@stigmer/runner 3.0.1

package/README.md

@@ -0,0 +1,212 @@
+# @stigmer/runner
+
+Embeddable Temporal worker for the Stigmer AI agent platform. The runner executes agent sessions and workflow executions — driving the Cursor and native (deep-agent) harnesses, orchestrating MCP servers, and reporting status and artifacts back to the Stigmer backend.
+
+It is the single runtime behind three surfaces:
+
+- the **CLI daemon** (`stigmer up`) running agents locally,
+- **cloud deployments** (Kubernetes / sandbox) running managed executions, and
+- the **desktop app**, which embeds the runner as a subprocess to run sessions on the user's own machine.
+
+This document is the operational reference for the package: how it runs, what it needs, and every environment variable that configures it. You should not need to read `config.ts` or `main.ts` to operate or embed the runner.
+
+> **You usually don't start the runner by hand.** `stigmer up` runs it for local agent execution, and the desktop app embeds it automatically. Invoke the `stigmer-runner` binary directly only for advanced operation or embedding — which is what this document covers.
+
+> The deep manager-mode IPC protocol (see [Manager mode](#manager-mode)), the desktop-vs-web embedding walkthrough, and the SDK-level `RunnerAdapter` / `executionTarget` surfaces are documented separately — see [Related documentation](#related-documentation).
+
+## Install and build
+
+The runner is a workspace package in the Stigmer monorepo. Build it from the repo root:
+
+```bash
+make build-runner
+```
+
+This runs `npm run build` in `backend/services/runner` (`tsc -p tsconfig.build.json`) and then writes a build fingerprint (see [The stale-build guard](#the-stale-build-guard)). The compiled output lands in `dist/`, with a `stigmer-runner` CLI entry point at `dist/main.js`.
+
+Requires Node.js `>= 20`.
+
+## Run modes
+
+The runner has two **run modes**, selected by the `STIGMER_RUNNER_MODE` environment variable. Do not confuse the run mode (process topology) with the execution location (`MODE=local|cloud`) or the transport (`STIGMER_PROXY_ENDPOINT`) — those are independent axes covered in [Execution location vs transport](#execution-location-vs-transport).
+
+| Run mode | Selector | Topology | Used by |
+|----------|----------|----------|---------|
+| Static | `STIGMER_RUNNER_MODE` unset (default) | One Worker polling one task queue; blocks until shutdown | CLI daemon, cloud deployments |
+| Manager | `STIGMER_RUNNER_MODE=manager` | Shared Temporal connection; dynamic per-session / per-execution Workers; stdin/stdout JSON IPC | Desktop app |
+
+### Static mode
+
+Static mode creates a single Temporal Worker that polls one task queue and runs until it receives `SIGTERM` / `SIGINT`. This is the right mode when the set of work is fixed at startup (a daemon or a pod dedicated to a queue).
+
+As a library:
+
+```ts
+import { createStigmerRunner } from "@stigmer/runner";
+
+const runner = await createStigmerRunner({
+  taskQueue: "stigmer_runner",
+  temporalAddress: "localhost:7233",
+  stigmerEndpoint: "http://localhost:7234",
+});
+
+process.on("SIGTERM", () => runner.shutdown());
+await runner.start(); // blocks until shutdown
+```
+
+The `stigmer-runner` CLI runs this mode by default, reading its configuration from the environment.
+
+### Manager mode
+
+Manager mode keeps a single shared Temporal connection and a single set of activities, then spins Workers up and down on demand — one per session (`session:{sessionId}`) and one per workflow execution (`wfexec:{executionId}`). This is what the desktop app needs: it adds and removes Workers as the user opens and closes sessions, without restarting the process.
+
+As a library:
+
+```ts
+import { createStigmerRunnerManager } from "@stigmer/runner";
+
+const manager = await createStigmerRunnerManager({
+  temporalAddress: "localhost:7233",
+  stigmerEndpoint: "http://localhost:7234",
+});
+
+await manager.addSession("ses_abc123");
+// ... later
+await manager.removeSession("ses_abc123");
+await manager.shutdown();
+```
+
+As a subprocess, the host launches `stigmer-runner` with `STIGMER_RUNNER_MODE=manager` and drives it over a line-delimited JSON protocol on stdin/stdout (`addSession`, `removeSession`, `addWorkflowExecution`, `updateToken`, `shutdown`). The protocol surface is intentionally small and is specified in detail elsewhere — see [Related documentation](#related-documentation).
+
+### A note for embedders: OpenTelemetry
+
+When you embed the runner as a **library** (`createStigmerRunner` / `createStigmerRunnerManager`), the factory does **not** initialize OpenTelemetry — tracing and metrics mutate global state, which the embedding process should own. The factory still wires the Temporal OTel interceptor internally when `OTEL_EXPORTER_OTLP_ENDPOINT` is set, but you must initialize the tracer/meter providers yourself if you want spans and metrics exported. The `stigmer-runner` CLI initializes OTel for you in static mode.
+
+## Execution location vs transport
+
+Two settings are easy to conflate but are deliberately independent:
+
+- **`MODE` — execution location.** Where the agent runs and whose filesystem it sees. `local` allows local-path workspaces on the host filesystem; `cloud` runs in a server-provisioned sandbox (git-only).
+- **`STIGMER_PROXY_ENDPOINT` — transport.** How credentials and artifacts move. When set, the runner routes Cursor SDK traffic through the Stigmer proxy and pushes artifacts through it, instead of talking to providers and storage directly.
+
+These are orthogonal. The **desktop runner** is the canonical case where they diverge: it executes **locally** (`MODE=local`, so local-path workspaces work) yet still routes Cursor traffic and artifact uploads **through the proxy**. Coupling the two — forcing "proxy implies cloud" — is exactly what previously broke local-path sessions, which is why the env path (`MODE`) and both library factories (`executionMode`) treat them separately.
