@stigmer/runner 0.1.0-dev.20261017020314.g644422724c27

package/dist/main.js

@@ -0,0 +1,451 @@
+#!/usr/bin/env node
+/**
+ * CLI entry point for the unified runner service.
+ *
+ * Three modes of operation:
+ *
+ * 1. Static mode (default): Reads configuration from environment variables,
+ *    initializes OTel, creates a single-queue runner. Used by CLI daemon and
+ *    customer deployments.
+ *
+ * 2. Manager mode (STIGMER_RUNNER_MODE=manager): Reads JSON commands from
+ *    stdin, manages per-session Workers dynamically. Used by the desktop app
+ *    via the IPC protocol. Responses go to stdout; logs go to stderr.
+ *
+ * 3. Pool mode (STIGMER_POOL_MEMBER_ID set): A warm-pool cloud sandbox. Boots
+ *    the runner manager, then serves whatever its Secret-injected credential
+ *    says it is: a pool_sandbox token means "blank member" (poll the
+ *    sandbox:{memberId} control queue for a claim), a session token means
+ *    "claimed member that restarted" (go straight to that session's queue).
+ *    See pool-member.ts for the identity model.
+ *
+ * OTel is initialized here (not in the factory) because it mutates
+ * global state that the consumer should control when embedding the
+ * runner as a library.
+ */
+import { createHash } from "node:crypto";
+import { readFileSync, readdirSync } from "node:fs";
+import { join, relative } from "node:path";
+import { createInterface } from "node:readline";
+import { preflightNodeRuntime } from "./preflight.js";
+import { markBoot, emitRunnerBootTiming } from "./shared/cold-start-timing.js";
+import { loadConfig } from "./config.js";
+import { captureRunnerSecrets, getRunnerSecret, } from "./shared/runner-credential-store.js";
+import { initTracing, initMetrics, startRunnerTelemetry } from "./otel.js";
+import { createStigmerRunner } from "./runner.js";
+import { createStigmerRunnerManager } from "./runner-manager.js";
+import { decidePoolBoot, registerPoolMemberContext } from "./pool-member.js";
+import { buildReadyMessage } from "./ipc-protocol.js";
+import { AGENT_HOST_MODE_ARG } from "./agent-host/protocol.js";
+import { handleUnhandledRejection } from "./activities/execute-cursor/rejection-capture.js";
+import { installProcessPipeGuards, reportFatal } from "./pipe-safety.js";
+import { armExitBackstop } from "./exit-backstop.js";
+// Guard the host pipes before anything writes to them. A dropped stderr/stdout
+// reader otherwise turns the next write into an uncaught EPIPE loop that starves
+// Temporal heartbeats and kills the in-flight execution (issue #177).
+const { writeStdout, writeStderr } = installProcessPipeGuards();
+process.on("unhandledRejection", (reason) => {
+    handleUnhandledRejection(reason);
+});
+process.on("uncaughtException", (err) => {
+    reportFatal(writeStderr, "Uncaught exception in runner:", err);
+});
+// ─── IPC Helpers ─────────────────────────────────────────────────────────────
+function sendIpc(msg) {
+    writeStdout(JSON.stringify(msg) + "\n");
+}
+// ─── Manager Mode ────────────────────────────────────────────────────────────
+async function runManagerMode(config) {
+    // In manager mode, redirect console.log to stderr so stdout is reserved for IPC
+    const originalLog = console.log;
+    console.log = (...args) => {
+        writeStderr(args.map(String).join(" ") + "\n");
+    };
+    let manager;
+    // The manager is the runner's own process (the CLI and the desktop app
+    // start it), so it owns its telemetry as the other modes do; a setting
+    // the standard does not name is the same fatal error as any other.
+    /* v8 ignore start -- @preserve: manager mode's process boundary, driven over IPC by test/conformance's runner-ipc harness; startRunnerTelemetry is otel.ts's, tested there */
+    let flushTelemetry = null;
+    try {
+        flushTelemetry = await startRunnerTelemetry("stigmer-runner");
+        /* v8 ignore stop */
+        manager = await createStigmerRunnerManager({
+            temporalAddress: config.temporalAddress,
+            temporalNamespace: config.temporalNamespace,
+            stigmerEndpoint: config.stigmerBackendEndpoint,
+            stigmerToken: config.stigmerTokenRef.current ?? undefined,
+            cursorApiKey: config.cursorApiKey || undefined,
+            workspaceRootDir: config.workspaceRootDir,
+            maxConcurrentActivitiesPerSession: config.maxConcurrentActivities,
+            proxyEndpoint: config.proxyEndpoint ?? undefined,
+            primaryModel: config.primaryModel,
+            checkpointerType: config.checkpointerType,
+            checkpointerProxyEndpoint: config.checkpointerProxyEndpoint ?? undefined,
+            artifactProxyEndpoint: config.artifactProxyEndpoint ?? undefined,
+            cloudModeEnabled: config.cloudModeEnabled,
+            executionMode: config.mode,
+        });
+    }
+    catch (err) {
+        sendIpc({
+            type: "error",
+            message: `Failed to initialize runner manager: ${err}`,
+            fatal: true,
+        });
+        process.exit(1);
+    }
+    /* v8 ignore start -- @preserve: manager mode's process boundary (above) */
+    // Every way the manager stops (the shutdown command, stdin closing) flushes
+    // its telemetry after its workers have drained.
