubForbiddenModelTool extends Error {
+    tool;
+    args;
+    constructor(tool, args) {
+        super("hub-forbidden-model-tool");
+        this.tool = tool;
+        this.args = args;
+    }
+}
+const forbiddenAction = (o, fallback) => {
+    const name = typeof o.name === "string" ? `${typeof o.namespace === "string" ? `${o.namespace}.` : ""}${o.name}` : fallback;
+    if (!name || name.length > 256)
+        throw new HubProtocolError("backpressure");
+    return name;
+};
+/** Buffer and validate the ENTIRE response before a byte reaches the CLI's native dispatcher. */
+export function validateModelReply(backend, reply) {
+    if (Buffer.byteLength(reply.body) > MODEL_WIRE_LIMIT)
+        throw new HubProtocolError("backpressure");
+    let completed = reply.contentType === "application/json";
+    const allowed = new Set(backend === "claude"
+        ? ["message", "text", "thinking", "redacted_thinking", "tool_use", "text_delta", "input_json_delta", "thinking_delta", "signature_delta", "message_start", "content_block_start", "content_block_delta", "content_block_stop", "message_delta", "message_stop", "ping"]
+        : ["response", "message", "reasoning", "function_call", "output_text", "summary_text", "refusal", "response.created", "response.in_progress", "response.output_item.added", "response.output_item.done", "response.content_part.added", "response.content_part.done", "response.output_text.delta", "response.output_text.done", "response.reasoning_summary_part.added", "response.reasoning_summary_part.done", "response.reasoning_summary_text.delta", "response.reasoning_summary_text.done", "response.function_call_arguments.delta", "response.function_call_arguments.done", "response.completed"]);
+    const check = (v) => {
+        if (Array.isArray(v)) {
+            v.forEach(check);
+            return;
+        }
+        if (!v || typeof v !== "object")
+            return;
+        const o = record(v), type = o.type;
+        if (type === "function_call" || type === "tool_use") {
+            const name = backend === "codex" && o.namespace === "mcp__hub_documents" ? `mcp__hub_documents__${o.name}` : o.name;
+            if (o.namespace && o.namespace !== "mcp__hub_documents" || typeof name !== "string" || !HUB_CLI_TOOLS.includes(name)) {
+                let args = o.input ?? {};
+                if (typeof o.arguments === "string") {
+                    try {
+                        args = parseStrictJson(o.arguments, 64 * 1024);
+                    }
+                    catch {
+                        args = { unparsedArguments: o.arguments };
+                    }
+                }
+                throw new HubForbiddenModelTool(forbiddenAction(o, type), args);
+            }
+        }
+        else if (typeof type === "string" && !allowed.has(type)) {
+            throw new HubForbiddenModelTool(forbiddenAction(o, type), o.arguments ?? (o.input !== undefined ? { input: o.input } : { request: o }));
+        }
+        Object.values(o).forEach(check);
+    };
+    if (reply.contentType === "application/json") {
+        if (backend !== "claude")
+            throw new HubProtocolError("incompatible");
+        check(parseStrictJson(reply.body, MODEL_WIRE_LIMIT));
+    }
+    else {
+        // Downstream SSE parsers treat lone CR as a line ending too. Refuse it before forwarding original bytes.
+        if (/\r(?!\n)/.test(reply.body))
+            throw new HubProtocolError("invalid");
+        const events = [];
+        for (const block of reply.body.replace(/\r\n/g, "\n").split("\n\n")) {
+            const data = block.split("\n").filter(l => l.startsWith("data:")).map(l => l.slice(5).trimStart()).join("\n");
+            if (!data || data === "[DONE]")
+                continue;
+            const event = record(parseStrictJson(data, MODEL_WIRE_LIMIT));
+            const names = block.split("\n").filter(l => l.startsWith("event:")).map(l => l.slice(6).trim());
+            if (names.length > 1 || names.length === 1 && names[0] !== event.type)
+                throw new HubProtocolError("invalid");
+            if (event.type === "error" || event.type === "response.failed" || event.type === "response.incomplete")
+                throw new HubProtocolError("unavailable");
+            if (event.type === (backend === "claude" ? "message_stop" : "response.completed"))
+                completed = true;
+            events.push(event);
+        }
+        // Gather streamed arguments before reporting a denied proposal, so the owner sees the actual requested action.
