@stratusagent/cli 0.11.2 → 0.11.4

package/dist/runtime.js

@@ -0,0 +1,372 @@
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
+import { randomUUID } from 'node:crypto';
+import { AgentRunner, ContributionRegistry, createRoutedMemoryStore, EventBus, SkillRegistry, ToolRegistry, missingSkillRequirements, describeToolAllowlistFinding, unmatchedToolAllowlist, } from '@stratusagent/core';
+import { createLocalCommandExecutor } from '@stratusagent/executor-local';
+import { loadPlugins } from '@stratusagent/plugins';
+import { createForgetTool, createRecallTool, createRememberTool, GATEWAY_ONLY_TOOL_NAMES, } from '@stratusagent/agents';
+import { BUILTIN_EXECUTOR_NAME, BUILTIN_MEMORY_STORE_NAME, createDemoTool, createFileCredentialResolver, createFileMemoryStore, createRuntimeProvider, defaultApiKeyEnvName, DEFAULT_STRATUS_AGENT, isSignedInRuntime, loadCredentials, loadOperatorSkills, memoryFilePath, migrateLegacyMemory, readNonEmptyString, readProcessEnv, resolveRuntimeConfig as resolveStateRuntimeConfig, withLegacyDefaultMemories, workspacesDirPath, } from '@stratusagent/state';
+import { createApprovalPolicy } from "./approvals.js";
+import { formatEvent } from "./events.js";
+import { writeLine, stringifyValue } from "./io.js";
+import { quoteShellArg } from "./prompter.js";
+import { loadServePlugins, loadServeRuntimeSelection } from "./trusted-config.js";
+/**
+ * Kept with its historical CLI signature: a parsed run command is a
+ * RuntimeSelection plus CLI-only fields the resolver ignores.
+ *
+ * Those fields are *permitted*, not required. Demanding a whole
+ * `ParsedRunCommand` made the type claim the resolver cared about
+ * `approvals`, `format`, and `events` — it reads none of them — so every
+ * caller with a selection in hand had to invent values to get past it.
+ */
+export const resolveRuntimeConfig = (command, env = {}) => resolveStateRuntimeConfig(command, env);
+/**
+ * Says, once the run is up, what an auto-discovered project config asked
+ * for and did not get. The resolver only records it — nothing is logging
+ * while a run resolves — and a persona that silently failed to apply would
+ * read as the agent ignoring its instructions rather than as the trust
+ * decision it is.
+ */
+export const warnOnUntrustedConfig = (runtime, streams, soulFlag = true) => {
+    warnOnIgnoredConfig(runtime.ignoredFromUntrustedConfig, streams, soulFlag);
+};
+/** The environment variable that names each refused key, as the resolver reads it. */
+const ENV_FOR_PROMPT_KEY = {
+    soul: 'STRATUS_SOUL',
+    systemPrompt: 'STRATUS_SYSTEM_PROMPT',
+};
+/**
+ * The way out of a refused persona, as one sentence. `--config` trusts the
+ * file; the other way is the operator's own channel for the key — the
+ * `--soul` flag where the command takes one (`run` and `chat`; `serve` and
+ * `doctor` do not, and a notice sending the operator to a flag the daemon
+ * refuses is a notice that cost a restart), the environment otherwise.
+ * Never "move the key to ~/.stratus/config.json": the project file that
+ * caused this shadows the global one in discovery, so a key moved there
+ * would go on being unset for every run started here.
+ */
+export const ignoredConfigRemedy = (ignored, soulFlag) => {
+    const environment = (keys) => `set ${keys.map((key) => ENV_FOR_PROMPT_KEY[key]).join(' / ')}`;
+    const rest = ignored.keys.filter((key) => key !== 'soul');
+    // The flag restores only the soul: when the preamble was refused too,
+    // a remedy that stopped at --soul would leave it silently unset.
+    const otherWay = soulFlag && ignored.keys.includes('soul')
+        ? (rest.length === 0 ? 'pass --soul <path>' : `pass --soul <path> and ${environment(rest)}`)
+        : environment(ignored.keys);
+    return `Run with --config ${quoteShellArg(ignored.path)} to trust that file, or ${otherWay}.`;
+};
+/** `soulFlag`: whether the command printing this takes `--soul` — see {@link ignoredConfigRemedy}. */
+export const warnOnIgnoredConfig = (ignored, streams, soulFlag = true) => {
+    if (!ignored) {
+        return;
+    }
+    const keys = ignored.keys.join(' and ');
+    writeLine(streams.stderr, `ignoring ${keys} in ${ignored.path}: what an agent is told is not a decision an auto-discovered config gets to make. `
+        + ignoredConfigRemedy(ignored, soulFlag));
+};
+/**
+ * A saved subscription sign-in silently demoted to per-token billing is the
+ * one config surprise that costs money — an API key in the environment
+ * outranks the stored credential, and the run otherwise looks identical.
+ * Detected from the resolved config: an apiKey where the stored credential
+ * is a subscription token means the environment won.
+ */
+export const warnOnCredentialOverride = async (runtime, streams, env = {}) => {
+    if (runtime.provider === 'demo') {
+        return;
+    }
+    const credentials = await loadCredentials(env);
+    const processEnv = readProcessEnv(env);
+    // The resolver records the variable that actually won — guessing it here
+    // would name the wrong one whenever a custom apiKeyEnv supplied the key,
+    // sending the reader to unset something that was never the cause.
