@stigmer/runner 3.14.0 → 3.14.1

package/dist/__test-utils__/mock-client.js

@@ -0,0 +1,45 @@
+/**
+ * Shared mock factory for StigmerClient used across test suites.
+ *
+ * StigmerClient is a class (not an interface), so mocks use
+ * `as unknown as StigmerClient` — matching the established pattern
+ * in grpc-retry.test.ts and connect-backfill.test.ts.
+ */
+import { vi } from "vitest";
+import { ExecutionControlSignal } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+export function mockStigmerClient(overrides = {}) {
+    return {
+        updateStatus: vi.fn().mockResolvedValue({
+            signal: ExecutionControlSignal.UNSPECIFIED,
+        }),
+        getExecution: vi.fn().mockResolvedValue({}),
+        getExecutionContextByExecutionId: vi.fn().mockResolvedValue({}),
+        // No scoped token by default — the OSS/local shape (no runner credential).
+        acquireScopedRunnerToken: vi.fn().mockResolvedValue(undefined),
+        getRunnerScopedToken: vi.fn().mockResolvedValue(undefined),
+        getSession: vi.fn().mockResolvedValue({}),
+        updateSession: vi.fn().mockResolvedValue({}),
+        // No proactive channels by default — the everyday answer for most
+        // agents (DD-006 D2); tests opt in to a channel-bound agent.
+        listMessagingChannels: vi.fn().mockResolvedValue([]),
+        listChannelTemplates: vi.fn().mockResolvedValue([]),
+        getAgent: vi.fn().mockResolvedValue({}),
+        getAgentInstance: vi.fn().mockResolvedValue({}),
+        getMcpServer: vi.fn().mockResolvedValue({}),
+        getMcpServerByReference: vi.fn().mockResolvedValue({}),
+        connectMcpServer: vi.fn().mockResolvedValue({}),
+        getSkill: vi.fn().mockResolvedValue({}),
+        getSkillByReference: vi.fn().mockResolvedValue({}),
+        getSkillArtifact: vi.fn().mockResolvedValue({}),
+        recordLlmCallUsage: vi.fn().mockResolvedValue({}),
+        getWorkflowExecution: vi.fn().mockResolvedValue({}),
+        getWorkflow: vi.fn().mockResolvedValue({}),
+        getWorkflowInstance: vi.fn().mockResolvedValue({}),
+        updateWorkflowExecutionStatus: vi.fn().mockResolvedValue({}),
+        getAgentByReference: vi.fn().mockResolvedValue({}),
+        createSession: vi.fn().mockResolvedValue({}),
+        createAgentExecution: vi.fn().mockResolvedValue({}),
+        ...overrides,
+    };
+}
+//# sourceMappingURL=mock-client.js.map

package/dist/__test-utils__/mock-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-client.js","sourceRoot":"","sources":["../../src/__test-utils__/mock-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,8DAA8D,CAAC;AAOtG,MAAM,UAAU,iBAAiB,CAAC,YAAyB,EAAE;IAC3D,OAAO;QACL,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACtC,MAAM,EAAE,sBAAsB,CAAC,WAAW;SAC3C,CAAC;QACF,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC3C,gCAAgC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC/D,2EAA2E;QAC3E,wBAAwB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC9D,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC1D,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzC,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC5C,kEAAkE;QAClE,6DAA6D;QAC7D,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACpD,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACnD,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC/C,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC3C,uBAAuB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtD,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC/C,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvC,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClD,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC/C,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACnD,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC1C,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClD,6BAA6B,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC5D,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClD,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC5C,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACnD,GAAG,SAAS;KACe,CAAC;AAChC,CAAC"}

package/dist/activities/execute-cursor/__test-utils__/hermetic-cursor.d.ts

@@ -0,0 +1,172 @@
+/**
+ * The Cursor slice of the hermetic activity driver: build the fixture record,
+ * the scripted SDK and the `Config`, run the REAL `ExecuteCursor` activity under
+ * `MockActivityEnvironment`, and hand back what it persisted.
+ *
+ * Layering (the `approval-contract/` + `gateway-substrate.ts` split): everything
+ * harness-agnostic lives in `src/__test-utils__/hermetic-activity.ts` (the
+ * activity environment, the execution record behind the client, the temp
+ * `~/.stigmer`, the ticking clock, the shutdown signal). This module adds only
+ * what is Cursor's: the `@cursor/sdk` double, the model catalog and pricing
+ * registry the harness reads at setup, the Cursor `Config` slice, and the
+ * per-scenario reset of the harness's module-level caches.
