@tangle-network/agent-runtime 0.104.0 → 0.105.0

package/dist/{chunk-3PPVCS75.js → chunk-HNP72PNU.js}

@@ -5,10 +5,10 @@ import {
   definePersona,
   runPersonified,
   worktreeFanout
-} from "./chunk-ATDFUJYI.js";
+} from "./chunk-WRTOVNN4.js";
 import {
   createExecutorRegistry
-} from "./chunk-5HNDYWUT.js";
+} from "./chunk-XBG2W2VW.js";
 import {
   runAnalystLoop
 } from "./chunk-FD2MBMOH.js";
@@ -17,9 +17,6 @@ import {
 } from "./chunk-YEJR7IXO.js";
 
 // src/loop-runner.ts
-import {
-  selfImprove
-} from "@tangle-network/agent-eval/contract";
 var DELEGATED_LOOP_MODES = ["code", "review", "research", "audit", "self-improve"];
 function isDelegatedLoopMode(value) {
   return typeof value === "string" && DELEGATED_LOOP_MODES.includes(value);
@@ -106,9 +103,6 @@ function researchLoopRunner(o) {
     return { accepted, vetoed, rounds };
   };
 }
-function selfImproveLoopRunner(options) {
-  return async () => selfImprove(options);
-}
 function auditLoopRunner(options) {
   return async () => runAnalystLoop(options);
 }
@@ -191,9 +185,8 @@ export {
   runDelegatedLoop,
   worktreeLoopRunner,
   researchLoopRunner,
-  selfImproveLoopRunner,
   auditLoopRunner,
   runLoopRunnerCli,
   parseLoopRunnerArgv
 };
-//# sourceMappingURL=chunk-3PPVCS75.js.map
+//# sourceMappingURL=chunk-HNP72PNU.js.map

package/dist/chunk-HNP72PNU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/loop-runner.ts","../src/loop-runner-bin.ts"],"sourcesContent":["/**\n *\n * `runDelegatedLoop` — the configured delegated loop-runner.\n *\n * One typed entrypoint a worker agent (or a scheduled routine) calls to run a\n * disciplined loop in a chosen MODE, over agent-runtime's hardened engines:\n *\n *   code         → build-in-a-loop on the GENERIC recursive path (worktreeLoopRunner: author one\n *                  `AgentProfile` per harness → worktree-CLI leaves → `patchDelivered` gate)\n *   review       → caller-registered runner — a `code` runner with an approval gate over candidates\n *   research     → research-in-a-loop with valid-only KB growth (createKbGate)\n *   audit        → analyze trace/run data → findings (runAnalystLoop, caller-wired)\n *   self-improve → caller-registered `improve(profile, options)` run\n *\n * It is intentionally a thin façade: the value is that EVERY product reuses the\n * one hardened engine instead of forking delegation logic. The dispatcher owns\n * mode routing, timing, fail-loud on an unregistered mode, and a uniform result\n * shape; each mode's engine is a pre-configured runner in the registry (build it\n * with the factories below, or inject your own / a stub).\n *\n * @experimental\n */\n\nimport { runAnalystLoop } from './analyst-loop'\nimport type { RunAnalystLoopOpts, RunAnalystLoopResult } from './analyst-loop/types'\nimport { ConfigError } from './errors'\nimport { type CreateKbGateOptions, createKbGate, type FactCandidate } from './mcp/kb-gate'\nimport {\n  type AuthoredHarness,\n  type Budget,\n  createExecutorRegistry,\n  definePersona,\n  runPersonified,\n  type WinnerStrategy,\n  type WorktreeFanoutOptions,\n  type WorktreePatchArtifact,\n  worktreeFanout,\n} from './runtime'\n\n/** All valid delegated-loop mode names — used for validation and CLI surfaces. @experimental */\nexport const DELEGATED_LOOP_MODES = ['code', 'review', 'research', 'audit', 'self-improve'] as const\n\n/** @experimental */\nexport type DelegatedLoopMode = (typeof DELEGATED_LOOP_MODES)[number]\n\n/** Type guard — returns true when `value` is a valid `DelegatedLoopMode` string. @experimental */\nexport function isDelegatedLoopMode(value: unknown): value is DelegatedLoopMode {\n  return typeof value === 'string' && (DELEGATED_LOOP_MODES as readonly string[]).includes(value)\n}\n\n/** @experimental A pre-configured loop for one mode. Returns the mode's raw\n *  output; the dispatcher wraps it in a {@link DelegatedLoopResult}. */\nexport type DelegatedLoopRunner<T = unknown> = (signal: AbortSignal) => Promise<T>\n\n/** @experimental Mode → configured runner. Partial: only register the modes a\n *  given product/routine actually uses. */\nexport type DelegatedLoopRegistry = Partial<Record<DelegatedLoopMode, DelegatedLoopRunner>>\n\n/** @experimental Uniform result — never throws from a registered runner; a\n *  thrown engine becomes `{ ok: false, error }` so a routine can record + move on. */\nexport interface DelegatedLoopResult<T = unknown> {\n  mode: DelegatedLoopMode\n  ok: boolean\n  output?: T\n  error?: string\n  durationMs: number\n}\n\n/** @experimental */\nexport interface RunDelegatedLoopOptions {\n  signal?: AbortSignal\n  /** Clock override for deterministic tests. */\n  now?: () => number\n}\n\n/**\n *\n * Dispatch a configured loop by mode. Fails loud (throws `ConfigError`) when no\n * runner is registered for the mode — a routine pointed at an unwired mode is a\n * config bug, not a silent no-op. A runner that throws is captured as\n * `{ ok: false }` so unattended runs record the failure rather than crash.\n *\n * @experimental\n */\nexport async function runDelegatedLoop<T = unknown>(\n  mode: DelegatedLoopMode,\n  registry: DelegatedLoopRegistry,\n  options: RunDelegatedLoopOptions = {},\n): Promise<DelegatedLoopResult<T>> {\n  const runner = registry[mode] as DelegatedLoopRunner<T> | undefined\n  if (!runner) {\n    throw new ConfigError(\n      `runDelegatedLoop: no runner registered for mode '${mode}' (registered: ${\n        Object.keys(registry).join(', ') || 'none'\n      })`,\n    )\n  }\n  const now = options.now ?? Date.now\n  const signal = options.signal ?? new AbortController().signal\n  const start = now()\n  try {\n    const output = await runner(signal)\n    return { mode, ok: true, output, durationMs: now() - start }\n  } catch (err) {\n    return {\n      mode,\n      ok: false,\n      error: err instanceof Error ? err.message : String(err),\n      durationMs: now() - start,\n    }\n  }\n}\n\n/** @experimental Options for the local-repo `code` runner over the GENERIC recursive path. */\nexport interface WorktreeLoopRunnerOptions {\n  /** Absolute path to the local git checkout each worktree is cut from. */\n  repoRoot: string\n  /** The instruction handed to every authored harness (composed under each profile's systemPrompt). */\n  taskPrompt: string\n  /** The supervisor-authored harness profiles — one fanout item (one worktree-CLI leaf) each. */\n  harnesses: ReadonlyArray<AuthoredHarness>\n  /** Conserved budget pool bounding the fanout (equal-k holds by construction). */\n  budget: Budget\n  /** Shell command run in each worktree to derive the tests-PASS signal. */\n  testCmd?: string\n  /** Shell command run in each worktree to derive the typecheck-PASS signal. */\n  typecheckCmd?: string\n  /** Which verification signals the deliverable REQUIRES present-and-passing (default none). */\n  require?: ReadonlyArray<'tests' | 'typecheck'>\n  /** Diff-size cap (lines). */\n  maxDiffLines?: number\n  /** Literal path prefixes the patch must not touch (the secret-floor is always on regardless). */\n  forbiddenPaths?: string[]\n  /** Winner-selection strategy among gated candidates. Default `highest-score`. */\n  winnerStrategy?: WinnerStrategy\n  /** Test seams forwarded to the worktree-CLI leaves so the runner drives offline. */\n  runGit?: WorktreeFanoutOptions['runGit']\n  runHarness?: WorktreeFanoutOptions['runHarness']\n  runCommand?: WorktreeFanoutOptions['runCommand']\n}\n\n/**\n *\n * `code` mode on the GENERIC recursive path: author one `AgentProfile` per harness, run them as a\n * `worktreeFanout` (N `createWorktreeCliExecutor` leaves, each `gateOnDeliverable`) through\n * `runPersonified` on the keystone Supervisor. The sandbox-session counterpart that drives the in-box\n * harness over a `SandboxClient` is `detachedSessionDelegate` (`./mcp/delegates`); here there is no\n * `runAgentRounds` driver, no role-coupled delegate — the harness list is the fanout, the gate is\n * `patchDelivered`,\n * the winner is the shared valid-only selector (NOT `defaultSelectWinner`, whose non-valid fallback\n * would surface an ungated patch). Equal-k holds by the conserved budget pool. Returns the winning\n * patch artifact, or throws when no candidate is delivered (fail loud, never a vacuous done).\n *\n * @experimental\n */\nexport function worktreeLoopRunner(\n  options: WorktreeLoopRunnerOptions,\n): DelegatedLoopRunner<WorktreePatchArtifact> {\n  const shape = worktreeFanout<string>({\n    repoRoot: options.repoRoot,\n    taskPrompt: options.taskPrompt,\n    harnesses: options.harnesses,\n    ...(options.testCmd !== undefined ? { testCmd: options.testCmd } : {}),\n    ...(options.typecheckCmd !== undefined ? { typecheckCmd: options.typecheckCmd } : {}),\n    ...(options.require !== undefined ? { require: options.require } : {}),\n    ...(options.maxDiffLines !== undefined ? { maxDiffLines: options.maxDiffLines } : {}),\n    ...(options.forbiddenPaths !== undefined ? { forbiddenPaths: options.forbiddenPaths } : {}),\n    ...(options.winnerStrategy !== undefined ? { winnerStrategy: options.winnerStrategy } : {}),\n    ...(options.runGit ? { runGit: options.runGit } : {}),\n    ...(options.runHarness ? { runHarness: options.runHarness } : {}),\n    ...(options.runCommand ? { runCommand: options.runCommand } : {}),\n  })\n  // The persona's only role here is to carry the fanout shape onto the Supervisor; each item's\n  // executor is BYO (the gated worktree-CLI leaf), so the registry only needs to pass BYO through.