+    const shutdownWorkers = manager.shutdown.bind(manager);
+    manager.shutdown = async () => {
+        await shutdownWorkers();
+        await flushTelemetry?.();
+    };
+    /* v8 ignore stop */
+    sendIpc(buildReadyMessage());
+    const rl = createInterface({ input: process.stdin });
+    for await (const line of rl) {
+        const trimmed = line.trim();
+        if (!trimmed)
+            continue;
+        let cmd;
+        try {
+            cmd = JSON.parse(trimmed);
+        }
+        catch {
+            sendIpc({
+                type: "error",
+                message: `Invalid JSON: ${trimmed}`,
+                fatal: false,
+            });
+            continue;
+        }
+        try {
+            switch (cmd.type) {
+                case "addSession": {
+                    await manager.addSession(cmd.sessionId);
+                    sendIpc({
+                        type: "sessionAdded",
+                        sessionId: cmd.sessionId,
+                        taskQueue: `session:${cmd.sessionId}`,
+                    });
+                    break;
+                }
+                case "removeSession": {
+                    await manager.removeSession(cmd.sessionId);
+                    sendIpc({ type: "sessionRemoved", sessionId: cmd.sessionId });
+                    break;
+                }
+                case "updateToken": {
+                    manager.updateToken(cmd.token);
+                    sendIpc({ type: "tokenUpdated" });
+                    break;
+                }
+                case "shutdown": {
+                    await manager.shutdown();
+                    sendIpc({ type: "shutdownComplete" });
+                    rl.close();
+                    return;
+                }
+                default: {
+                    sendIpc({
+                        type: "error",
+                        message: `Unknown command type: ${cmd.type}`,
+                        fatal: false,
+                    });
+                }
+            }
+        }
+        catch (err) {
+            sendIpc({
+                type: "error",
+                message: `Command ${cmd.type} failed: ${err}`,
+                fatal: false,
+            });
+        }
+    }
+    // stdin closed (parent process died) — shut down gracefully
+    await manager.shutdown();
+}
+// ─── Pool Mode ───────────────────────────────────────────────────────────────
+async function runPoolMode(config, memberId) {
+    const otelShutdown = await initTracing("stigmer-runner");
+    const metricsShutdown = await initMetrics("stigmer-runner");
+    // The Secret-injected credential is the single source of truth for what this
+    // process serves (the control plane rewrites the Secret at claim time, and
+    // secretKeyRef env is read only at pod start — so a restart lands here with
+    // the post-claim identity). Decide before any expensive boot work.
+    //
+    // Read by value on purpose — the one place the runner may: the credential
+    // the pod BOOTED with is the fact here. Its class decides the mode, and the
+    // attach exchange must authenticate with the pool credential after the
+    // claim has rotated the live ref to the session's (pool-member.ts,
+    // PoolMemberContext.poolToken). Everything after this line reads the ref.
+    const bootToken = config.stigmerTokenRef.current;
+    const intent = decidePoolBoot(bootToken);
+    if (intent.kind === "invalid") {
+        throw new Error(`Pool member ${memberId} cannot boot: ${intent.reason}`);
+    }
+    const manager = await createStigmerRunnerManager({
+        temporalAddress: config.temporalAddress,
+        temporalNamespace: config.temporalNamespace,
+        stigmerEndpoint: config.stigmerBackendEndpoint,
+        stigmerToken: config.stigmerTokenRef.current ?? undefined,
+        cursorApiKey: config.cursorApiKey || undefined,
+        workspaceRootDir: config.workspaceRootDir,
+        maxConcurrentActivitiesPerSession: config.maxConcurrentActivities,
+        proxyEndpoint: config.proxyEndpoint ?? undefined,
+        primaryModel: config.primaryModel,
+        checkpointerType: config.checkpointerType,
+        checkpointerProxyEndpoint: config.checkpointerProxyEndpoint ?? undefined,
+        artifactProxyEndpoint: config.artifactProxyEndpoint ?? undefined,
+        cloudModeEnabled: config.cloudModeEnabled,
+        executionMode: config.mode,
+    });
+    // Sandbox credential self-renewal (see sandbox-token-renewal.ts). Watches
+    // the credential store because manager.updateToken keeps it in lockstep
+    // with the manager's internal ref: a blank member's pool_sandbox token
+    // parks the loop, the claim's updateToken swaps in a renewable session
+    // token, and from then on renewal applies fresh tokens back through the
+    // same updateToken (which also cascades to the proxy-credential
+    // coordinator).