+ *
+ * What the two `vi.mock` calls a scenario file must carry look like — they are
+ * hoisted by vitest and so cannot live here:
+ *
+ * ```ts
+ * vi.mock("@cursor/sdk", async () =>
+ *   (await import("../../__test-utils__/scripted-sdk.js")).scriptedCursorSdkModule());
+ * vi.mock("../../../../client/stigmer-client.js", async () =>
+ *   (await import("../../../../__test-utils__/hermetic-activity.js")).hermeticStigmerClientModule());
+ * ```
+ *
+ * Network: the activity's only HTTP fetch is the model registry
+ * (`model-pricing-data.ts`, `shared/model-registry.ts`; both fail SOFT to
+ * defaults with a 60s failure cache, which would make the goldens depend on
+ * DEFAULT_PRICING and log warnings on every run). `fetch` is stubbed to answer
+ * one registry document — and to THROW for any other URL, so a new network
+ * dependency on the activity path fails the hermetic run instead of leaking.
+ *
+ * The fixture model is `composer-2.5`, pinned (not Auto) on purpose: Auto short-
+ * circuits `resolveServiceTierParams` before the catalog, and a pinned model runs
+ * the catalog path, the variant-param pinning, and the `run.wait()` model echo
+ * check — more of the production path under the golden.
+ */
+import type { ModelListItem } from "@cursor/sdk";
+import { type WorkspaceEntry } from "@stigmer/protos/ai/stigmer/agentic/session/v1/workspace_pb";
+import type { Config } from "../../../config.js";
+import { ExecutionRecord, ScriptedClock, type ActivityInvocation, type HermeticEnvironment, type InvocationControls } from "../../../__test-utils__/hermetic-activity.js";
+import { ScriptedCursorSdk, type ScriptedSdkOptions } from "./scripted-sdk.js";
+export declare const FIXTURE: {
+    readonly org: "hermetic-org";
+    readonly executionId: "aex_hermetic_0001";
+    readonly sessionId: "ses_hermetic_0001";
+    readonly agentInstanceId: "ain_hermetic_0001";
+    readonly agentId: "agt_hermetic_0001";
+    readonly agentName: "hermetic-agent";
+    /** The pinned model; in the registry stub AND the SDK catalog below. */
+    readonly model: "composer-2.5";
+    readonly cursorApiKey: "hermetic-cursor-api-key";
+};
+export interface CursorRecordOptions {
+    /** The user's message for this execution. */
+    readonly message: string;
+    /** The agent's instructions (system prompt body). */
+    readonly instructions?: string;
+    /** Session workspace entries (a `local_path` entry turns on capture mode). */
+    readonly workspaceEntries?: WorkspaceEntry[];
+    readonly modelName?: string;
+    readonly autoApproveAll?: boolean;
+}
+/** The four resources of one execution, wired by id into a chain. */
+export declare function cursorExecutionRecord(options: CursorRecordOptions): ExecutionRecord;
+/**
+ * The model registry document both readers parse (`parsePricingTable` wants
+ * `harness: "cursor"` + `pricing`; `parseRegistry` wants `id` + `provider` and
+ * reads `capabilities.vision`). One entry, the fixture model, priced at round
+ * numbers so the golden's `estimatedCostUsd` is legible.
+ */
+export declare const REGISTRY_DOCUMENT: {
+    readonly models: readonly [{
+        readonly id: "composer-2.5";
+        readonly displayName: "Composer 2.5 (hermetic fixture)";
+        readonly provider: "cursor";
+        readonly harness: "cursor";
+        readonly costTier: "standard";
+        readonly featured: true;
+        readonly capabilities: {
+            readonly vision: true;
+        };
+        readonly pricing: {
+            readonly inputPricePerMillion: 1;
+            readonly outputPricePerMillion: 4;
+            readonly cacheWritePricePerMillion: 1;
+            readonly cacheReadPricePerMillion: 0.1;
+        };
+        readonly pricingVariants: {
+            readonly fast: {
+                readonly inputPricePerMillion: 3;
+                readonly outputPricePerMillion: 12;
+                readonly cacheWritePricePerMillion: 3;
+                readonly cacheReadPricePerMillion: 0.3;
+            };
+        };
+    }];
+};
+/** The SDK catalog entry for the fixture model: both pinnable params declared. */
+export declare const SDK_CATALOG: readonly ModelListItem[];
+/**
+ * Stub `fetch` to answer the registry document and refuse everything else.
+ * Returns the URLs fetched, for the "no other network" assertion.