+
+> **Library factories — `executionMode`.** Both `createStigmerRunner` and `createStigmerRunnerManager` accept an optional `executionMode: "local" | "cloud"` that sets execution location independently of proxy transport. When omitted, the static `createStigmerRunner` derives it for backward compatibility (`proxy ⇒ cloud`, otherwise `local`); the manager defaults to `local`. Set `executionMode: "local"` together with `proxyEndpoint` to express the desktop case — local execution with proxy transport.
+
+### Credential modes
+
+The transport setting drives two credential modes:
+
+- **Direct mode** (local / OSS): you provide `CURSOR_API_KEY` directly (for the Cursor harness); `STIGMER_TOKEN` is optional because a local Stigmer server has no auth. `STIGMER_PROXY_ENDPOINT` is unset.
+- **Proxy mode** (cloud / managed runners): `STIGMER_PROXY_ENDPOINT` and `STIGMER_TOKEN` are required. You do not supply `CURSOR_API_KEY` — the proxy validates your token and injects the real Cursor key upstream. The runner sets `CURSOR_BACKEND_URL` / `CURSOR_API_BASE_URL` to the proxy endpoint automatically; these are runner-managed, not configuration you set.
+
+## Required infrastructure
+
+| Component | When | Purpose |
+|-----------|------|---------|
+| Temporal | Always | The runner is a Temporal Worker. It needs a reachable Temporal frontend and a namespace. You may set these explicitly (`TEMPORAL_SERVICE_ADDRESS`, `TEMPORAL_NAMESPACE`), but when a token is present the runner self-discovers them from the control plane at boot — see the env reference below. |
+| Stigmer backend | Always | The control plane (`STIGMER_BACKEND_ENDPOINT`) for status updates, blueprints, and (local) artifact serving. |
+| Stigmer proxy + token | Proxy/cloud only | The proxy (`STIGMER_PROXY_ENDPOINT`) brokers Cursor credentials and artifact storage; `STIGMER_TOKEN` authenticates to it. |
+
+In local/direct mode, only Temporal and the Stigmer backend are required, and both default to localhost.
+
+## The stale-build guard
+
+The runner runs from compiled `dist/` output. A stale `dist/` — source changed but not rebuilt — silently runs old code, which has historically cost hours of debugging (structured-output failures, naming mismatches, env-resolution regressions).
+
+To prevent this, `npm run build` writes `dist/.build-fingerprint`: a JSON file with a SHA-256 hash of all `src/**/*.ts` files (excluding `node_modules` and `__tests__`), plus a build timestamp and file count. At startup, `checkBuildFreshness()` recomputes the hash and compares it. On mismatch, the runner prints a clear error and exits with code `78`:
+
+```
+!!! STALE RUNNER BUILD — REFUSING TO START !!!
+    dist/ was built at <timestamp> (hash <hash>)
+    src/ has changed since (current hash <hash>)
+
+    Run 'make build-runner' or 'make desktop-dev' to rebuild.
+```
+
+The check is skipped gracefully when the fingerprint file is absent — for example under `tsx` (`npm run start`), in CI, or on a first build — so it never blocks development workflows that run from source.
+
+## Environment variable reference
+
+All configuration is environment-driven. Names and defaults below are verified against `src/config.ts`, `src/shared/artifact-storage.ts`, `src/claimcheck/config.ts`, `src/otel.ts`, and the LLM/registry activities. "Applies to" indicates the run mode, execution location, or credential mode a variable is relevant to.
+
+### Core configuration
+
+| Variable | Applies to | Required | Default | Purpose |
+|----------|-----------|----------|---------|---------|
+| `STIGMER_RUNNER_MODE` | All | No | `static` | Selects the run mode. Set to `manager` for dynamic per-session/per-execution Workers; any other value (or unset) means static mode. |
+| `MODE` | All | No | `local` | Execution location: `local` (host filesystem, local-path workspaces) or `cloud` (server-provisioned sandbox, git-only). Independent of `STIGMER_PROXY_ENDPOINT`. |
+| `STIGMER_TASK_QUEUE` | Static mode | No | `stigmer_runner` | Temporal task queue the static Worker polls. (Legacy alias: `TEMPORAL_AGENT_EXECUTION_RUNNER_TASK_QUEUE`.) Unused in manager mode, where each Worker derives its own queue. |
+| `TEMPORAL_SERVICE_ADDRESS` | All | No | _(discovered)_ | Address of the Temporal frontend. **Resolution order:** an explicit value always wins; otherwise, if `STIGMER_TOKEN` is set, the runner discovers it from the control plane at boot (`getRunnerBootstrapConfig`); otherwise it falls back to `localhost:7233`. Discovery failure aborts startup with an actionable error (no silent fallback). |
+| `TEMPORAL_NAMESPACE` | All | No | `default` | Temporal namespace. |
+| `STIGMER_BACKEND_ENDPOINT` | All | In cloud mode | `http://localhost:7234` (local) | Stigmer backend endpoint for status, blueprints, and local artifact serving. A bare `host:port` is normalized to `http://` (or `https://` for port `443`). |
+| `STIGMER_TOKEN` | Cloud or proxy mode | Yes (cloud/proxy) | _(none)_ | Auth token for the Stigmer backend / proxy. Required when `MODE=cloud` or `STIGMER_PROXY_ENDPOINT` is set; optional in local/direct mode. |
+| `CURSOR_API_KEY` | Direct mode | Yes (Cursor harness, direct) | _(empty)_ | Cursor API key for direct mode. In proxy mode it is not required — the proxy injects the real key; the runner falls back to `STIGMER_TOKEN` for the SDK transport credential. |
+| `STIGMER_PROXY_ENDPOINT` | Proxy/cloud | No | _(none)_ | Stigmer proxy endpoint. When set, activates proxy transport: Cursor SDK traffic and artifact uploads are routed through the proxy. |
+| `WORKSPACE_ROOT_DIR` | All | No | `~/.stigmer/workspaces/runner` (fallback) | Root directory for agent workspaces. If unset, the runner warns and creates an isolated fallback directory — it never falls back to the process working directory. |