+    const { startSandboxTokenRenewal } = await import("./sandbox-token-renewal.js");
+    const { StigmerClient } = await import("./client/stigmer-client.js");
+    const renewalClient = new StigmerClient({
+        endpoint: config.stigmerBackendEndpoint,
+        token: null,
+    });
+    const tokenRenewal = startSandboxTokenRenewal({
+        getToken: () => getRunnerSecret("STIGMER_TOKEN") ?? null,
+        renew: (currentToken) => renewalClient.getRunnerScopedToken({ renewal: true }, currentToken),
+        applyToken: (token) => manager.updateToken(token),
+    });
+    let taskQueue;
+    if (intent.kind === "pool-control") {
+        registerPoolMemberContext({
+            memberId,
+            poolToken: bootToken,
+            manager,
+        });
+        await manager.addPoolControl(memberId);
+        taskQueue = `sandbox:${memberId}`;
+    }
+    else {
+        // Claimed member after a restart: the pool row is gone and nothing will
+        // dispatch on the control queue again, so no pool context, no control
+        // worker — just serve the session this pod already belongs to.
+        console.warn(`[pool-member] ${memberId} restarted post-claim; ` +
+            `resuming session ${intent.sessionId}`);
+        await manager.addSession(intent.sessionId);
+        taskQueue = `session:${intent.sessionId}`;
+    }
+    // The boot window the pool exists to hide from users: emitted with pool
+    // context so the baseline harness can separate member pre-boots (background,
+    // free) from user-facing boots.
+    markBoot("worker_polling");
+    emitRunnerBootTiming({
+        task_queue: taskQueue,
+        mode: config.mode,
+        pool_member_id: memberId,
+        pool_rehydrated: intent.kind === "claimed-session",
+    });
+    console.warn(`[pool-member] ${memberId} ready (queue=${taskQueue})`);
+    // Park until terminated; the workers poll in the background. Unlike manager
+    // mode there is no stdin driver — Kubernetes signals are the only exit.
+    await new Promise((resolve) => {
+        let shutdownRequested = false;
+        const shutdown = (signal) => {
+            if (shutdownRequested) {
+                console.warn("Shutdown already in progress, ignoring duplicate signal");
+                return;
+            }
+            shutdownRequested = true;
+            console.warn(`[pool-member] Received ${signal}, shutting down gracefully...`);
+            tokenRenewal.stop();
+            void manager.shutdown().then(resolve, (err) => {
+                console.error("[pool-member] Shutdown failed:", err);
+                resolve();
+            });
+        };
+        process.on("SIGTERM", () => shutdown("SIGTERM"));
+        process.on("SIGINT", () => shutdown("SIGINT"));
+    });
+    if (metricsShutdown) {
+        await metricsShutdown();
+    }
+    if (otelShutdown) {
+        await otelShutdown();
+    }
+}
+// ─── Static Mode ─────────────────────────────────────────────────────────────
+async function runStaticMode(config) {
+    const otelShutdown = await initTracing("stigmer-runner");
+    const metricsShutdown = await initMetrics("stigmer-runner");
+    const runner = await createStigmerRunner({
+        taskQueue: config.taskQueue,
+        temporalAddress: config.temporalAddress,
+        temporalNamespace: config.temporalNamespace,
+        stigmerEndpoint: config.stigmerBackendEndpoint,
+        stigmerToken: config.stigmerTokenRef.current ?? undefined,
+        cursorApiKey: config.cursorApiKey || undefined,
+        workspaceRootDir: config.workspaceRootDir,
+        maxConcurrentActivities: config.maxConcurrentActivities,
+        proxyEndpoint: config.proxyEndpoint ?? undefined,
+        primaryModel: config.primaryModel,
+        checkpointerType: config.checkpointerType,
+        checkpointerProxyEndpoint: config.checkpointerProxyEndpoint ?? undefined,
+        artifactProxyEndpoint: config.artifactProxyEndpoint ?? undefined,
+        cloudModeEnabled: config.cloudModeEnabled,
+        // Honor the operator's MODE env (resolved into config.mode) instead of
+        // re-deriving execution location from the proxy. This keeps static mode
+        // consistent with manager mode, which already passes config.mode.
