@songsid/agend 2.3.5-alpha.5 → 2.3.5-beta.1

package/dist/runtime-client-store.js

@@ -1,372 +0,0 @@
-/** Private, bounded state for a standalone runtime. Input prompts and provider login credentials have no journal fields. */
-import { existsSync, lstatSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
-import { createHash } from "node:crypto";
-import { join } from "node:path";
-import { atomicWriteFileSync } from "./atomic-write.js";
-import { assertCredentialProfileName, validCredentialProfileName } from "./runtime-credential-profiles.js";
-const MAX_JOBS = 128;
-/**
- * M-2239 P2-1 (#2936 review): `used` is the replay tombstone (id → digest) — it was capped at 4096 and never pruned, so
- * a long-lived runtime stopped. It now holds up to MAX_IDS, and beyond that the oldest tombstones older than
- * ID_KEEP_MS (and with no job snapshot) give way; a younger one never does, so a replay is refused for at least that.
- */
-const MAX_IDS = 65_536;
-const ID_KEEP_MS = 30 * 24 * 3_600_000;
-/** Kept free below MAX_STORE_BYTES when a job is accepted: its own later updates (≤ 64 KiB characters of output, UTF-8). */
-const BYTE_HEADROOM = 512 * 1024;
-const MAX_STORE_BYTES = 12 * 1024 * 1024;
-const ID = /^[A-Za-z0-9-]{16,80}$/;
-const UUID = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/i;
-function object(value) { return !!value && typeof value === "object" && !Array.isArray(value); }
-function canonical(value) {
-    if (Array.isArray(value))
-        return `[${value.map(canonical).join(",")}]`;
-    if (object(value))
-        return `{${Object.keys(value).sort().map(key => `${JSON.stringify(key)}:${canonical(value[key])}`).join(",")}}`;
-    return JSON.stringify(value) ?? "null";
-}
-export function runtimeJobDigest(value) { return createHash("sha256").update(canonical(value)).digest("hex"); }
-function privateDirectory(directory) {
-    mkdirSync(directory, { recursive: true, mode: 0o700 });
-    if (!lstatSync(directory).isDirectory() || lstatSync(directory).isSymbolicLink())
-        throw new Error("Runtime state must be a private real directory");
-}
-function readPrivate(path) {
-    const entry = lstatSync(path);
-    if (!entry.isFile() || entry.isSymbolicLink() || entry.size > MAX_STORE_BYTES)
-        throw new Error("Invalid runtime state file");
-    return JSON.parse(readFileSync(path, "utf8"));
-}
-function atomic(path, value) {
-    const text = JSON.stringify(value);
-    if (Buffer.byteLength(text) > MAX_STORE_BYTES)
-        throw new Error("Runtime state limit reached");
-    for (let attempt = 0;; attempt++) {
-        try {
-            atomicWriteFileSync(path, text, { mode: 0o600 });
-            return;
-        }
-        catch (error) {
-            if (process.platform !== "win32" || attempt >= 4 || !["EPERM", "EACCES", "EBUSY"].includes(error.code ?? ""))
-                throw error;
-            Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 10 * (attempt + 1));
-        }
-    }
-}
-export function validateRuntimeServer(value) {
-    const url = new URL(value);
-    const local = ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
-    if (!["https:", ...(local ? ["http:"] : [])].includes(url.protocol) || url.username || url.password || url.search || url.hash
-        || url.pathname !== "/")
-        throw new Error("Runtime server must be an HTTPS origin (HTTP is allowed only on loopback)");
-    return url;
-}
-export class RuntimeClientStore {
-    directory;
-    now;
-    file;
-    data;
-    constructor(directory, now = Date.now) {
-        this.directory = directory;
-        this.now = now;
-        privateDirectory(directory);
-        this.file = join(directory, "jobs.json");
-        this.data = existsSync(this.file) ? this.validate(readPrivate(this.file)) : { version: 1, jobs: {}, used: {} };
-    }
-    unsettled() { return this.blocked() || Object.values(this.data.jobs).some(job => job.task.outcomeConfirmed === false); }
-    ledgerConflict(tail) {
-        return new Error(`This profile (${this.directory}) still has an active or unconfirmed execution recorded for a different AgEnD pairing, and AgEnD would reject it. Check that no CLI process from it is left running, then delete jobs.json in that folder. ${tail}`);
-    }
-    /** Run before a pairing code is spent: a one-time credential must never be issued into a profile that cannot take it. */
-    assertCanPair() { if (this.unsettled())
-        throw this.ledgerConflict("Nothing was paired and your pairing code is still unused; run connect-agend.bat again before the code expires."); }
-    /**
-     * The ledger is replayed to AgEnD on every connect, and AgEnD closes the connection for a job it did not issue to this machine, so jobs are
-     * tied to the machine they ran for. Called after acquiring the profile lock, before recoverInterrupted. When the profile now belongs to a
-     * different machine than the ledger's owner, settled jobs of the old pairing are dropped; an unsettled one is never discarded silently.