+ */
+export declare function stubRegistryFetch(): {
+    readonly urls: string[];
+    restore(): void;
+};
+/** The OSS/local runner posture: direct Cursor API key, no proxy, local mode. */
+export declare function hermeticCursorConfig(env: HermeticEnvironment): Config;
+/**
+ * The primary workspace directory a session with NO workspace entries runs in
+ * (`session-root.ts`: `<workspaceRootDir>/sessions/<sessionId>`).
+ */
+export declare function sessionWorkspaceDir(env: HermeticEnvironment): string;
+/**
+ * Run the workspace's installed preToolUse hook exactly as the Cursor SDK does:
+ * read `<workspaceRoot>/.cursor/hooks.json`, take the `preToolUse` command the
+ * gate installed (an absolute path to the runner's own stable bash script under
+ * `~/.stigmer/hitl-gate/<key>/`), and run it with the hook input on stdin. The
+ * script resolves the CURRENT turn's state file and denial ledger from the
+ * active-turn pointer, walks its parent PIDs to confirm this process is the
+ * runner, and prints `{"permission":"allow"|"deny"}`. A deny appends to the
+ * ledger the activity's stream loop reads.
+ *
+ * This is the out-of-process half of deny-and-retry, driven by the real script
+ * against the real gate the activity installed — not a simulation of either.
+ */
+export declare function runWorkspaceHook(workspaceRoot: string, hookInput: object): {
+    readonly permission: "allow" | "deny" | "?";
+    readonly raw: string;
+};
+/**
+ * A git work tree with one committed file, for the file-review capture
+ * scenario. Author, committer and both dates are pinned so the commit AND tree
+ * object ids are byte-stable — a file-review golden may carry them.
+ */
+export declare function initGitWorkspace(root: string, files: Record<string, string>): void;
+/** A session workspace entry mounting an absolute local path (local mode only). */
+export declare function localPathEntry(name: string, path: string): WorkspaceEntry;
+/**
+ * Drop every module-level cache the harness keeps across invocations. Called
+ * at the START of a scenario, never between its invocations: a deny-and-retry
+ * scenario relies on the parked agent surviving from turn 1 into turn 2 exactly
+ * as it does in a live worker.
+ */
+export declare function resetCursorModuleState(): void;
+export interface CursorScenario {
+    readonly env: HermeticEnvironment;
+    readonly clock: ScriptedClock;
+    readonly record: ExecutionRecord;
+    readonly sdk: ScriptedCursorSdk;
+}
+export interface CursorScenarioOptions {
+    readonly env: HermeticEnvironment;
+    readonly clock: ScriptedClock;
+    readonly record: ExecutionRecord;
+    readonly sdk: ScriptedSdkOptions;
+}
+/** Bind the record and the SDK for a scenario; resets the harness caches first. */
+export declare function beginCursorScenario(options: CursorScenarioOptions): CursorScenario;
+export interface CursorTurnOptions {
+    /** Empty for a first invocation; the agent id for a HITL reinvocation. */
+    readonly threadId?: string;
+    /** The HITL cycle index (0 on the first turn); mints the change-set id. */
+    readonly turnSeq?: number;
+    readonly onControls?: (controls: InvocationControls) => void;
+}
+/**
+ * Run ONE `ExecuteCursor` invocation for the scenario. The activities are
+ * constructed per invocation (the factory constructs its client, which is the
+ * one bound at `beginCursorScenario`).
+ */
+export declare function runCursorTurn(scenario: CursorScenario, options?: CursorTurnOptions): Promise<ActivityInvocation>;

package/dist/activities/execute-cursor/__test-utils__/hermetic-cursor.js

@@ -0,0 +1,331 @@
+/**
+ * The Cursor slice of the hermetic activity driver: build the fixture record,
+ * the scripted SDK and the `Config`, run the REAL `ExecuteCursor` activity under
+ * `MockActivityEnvironment`, and hand back what it persisted.
+ *
+ * Layering (the `approval-contract/` + `gateway-substrate.ts` split): everything
+ * harness-agnostic lives in `src/__test-utils__/hermetic-activity.ts` (the
+ * activity environment, the execution record behind the client, the temp
+ * `~/.stigmer`, the ticking clock, the shutdown signal). This module adds only
+ * what is Cursor's: the `@cursor/sdk` double, the model catalog and pricing
+ * registry the harness reads at setup, the Cursor `Config` slice, and the
+ * per-scenario reset of the harness's module-level caches.