+        executionMode: config.mode,
+    });
+    let shutdownRequested = false;
+    const shutdown = (signal) => {
+        if (shutdownRequested) {
+            console.warn("Shutdown already in progress, ignoring duplicate signal");
+            return;
+        }
+        shutdownRequested = true;
+        console.log(`Received ${signal}, stopping worker gracefully...`);
+        runner.shutdown();
+    };
+    process.on("SIGTERM", () => shutdown("SIGTERM"));
+    process.on("SIGINT", () => shutdown("SIGINT"));
+    await runner.start();
+    if (metricsShutdown) {
+        await metricsShutdown();
+    }
+    if (otelShutdown) {
+        await otelShutdown();
+    }
+}
+// ─── Build Fingerprint Check ─────────────────────────────────────────────────
+/**
+ * Compares the dist/.build-fingerprint against the current src/ hash.
+ * Exits the process if the runner binary is stale — silently running
+ * old code causes structured output failures, naming mismatches, and
+ * hours of wasted debugging time.
+ *
+ * If the fingerprint file is missing (first build, CI, integration
+ * tests using tsx), the check is skipped gracefully.
+ */
+function checkBuildFreshness() {
+    try {
+        const runnerRoot = new URL("../", import.meta.url).pathname;
+        const fpPath = join(runnerRoot, "dist", ".build-fingerprint");
+        let stored;
+        try {
+            stored = JSON.parse(readFileSync(fpPath, "utf-8"));
+        }
+        catch {
+            return;
+        }
+        const srcDir = join(runnerRoot, "src");
+        const tsFiles = collectTsFiles(srcDir).sort();
+        const hash = createHash("sha256");
+        for (const file of tsFiles) {
+            hash.update(relative(runnerRoot, file));
+            hash.update(readFileSync(file));
+        }
+        const currentHash = hash.digest("hex").slice(0, 16);
+        if (currentHash !== stored.hash) {
+            console.error(`\n` +
+                `!!! STALE RUNNER BUILD — REFUSING TO START !!!\n` +
+                `    dist/ was built at ${stored.builtAt} (hash ${stored.hash})\n` +
+                `    src/ has changed since (current hash ${currentHash})\n` +
+                `\n` +
+                `    Run 'make build-runner' or 'make desktop-dev' to rebuild.\n`);
+            process.exit(78);
+        }
+    }
+    catch {
+        // Missing fingerprint (tsx, CI, first build) — allow startup
+    }
+}
+function collectTsFiles(dir, files = []) {
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+        const fullPath = join(dir, entry.name);
+        if (entry.isDirectory()) {
+            if (entry.name === "node_modules" || entry.name === "__tests__")
+                continue;
+            collectTsFiles(fullPath, files);
+        }
+        else if (entry.name.endsWith(".ts")) {
+            files.push(fullPath);
+        }
+    }
+    return files;
+}
+// ─── Entry Point ─────────────────────────────────────────────────────────────
+async function main() {
+    // Runtime capability gate FIRST: everything below (config load, manager /
+    // static init) eventually imports node:sqlite via the checkpointer chain,
+    // and the raw ERR_UNKNOWN_BUILTIN_MODULE from that import is inscrutable.
+    // In manager mode the host reads the first stdout line as the handshake, so
+    // a fatal IPC error here surfaces verbatim in the host's UI (see
+    // negotiate_ready in crates/stigmer-runner-host/src/host.rs).
+    const preflightError = preflightNodeRuntime();
+    if (preflightError !== null) {
+        if (process.env.STIGMER_RUNNER_MODE === "manager") {
+            sendIpc({ type: "error", message: preflightError, fatal: true });
+        }
+        else {
+            writeStderr(`${preflightError}\n`);
+        }
+        process.exit(1);
+    }
+    // The runner's own entry, started by the runner as its agent host
+    // (`agent-host/supervisor.ts`): it serves the runner over its pipe and
+    // never reaches the config load, the build check or a Temporal worker.