-     * A ledger with no recorded owner (older profile) cannot be attributed to anyone: when connecting it is left exactly as it is (and unstamped,
-     * unless it is empty), because stamping it would claim another server's jobs as this one's. Only a brand-new pairing (`pairing: true`) proves
-     * every earlier job belongs to some other machine, so that clears an ownerless ledger too.
-     */
-    adoptMachine(machineId, pairing = false) {
-        const owner = this.data.machineId;
-        if (owner === machineId)
-            return;
-        if (owner === undefined && !pairing && (Object.keys(this.data.jobs).length || Object.keys(this.data.used).length))
-            return;
-        if (owner !== undefined || pairing) {
-            if (this.unsettled())
-                throw this.ledgerConflict("No new pairing code is needed; connect again afterwards.");
-            this.data.jobs = {};
-            this.data.used = {};
-            delete this.data.usedAt;
-        }
-        this.data.machineId = machineId;
-        this.save();
-    }
-    /** Called only after acquiring the profile lock: reading status must not interrupt a live runtime. */
-    recoverInterrupted() {
-        let changed = false;
-        for (const job of Object.values(this.data.jobs)) {
-            if (!job.task.finishedAt || job.task.outcomeConfirmed === false) {
-                job.uncertain = true;
-                job.seq++;
-                job.task = { ...job.task, status: "failed", finishedAt: this.now(), outcomeConfirmed: false,
-                    error: "Runtime restarted before execution was confirmed stopped. Verify its processes before recovery; this job will not be replayed." };
-                changed = true;
-            }
-        }
-        if (changed)
-            this.save();
-    }
-    validate(raw) {
-        if (!object(raw) || raw.version !== 1 || !object(raw.jobs) || !object(raw.used)
-            || Object.keys(raw.jobs).length > MAX_JOBS || Object.keys(raw.used).length > MAX_IDS)
-            throw new Error("Invalid runtime job ledger");
-        for (const [id, digest] of Object.entries(raw.used))
-            if (!ID.test(id) || typeof digest !== "string" || !/^[a-f0-9]{64}$/.test(digest))
-                throw new Error("Invalid runtime job identity");
-        if (raw.machineId !== undefined && (typeof raw.machineId !== "string" || !UUID.test(raw.machineId)))
-            throw new Error("Invalid runtime job ledger owner");
-        if (raw.usedAt !== undefined && (!object(raw.usedAt) || Object.entries(raw.usedAt).some(([id, at]) => !Object.hasOwn(raw.used, id) || typeof at !== "number" || !Number.isFinite(at))))
-            throw new Error("Invalid runtime job identity times");
-        for (const [id, value] of Object.entries(raw.jobs)) {
-            if (!ID.test(id) || !object(value) || !Number.isSafeInteger(value.seq) || value.seq < 1
-                || typeof value.uncertain !== "boolean" || !object(value.task) || value.task.id !== id || value.digest !== raw.used[id]
-                || typeof value.task.output !== "string" || value.task.output.length > 65_536)
-                throw new Error("Invalid runtime job snapshot");
-        }
-        return raw;
-    }
-    save() { atomic(this.file, this.data); }
-    /**
-     * #2945 review: the byte budget, not only the id count. Before a new job is saved the ledger must fit MAX_STORE_BYTES
-     * with BYTE_HEADROOM left for that job's own updates (its output is bounded at 64 KiB characters). Room comes first
-     * from settled job snapshots (finished, confirmed — never the new one, an uncertain or an unfinished one), oldest
-     * first; then from replay ids past ID_KEEP_MS with no snapshot. False when even that does not make room.