+ *
+ * What the two `vi.mock` calls a scenario file must carry look like — they are
+ * hoisted by vitest and so cannot live here:
+ *
+ * ```ts
+ * vi.mock("@cursor/sdk", async () =>
+ *   (await import("../../__test-utils__/scripted-sdk.js")).scriptedCursorSdkModule());
+ * vi.mock("../../../../client/stigmer-client.js", async () =>
+ *   (await import("../../../../__test-utils__/hermetic-activity.js")).hermeticStigmerClientModule());
+ * ```
+ *
+ * Network: the activity's only HTTP fetch is the model registry
+ * (`model-pricing-data.ts`, `shared/model-registry.ts`; both fail SOFT to
+ * defaults with a 60s failure cache, which would make the goldens depend on
+ * DEFAULT_PRICING and log warnings on every run). `fetch` is stubbed to answer
+ * one registry document — and to THROW for any other URL, so a new network
+ * dependency on the activity path fails the hermetic run instead of leaking.
+ *
+ * The fixture model is `composer-2.5`, pinned (not Auto) on purpose: Auto short-
+ * circuits `resolveServiceTierParams` before the catalog, and a pinned model runs
+ * the catalog path, the variant-param pinning, and the `run.wait()` model echo
+ * check — more of the production path under the golden.
+ */
+import { execFileSync } from "node:child_process";
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { create } from "@bufbuild/protobuf";
+import { vi } from "vitest";
+import { AgentExecutionSchema, } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { AgentExecutionSpecSchema, ExecutionConfigSchema, } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/spec_pb";
+import { SessionSchema } from "@stigmer/protos/ai/stigmer/agentic/session/v1/api_pb";
+import { SessionSpecSchema } from "@stigmer/protos/ai/stigmer/agentic/session/v1/spec_pb";
+import { LocalPathSourceSchema, WorkspaceEntrySchema, WorkspaceSourceSchema, } from "@stigmer/protos/ai/stigmer/agentic/session/v1/workspace_pb";
+import { AgentSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import { AgentSpecSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/spec_pb";
+import { AgentInstanceSchema, } from "@stigmer/protos/ai/stigmer/agentic/agentinstance/v1/api_pb";
+import { AgentInstanceSpecSchema } from "@stigmer/protos/ai/stigmer/agentic/agentinstance/v1/spec_pb";
+import { ApiResourceMetadataSchema } from "@stigmer/protos/ai/stigmer/commons/apiresource/metadata_pb";
+import { ExecutionRecord, bindHermeticClient, runActivityHermetically, } from "../../../__test-utils__/hermetic-activity.js";
+import { _resetAgentSessionCacheForTests } from "../agent-session-cache.js";
+import { _resetPricingCache } from "../model-pricing-data.js";
+import { resetCatalogCacheForTests } from "../service-tier.js";
+import { _resetRegistryCache } from "../../../shared/model-registry.js";
+import { ScriptedCursorSdk, bindScriptedSdk } from "./scripted-sdk.js";
+// ---------------------------------------------------------------------------
+// Fixture ids — fixed so goldens are readable and byte-stable
+// ---------------------------------------------------------------------------
+export const FIXTURE = {
+    org: "hermetic-org",
+    executionId: "aex_hermetic_0001",
+    sessionId: "ses_hermetic_0001",
+    agentInstanceId: "ain_hermetic_0001",
+    agentId: "agt_hermetic_0001",
+    agentName: "hermetic-agent",
+    /** The pinned model; in the registry stub AND the SDK catalog below. */
+    model: "composer-2.5",
+    cursorApiKey: "hermetic-cursor-api-key",
+};
+/** The four resources of one execution, wired by id into a chain. */
+export function cursorExecutionRecord(options) {
+    const execution = create(AgentExecutionSchema, {
+        metadata: create(ApiResourceMetadataSchema, {
+            id: FIXTURE.executionId,
+            org: FIXTURE.org,
+            name: FIXTURE.executionId,
+        }),
+        spec: create(AgentExecutionSpecSchema, {
+            sessionId: FIXTURE.sessionId,
+            message: options.message,
+            autoApproveAll: options.autoApproveAll ?? false,
+            executionConfig: create(ExecutionConfigSchema, {
+                modelName: options.modelName ?? FIXTURE.model,
+            }),
+        }),
+    });
+    const session = create(SessionSchema, {
+        metadata: create(ApiResourceMetadataSchema, {
+            id: FIXTURE.sessionId,
+            org: FIXTURE.org,
+            name: FIXTURE.sessionId,
+        }),
+        spec: create(SessionSpecSchema, {
+            agentInstanceId: FIXTURE.agentInstanceId,
+            workspaceEntries: options.workspaceEntries ?? [],
+        }),
+    });
+    const agentInstance = create(AgentInstanceSchema, {
+        metadata: create(ApiResourceMetadataSchema, {
+            id: FIXTURE.agentInstanceId,
+            org: FIXTURE.org,
+            name: FIXTURE.agentInstanceId,
+        }),
+        spec: create(AgentInstanceSpecSchema, { agentId: FIXTURE.agentId }),
+    });
+    const agent = create(AgentSchema, {
+        metadata: create(ApiResourceMetadataSchema, {
+            id: FIXTURE.agentId,
+            org: FIXTURE.org,
+            name: FIXTURE.agentName,
+        }),
+        spec: create(AgentSpecSchema, {
+            description: "Hermetic fixture agent",
+            instructions: options.instructions ?? "You are the hermetic fixture agent. Answer briefly.",
+        }),
+    });
+    return new ExecutionRecord({ execution, session, agentInstance, agent });
+}
+// ---------------------------------------------------------------------------
+// The registry document and the SDK catalog
+// ---------------------------------------------------------------------------
+/**
+ * The model registry document both readers parse (`parsePricingTable` wants
+ * `harness: "cursor"` + `pricing`; `parseRegistry` wants `id` + `provider` and
+ * reads `capabilities.vision`). One entry, the fixture model, priced at round
+ * numbers so the golden's `estimatedCostUsd` is legible.