+    /* v8 ignore start -- @preserve: the process boundary; runAgentHostProcess is tested in-process and scripts/verify-agent-host-boot.mjs boots this mode under plain Node */
+    if (process.argv[2] === AGENT_HOST_MODE_ARG) {
+        const { runAgentHost } = await import("./agent-host/entry.js");
+        await runAgentHost();
+        return;
+    }
+    /* v8 ignore stop */
+    // Cold-start timeline: this first mark's span covers Node startup +
+    // entrypoint module loading + preflight (origin = process start).
+    markBoot("node_start_and_preflight");
+    checkBuildFreshness();
+    // Take custody of runner secrets before the config load reads them (#508).
+    // The factories capture too (they are the library boot doors); doing it
+    // here as well keeps main.ts's own late readers store-only from the start.
+    captureRunnerSecrets();
+    const config = loadConfig();
+    markBoot("config_loaded");
+    const poolMemberId = process.env.STIGMER_POOL_MEMBER_ID?.trim() || undefined;
+    const runnerMode = process.env.STIGMER_RUNNER_MODE === "manager" ? "manager"
+        : poolMemberId ? "pool"
+            : "static";
+    console.warn(`[runner] mode=${runnerMode}, proxy=${config.proxyEndpoint ?? "none"}, ` +
+        `hasToken=${!!config.stigmerTokenRef.current}, workspace=${config.workspaceRootDir}, ` +
+        `taskQueue=${config.taskQueue}`);
+    if (runnerMode === "manager") {
+        await runManagerMode(config);
+        // Manager mode is driven by the host over stdin. Once it returns — via the IPC `shutdown`
+        // command or stdin EOF when the host process dies — exit deterministically so a stray open
+        // handle can't keep a shut-down runner alive as an orphan (issue #177).
+        process.exit(0);
+    }
+    // Static and pool modes exit naturally once their shutdown has returned (worker drained,
+    // OTel flushed). The backstop is the safety net, not the path: a healthy runner exits in
+    // milliseconds and it never fires; a leaked handle gets a named bound and a log line naming
+    // it, instead of holding the process for the orchestrator's whole grace (exit-backstop.ts).
+    if (runnerMode === "pool") {
+        await runPoolMode(config, poolMemberId);
+    }
+    else {
+        await runStaticMode(config);
+    }
+    armExitBackstop();
+}
+main().catch((err) => {
+    reportFatal(writeStderr, "Fatal error in runner:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,oBAAoB,EACpB,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAEjE,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAG/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,+EAA+E;AAC/E,iFAAiF;AACjF,sEAAsE;AACtE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,wBAAwB,EAAE,CAAC;AAEhE,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;IAC1C,wBAAwB,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;IACtC,WAAW,CAAC,WAAW,EAAE,+BAA+B,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,SAAS,OAAO,CAAC,GAAgB;IAC/B,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,cAAc,CAAC,MAAoC;IAChE,gFAAgF;IAChF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAChC,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE;QACnC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,IAAI,OAA6B,CAAC;IAClC,uEAAuE;IACvE,uEAAuE;IACvE,mEAAmE;IACnE,8KAA8K;IAC9K,IAAI,cAAc,GAAiC,IAAI,CAAC;IACxD,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QAC9D,oBAAoB;QACpB,OAAO,GAAG,MAAM,0BAA0B,CAAC;YACzC,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,eAAe,EAAE,MAAM,CAAC,sBAAsB;YAC9C,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,OAAO,IAAI,SAAS;YACzD,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,SAAS;YAC9C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,iCAAiC,EAAE,MAAM,CAAC,uBAAuB;YACjE,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,SAAS;YAChD,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,yBAAyB,EAAE,MAAM,CAAC,yBAAyB,IAAI,SAAS;YACxE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,SAAS;YAChE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,aAAa,EAAE,MAAM,CAAC,IAAI;SAC3B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC;YACN,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,wCAAwC,GAAG,EAAE;YACtD,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,gDAAgD;IAChD,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,OAAO,CAAC,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC5B,MAAM,eAAe,EAAE,CAAC;QACxB,MAAM,cAAc,EAAE,EAAE,CAAC;IAC3B,CAAC,CAAC;IACF,oBAAoB;IAEpB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAE7B,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAErD,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,IAAI,GAAe,CAAC;QACpB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAe,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC;gBACN,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