-     */
-    fitBytes(newId) {
-        const budget = MAX_STORE_BYTES - BYTE_HEADROOM, actual = () => Buffer.byteLength(JSON.stringify(this.data));
-        const bytes = (value) => Buffer.byteLength(JSON.stringify(value));
-        // Each removal subtracts what that member actually occupied (key, colon, value, comma; a usedAt member only when it
-        // exists). The estimate only paces the loop: whenever it says "fits", the real size is measured and, if still over,
-        // eviction goes on from the remaining candidates (#2945 R2: legacy ids without usedAt were over-counted).
-        let size = actual();
-        const fitted = () => { if (size > budget)
-            return false; size = actual(); return size <= budget; };
-        if (fitted())
-            return true;
-        const jobs = Object.values(this.data.jobs).filter(row => row.task.id !== newId && row.task.finishedAt && !row.uncertain && row.task.outcomeConfirmed !== false)
-            .sort((a, b) => a.task.startedAt - b.task.startedAt);
-        for (const row of jobs) {
-            size -= bytes(row.task.id) + 1 + bytes(row) + 1;
-            delete this.data.jobs[row.task.id];
-            if (fitted())
-                return true;
-        }
-        const now = this.now(), at = this.data.usedAt ?? {};
-        const old = Object.keys(this.data.used).filter(id => !this.data.jobs[id] && now - (at[id] ?? 0) > ID_KEEP_MS).sort((a, b) => (at[a] ?? 0) - (at[b] ?? 0));
-        for (const id of old) {
-            size -= bytes(id) + 1 + bytes(this.data.used[id]) + 1 + (Object.hasOwn(at, id) ? bytes(id) + 1 + bytes(at[id]) + 1 : 0);
-            delete this.data.used[id];
-            delete at[id];
-            if (fitted())
-                return true;
-        }
-        return actual() <= budget;
-    }
-    /** Oldest first; only past ID_KEEP_MS and with no job snapshot. An id from an older ledger (no time) counts as oldest. */
-    evictTombstones() {
-        const now = this.now(), at = this.data.usedAt ?? {};
-        const old = Object.keys(this.data.used).filter(id => !this.data.jobs[id] && now - (at[id] ?? 0) > ID_KEEP_MS)
-            .sort((a, b) => (at[a] ?? 0) - (at[b] ?? 0));
-        for (const id of old.slice(0, Object.keys(this.data.used).length - MAX_IDS + 1)) {
-            delete this.data.used[id];
-            delete at[id];
-        }
-    }
-    get(id) { const row = this.data.jobs[id]; return row ? structuredClone(row) : null; }
-    list() { return Object.values(this.data.jobs).map(job => structuredClone(job)); }
-    blocked() { return Object.values(this.data.jobs).some(job => job.uncertain || !job.task.finishedAt); }
-    accept(task, digest) {
-        if (!ID.test(task.id) || !/^[a-f0-9]{64}$/.test(digest))
-            throw new Error("Invalid runtime job");
-        const known = this.data.used[task.id];
-        if (known !== undefined) {
-            if (known !== digest)
-                throw new Error("Execution ID belongs to different arguments");
-            const old = this.get(task.id);
-            if (!old)
-                throw new Error("Execution ID was already used and its snapshot expired; do not retry");
-            return { duplicate: true, job: old };
-        }
-        if (this.blocked())
-            throw new Error("Runtime already has an active or unconfirmed execution");
-        if (Object.keys(this.data.used).length >= MAX_IDS)
-            this.evictTombstones();
-        if (Object.keys(this.data.used).length >= MAX_IDS)
-            throw new Error("Runtime execution identity limit reached: every remembered execution is younger than 30 days");
-        const before = structuredClone(this.data);
-        const job = { digest, seq: 1, task: { ...task, output: task.output.slice(-65_536) }, uncertain: false };
-        this.data.jobs[task.id] = job;
-        this.data.used[task.id] = digest;
-        (this.data.usedAt ??= {})[task.id] = this.now();
-        while (Object.keys(this.data.jobs).length > MAX_JOBS) {
-            const oldest = Object.values(this.data.jobs).filter(row => row.task.id !== task.id && row.task.finishedAt && !row.uncertain)
-                .sort((a, b) => a.task.startedAt - b.task.startedAt)[0];
-            if (!oldest) {
-                this.data = before;
-                throw new Error("Runtime snapshot capacity reached");
-            }
-            delete this.data.jobs[oldest.task.id];
-        }
-        if (!this.fitBytes(task.id)) {
-            this.data = before;
-            throw new Error("Runtime state limit reached: every retained execution is unsettled or younger than 30 days");
-        }
-        try {
-            this.save();
-        }
-        catch (error) {
-            this.data = before;
-            throw error;
-        }
-        return { duplicate: false, job: structuredClone(job) };
-    }
-    update(task) {
-        const old = this.data.jobs[task.id];