+ */
+export const REGISTRY_DOCUMENT = {
+    models: [
+        {
+            id: FIXTURE.model,
+            displayName: "Composer 2.5 (hermetic fixture)",
+            provider: "cursor",
+            harness: "cursor",
+            costTier: "standard",
+            featured: true,
+            capabilities: { vision: true },
+            pricing: {
+                inputPricePerMillion: 1.0,
+                outputPricePerMillion: 4.0,
+                cacheWritePricePerMillion: 1.0,
+                cacheReadPricePerMillion: 0.1,
+            },
+            pricingVariants: {
+                fast: {
+                    inputPricePerMillion: 3.0,
+                    outputPricePerMillion: 12.0,
+                    cacheWritePricePerMillion: 3.0,
+                    cacheReadPricePerMillion: 0.3,
+                },
+            },
+        },
+    ],
+};
+/** The SDK catalog entry for the fixture model: both pinnable params declared. */
+export const SDK_CATALOG = [
+    {
+        id: FIXTURE.model,
+        displayName: "Composer 2.5",
+        parameters: [
+            { id: "fast", values: [{ value: "true" }, { value: "false" }] },
+            { id: "thinking", values: [{ value: "true" }, { value: "false" }] },
+        ],
+    },
+];
+/**
+ * Stub `fetch` to answer the registry document and refuse everything else.
+ * Returns the URLs fetched, for the "no other network" assertion.
+ */
+export function stubRegistryFetch() {
+    const urls = [];
+    vi.stubGlobal("fetch", vi.fn(async (input) => {
+        const url = typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
+        urls.push(url);
+        if (!url.includes("/model-registry")) {
+            throw new Error(`hermetic run attempted a non-registry network call: ${url}`);
+        }
+        return { ok: true, status: 200, json: async () => REGISTRY_DOCUMENT };
+    }));
+    return { urls, restore: () => vi.unstubAllGlobals() };
+}
+// ---------------------------------------------------------------------------
+// Config
+// ---------------------------------------------------------------------------
+/** The OSS/local runner posture: direct Cursor API key, no proxy, local mode. */
+export function hermeticCursorConfig(env) {
+    return {
+        taskQueue: "hermetic-test-queue",
+        temporalAddress: "localhost:7233",
+        temporalNamespace: "default",
+        stigmerBackendEndpoint: "http://localhost:7234",
+        mcpBridgeEndpoint: null,
+        stigmerToken: null,
+        cursorApiKey: FIXTURE.cursorApiKey,
+        workspaceRootDir: env.workspaceRootDir,
+        mode: "local",
+        proxyEndpoint: null,
+        maxConcurrentActivities: 1,
+        idleTimeoutSeconds: null,
+        cloudModeEnabled: false,
+        checkpointerType: "memory",
+        checkpointerProxyEndpoint: null,
+        artifactProxyEndpoint: null,
+        primaryModel: FIXTURE.model,
+        cursorStreamStallTimeoutMs: 180_000,
+        agentResolveTimeoutMs: 120_000,
+        workspaceLockTimeoutMs: 900_000,
+    };
+}
+// ---------------------------------------------------------------------------
+// The side effects the real SDK performs, for `effect` steps
+// ---------------------------------------------------------------------------
+/**
+ * The primary workspace directory a session with NO workspace entries runs in
+ * (`session-root.ts`: `<workspaceRootDir>/sessions/<sessionId>`).
+ */
+export function sessionWorkspaceDir(env) {
+    return join(env.workspaceRootDir, "sessions", FIXTURE.sessionId);
+}
+/**
+ * Run the workspace's installed preToolUse hook exactly as the Cursor SDK does:
+ * read `<workspaceRoot>/.cursor/hooks.json`, take the `preToolUse` command the
+ * gate installed (an absolute path to the runner's own stable bash script under
+ * `~/.stigmer/hitl-gate/<key>/`), and run it with the hook input on stdin. The
+ * script resolves the CURRENT turn's state file and denial ledger from the
+ * active-turn pointer, walks its parent PIDs to confirm this process is the
+ * runner, and prints `{"permission":"allow"|"deny"}`. A deny appends to the
+ * ledger the activity's stream loop reads.
+ *
+ * This is the out-of-process half of deny-and-retry, driven by the real script
+ * against the real gate the activity installed — not a simulation of either.
+ */
+export function runWorkspaceHook(workspaceRoot, hookInput) {
+    const hooksJsonPath = join(workspaceRoot, ".cursor", "hooks.json");
+    const parsed = JSON.parse(readFileSync(hooksJsonPath, "utf-8"));
+    const command = parsed.hooks?.preToolUse?.[0]?.command;
+    if (!command) {
+        throw new Error(`runWorkspaceHook: no preToolUse hook installed in ${hooksJsonPath}`);
+    }
+    const raw = execFileSync("bash", [command], { input: JSON.stringify(hookInput) }).toString();
+    const permission = raw.includes('"permission":"deny"')
+        ? "deny"
+        : raw.includes('"permission":"allow"')
+            ? "allow"
+            : "?";
+    return { permission, raw };
+}
+/**
+ * A git work tree with one committed file, for the file-review capture
+ * scenario. Author, committer and both dates are pinned so the commit AND tree
+ * object ids are byte-stable — a file-review golden may carry them.
+ */
+export function initGitWorkspace(root, files) {
+    mkdirSync(root, { recursive: true });
+    const gitEnv = {
+        ...process.env,
+        GIT_AUTHOR_NAME: "hermetic",
+        GIT_AUTHOR_EMAIL: "hermetic@stigmer.test",
+        GIT_COMMITTER_NAME: "hermetic",
+        GIT_COMMITTER_EMAIL: "hermetic@stigmer.test",
+        GIT_AUTHOR_DATE: "2026-01-01T00:00:00Z",
+        GIT_COMMITTER_DATE: "2026-01-01T00:00:00Z",
+    };
+    const git = (args) => {
+        execFileSync("git", args, { cwd: root, env: gitEnv, stdio: "ignore" });
+    };
+    git(["init", "-q", "-b", "main"]);
+    for (const [rel, content] of Object.entries(files)) {
+        const abs = join(root, rel);
+        mkdirSync(dirname(abs), { recursive: true });
+        writeFileSync(abs, content, "utf-8");
+    }
+    git(["add", "-A"]);
+    git(["commit", "-q", "-m", "initial"]);
+}
+/** A session workspace entry mounting an absolute local path (local mode only). */
+export function localPathEntry(name, path) {
+    return create(WorkspaceEntrySchema, {
+        name,
+        source: create(WorkspaceSourceSchema, {
+            source: { case: "localPath", value: create(LocalPathSourceSchema, { path }) },
+        }),
+    });
+}
+// ---------------------------------------------------------------------------
+// Running a scenario
+// ---------------------------------------------------------------------------
+/**
+ * Drop every module-level cache the harness keeps across invocations. Called
+ * at the START of a scenario, never between its invocations: a deny-and-retry
+ * scenario relies on the parked agent surviving from turn 1 into turn 2 exactly
+ * as it does in a live worker.
+ */
+export function resetCursorModuleState() {
+    _resetAgentSessionCacheForTests();
+    resetCatalogCacheForTests();
+    _resetPricingCache();
+    _resetRegistryCache();
+}
+/** Bind the record and the SDK for a scenario; resets the harness caches first. */
+export function beginCursorScenario(options) {
+    resetCursorModuleState();
+    const sdk = new ScriptedCursorSdk(options.sdk);
+    bindScriptedSdk(sdk);
+    bindHermeticClient(options.record.client());
+    return { env: options.env, clock: options.clock, record: options.record, sdk };
+}
+/**
+ * Run ONE `ExecuteCursor` invocation for the scenario. The activities are
+ * constructed per invocation (the factory constructs its client, which is the
+ * one bound at `beginCursorScenario`).
+ */
+export async function runCursorTurn(scenario, options = {}) {
+    // Imported lazily so the scenario file's `vi.mock` declarations are in
+    // force before the activity module (and, through it, `@cursor/sdk` and the
+    // client) is loaded.