,iBAAiB,OAAO,EAAE;gBACnC,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjB,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBACxC,OAAO,CAAC;wBACN,IAAI,EAAE,cAAc;wBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;wBACxB,SAAS,EAAE,WAAW,GAAG,CAAC,SAAS,EAAE;qBACtC,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;gBACD,KAAK,eAAe,CAAC,CAAC,CAAC;oBACrB,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBAC3C,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;oBAC9D,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC/B,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;oBAClC,MAAM;gBACR,CAAC;gBACD,KAAK,UAAU,CAAC,CAAC,CAAC;oBAChB,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACzB,OAAO,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBACtC,EAAE,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,OAAO,CAAC;wBACN,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,yBAA0B,GAAW,CAAC,IAAI,EAAE;wBACrD,KAAK,EAAE,KAAK;qBACb,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC;gBACN,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,WAAW,GAAG,CAAC,IAAI,YAAY,GAAG,EAAE;gBAC7C,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,WAAW,CACxB,MAAoC,EACpC,QAAgB;IAEhB,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,CAAC;IACzD,MAAM,eAAe,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAE5D,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,mEAAmE;IACnE,EAAE;IACF,0EAA0E;IAC1E,4EAA4E;IAC5E,uEAAuE;IACvE,mEAAmE;IACnE,0EAA0E;IAC1E,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC;IACjD,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,eAAe,QAAQ,iBAAiB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC;QAC/C,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,eAAe,EAAE,MAAM,CAAC,sBAAsB;QAC9C,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,OAAO,IAAI,SAAS;QACzD,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,SAAS;QAC9C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,iCAAiC,EAAE,MAAM,CAAC,uBAAuB;QACjE,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,SAAS;QAChD,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,yBAAyB,EAAE,MAAM,CAAC,yBAAyB,IAAI,SAAS;QACxE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,SAAS;QAChE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,aAAa,EAAE,MAAM,CAAC,IAAI;KAC3B,CAAC,CAAC;IAEH,0EAA0E;IAC1E,wEAAwE;IACxE,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,gEAAgE;IAChE,gBAAgB;IAChB,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IAChF,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC;QACtC,QAAQ,EAAE,MAAM,CAAC,sBAAsB;QACvC,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,wBAAwB,CAAC;QAC5C,QAAQ,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,eAAe,CAAC,IAAI,IAAI;QACxD,KAAK,EAAE,CAAC,YAAY,EAAE,EAAE,CACtB,aAAa,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,YAAY,CAAC;QACrE,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC;KAClD,CAAC,CAAC;IAEH,IAAI,SAAiB,CAAC;IACtB,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACnC,yBAAyB,CAAC;YACxB,QAAQ;YACR,SAAS,EAAE,SAAU;YACrB,OAAO;SACR,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACvC,SAAS,GAAG,WAAW,QAAQ,EAAE,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,wEAAwE;QACxE,sEAAsE;QACtE,+DAA+D;QAC/D,OAAO,CAAC,IAAI,CACV,iBAAiB,QAAQ,yBAAyB;YAClD,oBAAoB,MAAM,CAAC,SAAS,EAAE,CACvC,CAAC;QACF,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3C,SAAS,GAAG,WAAW,MAAM,CAAC,SAAS,EAAE,CAAC;IAC5C,CAAC;IAED,wEAAwE;IACxE,6EAA6E;IAC7E,gCAAgC;IAChC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAC3B,oBAAoB,CAAC;QACnB,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,cAAc,EAAE,QAAQ;QACxB,eAAe,EAAE,MAAM,CAAC,IAAI,KAAK,iBAAiB;KACnD,CAAC,CAAC;IAEH,OAAO,CAAC,IAAI,CAAC,iBAAiB,QAAQ,iBAAiB,SAAS,GAAG,CAAC,CAAC;IAErE,4EAA4E;IAC5E,wEAAwE;IACxE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;YAClC,IAAI,iBAAiB,EAAE,CAAC;gBACtB,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;gBACxE,OAAO;YACT,CAAC;YACD,iBAAiB,GAAG,IAAI,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,0BAA0B,MAAM,+BAA+B,CAAC,CAAC;YAC9E,YAAY,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC5C,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;gBACrD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,aAAa,CAAC,MAAoC;IAC/D,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,CAAC;IACzD,MAAM,eAAe,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAE5D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;QACvC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,eAAe,EAAE,MAAM,CAAC,sBAAsB;QAC9C,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,OAAO,IAAI,SAAS;QACzD,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,SAAS;QAC9C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;QACvD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,SAAS;QAChD,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,yBAAyB,EAAE,MAAM,CAAC,yBAAyB,IAAI,SAAS;QACxE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,SAAS;QAChE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,uEAAuE;QACvE,wEAAwE;QACxE,kEAAkE;QAClE,aAAa,EAAE,MAAM,CAAC,IAAI;KAC3B,CAAC,CAAC;IAEH,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;QAClC,IAAI,iBAAiB,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QACD,iBAAiB,GAAG,IAAI,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,iCAAiC,CAAC,CAAC;QACjE,MAAM,CAAC,QAAQ,EAAE,CAAC;IACpB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE/C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAErB,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,SAAS,mBAAmB;IAC1B,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;QAE9D,IAAI,MAAyC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEpD,IAAI,WAAW,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YAChC,OAAO,CAAC,KAAK,CACX,IAAI;gBACJ,kDAAkD;gBAClD,0BAA0B,MAAM,CAAC,OAAO,UAAU,MAAM,CAAC,IAAI,KAAK;gBAClE,4CAA4C,WAAW,KAAK;gBAC5D,IAAI;gBACJ,iEAAiE,CAClE,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,QAAkB,EAAE;IACvD,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,SAAS;YAC1E,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,IAAI;IACjB,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,4EAA4E;IAC5E,iEAAiE;IACjE,8DAA8D;IAC9D,MAAM,cAAc,GAAG,oBAAoB,EAAE,CAAC;IAC9C,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAClD,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,GAAG,cAAc,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,kEAAkE;IAClE,uEAAuE;IACvE,uEAAuE;IACvE,0KAA0K;IAC1K,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,mBAAmB,EAAE,CAAC;QAC5C,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAC/D,MAAM,YAAY,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IACD,oBAAoB;IAEpB,oEAAoE;IACpE,kEAAkE;IAClE,QAAQ,CAAC,0BAA0B,CAAC,CAAC;IAErC,mBAAmB,EAAE,CAAC;IAEtB,2EAA2E;IAC3E,wEAAwE;IACxE,2EAA2E;IAC3E,oBAAoB,EAAE,CAAC;IAEvB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,QAAQ,CAAC,eAAe,CAAC,CAAC;IAE1B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC7E,MAAM,UAAU,GACd,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS;QACzD,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM;YACvB,CAAC,CAAC,QAAQ,CAAC;IACb,OAAO,CAAC,IAAI,CACV,iBAAiB,UAAU,WAAW,MAAM,CAAC,aAAa,IAAI,MAAM,IAAI;QACxE,YAAY,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,eAAe,MAAM,CAAC,gBAAgB,IAAI;QACtF,aAAa,MAAM,CAAC,SAAS,EAAE,CAChC,CAAC;IAEF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC7B,0FAA0F;QAC1F,2FAA2F;QAC3F,wEAAwE;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,yFAAyF;IACzF,yFAAyF;IACzF,4FAA4F;IAC5F,4FAA4F;IAC5F,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,WAAW,CAAC,MAAM,EAAE,YAAa,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,eAAe,EAAE,CAAC;AACpB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,WAAW,CAAC,WAAW,EAAE,wBAAwB,EAAE,GAAG,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/middleware/advisory-message.d.ts

@@ -0,0 +1,52 @@
+/**
+ * The one way a middleware advises the model: a user-role message placed
+ * after the latest messages of a single model request, never written to the
+ * graph's state.
+ *
+ * Why this shape, and not the two it replaces (stigmer/stigmer#1354):
+ *
+ * - Not a mid-conversation system message. `@langchain/anthropic` refuses any
+ *   system message that is not the first ("System messages are only
+ *   permitted as the first passed message"), so every Anthropic run that
+ *   reached an advisory failed its next model call. Saved into state from
+ *   `afterModel`, it also sat between a tool call and its result, and the
+ *   session's checkpoint replayed it into every later turn.
+ * - Not a block on the system prompt. The system prompt is the session's,
+ *   byte-stable from turn to turn and carrying the prompt-cache breakpoint
+ *   (the request-shape conformance facet pins it); changing it re-writes the
+ *   provider's cache for the whole conversation, at exactly the moment a cost
+ *   advisory fires. Per-turn content rides user-role messages here, the rule
+ *   `shared/conversation-catchup.ts` states for the catch-up digest.
+ *
+ * A user-role message after the tool results is the one shape both providers
+ * accept: OpenAI takes a user message after its tool messages, and Anthropic
+ * combines it with the tool-result turn ("consecutive user turns are combined
+ * into a single turn"; text follows the `tool_result` blocks, as its tool-use
+ * rules require). The fixed lead-in tells the model the words are the
+ * platform's, not the user's.
+ *
+ * Lifetime: one model call. The advisory is in the request a middleware
+ * hands its handler and nowhere else, so the checkpoint, the transcript and
+ * every later turn see the conversation exactly as the user and the model had
+ * it. A stale "8 of 10 tool rounds used" never reaches a later turn.