+        if (backend === "claude") {
+            const blocks = new Map();
+            for (const e of events) {
+                if (e.type === "content_block_start" && e.content_block && typeof e.content_block === "object") {
+                    e.content_block = record(e.content_block);
+                    blocks.set(e.index, { block: e.content_block, args: "" });
+                }
+                if (e.type === "content_block_delta" && e.delta && typeof e.delta === "object") {
+                    const delta = record(e.delta), block = blocks.get(e.index);
+                    if (block && delta.type === "input_json_delta")
+                        block.args += z.string().parse(delta.partial_json);
+                }
+            }
+            for (const { block, args } of blocks.values()) {
+                if (block.type === "tool_use" && args)
+                    block.input = parseStrictJson(args, 64 * 1024);
+            }
+        }
+        // Completed calls carry their exact arguments; inspect those before their incremental prefixes.
+        events.reverse().forEach(check);
+    }
+    if (!completed)
+        throw new HubProtocolError("uncertain");
+    return reply;
+}
+/** Explicit construction only; production endpoints are fixed, TLS checked, redirects forbidden. */
+export function createHubModelBroker(credentials) {
+    const keys = Object.freeze({ ...credentials });
+    const usable = (key) => typeof key === "string" && key.trim().length > 0 && !/[\r\n]/.test(key);
+    if (!Object.values(keys).some(usable))
+        throw new HubProviderSetupError("credential-unconfigured");
+    return async (backend, body, signal) => {
+        const key = keys[backend];
+        if (!usable(key))
+            throw new HubProviderSetupError("credential-unconfigured");
+        const response = await fetch(backend === "claude" ? "https://api.anthropic.com/v1/messages" : "https://api.openai.com/v1/responses", {
+            method: "POST", redirect: "error", signal,
+            headers: backend === "claude" ? { "content-type": "application/json", "x-api-key": key, "anthropic-version": "2023-06-01" }
+                : { "content-type": "application/json", authorization: `Bearer ${key}` }, body: JSON.stringify(body),
+        });
+        if (response.status !== 200 || !response.body) {
+            await response.body?.cancel();
+            throw new HubProtocolError("unavailable");
+        }
+        const contentType = response.headers.get("content-type")?.split(";")[0];
+        if (contentType !== "text/event-stream" && contentType !== "application/json") {
+            await response.body.cancel();
+            throw new HubProtocolError("incompatible");
+        }
+        const chunks = [];
+        let bytes = 0;
+        try {
+            for await (const chunk of response.body) {
+                bytes += chunk.byteLength;
+                if (bytes > MODEL_WIRE_LIMIT)
+                    throw new HubProtocolError("backpressure");
+                chunks.push(chunk);
+            }
+        }
+        catch (error) {
+            try {
+                await response.body.cancel();
+            }
+            catch { /* Reader has exited. */ }
+            throw error;
+        }
+        return { body: new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(chunks)), contentType };
+    };
+}
+//# sourceMappingURL=model-broker.js.map

package/dist/hub/execution/model-broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-broker.js","sourceRoot":"","sources":["../../../src/hub/execution/model-broker.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAK5D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,oCAAoC,EAAE,oCAAoC,CAAU,CAAC;AACnH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC5C,MAAM,YAAY,GAAG,iUAAiU,CAAC;AACvV,MAAM,MAAM,GAAG,CAAC,CAAU,EAA2B,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnG,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACvD,IAAI,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACvD,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,IAAa;IAC3D,OAAO,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC/D,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC3I,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AACD,6GAA6G;AAC7G,MAAM,UAAU,sBAAsB,CAAC,OAAsB,EAAE,KAAa,EAAE,KAAc;IAC1F,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5F,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;IAC5G,MAAM,MAAM,GAAG,OAAO,KAAK,OAAO,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5K,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAoC,CAAC,CAAC,CAAC;IACrG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;IACvH,MAAM,MAAM,GAAG,CAAC,IAAa,EAAE,EAAE,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE;QACjE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;IAC9H,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,KAAK,QAAQ;QACtD,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,sDAAsD,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;QACrH,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,IAAe,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,sDAAsD,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5M,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,gCAAgC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5J,MAAM,OAAO,GAAG,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IACpE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACnE,uFAAuF;IACvF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,sBAAsB,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC;IAC7L,MAAM,IAAI,GAAG,CAAC,CAAU,EAAQ,EAAE;QAChC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAClD,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO;QACxC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAClG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,CAAC;IACd,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChJ,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxN,OAAO,OAAO,KAAK,QAAQ;QACzB,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;QAC3I,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,EAAE;YAC7H,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;AAC1G,CAAC;AACD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACzB,IAAI;IAAmB,IAAI;IAAhD,YAAqB,IAAY,EAAW,IAAa;QAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;oBAA1E,IAAI;oBAAmB,IAAI;IAAgD,CAAC;CAClG;AACD,MAAM,eAAe,GAAG,CAAC,CAA0B,EAAE,QAAgB,EAAU,EAAE;IAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5H,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AACF,iGAAiG;AACjG,MAAM,UAAU,kBAAkB,CAAC,OAAsB,EAAE,KAAoB;IAC7E,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,gBAAgB;QAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;IACjG,IAAI,SAAS,GAAG,KAAK,CAAC,WAAW,KAAK,kBAAkB,CAAC;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ;QAC1C,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,mBAAmB,EAAE,UAAU,EAAE,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,eAAe,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,CAAC;QACvQ,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,wCAAwC,EAAE,uCAAuC,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC/kB,MAAM,KAAK,GAAG,CAAC,CAAU,EAAQ,EAAE;QACjC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACnD,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO;QACxC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACnC,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,oBAAoB,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACpH,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,oBAAoB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAoC,CAAC,EAAE,CAAC;gBACrJ,IAAI,IAAI,GAAY,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAClC,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;oBAAC,IAAI,CAAC;wBAAC,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC;wBAAC,IAAI,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;oBAAC,CAAC;gBAAC,CAAC;gBACrJ,MAAM,IAAI,qBAAqB,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,qBAAqB,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1I,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,IAAI,KAAK,CAAC,WAAW,KAAK,kBAAkB,EAAE,CAAC;QAC7C,IAAI,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;QACrE,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,yGAAyG;QACzG,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACvE,MAAM,MAAM,GAA8B,EAAE,CAAC;QAC7C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9G,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACzC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAChG,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI;gBAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAC7G,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB;gBAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;YAClJ,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,oBAAoB,CAAC;gBAAE,SAAS,GAAG,IAAI,CAAC;YACpG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,+GAA+G;QAC/G,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6D,CAAC;YACpF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,IAAI,CAAC,CAAC,aAAa,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;oBAC/F,CAAC,CAAC,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;oBAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,aAAwC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;gBAClI,CAAC;gBACD,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;oBAC3D,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;wBAAE,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACrG,CAAC;YACH,CAAC;YACD,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI;oBAAE,KAAK,CAAC,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;QACD,gGAAgG;QAChG,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,oGAAoG;AACpG,MAAM,UAAU,oBAAoB,CAAC,WAAgD;IACnF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,CAAC,GAAY,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;IAClG,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,qCAAqC,EAAE;YACnI,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM;YACzC,OAAO,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,WAAW,EAAE,GAAG,EAAE,mBAAmB,EAAE,YAAY,EAAE;gBACzH,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SACvG,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAAC,CAAC;QAC5H,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,WAAW,KAAK,mBAAmB,IAAI,WAAW,KAAK,kBAAkB,EAAE,CAAC;YAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAAC,CAAC;QAC5J,MAAM,MAAM,GAAiB,EAAE,CAAC;QAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;gBAC1B,IAAI,KAAK,GAAG,gBAAgB;oBAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;gBACzE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QACzG,OAAO,EAAE,IAAI,EAAE,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IACxG,CAAC,CAAC;AACJ,CAAC"}

package/dist/hub/execution/provider-setup.d.ts

@@ -0,0 +1,11 @@
+/** Member-local setup diagnostics only. They never grant readiness or carry an exception, path or credential. */
+import { HubProtocolError } from "../validation.js";
+export declare const HUB_PROVIDER_SETUP_REASONS: readonly ["engine-unavailable", "engine-unsupported", "image-unconfigured", "image-mismatch", "credential-unconfigured", "unavailable"];
+export type HubProviderSetupReason = typeof HUB_PROVIDER_SETUP_REASONS[number];
+export declare function isHubProviderSetupReason(value: unknown): value is HubProviderSetupReason;
+/** The protocol keeps its existing closed error code; this reason is local-owner presentation metadata. */
+export declare class HubProviderSetupError extends HubProtocolError {
+    readonly reason: HubProviderSetupReason;
+    constructor(reason: HubProviderSetupReason);
+}
+export declare function hubProviderSetupReason(error: unknown): HubProviderSetupReason | undefined;

package/dist/hub/execution/provider-setup.js

@@ -0,0 +1,21 @@
+/** Member-local setup diagnostics only. They never grant readiness or carry an exception, path or credential. */
+import { HubProtocolError } from "../validation.js";
+export const HUB_PROVIDER_SETUP_REASONS = [
+    "engine-unavailable", "engine-unsupported", "image-unconfigured", "image-mismatch", "credential-unconfigured", "unavailable",
+];
+const reasons = new Set(HUB_PROVIDER_SETUP_REASONS);
+export function isHubProviderSetupReason(value) {
+    return typeof value === "string" && reasons.has(value);
+}
+/** The protocol keeps its existing closed error code; this reason is local-owner presentation metadata. */
+export class HubProviderSetupError extends HubProtocolError {
+    reason;
+    constructor(reason) {
+        super(reason === "engine-unsupported" || reason === "image-mismatch" ? "incompatible" : "unavailable");
+        this.reason = reason;
+    }
+}
+export function hubProviderSetupReason(error) {
+    return error instanceof HubProviderSetupError && isHubProviderSetupReason(error.reason) ? error.reason : undefined;
+}
+//# sourceMappingURL=provider-setup.js.map

package/dist/hub/execution/provider-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-setup.js","sourceRoot":"","sources":["../../../src/hub/execution/provider-setup.ts"],"names":[],"mappings":"AAAA,iHAAiH;AACjH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,oBAAoB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,aAAa;CACpH,CAAC;AAEX,MAAM,OAAO,GAAwB,IAAI,GAAG,CAAC,0BAA0B,CAAC,CAAC;AACzE,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AACD,2GAA2G;AAC3G,MAAM,OAAO,qBAAsB,SAAQ,gBAAgB;IACpC,MAAM;IAA3B,YAAqB,MAA8B;QACjD,KAAK,CAAC,MAAM,KAAK,oBAAoB,IAAI,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;sBADpF,MAAM;IAE3B,CAAC;CACF;AACD,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,OAAO,KAAK,YAAY,qBAAqB,IAAI,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACrH,CAAC"}

package/dist/hub/execution/sandbox-runner.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/hub/execution/sandbox-runner.js

@@ -0,0 +1,221 @@
+/** Entrypoint ONLY inside the pinned, unnetworked disposable image. Never imported by the daemon. */
+import { createServer } from "node:http";
+import { mkdirSync, writeFileSync, readFileSync } from "node:fs";
+import { createInterface } from "node:readline";
+import { fileURLToPath } from "node:url";
+import { resolve } from "node:path";
+import { spawn } from "../../child-process.js";