+| `TEMPORAL_MAX_CONCURRENCY` | All | No | `5` | Maximum concurrent Temporal activity executions (per session Worker in manager mode). |
+| `STIGMER_CHECKPOINTER_TYPE` | All | No | `memory` (local), `http` (cloud) | LangGraph checkpointer backend for agent state: `memory` or `http`. |
+| `STIGMER_CHECKPOINTER_PROXY_ENDPOINT` | `http` checkpointer | No | value of `STIGMER_PROXY_ENDPOINT` | Endpoint for the HTTP checkpointer; falls back to the proxy endpoint. |
+| `STIGMER_PRIMARY_MODEL` | All | No | `gpt-4.1` | Default LLM model identifier. |
+| `STIGMER_CURSOR_CLOUD_MODE_ENABLED` | All | No | `false` | When `true`, enables Cursor cloud (workspace-less) execution mode for the Cursor harness. |
+| `STIGMER_IDLE_TIMEOUT_SECONDS` | All | No | _(none)_ | **Reserved.** Parsed from the environment but not currently honored by the runtime — no component reads it today. Documented for completeness; setting it has no effect. |
+
+### Artifact storage
+
+| Variable | Applies to | Required | Default | Purpose |
+|----------|-----------|----------|---------|---------|
+| `ARTIFACT_STORAGE_TYPE` | All | No | `proxy` if `STIGMER_PROXY_ENDPOINT` is set, else `local` | Selects the artifact backend: `local` (filesystem, served by the Stigmer backend) or `proxy` (presigned URLs via the proxy). An explicit value always wins. Storage follows transport, not execution location. |
+| `LOCAL_ARTIFACT_PATH` | Local storage | No | `/var/stigmer/artifacts` | Filesystem path for the local artifact backend. |
+| `LOCAL_ARTIFACT_SERVE_URL` | Local storage | No | `http://localhost:7235` | Base URL the local backend uses to construct artifact download URLs. |
+
+### Claim-check (large Temporal payloads)
+
+The claim-check codec offloads oversized Temporal payloads to artifact storage and passes a reference instead.
+
+| Variable | Applies to | Required | Default | Purpose |
+|----------|-----------|----------|---------|---------|
+| `CLAIMCHECK_ENABLED` | All | No | `false` | Enables the claim-check payload codec. When disabled, payloads pass through unchanged. |
+| `CLAIMCHECK_THRESHOLD_BYTES` | Claim-check | No | `131072` (128 KB) | Payload size at or above which the codec offloads to artifact storage. |
+| `CLAIMCHECK_COMPRESSION_ENABLED` | Claim-check | No | `true` | Compresses offloaded payloads. Only the literal value `false` disables it. |
+| `CLAIMCHECK_KEY_PREFIX` | Claim-check | No | `claimcheck/` | Key prefix for offloaded payloads in artifact storage. |
+
+### Credentials and providers
+
+| Variable | Applies to | Required | Default | Purpose |
+|----------|-----------|----------|---------|---------|
+| `OPENAI_API_KEY` | Direct mode (native/OpenAI) | When using OpenAI directly | _(empty)_ | OpenAI API key for the native harness in direct mode. Not needed in proxy mode. |
+| `ANTHROPIC_API_KEY` | Direct mode (native/Anthropic) | When using Anthropic directly | _(empty)_ | Anthropic API key for the native harness in direct mode. Not needed in proxy mode. |
+| `STIGMER_LLM_REQUEST_TIMEOUT_MS` | Native harness | No | `0` (no timeout) | Per-request timeout for native LLM calls, in milliseconds. `0` or unset means no explicit timeout. |
+| `STIGMER_CLOUD_API_URL` | All | No | `https://api.stigmer.ai` | Base URL for the Stigmer cloud API used to fetch model pricing and the model registry. |
+| `STIGMER_AUTH_TOKEN` | Pricing/registry fetch | No | value of `STIGMER_TOKEN` | Fallback bearer token for model-pricing and model-registry requests when `STIGMER_TOKEN` is not set. |
+| `GITHUB_TOKEN` | Deep-agent git writeback | When writing back to GitHub | _(none)_ | Token used by the deep-agent harness for git writeback operations. |
+
+### Observability
+
+| Variable | Applies to | Required | Default | Purpose |
+|----------|-----------|----------|---------|---------|
+| `OTEL_EXPORTER_OTLP_ENDPOINT` | All | No | _(none)_ | OTLP/gRPC endpoint for traces and metrics. When unset, OpenTelemetry is disabled with zero overhead. See [the embedder note](#a-note-for-embedders-opentelemetry) on who initializes OTel. |
+
+### Advanced and debug
+
+These tune internal behavior or support testing. Most operators never set them.
+
+| Variable | Default | Purpose |
+|----------|---------|---------|
+| `STREAMING_MIN_INTERVAL_MS` | `500` | Minimum time between streaming status updates (rate limit). |
+| `STREAMING_MAX_INTERVAL_MS` | `5000` | Maximum time before a forced keepalive status update. Clamped up to the min if set lower. |
+| `STREAMING_BURST_THRESHOLD` | `50` | Event count that triggers an immediate status update (burst protection). |
+| `LANGGRAPH_STREAM_EVENTS_VERSION` | `v3` | Selects the LangGraph streaming events version; `v2` opts into the older path. |
+| `SKIP_MCP_CONNECT_BACKFILL` | `false` | When `true`, skips MCP Connect backfill. |
+| `STIGMER_MCP_PUBLIC_ENDPOINT` | _(none)_ | Public endpoint injected as `STIGMER_SERVER_ADDRESS` into MCP server environments that request it. |
+| `CURSOR_EVENT_RECORD_DIR` | _(none)_ | Directory to record Cursor harness events (debugging/fixtures). |
+| `V2_EVENT_RECORD_DIR` | _(none)_ | Directory to record deep-agent v2 streaming events. |
+| `V3_EVENT_RECORD_DIR` | _(none)_ | Directory to record deep-agent v3 streaming events. |
+| `RECORD_FIXTURES` | `0` | When `1`, records HTTP fixtures for replay-based tests. |
+
+## Related documentation
+
+- **[Manager-mode IPC protocol](https://stigmer.ai/docs/guides/runners/ipc-protocol)** — the line-delimited JSON command/response contract and its versioned handshake (current protocol version `1`). A short pointer also lives at [`docs/ipc-protocol.md`](docs/ipc-protocol.md); the code definition is [`src/ipc-protocol.ts`](src/ipc-protocol.ts).