-        if (!old)
-            throw new Error("Runtime execution was not durably accepted");
-        if (old.task.cli !== task.cli || old.task.cwd !== task.cwd || old.task.sandbox !== task.sandbox || old.task.model !== task.model)
-            throw new Error("Runtime execution identity changed");
-        const before = structuredClone(old);
-        old.task = { ...task, output: task.output.slice(-65_536), ...(task.error ? { error: task.error.slice(0, 8192) } : {}) };
-        old.uncertain = task.outcomeConfirmed === false;
-        old.seq++;
-        try {
-            this.save();
-        }
-        catch (error) {
-            this.data.jobs[task.id] = before;
-            throw error;
-        }
-        return structuredClone(old);
-    }
-    recover(id, confirmedStopped) {
-        const old = this.data.jobs[id];
-        if (!old?.uncertain || confirmedStopped !== true)
-            throw new Error("Confirm the disconnected execution stopped before recovery");
-        const before = structuredClone(old);
-        old.uncertain = false;
-        old.seq++;
-        old.task = { ...old.task, status: "failed", finishedAt: old.task.finishedAt ?? this.now(), outcomeConfirmed: true,
-            error: "Execution outcome was unknown; processes were manually confirmed stopped. This execution will not be replayed." };
-        try {
-            this.save();
-        }
-        catch (error) {
-            this.data.jobs[id] = before;
-            throw error;
-        }
-        return structuredClone(old);
-    }
-    credentials() {
-        const file = join(this.directory, "connection.json");
-        if (!existsSync(file))
-            return null;
-        const raw = readPrivate(file);
-        if (!object(raw) || typeof raw.server !== "string" || typeof raw.machineId !== "string" || !UUID.test(raw.machineId) || typeof raw.credential !== "string"
-            || !/^[a-f0-9]{64}$/.test(raw.credential) || typeof raw.name !== "string" || !raw.name.trim() || raw.name.length > 100
-            || raw.pendingCredential !== undefined && (typeof raw.pendingCredential !== "string" || !/^[a-f0-9]{64}$/.test(raw.pendingCredential) || raw.pendingCredential === raw.credential))
-            throw new Error("Invalid runtime connection");
-        validateRuntimeServer(raw.server);
-        return raw;
-    }
-    saveCredentials(value) {
-        validateRuntimeServer(value.server);
-        if (!UUID.test(value.machineId) || !/^[a-f0-9]{64}$/.test(value.credential) || !value.name.trim() || value.name.length > 100
-            || value.pendingCredential !== undefined && (!/^[a-f0-9]{64}$/.test(value.pendingCredential) || value.pendingCredential === value.credential))
-            throw new Error("Invalid runtime credential");
-        atomic(join(this.directory, "connection.json"), value);
-    }
-    /**
-     * The credential profile NAME this pairing uses for every agent that does not name its own (`connect --credential-profile`). A name only:
-     * the folder is resolved by this Runtime under its own profile root, and nothing here leaves this computer.
-     */
-    credentialDefault() {
-        const file = join(this.directory, "credential-default.json");
-        if (!existsSync(file))
-            return undefined;
-        const raw = readPrivate(file);
-        if (!object(raw) || raw.version !== 1 || Object.keys(raw).some(key => key !== "version" && key !== "profile") || !validCredentialProfileName(raw.profile))
-            throw new Error("Invalid credential profile default; run connect with --credential-profile again, or delete credential-default.json in the profile folder");
-        return raw.profile;
-    }
-    setCredentialDefault(name) {
-        const file = join(this.directory, "credential-default.json");
-        if (name === undefined) {
-            if (existsSync(file))
-                unlinkSync(file);
-            return;
-        }
-        atomic(file, { version: 1, profile: assertCredentialProfileName(name) });
-    }
-    /** Forgets the pairing and, with it, this pairing's default credential profile name (the profile folders and their sign-ins stay). */
-    forgetCredentials() {
-        const file = join(this.directory, "connection.json");
-        if (existsSync(file))
-            unlinkSync(file);
-        this.setCredentialDefault(undefined);
-    }
-    /** PID recorded in the profile lock, if any; the lock is neither created nor removed. */
-    lockHolder() {
-        try {
-            const lock = readPrivate(join(this.directory, "runtime.lock"));
-            return object(lock) && Number.isSafeInteger(lock.pid) && lock.pid > 0 ? lock.pid : undefined;
-        }
-        catch {
-            return undefined;
-        }
-    }
-    /**
-     * `notRuntimePid` is a PID the caller has positively verified is not an AgEnD Runtime process (its PID was reused by another program).