+ *
+ * What it costs: the system prompt's cache breakpoint is untouched, but the
+ * conversation-tail breakpoint (deepagents' Anthropic prompt-caching
+ * middleware runs inside this stack, and the client marks the last message)
+ * lands on the advisory. The advised call therefore writes a cache entry no
+ * later request extends, and the next call reads its last round uncached:
+ * one partial miss per advisory, where a system-prompt change would re-write
+ * the whole conversation.
+ */
+import { HumanMessage } from "@langchain/core/messages";
+import type { ModelCallRequest } from "./types.js";
+/** How every advisory opens, so the model reads it as the platform speaking. */
+export declare const ADVISORY_LEAD_IN = "Advisory from the platform running this agent (not a message from the user):";
+/** The message one advisory text becomes. */
+export declare function advisoryMessage(text: string): HumanMessage;
+/**
+ * The request with one advisory message per text after its last message. With
+ * no texts it returns the request itself, so a call with nothing to say is
+ * handed on untouched.
+ */
+export declare function withAdvisories(request: ModelCallRequest, texts: readonly string[]): ModelCallRequest;

package/dist/middleware/advisory-message.js

@@ -0,0 +1,58 @@
+/**
+ * The one way a middleware advises the model: a user-role message placed
+ * after the latest messages of a single model request, never written to the
+ * graph's state.
+ *
+ * Why this shape, and not the two it replaces (stigmer/stigmer#1354):
+ *
+ * - Not a mid-conversation system message. `@langchain/anthropic` refuses any
+ *   system message that is not the first ("System messages are only
+ *   permitted as the first passed message"), so every Anthropic run that
+ *   reached an advisory failed its next model call. Saved into state from
+ *   `afterModel`, it also sat between a tool call and its result, and the
+ *   session's checkpoint replayed it into every later turn.
+ * - Not a block on the system prompt. The system prompt is the session's,
+ *   byte-stable from turn to turn and carrying the prompt-cache breakpoint
+ *   (the request-shape conformance facet pins it); changing it re-writes the
+ *   provider's cache for the whole conversation, at exactly the moment a cost
+ *   advisory fires. Per-turn content rides user-role messages here, the rule
+ *   `shared/conversation-catchup.ts` states for the catch-up digest.
+ *
+ * A user-role message after the tool results is the one shape both providers
+ * accept: OpenAI takes a user message after its tool messages, and Anthropic
+ * combines it with the tool-result turn ("consecutive user turns are combined
+ * into a single turn"; text follows the `tool_result` blocks, as its tool-use
+ * rules require). The fixed lead-in tells the model the words are the
+ * platform's, not the user's.
+ *
+ * Lifetime: one model call. The advisory is in the request a middleware
+ * hands its handler and nowhere else, so the checkpoint, the transcript and
+ * every later turn see the conversation exactly as the user and the model had
+ * it. A stale "8 of 10 tool rounds used" never reaches a later turn.
+ *
+ * What it costs: the system prompt's cache breakpoint is untouched, but the
+ * conversation-tail breakpoint (deepagents' Anthropic prompt-caching
+ * middleware runs inside this stack, and the client marks the last message)
+ * lands on the advisory. The advised call therefore writes a cache entry no
+ * later request extends, and the next call reads its last round uncached:
+ * one partial miss per advisory, where a system-prompt change would re-write
+ * the whole conversation.
+ */
+import { HumanMessage } from "@langchain/core/messages";
+/** How every advisory opens, so the model reads it as the platform speaking. */
+export const ADVISORY_LEAD_IN = "Advisory from the platform running this agent (not a message from the user):";
+/** The message one advisory text becomes. */
+export function advisoryMessage(text) {
+    return new HumanMessage({ content: `${ADVISORY_LEAD_IN}\n\n${text}` });
+}
+/**
+ * The request with one advisory message per text after its last message. With
+ * no texts it returns the request itself, so a call with nothing to say is
+ * handed on untouched.
+ */
+export function withAdvisories(request, texts) {
+    if (texts.length === 0)
+        return request;
+    return { ...request, messages: [...request.messages, ...texts.map(advisoryMessage)] };
+}
+//# sourceMappingURL=advisory-message.js.map

package/dist/middleware/advisory-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"advisory-message.js","sourceRoot":"","sources":["../../src/middleware/advisory-message.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGxD,gFAAgF;AAChF,MAAM,CAAC,MAAM,gBAAgB,GAC3B,8EAA8E,CAAC;AAEjF,6CAA6C;AAC7C,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,GAAG,gBAAgB,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,OAAyB,EAAE,KAAwB;IAChF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACvC,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;AACxF,CAAC"}