+    const primaryOverride = isSignedInRuntime(runtime) && runtime.apiKey !== undefined
+        ? { provider: runtime.provider, envVar: runtime.apiKeyEnvVar }
+        : undefined;
+    // Both subscription sign-ins demote the same way: a Claude setup token
+    // and the codex ChatGPT marker each lose to an environment API key, and
+    // the run otherwise looks identical while billing per token.
+    for (const target of ['anthropic', 'codex']) {
+        if (credentials[target]?.type !== 'oauth_token') {
+            continue;
+        }
+        const planName = target === 'anthropic'
+            ? 'Claude subscription sign-in'
+            : 'ChatGPT (codex login) sign-in';
+        const primary = primaryOverride?.provider === target ? primaryOverride.envVar : undefined;
+        // A fallback demoted the same way costs exactly as much, and only bites
+        // once the primary is already failing — the worst moment to discover it.
+        // The fallback path consults the provider's own conventional variable.
+        const conventionalVar = defaultApiKeyEnvName(target);
+        const fallbackVar = runtime.fallback?.provider === target
+            && runtime.fallback.apiKey !== undefined
+            && readNonEmptyString(processEnv[conventionalVar]) === runtime.fallback.apiKey
+            ? conventionalVar
+            : undefined;
+        const culprit = primary ?? fallbackVar;
+        if (!culprit) {
+            continue;
+        }
+        writeLine(streams.stderr, `Warning: ${culprit} in your environment outranks the ${planName} saved by \`stratus setup\`, `
+            + `so ${primary ? 'this run is' : 'a fallback retry would be'} billed per token instead of through your plan. `
+            + 'Unset it to use the subscription, or run `stratus doctor` to see everything that is being overridden.');
+    }
+};
+// The shared wiring behind every conversational command: memory (with
+// legacy migration), tools, events, provider (with fallback), and the
+// agent the runtime resolved. run uses it for one shot; chat keeps the
+// runner alive and resumes the same session turn after turn.
+export const createAgentRuntime = async (streams, options) => {
+    const runEnv = options.env ?? {};
+    await migrateLegacyMemory(runEnv);
+    // Routed, as the daemon's is: the memory tools register before the
+    // plugins load (so a plugin cannot claim their names), and the store
+    // they hold answers per call with whichever the trusted config selected
+    // once the plugins are up.
+    const fileMemory = withLegacyDefaultMemories(createFileMemoryStore(memoryFilePath(runEnv)));
+    let selectedMemory = fileMemory;
+    const memory = createRoutedMemoryStore(() => selectedMemory);
+    const tools = new ToolRegistry();
+    tools.register(createDemoTool());
+    tools.register(createRememberTool(memory));
+    tools.register(createRecallTool(memory));
+    tools.register(createForgetTool(memory));
+    // The same skills the daemon would serve, from the same directory, for
+    // the same reason the plugins below match: a skill that routes in
+    // `stratus run` routes in `stratus serve`, and one that is broken is
+    // broken (and warned about) in both. The runner registers `skill.read`
+    // itself, gated on the soul enabling any skill.
+    const skills = new SkillRegistry();
+    await loadOperatorSkills(runEnv, skills, (line) => {
+        writeLine(streams.stderr, `Warning: ${line}`);
+    });
+    const bus = new EventBus({
+        onError: (error) => {
+            writeLine(streams.stderr, `Warning: event handler failed: ${error instanceof Error ? error.message : String(error)}`);
+        },
+    });
+    if (options.onEvent) {
+        const onEvent = options.onEvent;
+        bus.subscribe(async (event) => {
+            onEvent(event);
+        });
+    }
+    else if (options.events ?? true) {
+        bus.subscribe(async (event) => {
+            const line = formatEvent(event);
+            if (line) {
+                writeLine(streams.stdout, line);
+            }
+        });
+    }
+    // The same plugins the daemon would load, from the same trusted config,
+    // so a tool that works in `stratus run` works in `stratus serve` and a
+    // tool that is missing is missing in both. A local test that silently ran
+    // a different toolset than the daemon would be worse than no local test.
+    const pluginsConfig = await loadServePlugins(runEnv, options.configPath, (line) => {
+        writeLine(streams.stderr, `Warning: ${line}`);
+    });
+    const loadedPlugins = [];
+    const providers = new ContributionRegistry();
+    const memoryStores = new ContributionRegistry();
+    const executors = new ContributionRegistry();
+    if (Object.keys(pluginsConfig).length > 0) {
+        const result = await loadPlugins({
+            config: pluginsConfig,
+            host: {
+                resolve: (specifier) => import.meta.resolve(specifier),
+                import: (specifier) => import(__rewriteRelativeImportExtension(specifier)),
+            },
+            tools,
+            skills,
+            bus,
+            providers,
+            memory: memoryStores,
+            executors,
+            // No channel registry and no transport secrets: a local run has no
+            // channels, so a channel plugin's registration is recorded and goes
+            // nowhere, and its request for its secrets is refused with a message
+            // that says so rather than answered with an empty roster.