\n  const persona = definePersona<WorktreePatchArtifact>({\n    name: 'worktree-coder',\n    root: { profile: { name: 'worktree-coder' }, harness: null },\n    directive: 'deliver a minimal validated patch on a fresh worktree',\n    context: { role: 'coder' },\n    executors: { registry: createExecutorRegistry() },\n  })\n  return async (signal) => {\n    const result = await runPersonified<string, WorktreePatchArtifact>({\n      persona,\n      shape,\n      task: options.taskPrompt,\n      budget: options.budget,\n      signal,\n    })\n    if (result.kind !== 'winner' || result.out.kind !== 'done') {\n      const blockers =\n        result.kind === 'winner' && result.out.kind === 'blocked'\n          ? result.out.blockers.join('; ')\n          : `supervisor settled ${result.kind}`\n      throw new Error(`worktreeLoopRunner: no delivered patch (${blockers})`)\n    }\n    return result.out.deliverable\n  }\n}\n\n/** @experimental A fact rejected at the KB gate — surfaced, never dropped. */\nexport interface VetoedFact {\n  candidate: FactCandidate\n  vetoedBy?: string\n  reason?: string\n}\n\n/** @experimental */\nexport interface ResearchLoopResult {\n  /** Facts that passed the fail-closed gate — safe to write to the KB. */\n  accepted: FactCandidate[]\n  /** Facts the gate vetoed in the final round — escalate, do not silently drop. */\n  vetoed: VetoedFact[]\n  /** Research rounds actually run. */\n  rounds: number\n}\n\n/** @experimental Options for the default `research` runner. */\nexport interface ResearchLoopRunnerOptions {\n  /**\n   * The research engine (the consumer's web/doc searcher + extractor). Called\n   * each round with the prior round's vetoes so it can re-research the gaps.\n   * Returns fact candidates carrying their grounding (`verbatimPassage` +\n   * `sourceText`).\n   */\n  research: (round: number, vetoed: VetoedFact[]) => Promise<FactCandidate[]>\n  /** Gate config (extra judges, self-artifact kinds, …). The floor is always on. */\n  gate?: CreateKbGateOptions\n  /** Max research rounds (correct-on-veto remediation). Default 1. */\n  maxRounds?: number\n}\n\n/**\n * `research` mode — research-in-a-loop with valid-only KB growth.\n *\n * Each round: research → gate every candidate (fail-closed; passage MUST be in\n * the source) → accept the clean ones → re-research the vetoed ones next round,\n * up to `maxRounds`. Vetoed facts in the final round are RETURNED (escalate,\n * never silently dropped) so the caller audits vs retries.\n *\n * @experimental\n */\nexport function researchLoopRunner(\n  o: ResearchLoopRunnerOptions,\n): DelegatedLoopRunner<ResearchLoopResult> {\n  const gate = createKbGate(o.gate)\n  const maxRounds = Math.max(1, Math.trunc(o.maxRounds ?? 