+const self = fileURLToPath(import.meta.url), limit = 1024 * 1024;
+const tools = [
+    { name: "documents_list", description: "List the approved documents.", inputSchema: { type: "object", properties: {}, additionalProperties: false } },
+    { name: "documents_read", description: "Read one approved document by its opaque documentId.", inputSchema: { type: "object", properties: { documentId: { type: "string" } }, required: ["documentId"], additionalProperties: false } },
+].map(t => ({ ...t, annotations: { readOnlyHint: true, destructiveHint: false, openWorldHint: false } }));
+async function main() {
+    if (process.argv[2] === "--mcp") {
+        const port = Number(process.env.HUB_RPC_PORT);
+        if (!Number.isInteger(port) || port < 1 || port > 65535)
+            process.exit(1);
+        let used = 0;
+        process.stdin.on("data", (b) => { used += b.length; if (used > 2 * limit)
+            process.exit(1); });
+        for await (const line of createInterface({ input: process.stdin, crlfDelay: Infinity })) {
+            let r;
+            try {
+                r = JSON.parse(line);
+            }
+            catch {
+                process.exit(1);
+            }
+            if (r.id === undefined)
+                continue;
+            let result;
+            if (r.method === "initialize")
+                result = { protocolVersion: "2024-11-05", capabilities: { tools: {} }, serverInfo: { name: "hub-documents", version: "1" } };
+            else if (r.method === "ping")
+                result = {};
+            else if (r.method === "tools/list")
+                result = { tools };
+            else if (r.method === "tools/call" && tools.some(t => t.name === r.params?.name)) {
+                const response = await fetch(`http://127.0.0.1:${port}/tool`, { method: "POST", body: JSON.stringify(r.params), signal: AbortSignal.timeout(120_000) });
+                if (!response.ok)
+                    process.exit(1);
+                const text = await response.text();
+                if (Buffer.byteLength(text) > 128 * 1024)
+                    process.exit(1);
+                result = { content: [{ type: "text", text }] };
+            }
+            else {
+                process.stdout.write(JSON.stringify({ jsonrpc: "2.0", id: r.id, error: { code: -32601, message: "Unavailable" } }) + "\n");
+                continue;
+            }
+            process.stdout.write(JSON.stringify({ jsonrpc: "2.0", id: r.id, result }) + "\n");
+        }
+    }
+    else {
+        let total = 0, next = 0, started = false;
+        const pending = new Map();
+        const send = (v) => process.stdout.write(JSON.stringify(v) + "\n");
+        const die = () => { send({ type: "error" }); process.exit(1); };
+        // This independent deadline survives a member/controller crash or a lost attach pipe.
+        setTimeout(die, 125_000).unref();
+        process.stdin.on("end", die);
+        process.stdin.on("error", die);
+        process.stdin.on("data", (b) => { total += b.length; if (total > 16 * limit)
+            die(); });
+        const ask = (type, fields) => new Promise((resolve, reject) => {
+            const id = ++next;
+            if (id > 256 || pending.size)
+                return reject(Error("bounded"));
+            pending.set(id, { resolve, reject });
+            send({ type, id, ...fields });
+        });
+        const start = async (frame) => {
+            if (started || !["claude", "codex"].includes(frame.backend) || typeof frame.prompt !== "string" || Buffer.byteLength(frame.prompt) > 40 * 1024
+                || typeof frame.model !== "string" || !/^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$/.test(frame.model))
+                throw Error("invalid");
+            started = true;
+            for (const dir of ["home", "work", "tmp", "config", "data", "cache", "state"])
+                mkdirSync(`/scratch/${dir}`, { mode: 0o700 });
+            const server = createServer(async (req, res) => {
+                try {
+                    if (req.method !== "POST" || !["/tool", "/v1/messages", "/v1/messages?beta=true", "/v1/responses", "/v1/messages/count_tokens?beta=true", "/v1/messages/count_tokens"].includes(req.url ?? "")) {
+                        res.writeHead(404);
+                        res.end();
+                        return;
+                    }
+                    const chunks = [];
+                    let bytes = 0;
+                    for await (const chunk of req) {
+                        bytes += chunk.length;
+                        if (bytes > limit)
+                            throw Error("bounded");
+                        chunks.push(chunk);
+                    }