+- **[Embedding integration guide](https://stigmer.ai/docs/guides/runners/embedding)** — building a desktop client (local execution) and a web client (cloud execution), including the per-audience configuration each one passes.
+- **SDK `RunnerAdapter` and `executionTarget`** — the local-execution surfaces in `@stigmer/react` and `@stigmer/sdk`. The [embedding guide](https://stigmer.ai/docs/guides/runners/embedding) covers them today; a dedicated SDK reference is forthcoming.
+- **Public API** — `src/index.ts` exports `createStigmerRunner` and `createStigmerRunnerManager` with typed options and inline examples.

package/dist/.build-fingerprint

@@ -0,0 +1 @@
+{"hash":"ea58decbef7c13aa","builtAt":"2026-06-08T12:08:08.596Z","fileCount":192}

package/dist/activities/call-agent-status.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Local activities for surfacing child agent HITL approval state
+ * on the parent WorkflowExecution.
+ *
+ * These run as Temporal local activities (proxyLocalActivities) with
+ * short timeouts. Failures are best-effort — they update the platform
+ * UI but do not block the workflow.
+ *
+ * - UpdateWorkflowTaskApprovalStatus: sets pending_approvals on the
+ *   WorkflowExecution when a child agent enters a tool-approval gate.
+ * - ClearWorkflowApprovalStatus: clears pending_approvals when the
+ *   child agent activity completes (approvals resolved).
+ */
+import type { ChildApprovalNotification } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/approval_pb";
+export declare function updateWorkflowTaskApprovalStatus(executionId: string, _taskName: string, notification: ChildApprovalNotification): Promise<void>;
+export declare function clearWorkflowApprovalStatus(executionId: string): Promise<void>;
+/**
+ * Queries the child AgentExecution for progress data that can be
+ * emitted as an `agent_call_progress` event on the parent workflow.
+ *
+ * Returns a lightweight summary derived from the agent's status:
+ * message count, last active tool, token consumption. Returns null
+ * if the execution cannot be fetched (best-effort).
+ */
+export interface AgentProgressSummary {
+    messagesCount: number;
+    toolCallsCount: number;
+    currentToolName: string;
+    tokensConsumed: number;
+    agentPhase: number;
+}
+export declare function getAgentExecutionProgress(childExecutionId: string): Promise<AgentProgressSummary | null>;
+export declare function createCallAgentStatusActivities(): {
+    UpdateWorkflowTaskApprovalStatus: typeof updateWorkflowTaskApprovalStatus;
+    ClearWorkflowApprovalStatus: typeof clearWorkflowApprovalStatus;
+    GetAgentExecutionProgress: typeof getAgentExecutionProgress;
+};

package/dist/activities/call-agent-status.js

@@ -0,0 +1,91 @@
+/**
+ * Local activities for surfacing child agent HITL approval state
+ * on the parent WorkflowExecution.
+ *
+ * These run as Temporal local activities (proxyLocalActivities) with
+ * short timeouts. Failures are best-effort — they update the platform
+ * UI but do not block the workflow.
+ *
+ * - UpdateWorkflowTaskApprovalStatus: sets pending_approvals on the
+ *   WorkflowExecution when a child agent enters a tool-approval gate.
+ * - ClearWorkflowApprovalStatus: clears pending_approvals when the
+ *   child agent activity completes (approvals resolved).
+ */
+import { StigmerClient } from "../client/stigmer-client.js";
+import { loadConfig } from "../config.js";
+import { create } from "@bufbuild/protobuf";
+import { WorkflowExecutionStatusSchema, WorkflowPendingApprovalSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/api_pb";
+import { ToolCallStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+function buildClient() {
+    const config = loadConfig();
+    return new StigmerClient({
+        endpoint: config.stigmerBackendEndpoint,
+        token: config.stigmerToken,
+    });
+}
+export async function updateWorkflowTaskApprovalStatus(executionId, _taskName, notification) {
+    if (!executionId)
+        return;
+    const client = buildClient();
+    const pendingApprovals = (notification.pendingApprovals ?? []).map((approval) => create(WorkflowPendingApprovalSchema, {
+        approval,
+        childAgentExecutionId: notification.executionId,
+    }));
+    const status = create(WorkflowExecutionStatusSchema, {
+        pendingApprovals,
+    });
+    await client.updateWorkflowExecutionStatus(executionId, status, {
+        updatePendingApprovals: true,
+    });
+}
+export async function clearWorkflowApprovalStatus(executionId) {
+    if (!executionId)
+        return;
+    const client = buildClient();
+    const status = create(WorkflowExecutionStatusSchema, {
+        pendingApprovals: [],
+    });
+    await client.updateWorkflowExecutionStatus(executionId, status, {
+        updatePendingApprovals: true,
+    });
+}
+export async function getAgentExecutionProgress(childExecutionId) {
+    if (!childExecutionId)
+        return null;
+    try {
+        const client = buildClient();
+        const execution = await client.getExecution(childExecutionId);
+        const status = execution?.status;
+        if (!status)
+            return null;
+        const messages = status.messages ?? [];
+        const messagesCount = messages.length;
+        let toolCallsCount = 0;
+        let currentToolName = "";
+        for (const msg of messages) {