+            credentials: createFileCredentialResolver(runEnv),
+            workspaceRoot: workspacesDirPath(runEnv),
+        });
+        loadedPlugins.push(...result.loaded);
+        for (const failure of result.failures) {
+            writeLine(streams.stderr, `Warning: plugin ${failure.package} did not load: ${failure.reason}`);
+        }
+    }
+    // Handed back so a command can release what a plugin acquired — a browser
+    // above all. A one-shot `stratus run` that left a Chromium behind would
+    // be a leak per invocation. Defined before anything after the load can
+    // fail, because a refusal below — a selection nothing registers, a
+    // provider factory that throws — has the same plugins to release and no
+    // caller yet to release them: the callers' `finally` only begins once
+    // this returns.
+    const disposePlugins = async () => {
+        for (const plugin of loadedPlugins) {
+            try {
+                await plugin.instance.dispose?.();
+            }
+            catch (error) {
+                writeLine(streams.stderr, `Warning: plugin ${plugin.package} failed to shut down: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+    };
+    try {
+        // The same selections the daemon makes, from the same trusted keys, and
+        // the same refusal: a run that quietly fell back to the host's executor
+        // when the operator selected a sandbox would be the local test lying
+        // about what the daemon does.
+        const warnTrusted = (line) => {
+            writeLine(streams.stderr, `Warning: ${line}`);
+        };
+        const executorName = (await loadServeRuntimeSelection('executor', runEnv, options.configPath, warnTrusted)) ?? BUILTIN_EXECUTOR_NAME;
+        let executor;
+        if (executorName !== BUILTIN_EXECUTOR_NAME) {
+            const contribution = executors.get(executorName);
+            if (!contribution) {
+                throw new Error(`The config selects executor ${executorName}, which no loaded plugin registers`
+                    + (executors.names().length > 0 ? ` (registered: ${executors.names().join(', ')})` : '')
+                    + `. Enable the plugin that contributes it, or set executor to ${BUILTIN_EXECUTOR_NAME}.`);
+            }
+            executor = contribution.executor;
+        }
+        const memoryName = (await loadServeRuntimeSelection('memoryStore', runEnv, options.configPath, warnTrusted)) ?? BUILTIN_MEMORY_STORE_NAME;
+        if (memoryName !== BUILTIN_MEMORY_STORE_NAME) {
+            const contribution = memoryStores.get(memoryName);
+            if (!contribution) {
+                throw new Error(`The config selects memoryStore ${memoryName}, which no loaded plugin registers`
+                    + (memoryStores.names().length > 0 ? ` (registered: ${memoryStores.names().join(', ')})` : '')
+                    + `. Enable the plugin that contributes it, or set memoryStore to ${BUILTIN_MEMORY_STORE_NAME}.`);
+            }
+            selectedMemory = contribution.store;
+        }
+        // The Claude Code runtime executes kernel tools by calling back into the
+        // runner built just below — late-bound because the runner needs the
+        // provider first.
+        let hostedRunner;
+        const runtimeProvider = createRuntimeProvider(options.runtime, (error) => {
+            const fallback = options.runtime.provider === 'demo' ? undefined : options.runtime.fallback;
+            writeLine(streams.stderr, `Warning: the default model failed (${error instanceof Error ? error.message : String(error)}); falling back to ${fallback?.model ?? 'the fallback model'}.`);
+        }, async (session, call, context) => {
+            if (!hostedRunner) {
+                throw new Error('The Stratus runtime is not ready to execute tools yet.');
+            }
+            return hostedRunner.executeHostedToolCall(session, call, context);
+        }, options.maxTurns, undefined, providers);
+        const runner = new AgentRunner({
+            provider: runtimeProvider,
+            tools,
+            executor: executor ?? createLocalCommandExecutor(),
+            approvals: createApprovalPolicy(options.approvals ?? 'always', streams, options.env ?? {}, options.askApproval, options.approvalsDefaulted ?? false),
+            bus,
+            skills,
+            memory,
+            ...(options.maxTurns !== undefined ? { maxTurns: options.maxTurns } : {}),
+        });
+        hostedRunner = runner;
+        await runner.initialize();
+        // A soul is a full identity — without one, every provider serves the
+        // same built-in Stratus persona.
+        const agent = options.runtime.soul?.agent ?? DEFAULT_STRATUS_AGENT;
+        // The same advisory the daemon gives at roster load, from the same
+        // kernel check: a soul enabling a skill whose `requires:` its `tools:`
+        // does not cover must warn here too, or the local test stays silent
+        // about a configuration `stratus serve` flags.
+        for (const { skill, missing } of missingSkillRequirements(agent, skills)) {
+            writeLine(streams.stderr, `Warning: agent ${agent.id} enables skill ${skill.id}, which expects tools the agent is not allowed: ${missing.join(', ')}`);
+        }
+        // And the same for the tools themselves, after `initialize()` so the
+        // plugins have registered theirs: an allowlist entry naming a tool
+        // nothing provides grants nothing and says nothing, and a soul made only
+        // of those runs with no tools while its persona still talks about them.
+        const finding = unmatchedToolAllowlist(agent, tools.describe().map((tool) => tool.name), {
+            mayRegister: loadedPlugins.flatMap((plugin) => plugin.manifest.contributes.toolsDiscovered.map((declared) => declared.namespace)),
+            // A local run has no dispatcher, store, or channels, so it registers
+            // none of the daemon's tools. A soul written for `stratus serve` is
+            // not wrong for naming them here — it is in the wrong process.
+            elsewhere: GATEWAY_ONLY_TOOL_NAMES,
+        });
+        for (const line of finding ? describeToolAllowlistFinding(agent.id, finding) : []) {
+            writeLine(streams.stderr, `Warning: ${line}`);
+        }
+        // The kernel leaves this one to the host, because only the host knows
+        // which process it is not.
+        if (finding && finding.elsewhere.length > 0) {
+            writeLine(streams.stderr, `Warning: agent ${agent.id} lists ${finding.elsewhere.join(', ')}, which only the daemon provides`
+                + ' — the names are right, but stratus run cannot call them; stratus serve can');
+        }
+        // The built-in executor keeps the name it has always recorded; a
+        // contributed one records the name it registered under — on every
+        // provider's session, since where a command ran is not a question only
+        // demo runs get to answer.
+        const executorRecord = executor ? executorName : 'local-command';
+        const metadata = options.runtime.provider === 'demo'
+            ? { provider: 'demo', executor: executorRecord }
+            : {
+                provider: options.runtime.provider,
+                // A contributed provider may leave the model to its own default.
+                ...(options.runtime.model !== undefined ? { model: options.runtime.model } : {}),
+                ...(options.runtime.provider === 'openai' ? { baseUrl: options.runtime.baseUrl } : {}),
+                executor: executorRecord,
+            };
+        return { runner, agent, metadata, disposePlugins };
+    }
+    catch (error) {
+        await disposePlugins();
+        throw error;
+    }
+};
+export const runSingleLoop = async (prompt, streams, options) => {
+    const { runner, agent, metadata, disposePlugins } = await createAgentRuntime(streams, options);
+    try {
+        return await runner.run({
+            sessionId: randomUUID(),
+            agent,
+            userMessage: prompt,
+            metadata,
+        });
+    }
+    finally {
+        // Even when the run failed: a plugin that started a browser started it
+        // before the turn could fail.
+        await disposePlugins();
+    }
+};
+export const printSessionSummary = (session, streams) => {
+    writeLine(streams.stdout);
+    writeLine(streams.stdout, 'Messages');
+    for (const message of session.messages) {
+        if (message.role === 'assistant' && message.toolCalls && message.toolCalls.length > 0) {
+            const calls = message.toolCalls
+                .map((call) => `${call.toolName}(${JSON.stringify(call.input)})`)
+                .join(', ');
+            const prefix = message.content ? `${message.content} ` : '';
+            writeLine(streams.stdout, `[assistant] ${prefix}→ tool call ${calls}`);
+            continue;
+        }
+        if (message.role === 'assistant' && message.content.length === 0) {
+            // A turn nobody asked for that said nothing — see `RunInput.addressed`.
+            continue;
+        }
+        const nameSuffix = message.name ? `:${message.name}` : '';
+        const content = message.role === 'tool' ? stringifyValue(JSON.parse(message.content)) : message.content;
+        writeLine(streams.stdout, `[${message.role}${nameSuffix}] ${content}`);
+    }
+};
+export const formatRuntimeBanner = (runtime) => {
+    const soulSuffix = runtime.soul ? ` as ${runtime.soul.agent.name}` : '';
+    if (runtime.provider === 'demo') {
+        return `Starting Stratus Agent local loop with provider=demo${soulSuffix}`;
+    }
+    const fallbackSuffix = runtime.fallback ? ` fallback=${runtime.fallback.model}` : '';
+    return `Starting Stratus Agent local loop with provider=${runtime.provider} model=${runtime.model}${fallbackSuffix}${soulSuffix}`;
+};
+//# sourceMappingURL=runtime.js.map

package/dist/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":";;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,uBAAuB,EACvB,QAAQ,EACR,aAAa,EACb,YAAY,EACZ,wBAAwB,EACxB,4BAA4B,EAC5B,sBAAsB,GAWvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAqB,MAAM,uBAAuB,CAAC;AACvE,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,cAAc,EACd,4BAA4B,EAC5B,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,IAAI,yBAAyB,EACjD,yBAAyB,EACzB,iBAAiB,GAIlB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAElF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,OAAmF,EACnF,MAAsB,EAAE,EACA,EAAE,CAAC,yBAAyB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAsB,EAAE,OAAmB,EAAE,QAAQ,GAAG,IAAI,EAAQ,EAAE;IAC1G,mBAAmB,CAAC,OAAO,CAAC,0BAA0B,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC7E,CAAC,CAAC;AAEF,sFAAsF;AACtF,MAAM,kBAAkB,GAA2D;IACjF,IAAI,EAAE,cAAc;IACpB,YAAY,EAAE,uBAAuB;CACtC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAA+B,EAAE,QAAiB,EAAU,EAAE;IAChG,MAAM,WAAW,GAAG,CAAC,IAAoC,EAAU,EAAE,CACnE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;IAC1D,sEAAsE;IACtE,iEAAiE;IACjE,MAAM,QAAQ,GAAG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACxD,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,0BAA0B,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5F,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,qBAAqB,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,QAAQ,GAAG,CAAC;AAChG,CAAC,CAAC;AAEF,sGAAsG;AACtG,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,OAA2C,EAC3C,OAAmB,EACnB,QAAQ,GAAG,IAAI,EACT,EAAE;IACR,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,SAAS,CACP,OAAO,CAAC,MAAM,EACd,YAAY,IAAI,OAAO,OAAO,CAAC,IAAI,oFAAoF;UACrH,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CACzC,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAC3C,OAAsB,EACtB,OAAmB,EACnB,MAAsB,EAAE,EACT,EAAE;IACjB,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAChC,OAAO;IACT,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,yEAAyE;IACzE,yEAAyE;IACzE,kEAAkE;IAClE,MAAM,eAAe,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAChF,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE;QAC9D,CAAC,CAAC,SAAS,CAAC;IACd,uEAAuE;IACvE,wEAAwE;IACxE,6DAA6D;IAC7D,KAAK,MAAM,MAAM,IAAI,CAAC,WAAW,EAAE,OAAO,CAAU,EAAE,CAAC;QACrD,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;YAChD,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,WAAW;YACrC,CAAC,CAAC,6BAA6B;YAC/B,CAAC,CAAC,+BAA+B,CAAC;QACpC,MAAM,OAAO,GAAG,eAAe,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,wEAAwE;QACxE,yEAAyE;QACzE,uEAAuE;QACvE,MAAM,eAAe,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,QAAQ,KAAK,MAAM;eACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS;eACrC,kBAAkB,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,MAAM;YAC9E,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,OAAO,GAAG,OAAO,IAAI,WAAW,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,SAAS,CACP,OAAO,CAAC,MAAM,EACd,YAAY,OAAO,qCAAqC,QAAQ,+BAA+B;cAC7F,MAAM,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,2BAA2B,kDAAkD;cAC7G,uGAAuG,CAC1G,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,6DAA6D;AAC7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,OAAmB,EACnB,OAcC,EACD,EAAE;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;IACjC,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClC,mEAAmE;IACnE,qEAAqE;IACrE,wEAAwE;IACxE,2BAA2B;IAC3B,MAAM,UAAU,GAAG,yBAAyB,CAAC,qBAAqB,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5F,IAAI,cAAc,GAAqB,UAAU,CAAC;IAClD,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC;IAE7D,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;IACjC,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;IACjC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IACzC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEzC,uEAAuE;IACvE,kEAAkE;IAClE,qEAAqE;IACrE,uEAAuE;IACvE,gDAAgD;IAChD,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;IACnC,MAAM,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAChD,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC;QACvB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjB,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,kCAAkC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxH,CAAC;KACF,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC5B,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;QAClC,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,IAAI,EAAE,CAAC;gBACT,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,0EAA0E;IAC1E,yEAAyE;IACzE,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;QAChF,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,MAAM,aAAa,GAAmB,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAwB,CAAC;IACnE,MAAM,YAAY,GAAG,IAAI,oBAAoB,EAA2B,CAAC;IACzE,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAwB,CAAC;IACnE,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;YAC/B,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE;gBACJ,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;gBACtD,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,kCAAC,SAAS,EAAC;aACzC;YACD,KAAK;YACL,MAAM;YACN,GAAG;YACH,SAAS;YACT,MAAM,EAAE,YAAY;YACpB,SAAS;YACT,mEAAmE;YACnE,oEAAoE;YACpE,qEAAqE;YACrE,0DAA0D;YAC1D,WAAW,EAAE,4BAA4B,CAAC,MAAM,CAAC;YACjD,aAAa,EAAE,iBAAiB,CAAC,MAAM,CAAC;SACzC,CAAC,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,OAAO,CAAC,OAAO,kBAAkB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,uEAAuE;IACvE,mEAAmE;IACnE,wEAAwE;IACxE,sEAAsE;IACtE,gBAAgB;IAChB,MAAM,cAAc,GAAG,KAAK,IAAmB,EAAE;QAC/C,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACpC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,CACP,OAAO,CAAC,MAAM,EACd,mBAAmB,MAAM,CAAC,OAAO,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,wEAAwE;QACxE,wEAAwE;QACxE,qEAAqE;QACrE,8BAA8B;QAC9B,MAAM,WAAW,GAAG,CAAC,IAAY,EAAQ,EAAE;YACzC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC;QACF,MAAM,YAAY,GAAG,CAAC,MAAM,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,IAAI,qBAAqB,CAAC;QACrI,IAAI,QAA8B,CAAC;QACnC,IAAI,YAAY,KAAK,qBAAqB,EAAE,CAAC;YAC3C,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACjD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CACb,+BAA+B,YAAY,oCAAoC;sBAC7E,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