+    const { createCursorActivities } = await import("../index.js");
+    const activities = createCursorActivities(hermeticCursorConfig(scenario.env));
+    // The typed wire shape the control plane's workflow sends (activity-input.ts).
+    const input = {
+        execution_id: scenario.record.executionId,
+        thread_id: options.threadId ?? "",
+        turn_seq: options.turnSeq ?? 0,
+    };
+    return runActivityHermetically(activities.ExecuteCursor, [input], {
+        taskQueue: "hermetic-test-queue",
+        onControls: options.onControls,
+    });
+}
+//# sourceMappingURL=hermetic-cursor.js.map

package/dist/activities/execute-cursor/__test-utils__/hermetic-cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermetic-cursor.js","sourceRoot":"","sources":["../../../../src/activities/execute-cursor/__test-utils__/hermetic-cursor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACL,oBAAoB,GAErB,MAAM,6DAA6D,CAAC;AACrE,OAAO,EACL,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,8DAA8D,CAAC;AACtE,OAAO,EAAE,aAAa,EAAgB,MAAM,sDAAsD,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAC1F,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,GAEtB,MAAM,4DAA4D,CAAC;AACpE,OAAO,EAAE,WAAW,EAAc,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,qDAAqD,CAAC;AACtF,OAAO,EACL,mBAAmB,GAEpB,MAAM,4DAA4D,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AACtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,4DAA4D,CAAC;AAGvG,OAAO,EACL,eAAe,EAEf,kBAAkB,EAClB,uBAAuB,GAIxB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAA2B,MAAM,mBAAmB,CAAC;AAEhG,8EAA8E;AAC9E,8DAA8D;AAC9D,8EAA8E;AAE9E,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,GAAG,EAAE,cAAc;IACnB,WAAW,EAAE,mBAAmB;IAChC,SAAS,EAAE,mBAAmB;IAC9B,eAAe,EAAE,mBAAmB;IACpC,OAAO,EAAE,mBAAmB;IAC5B,SAAS,EAAE,gBAAgB;IAC3B,wEAAwE;IACxE,KAAK,EAAE,cAAc;IACrB,YAAY,EAAE,yBAAyB;CAC/B,CAAC;AAiBX,qEAAqE;AACrE,MAAM,UAAU,qBAAqB,CAAC,OAA4B;IAChE,MAAM,SAAS,GAAmB,MAAM,CAAC,oBAAoB,EAAE;QAC7D,QAAQ,EAAE,MAAM,CAAC,yBAAyB,EAAE;YAC1C,EAAE,EAAE,OAAO,CAAC,WAAW;YACvB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,WAAW;SAC1B,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,wBAAwB,EAAE;YACrC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,KAAK;YAC/C,eAAe,EAAE,MAAM,CAAC,qBAAqB,EAAE;gBAC7C,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK;aAC9C,CAAC;SACH,CAAC;KACH,CAAC,CAAC;IACH,MAAM,OAAO,GAAY,MAAM,CAAC,aAAa,EAAE;QAC7C,QAAQ,EAAE,MAAM,CAAC,yBAAyB,EAAE;YAC1C,EAAE,EAAE,OAAO,CAAC,SAAS;YACrB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,SAAS;SACxB,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,iBAAiB,EAAE;YAC9B,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,EAAE;SACjD,CAAC;KACH,CAAC,CAAC;IACH,MAAM,aAAa,GAAkB,MAAM,CAAC,mBAAmB,EAAE;QAC/D,QAAQ,EAAE,MAAM,CAAC,yBAAyB,EAAE;YAC1C,EAAE,EAAE,OAAO,CAAC,eAAe;YAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,eAAe;SAC9B,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;KACpE,CAAC,CAAC;IACH,MAAM,KAAK,GAAU,MAAM,CAAC,WAAW,EAAE;QACvC,QAAQ,EAAE,MAAM,CAAC,yBAAyB,EAAE;YAC1C,EAAE,EAAE,OAAO,CAAC,OAAO;YACnB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,SAAS;SACxB,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,eAAe,EAAE;YAC5B,WAAW,EAAE,wBAAwB;YACrC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,qDAAqD;SAC5F,CAAC;KACH,CAAC,CAAC;IACH,OAAO,IAAI,eAAe,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,8EAA8E;AAC9E,4CAA4C;AAC5C,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,MAAM,EAAE;QACN;YACE,EAAE,EAAE,OAAO,CAAC,KAAK;YACjB,WAAW,EAAE,iCAAiC;YAC9C,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,QAAQ;YACjB,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YAC9B,OAAO,EAAE;gBACP,oBAAoB,EAAE,GAAG;gBACzB,qBAAqB,EAAE,GAAG;gBAC1B,yBAAyB