+            const tools = msg.toolCalls ?? [];
+            toolCallsCount += tools.length;
+            for (const tc of tools) {
+                if (tc.name && tc.status === ToolCallStatus.TOOL_CALL_RUNNING) {
+                    currentToolName = tc.name;
+                }
+            }
+        }
+        const usage = status.streamingUsage;
+        const tokensConsumed = Number(usage?.totalTokens ?? 0);
+        const phase = status.phase ?? 0;
+        return { messagesCount, toolCallsCount, currentToolName, tokensConsumed, agentPhase: phase };
+    }
+    catch (err) {
+        console.warn("Failed to fetch agent execution progress (non-fatal):", String(err));
+        return null;
+    }
+}
+export function createCallAgentStatusActivities() {
+    return {
+        UpdateWorkflowTaskApprovalStatus: updateWorkflowTaskApprovalStatus,
+        ClearWorkflowApprovalStatus: clearWorkflowApprovalStatus,
+        GetAgentExecutionProgress: getAgentExecutionProgress,
+    };
+}
+//# sourceMappingURL=call-agent-status.js.map

package/dist/activities/call-agent-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-agent-status.js","sourceRoot":"","sources":["../../src/activities/call-agent-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,6BAA6B,EAAE,6BAA6B,EAAE,MAAM,gEAAgE,CAAC;AAE9I,OAAO,EAAE,cAAc,EAAE,MAAM,8DAA8D,CAAC;AAE9F,SAAS,WAAW;IAClB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,IAAI,aAAa,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC,sBAAsB;QACvC,KAAK,EAAE,MAAM,CAAC,YAAY;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,WAAmB,EACnB,SAAiB,EACjB,YAAuC;IAEvC,IAAI,CAAC,WAAW;QAAE,OAAO;IAEzB,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,gBAAgB,GAAG,CAAC,YAAY,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAChE,CAAC,QAAQ,EAAE,EAAE,CACX,MAAM,CAAC,6BAA6B,EAAE;QACpC,QAAQ;QACR,qBAAqB,EAAE,YAAY,CAAC,WAAW;KAChD,CAAC,CACL,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,CAAC,6BAA6B,EAAE;QACnD,gBAAgB;KACjB,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,6BAA6B,CAAC,WAAW,EAAE,MAAM,EAAE;QAC9D,sBAAsB,EAAE,IAAI;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,WAAmB;IAEnB,IAAI,CAAC,WAAW;QAAE,OAAO;IAEzB,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,6BAA6B,EAAE;QACnD,gBAAgB,EAAE,EAAE;KACrB,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,6BAA6B,CAAC,WAAW,EAAE,MAAM,EAAE;QAC9D,sBAAsB,EAAE,IAAI;KAC7B,CAAC,CAAC;AACL,CAAC;AAkBD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,gBAAwB;IAExB,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC;QACjC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;QACvC,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC;QAEtC,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,eAAe,GAAG,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;YAClC,cAAc,IAAI,KAAK,CAAC,MAAM,CAAC;YAC/B,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;gBACvB,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,iBAAiB,EAAE,CAAC;oBAC9D,eAAe,GAAG,EAAE,CAAC,IAAI,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC;QACpC,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;QAEvD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAEhC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,uDAAuD,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,OAAO;QACL,gCAAgC,EAAE,gCAAgC;QAClE,2BAA2B,EAAE,2BAA2B;QACxD,yBAAyB,EAAE,yBAAyB;KACrD,CAAC;AACJ,CAAC"}

package/dist/activities/call-agent.d.ts

@@ -0,0 +1,25 @@
+/**
+ * CallAgent Temporal activity — creates a Stigmer AgentExecution via
+ * the platform gRPC API and uses Temporal async completion.
+ *
+ * Flow:
+ * 1. Extract Temporal task token (for async completion callback)
+ * 2. Resolve runtime placeholders (${.secrets.*}, ${.env_vars.*})
+ * 3. Resolve agent by slug → get agent ID and default instance
+ * 4. Apply Session (idempotent get-or-create by slug)
+ * 5. Create AgentExecution (callback token, parent workflow ID)
+ * 6. Throw CompleteAsyncError — worker thread released
+ *
+ * The platform completes this activity asynchronously via the token
+ * when the agent execution workflow finishes.
+ *
+ * Activity contract:
+ *   Name:   "CallAgent"
+ *   Input:  (config, runtimeEnv, parentWorkflowId)
+ *   Output: (completed asynchronously by platform)
+ */
+import type { AgentCallConfig } from "../workflow-engine/types.js";
+export declare function callAgentAction(config: AgentCallConfig, runtimeEnv: Record<string, unknown>, parentWorkflowId: string): Promise<void>;
+export declare function createCallAgentActivities(): {
+    CallAgent: (config: AgentCallConfig, runtimeEnv: Record<string, unknown>, parentWorkflowId: string) => Promise<void>;
+};

package/dist/activities/call-agent.js

@@ -0,0 +1,233 @@
+/**
+ * CallAgent Temporal activity — creates a Stigmer AgentExecution via
+ * the platform gRPC API and uses Temporal async completion.
+ *
+ * Flow:
+ * 1. Extract Temporal task token (for async completion callback)
+ * 2. Resolve runtime placeholders (${.secrets.*}, ${.env_vars.*})
+ * 3. Resolve agent by slug → get agent ID and default instance
+ * 4. Apply Session (idempotent get-or-create by slug)
+ * 5. Create AgentExecution (callback token, parent workflow ID)
+ * 6. Throw CompleteAsyncError — worker thread released
+ *
+ * The platform completes this activity asynchronously via the token
+ * when the agent execution workflow finishes.