;sBACtF,+DAA+D,qBAAqB,GAAG,CAC1F,CAAC;YACJ,CAAC;YACD,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC;QACnC,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,MAAM,yBAAyB,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,IAAI,yBAAyB,CAAC;QAC1I,IAAI,UAAU,KAAK,yBAAyB,EAAE,CAAC;YAC7C,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CACb,kCAAkC,UAAU,oCAAoC;sBAC9E,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;sBAC5F,kEAAkE,yBAAyB,GAAG,CACjG,CAAC;YACJ,CAAC;YACD,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC;QACtC,CAAC;QAED,yEAAyE;QACzE,oEAAoE;QACpE,kBAAkB;QAClB,IAAI,YAAqC,CAAC;QAC1C,MAAM,eAAe,GAAG,qBAAqB,CAC3C,OAAO,CAAC,OAAO,EACf,CAAC,KAAK,EAAE,EAAE;YACR,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC5F,SAAS,CACP,OAAO,CAAC,MAAM,EACd,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,QAAQ,EAAE,KAAK,IAAI,oBAAoB,GAAG,CAC7J,CAAC;QACJ,CAAC,EACD,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;YAC/B,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO,YAAY,CAAC,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC,EACD,OAAO,CAAC,QAAQ,EAChB,SAAS,EACT,SAAS,CACV,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC;YAC7B,QAAQ,EAAE,eAAe;YACzB,KAAK;YACL,QAAQ,EAAE,QAAQ,IAAI,0BAA0B,EAAE;YAClD,SAAS,EAAE,oBAAoB,CAC7B,OAAO,CAAC,SAAS,IAAI,QAAQ,EAC7B,OAAO,EACP,OAAO,CAAC,GAAG,IAAI,EAAE,EACjB,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,kBAAkB,IAAI,KAAK,CACpC;YACD,GAAG;YACH,MAAM;YACN,MAAM;YACN,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1E,CAAC,CAAC;QAEH,YAAY,GAAG,MAAM,CAAC;QACtB,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QAE1B,qEAAqE;QACrE,iCAAiC;QACjC,MAAM,KAAK,GAAoB,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,qBAAqB,CAAC;QAEpF,mEAAmE;QACnE,uEAAuE;QACvE,oEAAoE;QACpE,+CAA+C;QAC/C,KAAK,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;YACzE,SAAS,CACP,OAAO,CAAC,MAAM,EACd,kBAAkB,KAAK,CAAC,EAAE,kBAAkB,KAAK,CAAC,EAAE,mDAAmD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5H,CAAC;QACJ,CAAC;QAED,qEAAqE;QACrE,mEAAmE;QACnE,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,OAAO,GAAG,sBAAsB,CACpC,KAAK,EACL,KAAK,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EACzC;YACE,WAAW,EAAE,aAAa,CAAC,OAAO,CAChC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC9F;YACD,qEAAqE;YACrE,oEAAoE;YACpE,+DAA+D;YAC/D,SAAS,EAAE,uBAAuB;SACnC,CACF,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAClF,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,sEAAsE;QACtE,2BAA2B;QAC3B,IAAI,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,SAAS,CACP,OAAO,CAAC,MAAM,EACd,kBAAkB,KAAK,CAAC,EAAE,UAAU,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,kCAAkC;kBAC9F,6EAA6E,CAClF,CAAC;QACJ,CAAC;QAGD,iEAAiE;QACjE,kEAAkE;QAClE,uEAAuE;QACvE,2BAA2B;QAC3B,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC;QACjE,MAAM,QAAQ,GAAe,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM;YAC9D,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE;YAChD,CAAC,CAAC;gBACE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;gBAClC,iEAAiE;gBACjE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtF,QAAQ,EAAE,cAAc;aACzB,CAAC;QAEN,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,cAAc,EAAE,CAAC;QACvB,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,MAAc,EACd,OAAmB,EACnB,OASC,EACiB,EAAE;IACpB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/F,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,GAAG,CAAC;YACtB,SAAS,EAAE,UAAU,EAAE;YACvB,KAAK;YACL,WAAW,EAAE,MAAM;YACnB,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,uEAAuE;QACvE,8BAA8B;QAC9B,MAAM,cAAc,EAAE,CAAC;IACzB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAgB,EAAE,OAAmB,EAAQ,EAAE;IACjF,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAEtC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtF,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS;iBAC5B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;iBAChE,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,MAAM,eAAe,KAAK,EAAE,CAAC,CAAC;YACvE,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjE,wEAAwE;YACxE,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACrH,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,IAAI,GAAG,UAAU,KAAK,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAsB,EAAU,EAAE;IACpE,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAExE,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAChC,OAAO,uDAAuD,UAAU,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,OAAO,mDAAmD,OAAO,CAAC,QAAQ,UAAU,OAAO,CAAC,KAAK,GAAG,cAAc,GAAG,UAAU,EAAE,CAAC;AACpI,CAAC,CAAC"}

package/dist/slack.d.ts

@@ -0,0 +1,26 @@
+interface SlackIdentity {
+    botUserId?: string;
+    teamName?: string;
+    teamId?: string;
+}
+type SlackVerdict = {
+    status: 'ok';
+    identity: SlackIdentity;
+} | {
+    status: 'rejected';
+    detail: string;
+} | {
+    status: 'unreachable';
+    detail: string;
+};
+/** Verifies a bot token and reports the identity it belongs to. */
+export declare const verifySlackBotToken: (token: string, fetchImpl: typeof fetch | undefined) => Promise<SlackVerdict>;
+/**
+ * Verifies an app-level token by opening a Socket Mode URL. The URL is
+ * discarded — this only proves the token carries connections:write, which
+ * is the failure the daemon would otherwise hit at start time.