-     * A lock held by any other PID that cannot be proven gone still refuses, so a running Runtime is never unlocked from here.
-     */
-    lock(bootId, systemBootId, notRuntimePid) {
-        if (systemBootId !== undefined && (typeof systemBootId !== "string" || !/^[a-f0-9]{64}$/.test(systemBootId)))
-            throw Error("Invalid Windows boot proof");
-        const path = join(this.directory, "runtime.lock");
-        if (existsSync(path)) {
-            const old = readPrivate(path);
-            if (!object(old) || !Number.isSafeInteger(old.pid) || old.pid <= 0)
-                throw new Error("Invalid runtime lock; inspect it before restarting");
-            if (old.systemBootId !== undefined && (typeof old.systemBootId !== "string" || !/^[a-f0-9]{64}$/.test(old.systemBootId)))
-                throw Error("Invalid runtime boot proof");
-            let alive = !(systemBootId && old.systemBootId && systemBootId !== old.systemBootId) && old.pid !== notRuntimePid, denied = false;
-            try {
-                if (alive)
-                    process.kill(old.pid, 0);
-            }
-            catch (error) {
-                const code = error.code;
-                if (code === "ESRCH")
-                    alive = false;
-                else
-                    denied = code === "EPERM";
-            }
-            if (alive)
-                throw new Error(`Another runtime already uses this profile (process ${old.pid}${denied ? ", which this Windows user is not allowed to inspect" : ""}). `
-                    + `Close its window, or end that process in Task Manager if it is a node.exe running runtime-cli.js, then try again. `
-                    + `Only if you have confirmed no AgEnD Runtime is running (the number may have been reused after a restart), delete ${path} and try again.`);
-            unlinkSync(path);
-        }
-        writeFileSync(path, JSON.stringify({ pid: process.pid, bootId, ...(systemBootId ? { systemBootId } : {}) }), { flag: "wx", mode: 0o600 });
-        return () => { try {
-            const current = readPrivate(path);
-            if (object(current) && current.bootId === bootId)
-                unlinkSync(path);
-        }
-        catch { /* already released */ } };
-    }
-}
-//# sourceMappingURL=runtime-client-store.js.map

package/dist/runtime-client-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-client-store.js","sourceRoot":"","sources":["../src/runtime-client-store.ts"],"names":[],"mappings":"AAAA,4HAA4H;AAC5H,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAE3G,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB;;;;GAIG;AACH,MAAM,OAAO,GAAG,MAAM,CAAC;AACvB,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;AACvC,4HAA4H;AAC5H,MAAM,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC;AACjC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,EAAE,GAAG,uBAAuB,CAAC;AACnC,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAK/E,SAAS,MAAM,CAAC,KAAc,IAAsC,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3I,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvE,IAAI,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnI,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;AACzC,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,KAAc,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAChI,SAAS,gBAAgB,CAAC,SAAiB;IACzC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;AACtJ,CAAC;AACD,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC7H,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC;AACD,SAAS,MAAM,CAAC,IAAY,EAAE,KAAc;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9F,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC;YAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACjE,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC;gBAAE,MAAM,KAAK,CAAC;YACrJ,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;AACH,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;WACxH,GAAG,CAAC,QAAQ,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IACxH,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,OAAO,kBAAkB;IAGR,SAAS;IAA2B,GAAG;IAF3C,IAAI,CAAS;IACtB,IAAI,CAAS;IACrB,YAAqB,SAAiB,EAAmB,GAAG,GAAiB,IAAI,CAAC,GAAG;yBAAhE,SAAS;mBAA2B,GAAG;QAC1D,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACjH,CAAC;IACO,SAAS,KAAc,OAAO,IAAI,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;IACjI,cAAc,CAAC,IAAY;QACjC,OAAO,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,SAAS,8MAA8M,IAAI,EAAE,CAAC,CAAC;IACxQ,CAAC;IACD,yHAAyH;IACzH,aAAa,KAAW,IAAI,IAAI,CAAC,SAAS,EAAE;QAAE,MAAM,IAAI,CAAC,cAAc,CAAC,gHAAgH,CAAC,CAAC,CAAC,CAAC;IAC5L;;;;;;;OAOG;IACH,YAAY,CAAC,SAAiB,EAAE,OAAO,GAAG,KAAK;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO;QAChC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAAE,OAAO;QAC1H,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,SAAS,EAAE;gBAAE,MAAM,IAAI,CAAC,cAAc,CAAC,0DAA0D,CAAC,CAAC;YAC5G,