+ *
+ * Activity contract:
+ *   Name:   "CallAgent"
+ *   Input:  (config, runtimeEnv, parentWorkflowId)
+ *   Output: (completed asynchronously by platform)
+ */
+import { randomUUID } from "node:crypto";
+import { Context, CompleteAsyncError } from "@temporalio/activity";
+import { StigmerClient } from "../client/stigmer-client.js";
+import { loadConfig } from "../config.js";
+import { resolveObjectPlaceholders } from "../workflow-engine/resolve.js";
+import { startHeartbeat } from "../shared/heartbeat.js";
+import { create } from "@bufbuild/protobuf";
+import { AgentExecutionSpecSchema, ExecutionConfigSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/spec_pb";
+import { SessionSchema } from "@stigmer/protos/ai/stigmer/agentic/session/v1/api_pb";
+import { SessionSpecSchema } from "@stigmer/protos/ai/stigmer/agentic/session/v1/spec_pb";
+import { Harness, ExecutionTarget } from "@stigmer/protos/ai/stigmer/agentic/session/v1/enum_pb";
+import { AgentExecutionSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { ExecutionValueSchema } from "@stigmer/protos/ai/stigmer/agentic/executioncontext/v1/spec_pb";
+import { ApiResourceMetadataSchema } from "@stigmer/protos/ai/stigmer/commons/apiresource/metadata_pb";
+import { ApiResourceReferenceSchema } from "@stigmer/protos/ai/stigmer/commons/apiresource/io_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+export async function callAgentAction(config, runtimeEnv, parentWorkflowId) {
+    const taskToken = Context.current().info.taskToken;
+    const resolved = resolveObjectPlaceholders(config, runtimeEnv);
+    if (!resolved.agent) {
+        throw new Error("call:agent: 'agent' resolved to empty after placeholder substitution. " +
+            "If using ${.secrets.X} or ${.env_vars.X}, ensure the referenced key " +
+            "exists in the workflow's env block and is provisioned in the environment.");
+    }
+    if (!resolved.message) {
+        throw new Error("call:agent: 'message' resolved to empty after placeholder substitution. " +
+            "The agent requires a non-empty prompt message.");
+    }
+    const orgId = resolved.org
+        ?? runtimeEnv["__stigmer_org_id"]
+        ?? "";
+    if (!orgId) {
+        throw new Error("call:agent requires an organization context. " +
+            "Set 'org' in the task config or ensure '__stigmer_org_id' is in the workflow environment.");
+    }
+    const appConfig = loadConfig();
+    const client = new StigmerClient({
+        endpoint: appConfig.stigmerBackendEndpoint,
+        token: appConfig.stigmerToken,
+    });
+    const agentRef = parseAgentReference(resolved.agent, orgId);
+    const agent = await client.getAgentByReference(create(ApiResourceReferenceSchema, agentRef));
+    const agentId = agent.metadata?.id ?? "";
+    const defaultInstanceId = agent.status?.defaultInstanceId ?? "";
+    const agentEnvKeys = Object.keys(agent.spec?.env ?? {});
+    const workflowEnvKeys = Object.keys(runtimeEnv).filter(k => !k.startsWith("__stigmer_"));
+    console.log(`[CallAgent] agent=${resolved.agent} agentId=${agentId} ` +
+        `agentEnvDecls=[${agentEnvKeys.join(",")}] ` +
+        `workflowEnvKeys=[${workflowEnvKeys.join(",")}]`);
+    if (!agentId) {
+        throw new Error(`Agent '${resolved.agent}' resolved but has no metadata.id`);
+    }
+    const wfExecId = resolved.__wfExecId
+        ?? runtimeEnv["__stigmer_execution_id"];
+    const taskName = resolved.__taskName;
+    let sessionName;
+    let executionName;
+    if (wfExecId && taskName) {
+        const taskKey = `${wfExecId}-${taskName}`;
+        sessionName = `ses-wf-${taskKey}`;
+        executionName = `aex-wf-${taskKey}-${shortUniqueId()}`;
+    }
+    else {
+        console.warn(`[CallAgent] Missing workflow context for session naming: ` +
+            `wfExecId=${wfExecId ?? "(missing)"}, taskName=${taskName ?? "(missing)"}. ` +
+            `Using timestamp-based names — session will NOT be reused on retry.`);
+        sessionName = `wf-${extractSlug(resolved.agent)}-${Math.floor(Date.now() / 1000)}`;
+        executionName = `aex-wf-${extractSlug(resolved.agent)}-${Date.now()}`;
+    }
+    console.log(`[CallAgent] session=${sessionName}, execution=${executionName}, ` +
+        `wfExecId=${wfExecId ?? "(none)"}, task=${taskName ?? "(none)"}`);
+    const harness = resolveHarness(resolved.harness);
+    const executionTarget = resolveExecutionTarget(runtimeEnv["__stigmer_execution_target"]);
+    const session = await client.applySession(create(SessionSchema, {
+        apiVersion: "agentic.stigmer.ai/v1",
+        kind: "Session",
+        metadata: create(ApiResourceMetadataSchema, {
+            name: sessionName,
+            org: orgId,
+        }),
+        spec: create(SessionSpecSchema, {
+            agentInstanceId: defaultInstanceId,
+            harness,
+            executionTarget,
+            subject: "Auto-created session",
+        }),
+    }));
+    const sessionId = session?.metadata?.id ?? "";
+    const executionRuntimeEnv = {};
+    // Automatic intersection forwarding: forward workflow env vars that match the
+    // child agent's declared spec.env keys. This avoids requiring workflow authors
+    // to manually re-declare every env var on every agent_call task.