+ */
+export declare const verifySlackAppToken: (token: string, fetchImpl: typeof fetch | undefined) => Promise<SlackVerdict>;
+export declare const slackAppManifest: (agentName: string) => string;
+export {};
+//# sourceMappingURL=slack.d.ts.map

package/dist/slack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../src/slack.ts"],"names":[],"mappings":"AAMA,UAAU,aAAa;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,KAAK,YAAY,GACb;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAA;CAAE,GACzC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAiC9C,mEAAmE;AACnE,eAAO,MAAM,mBAAmB,GAAU,OAAO,MAAM,EAAE,WAAW,OAAO,KAAK,GAAG,SAAS,KAAG,OAAO,CAAC,YAAY,CAalH,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAAU,OAAO,MAAM,EAAE,WAAW,OAAO,KAAK,GAAG,SAAS,KAAG,OAAO,CAAC,YAAY,CAGlH,CAAC;AAqCF,eAAO,MAAM,gBAAgB,GAAI,WAAW,MAAM,KAAG,MAsB1C,CAAC"}

package/dist/slack.js

@@ -0,0 +1,113 @@
+// Slack verification talks to the Web API over plain fetch rather than
+// through @stratusagent/channel-slack. Setup must stay usable before that
+// optional package is installed, and the CLI deliberately does not depend
+// on it (or on the ~9 MB of Slack SDKs underneath).
+const SLACK_API_ROOT = 'https://slack.com/api';
+const callSlack = async (method, token, fetchImpl) => {
+    if (typeof fetchImpl !== 'function') {
+        return { ok: false, verdict: { status: 'unreachable', detail: 'fetch is unavailable' } };
+    }
+    try {
+        const response = await fetchImpl(`${SLACK_API_ROOT}/${method}`, {
+            method: 'POST',
+            headers: {
+                authorization: `Bearer ${token}`,
+                'content-type': 'application/x-www-form-urlencoded',
+            },
+        });
+        if (!response.ok) {
+            return { ok: false, verdict: { status: 'unreachable', detail: `HTTP ${response.status}` } };
+        }
+        const body = await response.json();
+        if (body.ok === true) {
+            return { ok: true, body };
+        }
+        // Slack answers 200 with { ok: false, error } for bad credentials, so
+        // the error string — not the status — is what condemns a token.
+        return { ok: false, verdict: { status: 'rejected', detail: String(body.error ?? 'unknown error') } };
+    }
+    catch (error) {
+        return { ok: false, verdict: { status: 'unreachable', detail: error instanceof Error ? error.message : String(error) } };
+    }
+};
+/** Verifies a bot token and reports the identity it belongs to. */
+export const verifySlackBotToken = async (token, fetchImpl) => {
+    const result = await callSlack('auth.test', token, fetchImpl);
+    if (!result.ok) {
+        return result.verdict;
+    }
+    return {
+        status: 'ok',
+        identity: {
+            ...(typeof result.body.user_id === 'string' ? { botUserId: result.body.user_id } : {}),
+            ...(typeof result.body.team === 'string' ? { teamName: result.body.team } : {}),
+            ...(typeof result.body.team_id === 'string' ? { teamId: result.body.team_id } : {}),
+        },
+    };
+};
+/**
+ * Verifies an app-level token by opening a Socket Mode URL. The URL is
+ * discarded — this only proves the token carries connections:write, which
+ * is the failure the daemon would otherwise hit at start time.
+ */
+export const verifySlackAppToken = async (token, fetchImpl) => {
+    const result = await callSlack('apps.connections.open', token, fetchImpl);
+    return result.ok ? { status: 'ok', identity: {} } : result.verdict;
+};
+// Scopes and events the adapter needs. Kept in step with the manifest
+// shipped by @stratusagent/channel-slack (a test pins them together) so
+// setup can hand over a ready-to-paste manifest without depending on that
+// package being installed.
+const SLACK_BOT_SCOPES = [
+    'app_mentions:read',
+    // The history family is what lets an agent stay in a conversation it was
+    // brought into: without it Slack delivers only mentions, and a reply in
+    // the agent's own thread never reaches it. It is the workspace's switch
+    // for that — an app installed without these scopes answers mentions and
+    // nothing else, exactly as it always did.
+    'channels:history',
+    // The conversations read family backs outbound destination validation
+    // (conversations.info): whether a channel a schedule wants to report to
+    // exists, and whether this app is a member of it.
+    'channels:read',
+    'chat:write',
+    // What lets an agent be shown a screenshot: file bytes sit behind an
+    // authenticated URL that answers a token without this scope with a
+    // sign-in page. An app installed without it still hears about the
+    // attachment, by name, and is told it cannot open it.