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/C,CAAC;IACD,sGAAsG;IACtG,kBAAkB;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;gBAChE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;gBAAC,GAAG,CAAC,GAAG,EAAE,CAAC;gBAChC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,KAAK;oBACzF,KAAK,EAAE,gIAAgI,EAAE,CAAC;gBAC5I,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,OAAO;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IACO,QAAQ,CAAC,GAAY;QAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;eAC1E,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACtI,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACvL,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACzJ,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxP,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAK,KAAK,CAAC,GAAc,GAAG,CAAC;mBAC9F,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;mBACpH,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACnI,CAAC;QACD,OAAO,GAAwB,CAAC;IAClC,CAAC;IACO,IAAI,KAAW,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtD;;;;;OAKG;IACK,QAAQ,CAAC,KAAa;QAC5B,MAAM,MAAM,GAAG,eAAe,GAAG,aAAa,EAAE,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5G,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,oHAAoH;QACpH,oHAAoH;QACpH,0GAA0G;QAC1G,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,GAAY,EAAE,GAAG,IAAI,IAAI,GAAG,MAAM;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3G,IAAI,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,KAAK,CAAC;aAC5J,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC5B,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1J,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxH,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YACzC,IAAI,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC5B,CAAC;QACD,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC;IAC5B,CAAC;IACD,0HAA0H;IAClH,eAAe;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC;aAC1G,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/C,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IAChI,CAAC;IACD,GAAG,CAAC,EAAU,IAA6B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtH,IAAI,KAAyB,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,OAAO,KAAc,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC/G,MAAM,CAAC,IAAoB,EAAE,MAAc;QACzC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChG,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,KAAK,KAAK,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACrF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;YACjI,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC9F,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO;YAAE,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1E,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;QACnK,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAqB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC1H,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;QAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACjH,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;iBACzH,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAAC,CAAC;YAC1F,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;QAAC,CAAC;QACnK,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QACvE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,CAAC,IAAoB;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC7G,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;YAC9H,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACxH,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,gBAAgB,KAAK,KAAK,CAAC;QAChD,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QACrF,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,CAAC,EAAU,EAAE,gBAAyB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,SAAS,IAAI,gBAAgB,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChI,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;QAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI;YAC/G,KAAK,EAAE,gHAAgH,EAAE,CAAC;QAC5H,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QAChF,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,WAAW;QACT,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACzF,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;eACrJ,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG;eACnH,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,iBAAiB,KAAK,GAAG,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACpO,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,GAAoC,CAAC;IACjF,CAAC;IACD,eAAe,CAAC,KAAyB;QACvC,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG;eACvH,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,iBAAiB,KAAK,KAAK,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC/L,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;IACD;;;OAGG;IACH,iBAAiB;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;QAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACtG,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0IAA0I,CAAC,CAAC;QACvT,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,oBAAoB,CAAC,IAAwB;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;QAC7D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,UAAU,CAAC,IAAI,CAAC;gBAAE,UAAU,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,2BAA2B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,sIAAsI;IACtI,iBAAiB;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAAC,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7F,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IACD,yFAAyF;IACzF,UAAU;QACR,IAAI,CAAC;YAAC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAK,IAAI,CAAC,GAAc,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAAC,CAAC;QAC3L,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IAC7B,CAAC;IACD;;;OAGG;IACH,IAAI,CAAC,MAAc,EAAE,YAAqB,EAAE,aAAsB;QAChE,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACxJ,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAClD,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAK,GAAG,CAAC,GAAc,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACtJ,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACpK,IAAI,KAAK,GAAG,CAAC,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,IAAI,YAAY,KAAK,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,GAAG,KAAK,aAAa,EAAE,MAAM,GAAG,KAAK,CAAC;YAClI,IAAI,CAAC;gBAAC,IAAI,KAAK;oBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAa,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;gBAAC,IAAI,IAAI,KAAK,OAAO;oBAAE,KAAK,GAAG,KAAK,CAAC;;oBAAM,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC;YAAC,CAAC;YACjM,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC,CAAC,EAAE,KAAK;sBAC/J,oHAAoH;sBACpH,oHAAoH,IAAI,iBAAiB,CAAC,CAAC;YAC/I,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAC,YAAY,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxI,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;gBAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;IACnK,CAAC;CACF"}

package/dist/runtime-client.d.ts

@@ -1,174 +0,0 @@
-/** Standalone, outbound-only native runtime. Imports no Fleet, database, bot or Linux native dependency. */
-import WebSocket from "ws";
-import { type WindowsCliProbe, type WindowsCliTask, type WindowsRunOptions } from "./windows-cli.js";
-import { type CredentialProfileAnswer } from "./windows-cli-worker.js";
-import { type CredentialProfileCli } from "./runtime-credential-profiles.js";
-import { RuntimeClientStore, type RuntimeCredentials } from "./runtime-client-store.js";
-import { readRuntimeInfo } from "./runtime-build-info.js";
-import type { PaneLinkOptions } from "./runtime-pane-link.js";
-import type { RuntimePaneLink } from "./runtime-pane-link.js";
-import type { RuntimePaneHost } from "./runtime-pane-host.js";
-import type { RuntimePaneHostOptions } from "./runtime-pane-host.js";
-export { RUNTIME_PANE_MODULES } from "./runtime-pane-assets.js";
-export type RuntimeStopKind = "refused" | "revoked" | "replaced" | "rejected" | "incompatible" | "reinstall";
-export interface RuntimeStopReason {
-    kind: RuntimeStopKind; /** The close reason AgEnD gave, when it gave one. */
-    detail?: string;
-}
-/** Plain-language cause and next step for a stop AgEnD caused. AgEnD answers an unknown and a revoked credential with the same bare 401, so "refused" covers both. */
-export declare function describeRuntimeStop(reason: RuntimeStopReason): string;
-export interface RuntimeBridge {
-    probe(options?: {
-        force?: boolean;
-    }): Promise<WindowsCliProbe>;
-    prepareWorkspace(agentId: string): Promise<string>;
-    start(value: unknown, authorized?: () => boolean, options?: WindowsRunOptions): WindowsCliTask;
-    get(id: string): WindowsCliTask | null;
-    cancel(id: string): WindowsCliTask;
-    close(): void;
-    releaseUnknown(id: string): void;
-    /** Required positive physical proof for managed update. An old/injected bridge without it stays unavailable. */
-    idleForUpdate?(): boolean;
-}
-export interface RuntimeClientOptions {
-    store: RuntimeClientStore;
-    bridge?: RuntimeBridge;
-    report?: (message: string) => void;
-    reconnectMs?: number;
-    disconnectGraceMs?: number;
-    pollMs?: number;
-    /** Tests may use an isolated fake worker. Production always uses the Windows bridge. */
-    socketFactory?: (url: string, credential: string) => WebSocket;
-    /** Offline transport acceptance supplies its own process factory, never a public configuration field. */
-    openPaneLink?: (options: PaneLinkOptions) => Promise<RuntimePaneLink>;
-    createPaneHost?: (options: RuntimePaneHostOptions) => RuntimePaneHost;
-    /**
-     * This Runtime's credential profile root (<runtime home>\credential-profiles). Absent: the Runtime does not offer profiles, says so in its
-     * capabilities, and refuses any run or terminal that names one.