1))\n  return async (signal) => {\n    const accepted: FactCandidate[] = []\n    let vetoed: VetoedFact[] = []\n    let rounds = 0\n    for (let round = 0; round < maxRounds; round += 1) {\n      if (signal.aborted) break\n      rounds += 1\n      const candidates = await o.research(round, vetoed)\n      if (candidates.length === 0) break\n      vetoed = []\n      for (const c of candidates) {\n        const v = await gate(c)\n        if (v.accepted) accepted.push(c)\n        else vetoed.push({ candidate: c, vetoedBy: v.vetoedBy, reason: v.reason })\n      }\n      if (vetoed.length === 0) break\n    }\n    return { accepted, vetoed, rounds }\n  }\n}\n\n/**\n * `audit` mode — analyst loop over captured trace/run data.\n *\n * @experimental\n */\nexport function auditLoopRunner<TProposal = unknown, TEdit = unknown>(\n  options: RunAnalystLoopOpts,\n): DelegatedLoopRunner<RunAnalystLoopResult<TProposal, TEdit>> {\n  return async () => runAnalystLoop<TProposal, TEdit>(options)\n}\n","#!/usr/bin/env node\n/**\n *\n * `agent-runtime-loop` — the schedulable entrypoint for the configured\n * delegated loop-runner. A cron job / routine / Makefile target invokes:\n *\n *   agent-runtime-loop --mode research --config ./loops.config.js\n *\n * The config module wires the registry (with full access to env / creds —\n * which is why the deps live there, not in this generic bin). It must default-\n * export a `DelegatedLoopRegistry`, or a `() => DelegatedLoopRegistry | Promise<…>`.\n * The bin runs the selected mode, prints the `DelegatedLoopResult` as JSON, and\n * exits 0 on `ok`, 1 on a recorded failure, 2 on a usage/config error.\n *\n * @experimental\n */\n\nimport {\n  DELEGATED_LOOP_MODES,\n  type DelegatedLoopMode,\n  type DelegatedLoopRegistry,\n  type DelegatedLoopResult,\n  isDelegatedLoopMode,\n  runDelegatedLoop,\n} from './loop-runner'\n\n/** @experimental Parsed CLI invocation. */\nexport interface LoopRunnerCliArgs {\n  mode: string\n  /** Loads the registry — the bin wires this from `--config`; tests inject a stub. */\n  loadRegistry: () => Promise<DelegatedLoopRegistry> | DelegatedLoopRegistry\n  now?: () => number\n}\n\n/** @experimental */\nexport interface LoopRunnerCliResult {\n  exitCode: number\n  result?: DelegatedLoopResult\n  error?: string\n}\n\n/**\n *\n * Pure CLI core (no process / argv / IO) so it's unit-testable: validate the\n * mode, load the registry, dispatch, map to an exit code (0 ok / 1 failed /\n * 2 usage). Exported for embedding in custom runners + tests.\n *\n * @experimental\n */\nexport async function runLoopRunnerCli(args: LoopRunnerCliArgs): Promise<LoopRunnerCliResult> {\n  if (!isDelegatedLoopMode(args.mode)) {\n    return {\n      exitCode: 2,\n      error: `unknown mode '${args.mode}' (expected one of: ${DELEGATED_LOOP_MODES.join(', ')})`,\n    }\n  }\n  let registry: DelegatedLoopRegistry\n  try {\n    registry = await args.loadRegistry()\n  } catch (err) {\n    return { exitCode: 2, error: `failed to load registry: ${errMsg(err)}` }\n  }\n  if (!registry[args.mode]) {\n    return {\n      exitCode: 2,\n      error: `config registers no runner for mode '${args.mode}' (registered: ${\n        Object.keys(registry).join(', ') || 'none'\n      })`,\n    }\n  }\n  // runDelegatedLoop throws only on a missing runner (guarded above); a failing\n  // engine is captured as { ok: false } → exit 1, not a crash.\n  const result = await runDelegatedLoop(args.mode as DelegatedLoopMode, registry, {\n    ...