+    'files:read',
+    'files:write',
+    'groups:history',
+    'groups:read',
+    'im:history',
+    'im:read',
+    'im:write',
+    'mpim:history',
+    'mpim:read',
+    'users:read',
+];
+const SLACK_BOT_EVENTS = ['app_mention', 'message.channels', 'message.groups', 'message.im', 'message.mpim'];
+export const slackAppManifest = (agentName) => JSON.stringify({
+    display_information: {
+        name: agentName,
+        description: 'A Stratus agent',
+        background_color: '#1a1d21',
+    },
+    features: {
+        bot_user: { display_name: agentName, always_online: true },
+    },
+    oauth_config: { scopes: { bot: SLACK_BOT_SCOPES } },
+    settings: {
+        event_subscriptions: { bot_events: SLACK_BOT_EVENTS },
+        // Required for remote approval: Allow / Always allow / Deny arrive as
+        // block_actions, and Slack delivers none of them to an app that has
+        // interactivity switched off. Enabled unconditionally rather than per
+        // mode — an app is created once, and discovering months later that the
+        // buttons do nothing means editing the manifest and reinstalling.
+        interactivity: { is_enabled: true },
+        org_deploy_enabled: false,
+        socket_mode_enabled: true,
+        token_rotation_enabled: false,
+    },
+}, null, 2);
+//# sourceMappingURL=slack.js.map

package/dist/slack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.js","sourceRoot":"","sources":["../src/slack.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,0EAA0E;AAC1E,0EAA0E;AAC1E,oDAAoD;AACpD,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAa/C,MAAM,SAAS,GAAG,KAAK,EACrB,MAAc,EACd,KAAa,EACb,SAAmC,EAC0D,EAAE;IAC/F,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,cAAc,IAAI,MAAM,EAAE,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,cAAc,EAAE,mCAAmC;aACpD;SACF,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;QAC9F,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA6B,CAAC;QAC9D,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;QACD,sEAAsE;QACtE,gEAAgE;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,eAAe,CAAC,EAAE,EAAE,CAAC;IACvG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IAC3H,CAAC;AACH,CAAC,CAAC;AAEF,mEAAmE;AACnE,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,KAAa,EAAE,SAAmC,EAAyB,EAAE;IACrH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IACD,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE;YACR,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpF;KACF,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,KAAa,EAAE,SAAmC,EAAyB,EAAE;IACrH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,uBAAuB,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AACrE,CAAC,CAAC;AAEF,sEAAsE;AACtE,wEAAwE;AACxE,0EAA0E;AAC1E,2BAA2B;AAC3B,MAAM,gBAAgB,GAAG;IACvB,mBAAmB;IACnB,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,0CAA0C;IAC1C,kBAAkB;IAClB,sEAAsE;IACtE,wEAAwE;IACxE,kDAAkD;IAClD,eAAe;IACf,YAAY;IACZ,qEAAqE;IACrE,mEAAmE;IACnE,kEAAkE;IAClE,sDAAsD;IACtD,YAAY;IACZ,aAAa;IACb,gBAAgB;IAChB,aAAa;IACb,YAAY;IACZ,SAAS;IACT,UAAU;IACV,cAAc;IACd,WAAW;IACX,YAAY;CACb,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,aAAa,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;AAE7G,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;IAC5E,mBAAmB,EAAE;QACnB,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,iBAAiB;QAC9B,gBAAgB,EAAE,SAAS;KAC5B;IACD,QAAQ,EAAE;QACR,QAAQ,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE;KAC3D;IACD,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE;IACnD,QAAQ,EAAE;QACR,mBAAmB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;QACrD,sEAAsE;QACtE,oEAAoE;QACpE,sEAAsE;QACtE,uEAAuE;QACvE,kEAAkE;QAClE,aAAa,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;QACnC,kBAAkB,EAAE,KAAK;QACzB,mBAAmB,EAAE,IAAI;QACzB,sBAAsB,EAAE,KAAK;KAC9B;CACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC"}

package/dist/source.d.ts

@@ -0,0 +1,24 @@
+import type { CliEnvironment } from './environment.ts';
+/**
+ * What a `skill add` source string means, in order: a directory on this
+ * machine, a GitHub `owner/repo` shorthand, or a URL git can clone. The
+ * shorthand is the form skills.sh and its CLI print, so a skill published
+ * there installs by the name its listing shows.
+ */
+export declare const resolveSource: (source: string, env: CliEnvironment, what: "skill" | "template") => Promise<{
+    kind: "local";
+    directory: string;
+} | {
+    kind: "git";
+    url: string;
+}>;
+/**
+ * A source URL safe to print: userinfo stripped. A token travels in exactly
+ * this position (`https://user:token@host/repo.git`), stdout is commonly
+ * retained in CI logs, and git's own stderr already redacts — only the
+ * unredacted URL is handed to git itself.
+ */
+export declare const redactedSourceUrl: (url: string) => string;
+/** Shallow-clone a source repository. Git owns every transport we would otherwise re-implement. */
+export declare const cloneSource: (url: string, destination: string) => Promise<void>;
+//# sourceMappingURL=source.d.ts.map

package/dist/source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../src/source.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEvD;;;;;GAKG;AACH,eAAO,MAAM,aAAa,GACxB,QAAQ,MAAM,EACd,KAAK,cAAc,EACnB,MAAM,OAAO,GAAG,UAAU,KACzB,OAAO,CAAC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAsB7E,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAAI,KAAK,MAAM,KAAG,MAa/C,CAAC;AAEF,mGAAmG;AACnG,eAAO,MAAM,WAAW,GAAU,KAAK,MAAM,EAAE,aAAa,MAAM,KAAG,OAAO,CAAC,IAAI,CAuBhF,CAAC"}