+                    const body = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+                    if (req.url.includes("count_tokens")) {
+                        res.writeHead(200, { "content-type": "application/json" });
+                        res.end(JSON.stringify({ input_tokens: Math.ceil(bytes / 2) }));
+                        return;
+                    }
+                    if (req.url === "/tool") {
+                        if (!tools.some(t => t.name === body.name))
+                            throw Error("denied");
+                        const reply = await ask("tool", { name: `mcp__hub_documents__${body.name}`, arguments: body.arguments });
+                        res.writeHead(200, { "content-type": "application/json" });
+                        res.end(reply.text);
+                    }
+                    else {
+                        const reply = await ask("model", { body });
+                        res.writeHead(200, { "content-type": reply.contentType });
+                        res.end(reply.body);
+                    }
+                }
+                catch {
+                    res.writeHead(503);
+                    res.end();
+                    die();
+                }
+            });
+            server.requestTimeout = 120_000;
+            server.maxConnections = 8;
+            await new Promise(resolve => server.listen(0, "127.0.0.1", resolve));
+            const port = server.address().port;
+            const env = {
+                HOME: "/scratch/home", PATH: "/usr/local/bin:/usr/bin:/bin", TMPDIR: "/scratch/tmp", LANG: "C.UTF-8", TERM: "dumb",
+                XDG_CONFIG_HOME: "/scratch/config", XDG_DATA_HOME: "/scratch/data", XDG_CACHE_HOME: "/scratch/cache", XDG_STATE_HOME: "/scratch/state",
+                CODEX_HOME: "/scratch/home/.codex", CLAUDE_CONFIG_DIR: "/scratch/home/.claude", HUB_RPC_PORT: String(port),
+                ANTHROPIC_API_KEY: "sk-ant-hub-local-broker-dummy", ANTHROPIC_BASE_URL: `http://127.0.0.1:${port}`,
+                DISABLE_AUTOUPDATER: "1", CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: "1", DISABLE_TELEMETRY: "1", DISABLE_ERROR_REPORTING: "1", ENABLE_TOOL_SEARCH: "false",
+            };
+            const mcp = { command: "/usr/local/bin/node", args: [self, "--mcp"], env: { HUB_RPC_PORT: String(port) } };
+            let args;
+            if (frame.backend === "claude") {
+                writeFileSync("/scratch/config/settings.json", JSON.stringify({ disableAllHooks: true, disableClaudeAiConnectors: true, permissions: { defaultMode: "dontAsk" } }), { mode: 0o600 });
+                args = ["-p", "--restricted", "--tools", "", "--strict-mcp-config", "--mcp-config", JSON.stringify({ mcpServers: { hub_documents: mcp } }),
+                    "--allowedTools", "mcp__hub_documents__documents_list,mcp__hub_documents__documents_read", "--permission-mode", "dontAsk",
+                    "--settings", "/scratch/config/settings.json", "--no-session-persistence", "--no-chrome", "--model", frame.model, "--max-turns", "16", "--output-format", "json"];
+            }
+            else {
+                mkdirSync(env.CODEX_HOME, { mode: 0o700 });
+                writeFileSync(`${env.CODEX_HOME}/config.toml`, `model = ${JSON.stringify(frame.model)}
+model_provider = "hub"
+approval_policy = "never"
+sandbox_mode = "read-only"
+web_search = "disabled"
+[features]
+shell_tool = false
+view_image = false
+multi_agent = false
+apps = false
+code_mode = false
+shell_snapshot = false
+enable_request_compression = false
+[feedback]
+enabled = false
+[history]
+persistence = "none"
+[model_providers.hub]
+name = "hub"
+base_url = "http://127.0.0.1:${port}/v1"
+wire_api = "responses"
+requires_openai_auth = false
+request_max_retries = 0
+stream_max_retries = 0
+[mcp_servers.hub_documents]
+command = "/usr/local/bin/node"
+args = [${JSON.stringify(self)}, "--mcp"]
+env = { HUB_RPC_PORT = "${port}" }
+required = true
+`, { mode: 0o600 });
+                args = ["exec", "--skip-git-repo-check", "--ephemeral", "--json", "--output-last-message", "/scratch/answer", "-"];
+            }
+            const binary = frame.backend === "claude" ? "/opt/cli/node_modules/@anthropic-ai/claude-code-linux-x64/claude" : "/opt/cli/node_modules/.bin/codex";
+            const child = spawn(binary, args, { cwd: "/scratch/work", env, stdio: ["pipe", "pipe", "pipe"] });
+            let stdout = "", outputBytes = 0;
+            child.stdout.on("data", (b) => { outputBytes += b.length; if (outputBytes > limit)
+                die(); stdout += b.toString("utf8"); });
+            child.stderr.on("data", (b) => { outputBytes += b.length; if (outputBytes > limit)
+                die(); process.stderr.write(b); });
+            child.on("error", die);