+    const agentEnvDecls = agent.spec?.env ?? {};
+    for (const [key, decl] of Object.entries(agentEnvDecls)) {
+        if (key in runtimeEnv && runtimeEnv[key] != null) {
+            executionRuntimeEnv[key] = {
+                value: String(runtimeEnv[key]),
+                isSecret: decl.isSecret ?? false,
+            };
+        }
+    }
+    const intersectionKeys = Object.keys(executionRuntimeEnv);
+    const skippedKeys = agentEnvKeys.filter(k => !(k in executionRuntimeEnv));
+    if (skippedKeys.length > 0) {
+        console.warn(`[CallAgent] agent declares env keys not present in workflow env: [${skippedKeys.join(",")}]`);
+    }
+    // Task-config-level env takes precedence over auto-forwarded values
+    if (resolved.env) {
+        for (const [key, value] of Object.entries(resolved.env)) {
+            executionRuntimeEnv[key] = { value: String(value), isSecret: false };
+        }
+    }
+    const finalKeys = Object.keys(executionRuntimeEnv);
+    const overrideKeys = finalKeys.filter(k => !intersectionKeys.includes(k));
+    console.log(`[CallAgent] env forwarding: intersection=${intersectionKeys.length} ` +
+        `taskOverrides=${overrideKeys.length} total=${finalKeys.length} ` +
+        `keys=[${finalKeys.join(",")}]`);
+    const runtimeEnvProto = {};
+    for (const [key, val] of Object.entries(executionRuntimeEnv)) {
+        runtimeEnvProto[key] = create(ExecutionValueSchema, {
+            value: val.value,
+            isSecret: val.isSecret,
+        });
+    }
+    const parentQueue = runtimeEnv["__stigmer_activity_task_queue"];
+    const activityTaskQueue = parentQueue?.startsWith("wfexec:") ? parentQueue : "";
+    const hasModel = !!resolved.config?.model;
+    const hasOutputSchema = !!resolved.output?.schema;
+    console.log(`[CallAgent] schema propagation diagnostic: ` +
+        `hasOutputSchema=${hasOutputSchema}, ` +
+        `hasModel=${hasModel}, ` +
+        `configKeys=[${Object.keys(resolved).join(",")}], ` +
+        `hasOutput=${resolved.output !== undefined}, ` +
+        `outputKeys=${resolved.output ? JSON.stringify(Object.keys(resolved.output)) : "N/A"}, ` +
+        `__taskName=${resolved.__taskName ?? "MISSING"}, ` +
+        `wfExecId=${wfExecId ?? "MISSING"}`);
+    const executionSpec = create(AgentExecutionSpecSchema, {
+        sessionId,
+        agentId,
+        message: resolved.message,
+        callbackToken: taskToken,
+        parentWorkflowId,
+        activityTaskQueue,
+        runtimeEnv: runtimeEnvProto,
+    });
+    if (hasModel || hasOutputSchema) {
+        const execConfig = create(ExecutionConfigSchema, {});
+        if (hasModel)
+            execConfig.modelName = resolved.config.model;
+        if (hasOutputSchema) {
+            execConfig.structuredOutputSchema = resolved.output.schema;
+        }
+        executionSpec.executionConfig = execConfig;
+    }
+    await client.createAgentExecution(create(AgentExecutionSchema, {
+        apiVersion: "agentic.stigmer.ai/v1",
+        kind: "AgentExecution",
+        metadata: create(ApiResourceMetadataSchema, {
+            name: executionName,
+            org: orgId,
+        }),
+        spec: executionSpec,
+    }));
+    throw new CompleteAsyncError();
+}
+function parseAgentReference(agentStr, defaultOrg) {
+    if (agentStr.includes("/")) {
+        const [org, slug] = agentStr.split("/", 2);
+        return { org, slug, kind: ApiResourceKind.agent };
+    }
+    return { org: defaultOrg, slug: agentStr, kind: ApiResourceKind.agent };
+}
+function extractSlug(agentStr) {
+    return agentStr.includes("/") ? agentStr.split("/", 2)[1] : agentStr;
+}
+function shortUniqueId() {
+    return randomUUID().replace(/-/g, "").slice(0, 8);
+}
+function resolveHarness(harnessStr) {
+    if (!harnessStr)
+        return Harness.NATIVE;
+    switch (harnessStr.toUpperCase()) {
+        case "HARNESS_NATIVE":
+        case "NATIVE":
+            return Harness.NATIVE;
+        case "HARNESS_CURSOR":
+        case "CURSOR":
+            return Harness.CURSOR;
+        default:
+            return Harness.NATIVE;
+    }
+}
+function resolveExecutionTarget(target) {
+    if (target === 1)
+        return ExecutionTarget.LOCAL;
+    if (target === 2)
+        return ExecutionTarget.CLOUD;
+    return ExecutionTarget.UNSPECIFIED;
+}
+export function createCallAgentActivities() {
+    return {
+        CallAgent: async (config, runtimeEnv, parentWorkflowId) => {
+            const hb = startHeartbeat(15_000, () => ({ phase: "creating_agent_execution" }));
+            try {
+                return await callAgentAction(config, runtimeEnv, parentWorkflowId);
+            }
+            finally {
+                hb.stop();
+            }
+        },
+    };
+}
+//# sourceMappingURL=call-agent.js.map

package/dist/activities/call-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-agent.js","sourceRoot":"","sources":["../../src/activities/call-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAmB,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,8DAA8D,CAAC;AAC/H,OAAO,EAAE,aAAa,EAAE,MAAM,sDAAsD,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,uDAAuD,CAAC;AACjG,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AAEtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,4DAA4D,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,sDAAsD,CAAC;AAClG,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAuB,EACvB,UAAmC,EACnC,gBAAwB;IAExB,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;IAEnD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAoB,CAAC;IAElF,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,wEAAwE;YACxE,sEAAsE;YACtE,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,0EAA0E;YAC1E,gDAAgD,CACjD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG;WACpB,UAAU,CAAC,kBAAkB,CAAwB;WACtD,EAAE,CAAC;IAER,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,+CAA+C;YAC/C,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;QAC/B,QAAQ,EAAE,SAAS,CAAC,sBAAsB;QAC1C,KAAK,EAAE,SAAS,CAAC,YAAY;KAC9B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAC5C,MAAM,CAAC,0BAA0B,EAAE,QAAQ,CAAC,CAC7C,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IACzC,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC;IAChE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CACT,qBAAqB,QAAQ,CAAC,KAAK,YAAY,OAAO,GAAG;QACzD,kBAAkB,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;QAC5C,oBAAoB,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CACjD,CAAC;IAEF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,UAAU,QAAQ,CAAC,KAAK,mCAAmC,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,QAAQ,GAAI,QAA+C,CAAC,UAAgC;WAC7F,UAAU,CAAC,wBAAwB,CAAuB,CAAC;IAChE,MAAM,QAAQ,GAAI,QAA+C,CAAC,UAAgC,CAAC;IAEnG,IAAI,WAAmB,CAAC;IACxB,IAAI,aAAqB,CAAC;IAE1B,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAC1C,WAAW,GAAG,UAAU,OAAO,EAAE,CAAC;QAClC,aAAa,GAAG,UAAU,OAAO,IAAI,aAAa,EAAE,EAAE,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CACV,2DAA2D;YAC3D,YAAY,QAAQ,IAAI,WAAW,cAAc,QAAQ,IAAI,WAAW,IAAI;YAC5E,oEAAoE,CACrE,CAAC;QACF,WAAW,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnF,aAAa,GAAG,UAAU,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACxE,CAAC;IAED,OAAO,CAAC,GAAG,CACT,uBAAuB,WAAW,eAAe,aAAa,IAAI;QAClE,YAAY,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ,EAAE,CACjE,CAAC;IAEF,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,eAAe,GAAG,sBAAsB,CAC5C,UAAU,CAAC,4BAA4B,CAAuB,CAC/D,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,YAAY,CACvC,MAAM,CAAC,aAAa,EAAE;QACpB,UAAU,EAAE,uBAAuB;QACnC,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,MAAM,CAAC,yBAAyB,EAAE;YAC1C,IAAI,EAAE,WAAW;YACjB,GAAG,EAAE,KAAK;SACX,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,iBAAiB,EAAE;YAC9B,eAAe,EAAE,iBAAiB;YAClC,OAAO;YACP,eAAe;YACf,OAAO,EAAE,sBAAsB;SAChC,CAAC;KACH,CAAC,CACH,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IAE9C,MAAM,mBAAmB,GAAyD,EAAE,CAAC;IAErF,8EAA8E;IAC9E,+EAA+E;IAC/E,iEAAiE;IACjE,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACxD,IAAI,GAAG,IAAI,UAAU,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YACjD,mBAAmB,CAAC,GAAG,CAAC,GAAG;gBACzB,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;aACjC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC;IAC1E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CACV,qEAAqE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAC9F,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACvE,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CACT,4CAA4C,gBAAgB,CAAC,MAAM,GAAG;QACtE,iBAAiB,YAAY,CAAC,MAAM,UAAU,SAAS,CAAC,MAAM,GAAG;QACjE,SAAS,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAChC,CAAC;IAEF,MAAM,eAAe,GAAmC,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC7D,eAAe,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,oBAAoB,EAAE;YAClD,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACvB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,+BAA+B,CAAuB,CAAC;IACtF,MAAM,iBAAiB,GAAG,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhF,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;IAC1C,MAAM,eAAe,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAElD,OAAO,CAAC,GAAG,CACT,6CAA6C;QAC7C,mBAAmB,eAAe,IAAI;QACtC,YAAY,QAAQ,IAAI;QACxB,eAAe,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK;QACnD,aAAa,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI;QAC9C,cAAc,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QACxF,cAAe,QAAgB,CAAC,UAAU,IAAI,SAAS,IAAI;QAC3D,YAAY,QAAQ,IAAI,SAAS,EAAE,CACpC,CAAC;IAEF,MAAM,aAAa,GAAG,MAAM,CAAC,wBAAwB,EAAE;QACrD,SAAS;QACT,OAAO;QACP,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,aAAa,EAAE,SAAS;QACxB,gBAAgB;QAChB,iBAAiB;QACjB,UAAU,EAAE,eAAe;KAC5B,CAAC,CAAC;IAEH,IAAI,QAAQ,IAAI,eAAe,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,MAAM,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,QAAQ;YAAE,UAAU,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAO,CAAC,KAAM,CAAC;QAC7D,IAAI,eAAe,EAAE,CAAC;YACpB,UAAU,CAAC,sBAAsB,GAAG,QAAQ,CAAC,MAAO,CAAC,MAAoB,CAAC;QAC5E,CAAC;QACD,aAAa,CAAC,eAAe,GAAG,UAAU,CAAC;IAC7C,CAAC;IAED,MAAM,MAAM,CAAC,oBAAoB,CAC/B,MAAM,CAAC,oBAAoB,EAAE;QAC3B,UAAU,EAAE,uBAAuB;QACnC,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,MAAM,CAAC,yBAAyB,EAAE;YAC1C,IAAI,EAAE,aAAa;YACnB,GAAG,EAAE,KAAK;SACX,CAAC;QACF,IAAI,EAAE,aAAa;KACpB,CAAC,CACH,CAAC;IAEF,MAAM,IAAI,kBAAkB,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAAgB,EAChB,UAAkB;IAElB,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACvE,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,cAAc,CAAC,UAAmB;IACzC,IAAI,CAAC,UAAU;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC;IAEvC,QAAQ,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;QACjC,KAAK,gBAAgB,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,MAAM,CAAC;QACxB,KAAK,gBAAgB,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,MAAM,CAAC;QACxB;YACE,OAAO,OAAO,CAAC,MAAM,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAe;IAC7C,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC;IAC/C,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC;IAC/C,OAAO,eAAe,CAAC,WAAW,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,SAAS,EAAE,KAAK,EACd,MAAuB,EACvB,UAAmC,EACnC,gBAAwB,EACT,EAAE;YACjB,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC;YACjF,IAAI,CAAC;gBACH,OAAO,MAAM,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACrE,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,IAAI,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}