-     */
-    credentialProfilesRoot?: string;
-    /** Test seam; production asks the CLI itself (`claude auth status` under that profile's folder). */
-    credentialLogin?: (cli: CredentialProfileCli, directory: string) => Promise<boolean | null>;
-    /** Test seam for the same check with the account in it (masked e-mail, plan). Wins over `credentialLogin`. */
-    credentialStatus?: (cli: CredentialProfileCli, directory: string) => Promise<CredentialProfileAnswer>;
-    /** How often to look for a sign-in made by `agend-runtime login` in another window (default 5 s). */
-    credentialWatchMs?: number;
-    /** Internal supervisor seam, never a server-supplied configuration option. */
-    managedUpdate?: {
-        trialId?: string;
-        authenticated?(value: {
-            bootId: string;
-            generation: number;
-            updateProtocol?: 1;
-            runtimeInfo: ReturnType<typeof readRuntimeInfo>;
-        }): void;
-    };
-    /** Isolated tests can supply a private pane service. Production uses attach-only discovery and physical exit proof. */
-    drainPaneHostForUpdate?(current: () => boolean): Promise<void>;
-}
-export declare class RuntimeClient {
-    private readonly options;
-    readonly bootId: `${string}-${string}-${string}-${string}-${string}`;
-    private readonly runtimeInfo;
-    private readonly bridge;
-    private socket;
-    private welcomed;
-    private stopped;
-    private closed;
-    private unlock;
-    private reconnectTimer;
-    private reconnectAttempt;
-    private graceTimer;
-    private pollTimer;
-    private credentialWatch;
-    private credentialStamp;
-    private credentials;
-    private startupRotation;
-    private paneHost;
-    private paneOpening;
-    private machinePaneLimit;
-    private paneEpoch;
-    private readonly active;
-    private readonly snapshots;
-    private readonly pendingPaneTools;
-    private readonly pendingTools;
-    private readonly mcpTokens;
-    private mcpServer;
-    private mcpOpening;
-    private mcpPort;
-    private inventory;
-    private readonly stoppedListeners;
-    private activity;
-    private stopPromise;
-    private generation;
-    private updateProtocol;
-    private preparingUpdate;
-    private trialFence;
-    private updateWait;
-    /** Set only when AgEnD ended the connection and the person must act; a local stop (Ctrl+C) leaves it undefined. */
-    stopReason: RuntimeStopReason | undefined;
-    /** The socket this Runtime itself closed with 1008 because it could not read AgEnD's frame; that is not AgEnD refusing us. */
-    private selfClosed;
-    constructor(options: RuntimeClientOptions);
-    private report;
-    online(): boolean;
-    waitUntilStopped(): Promise<void>;
-    start(): Promise<void>;
-    private connect;
-    private send;
-    private receive;
-    private publish;
-    private panes;
-    private paneMcp;
-    private forwardPaneMcp;
-    private update;
-    private poll;
-    /** Which profile a run uses: the one the agent named, else this pairing's default (Claude Code only), else none (the Runtime's own environment). */
-    private credentialProfileFor;
-    private stamp;
-    /**
-     * Re-report on its own after `agend-runtime login` / `profile default` (run in another window) changed the sign-in cache: the account shown
-     * in AgEnD follows a profile that was signed in to another account, without an administrator pressing "Detect again". Reads the cache only.
-     */
-    private watchCredentialCache;
-    private statusOf;
-    private remember;
-    /** The folder of a profile that exists AND is signed in on this computer; anything else refuses, never the default account. */
-    private credentialHome;
-    /** Names and signed-in yes/no only. `force` (an explicit "Detect again") asks each profile's CLI; otherwise the last known answer is reported. */
-    private credentialReport;
-    private beginDiscovery;
-    private refreshInventory;
-    private readInventory;
-    /** Testable command surface. Mutation identity is committed before calling the native bridge. */
-    operation(operation: string, payload: Record<string, unknown>): Promise<unknown>;
-    private ownedOperation;
-    private locallyIdle;
-    private updateRpc;
-    /** Called only by the local supervisor. A timeout or disconnect never authorizes process replacement. */
-    prepareUpdate(id: string): Promise<boolean>;
-    /** The parent persists activation intent before this call; an unconfirmed answer is never rollback permission. */
-    activateTrial(id: string): Promise<boolean>;
-    private openMcp;
-    private closeMcp;
-    private toolCall;
-    private rejectTools;
-    stop(options?: {
-        retirePanes?: boolean;
-    }): Promise<void>;
-    private stopOwned;
-}
-/** Caller holds the profile lock. Persist the candidate before wire; either credential can recover a lost response. */
-export declare function rotateRuntimeCredentials(input: {
-    store: RuntimeClientStore;
-    signal?: AbortSignal;
-}): Promise<RuntimeCredentials>;
-export declare function pairRuntime(input: {
-    server: string;
-    code: string;
-    name: string;
-    store: RuntimeClientStore;
-    signal?: AbortSignal;
-    report?: (text: string) => void;
-    pollMs?: number;
-}): Promise<RuntimeCredentials>;