+            child.on("close", code => {
+                try {
+                    if (code !== 0)
+                        throw Error("exit");
+                    const text = frame.backend === "claude" ? (() => { const r = JSON.parse(stdout); if (r.is_error || r.type !== "result" || r.subtype !== "success")
+                        throw Error("result"); return r.result; })() : readFileSync("/scratch/answer", "utf8");
+                    if (typeof text !== "string" || Buffer.byteLength(text) > 128 * 1024)
+                        throw Error("bounded");
+                    send({ type: "answer", text });
+                    server.close();
+                    process.exit(0);
+                }
+                catch {
+                    die();
+                }
+            });
+            child.stdin.end(frame.prompt);
+        };
+        for await (const line of createInterface({ input: process.stdin, crlfDelay: Infinity })) {
+            try {
+                if (Buffer.byteLength(line) > 2 * limit)
+                    throw Error("bounded");
+                const frame = JSON.parse(line);
+                if (frame.type === "start")
+                    void start(frame).catch(die);
+                else {
+                    const p = pending.get(frame.id);
+                    if (!p || !["tool-result", "model-result"].includes(frame.type))
+                        throw Error("invalid");
+                    pending.delete(frame.id);
+                    p.resolve(frame);
+                }
+            }
+            catch {
+                die();
+            }
+        }
+    }
+}
+if (process.argv[1] && self === resolve(process.argv[1]))
+    void main().catch(() => process.exit(1));
+//# sourceMappingURL=sandbox-runner.js.map

package/dist/hub/execution/sandbox-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-runner.js","sourceRoot":"","sources":["../../../src/hub/execution/sandbox-runner.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAE/C,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;AACjE,MAAM,KAAK,GAAG;IACZ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,8BAA8B,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE;IACrJ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,sDAAsD,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE;CACxO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AAE1G,KAAK,UAAU,IAAI;IACnB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtG,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACxF,IAAI,CAAC,CAAC;YACN,IAAI,CAAC;gBAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YACxD,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS;gBAAE,SAAS;YACjC,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY;gBAAE,MAAM,GAAG,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC;iBACvJ,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;gBAAE,MAAM,GAAG,EAAE,CAAC;iBACrC,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY;gBAAE,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC;iBAClD,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;gBACjF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACxJ,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,IAAI;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC9F,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACjD,CAAC;iBAAM,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YAChJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,KAAK,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6D,CAAC;QACrF,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,sFAAsF;QACtF,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,GAAG,EAAE,GAAG,KAAK;YAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/F,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE,CAAC,IAAI,OAAO,CAAM,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjF,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;YAAC,IAAI,EAAE,GAAG,GAAG,IAAI,OAAO,CAAC,IAAI;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YACjF,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,EAAE,KAAU,EAAE,EAAE;YACjC,IAAI,OAAO,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI;mBACzI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;YACzH,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC;gBAAE,SAAS,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7H,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC7C,IAAI,CAAC;oBACH,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,eAAe,EAAE,qCAAqC,EAAE,2BAA2B,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;wBAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;wBAAC,GAAG,CAAC,GAAG,EAAE,CAAC;wBAAC,OAAO;oBAAC,CAAC;oBAC1O,MAAM,MAAM,GAAa,EAAE,CAAC;oBAAC,IAAI,KAAK,GAAG,CAAC,CAAC;oBAC3C,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;wBAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;wBAAC,IAAI,KAAK,GAAG,KAAK;4BAAE,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;wBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAC,CAAC;oBACxH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;oBAChE,IAAI,GAAG,CAAC,GAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;wBAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;wBAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;wBAAC,OAAO;oBAAC,CAAC;oBAC/K,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;wBACxB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC;4BAAE,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;wBAClE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,uBAAuB,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;wBACzG,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;wBAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAClF,CAAC;yBAAM,CAAC;wBACN,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC3C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;wBAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACjF,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBAAC,GAAG,CAAC,GAAG,EAAE,CAAC;oBAAC,GAAG,EAAE,CAAC;gBAAC,CAAC;YACnD,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC;YAAC,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;YAC3D,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3E,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC;YACzD,MAAM,GAAG,GAAG;gBACV,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,8BAA8B,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM;gBAClH,eAAe,EAAE,iBAAiB,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,cAAc,EAAE,gBAAgB;gBACtI,UAAU,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC;gBAC1G,iBAAiB,EAAE,+BAA+B,EAAE,kBAAkB,EAAE,oBAAoB,IAAI,EAAE;gBAClG,mBAAmB,EAAE,GAAG,EAAE,wCAAwC,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,uBAAuB,EAAE,GAAG,EAAE,kBAAkB,EAAE,OAAO;aAC3J,CAAC;YACF,MAAM,GAAG,GAAG,EAAE,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC3G,IAAI,IAAc,CAAC;YACnB,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC/B,aAAa,CAAC,+BAA+B,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACrL,IAAI,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,EAAE,qBAAqB,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC;oBACxI,gBAAgB,EAAE,uEAAuE,EAAE,mBAAmB,EAAE,SAAS;oBACzH,YAAY,EAAE,+BAA+B,EAAE,0BAA0B,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;YACtK,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC3C,aAAa,CAAC,GAAG,GAAG,CAAC,UAAU,cAAc,EAAE,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;+BAmB5D,IAAI;;;;;;;UAOzB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;0BACJ,IAAI;;CAE7B,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACd,IAAI,GAAG,CAAC,MAAM,EAAE,uBAAuB,EAAE,aAAa,EAAE,QAAQ,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;YACrH,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,kEAAkE,CAAC,CAAC,CAAC,kCAAkC,CAAC;YACpJ,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YAClG,IAAI,MAAM,GAAG,EAAE,EAAE,WAAW,GAAG,CAAC,CAAC;YACjC,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,WAAW,GAAG,KAAK;gBAAE,GAAG,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpI,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,WAAW,GAAG,KAAK;gBAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/H,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACvB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;gBACvB,IAAI,CAAC;oBACH,IAAI,IAAI,KAAK,CAAC;wBAAE,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;oBACpC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;wBAAE,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;oBAC1O,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,IAAI;wBAAE,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;oBAC7F,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;oBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClE,CAAC;gBAAC,MAAM,CAAC;oBAAC,GAAG,EAAE,CAAC;gBAAC,CAAC;YACpB,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,KAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC,CAAC;QACF,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACxF,IAAI,CAAC;gBACH,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK;oBAAE,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;gBAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;oBAAE,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;qBACpD,CAAC;oBACJ,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAChC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;wBAAE,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;oBACxF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBAAC,GAAG,EAAE,CAAC;YAAC,CAAC;QACpB,CAAC;IACH,CAAC;AACD,CAAC;AACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC"}