,EAAE,GAAG;gBAC9B,wBAAwB,EAAE,GAAG;aAC9B;YACD,eAAe,EAAE;gBACf,IAAI,EAAE;oBACJ,oBAAoB,EAAE,GAAG;oBACzB,qBAAqB,EAAE,IAAI;oBAC3B,yBAAyB,EAAE,GAAG;oBAC9B,wBAAwB,EAAE,GAAG;iBAC9B;aACF;SACF;KACF;CACO,CAAC;AAEX,kFAAkF;AAClF,MAAM,CAAC,MAAM,WAAW,GAA6B;IACnD;QACE,EAAE,EAAE,OAAO,CAAC,KAAK;QACjB,WAAW,EAAE,cAAc;QAC3B,UAAU,EAAE;YACV,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE;YAC/D,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE;SACpE;KACF;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,KAA6B,EAAE,EAAE;QAC5C,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QACpG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,uDAAuD,GAAG,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,iBAAiB,EAAyB,CAAC;IAC/F,CAAC,CAAC,CACH,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,gBAAgB,EAAE,EAAE,CAAC;AACxD,CAAC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,GAAwB;IAC3D,OAAO;QACL,SAAS,EAAE,qBAAqB;QAChC,eAAe,EAAE,gBAAgB;QACjC,iBAAiB,EAAE,SAAS;QAC5B,sBAAsB,EAAE,uBAAuB;QAC/C,iBAAiB,EAAE,IAAI;QACvB,YAAY,EAAE,IAAI;QAClB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,IAAI,EAAE,OAAO;QACb,aAAa,EAAE,IAAI;QACnB,uBAAuB,EAAE,CAAC;QAC1B,kBAAkB,EAAE,IAAI;QACxB,gBAAgB,EAAE,KAAK;QACvB,gBAAgB,EAAE,QAAQ;QAC1B,yBAAyB,EAAE,IAAI;QAC/B,qBAAqB,EAAE,IAAI;QAC3B,YAAY,EAAE,OAAO,CAAC,KAAK;QAC3B,0BAA0B,EAAE,OAAO;QACnC,qBAAqB,EAAE,OAAO;QAC9B,sBAAsB,EAAE,OAAO;KAChC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,6DAA6D;AAC7D,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAwB;IAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAC9B,aAAqB,EACrB,SAAiB;IAEjB,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAE7D,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,qDAAqD,aAAa,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7F,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACpD,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YACpC,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,GAAG,CAAC;IACV,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAA6B;IAC1E,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG;QACb,GAAG,OAAO,CAAC,GAAG;QACd,eAAe,EAAE,UAAU;QAC3B,gBAAgB,EAAE,uBAAuB;QACzC,kBAAkB,EAAE,UAAU;QAC9B,mBAAmB,EAAE,uBAAuB;QAC5C,eAAe,EAAE,sBAAsB;QACvC,kBAAkB,EAAE,sBAAsB;KAC3C,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,IAAc,EAAQ,EAAE;QACnC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC;IACF,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC5B,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IACD,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACnB,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,IAAY;IACvD,OAAO,MAAM,CAAC,oBAAoB,EAAE;QAClC,IAAI;QACJ,MAAM,EAAE,MAAM,CAAC,qBAAqB,EAAE;YACpC,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;SAC9E,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB;IACpC,+BAA+B,EAAE,CAAC;IAClC,yBAAyB,EAAE,CAAC;IAC5B,kBAAkB,EAAE,CAAC;IACrB,mBAAmB,EAAE,CAAC;AACxB,CAAC;AAgBD,mFAAmF;AACnF,MAAM,UAAU,mBAAmB,CAAC,OAA8B;IAChE,sBAAsB,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/C,eAAe,CAAC,GAAG,CAAC,CAAC;IACrB,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;AACjF,CAAC;AAUD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAwB,EACxB,UAA6B,EAAE;IAE/B,uEAAuE;IACvE,2EAA2E;IAC3E,qBAAqB;IACrB,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,sBAAsB,CAAC,oBAAoB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,+EAA+E;IAC/E,MAAM,KAAK,GAAyB;QAClC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW;QACzC,SAAS,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;QACjC,QAAQ,EAAE,OAAO,CAAC,OAAO,IAAI,CAAC;KAC/B,CAAC;IACF,OAAO,uBAAuB,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,EAAE;QAChE,SAAS,EAAE,qBAAqB;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;AACL,CAAC"}