(args.now ? { now: args.now } : {}),\n  })\n  return { exitCode: result.ok ? 0 : 1, result }\n}\n\n/** Parse `--mode X --config Y` from an argv tail (`process.argv.slice(2)`). */\nexport function parseLoopRunnerArgv(argv: string[]): { mode?: string; config?: string } {\n  const out: { mode?: string; config?: string } = {}\n  for (let i = 0; i < argv.length; i += 1) {\n    const a = argv[i]\n    if (a === '--mode') out.mode = argv[++i]\n    else if (a === '--config') out.config = argv[++i]\n    else if (a?.startsWith('--mode=')) out.mode = a.slice('--mode='.length)\n    else if (a?.startsWith('--config=')) out.config = a.slice('--config='.length)\n  }\n  return out\n}\n\n/** Normalize a config module's default export → a registry. */\nfunction resolveRegistry(mod: unknown): DelegatedLoopRegistry {\n  const def = (mod as { default?: unknown })?.default ?? mod\n  const value = typeof def === 'function' ? (def as () => unknown)() : def\n  return value as DelegatedLoopRegistry\n}\n\nfunction errMsg(err: unknown): string {\n  return err instanceof Error ? err.message : String(err)\n}\n\n/** The argv → IO → exit shell. Kept thin; logic lives in `runLoopRunnerCli`. */\nasync function main(): Promise<void> {\n  const { mode, config } = parseLoopRunnerArgv(process.argv.slice(2))\n  if (!mode || !config) {\n    process.stderr.write(\n      'usage: agent-runtime-loop --mode <mode> --config <module>\\n' +\n        `  modes: ${DELEGATED_LOOP_MODES.join(' | ')}\\n` +\n        '  config: a JS/TS module default-exporting a DelegatedLoopRegistry (or a factory)\\n',\n    )\n    process.exit(2)\n  }\n  const { pathToFileURL } = await import('node:url')\n  const { resolve } = await import('node:path')\n  const cli = await runLoopRunnerCli({\n    mode,\n    loadRegistry: async () => resolveRegistry(await import(pathToFileURL(resolve(config)).href)),\n  })\n  process.stdout.write(`${JSON.stringify(cli.result ?? { error: cli.error }, null, 2)}\\n`)\n  if (cli.error) process.stderr.write(`${cli.error}\\n`)\n  process.exit(cli.exitCode)\n}\n\n// Run only when executed as the bin — never when imported for the testable\n// core, and never when bundled into a runtime that has no `process.argv`\n// (e.g. Cloudflare Workers, where `process` is a shim without `argv`). Reading\n// `process.argv[1]` directly would throw at module load there; `process.argv?.`\n// keeps the guard a no-op instead of crashing the Worker on startup.\nconst invokedScript = typeof process !== 'undefined' ? process.argv?.[1] : undefined\nif (invokedScript && /loop-runner-bin\\.(js|ts|mjs)$/.test(invokedScript)) {\n  void main()\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAwCO,IAAM,uBAAuB,CAAC,QAAQ,UAAU,YAAY,SAAS,cAAc;AAMnF,SAAS,oBAAoB,OAA4C;AAC9E,SAAO,OAAO,UAAU,YAAa,qBAA2C,SAAS,KAAK;AAChG;AAoCA,eAAsB,iBACpB,MACA,UACA,UAAmC,CAAC,GACH;AACjC,QAAM,SAAS,SAAS,IAAI;AAC5B,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR,oDAAoD,IAAI,kBACtD,OAAO,KAAK,QAAQ,EAAE,KAAK,IAAI,KAAK,MACtC;AAAA,IACF;AAAA,EACF;AACA,QAAM,MAAM,QAAQ,OAAO,KAAK;AAChC,QAAM,SAAS,QAAQ,UAAU,IAAI,gBAAgB,EAAE;AACvD,QAAM,QAAQ,IAAI;AAClB,MAAI;AACF,UAAM,SAAS,MAAM,OAAO,MAAM;AAClC,WAAO,EAAE,MAAM,IAAI,MAAM,QAAQ,YAAY,IAAI,IAAI,MAAM;AAAA,EAC7D,SAAS,KAAK;AACZ,WAAO;AAAA,MACL;AAAA,MACA,IAAI;AAAA,MACJ,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACtD,YAAY,IAAI,IAAI;AAAA,IACtB;AAAA,EACF;AACF;AA4CO,SAAS,mBACd,SAC4C;AAC5C,QAAM,QAAQ,eAAuB;AAAA,IACnC,UAAU,QAAQ;AAAA,IAClB,YAAY,QAAQ;AAAA,IACpB,WAAW,QAAQ;AAAA,IACnB,GAAI,QAAQ,YAAY,SAAY,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,IACpE,GAAI,QAAQ,iBAAiB,SAAY,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;AAAA,IACnF,GAAI,QAAQ,YAAY,SAAY,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,IACpE,GAAI,QAAQ,iBAAiB,SAAY,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;AAAA,IACnF,GAAI,QAAQ,mBAAmB,SAAY,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;AAAA,IACzF,GAAI,QAAQ,mBAAmB,SAAY,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;AAAA,IACzF,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,IACnD,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;AAAA,IAC/D,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;AAAA,EACjE,CAAC;AAGD,QAAM,UAAU,cAAqC;AAAA,IACnD,MAAM;AAAA,IACN,MAAM,EAAE,SAAS,EAAE,MAAM,iBAAiB,GAAG,SAAS,KAAK;AAAA,IAC3D,WAAW;AAAA,IACX,SAAS,EAAE,MAAM,QAAQ;AAAA,IACzB,WAAW,EAAE,UAAU,uBAAuB,EAAE;AAAA,EAClD,CAAC;AACD,SAAO,OAAO,WAAW;AACvB,UAAM,SAAS,MAAM,eAA8C;AAAA,MACjE;AAAA,MACA;AAAA,MACA,MAAM,QAAQ;AAAA,MACd,QAAQ,QAAQ;AAAA,MAChB;AAAA,IACF,CAAC;AACD,QAAI,OAAO,SAAS,YAAY,OAAO,IAAI,SAAS,QAAQ;AAC1D,YAAM,WACJ,OAAO,SAAS,YAAY,OAAO,IAAI,SAAS,YAC5C,OAAO,IAAI,SAAS,KAAK,IAAI,IAC7B,sBAAsB,OAAO,IAAI;AACvC,YAAM,IAAI,MAAM,2CAA2C,QAAQ,GAAG;AAAA,IACxE;AACA,WAAO,OAAO,IAAI;AAAA,EACpB;AACF;AA4CO,SAAS,mBACd,GACyC;AACzC,QAAM,OAAO,aAAa,EAAE,IAAI;AAChC,QAAM,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,EAAE,aAAa,CAAC,CAAC;AAC1D,SAAO,OAAO,WAAW;AACvB,UAAM,WAA4B,CAAC;AACnC,QAAI,SAAuB,CAAC;AAC5B,QAAI,SAAS;AACb,aAAS,QAAQ,GAAG,QAAQ,WAAW,SAAS,GAAG;AACjD,UAAI,OAAO,QAAS;AACpB,gBAAU;AACV,YAAM,aAAa,MAAM,EAAE,SAAS,OAAO,MAAM;AACjD,UAAI,WAAW,WAAW,EAAG;AAC7B,eAAS,CAAC;AACV,iBAAW,KAAK,YAAY;AAC1B,cAAM,IAAI,MAAM,KAAK,CAAC;AACtB,YAAI,EAAE,SAAU,UAAS,KAAK,CAAC;AAAA,YAC1B,QAAO,KAAK,EAAE,WAAW,GAAG,UAAU,EAAE,UAAU,QAAQ,EAAE,OAAO,CAAC;AAAA,MAC3E;AACA,UAAI,OAAO,WAAW,EAAG;AAAA,IAC3B;AACA,WAAO,EAAE,UAAU,QAAQ,OAAO;AAAA,EACpC;AACF;AAOO,SAAS,gBACd,SAC6D;AAC7D,SAAO,YAAY,eAAiC,OAAO;AAC7D;;;ACpOA,eAAsB,iBAAiB,MAAuD;AAC5F,MAAI,CAAC,oBAAoB,KAAK,IAAI,GAAG;AACnC,WAAO;AAAA,MACL,UAAU;AAAA,MACV,OAAO,iBAAiB,KAAK,IAAI,uBAAuB,qBAAqB,KAAK,IAAI,CAAC;AAAA,IACzF;AAAA,EACF;AACA,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,KAAK,aAAa;AAAA,EACrC,SAAS,KAAK;AACZ,WAAO,EAAE,UAAU,GAAG,OAAO,4BAA4B,OAAO,GAAG,CAAC,GAAG;AAAA,EACzE;AACA,MAAI,CAAC,SAAS,KAAK,IAAI,GAAG;AACxB,WAAO;AAAA,MACL,UAAU;AAAA,MACV,OAAO,wCAAwC,KAAK,IAAI,kBACtD,OAAO,KAAK,QAAQ,EAAE,KAAK,IAAI,KAAK,MACtC;AAAA,IACF;AAAA,EACF;AAGA,QAAM,SAAS,MAAM,iBAAiB,KAAK,MAA2B,UAAU;AAAA,IAC9E,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;AAAA,EACtC,CAAC;AACD,SAAO,EAAE,UAAU,OAAO,KAAK,IAAI,GAAG,OAAO;AAC/C;AAGO,SAAS,oBAAoB,MAAoD;AACtF,QAAM,MAA0C,CAAC;AACjD,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AACvC,UAAM,IAAI,KAAK,CAAC;AAChB,QAAI,MAAM,SAAU,KAAI,OAAO,KAAK,EAAE,CAAC;AAAA,aAC9B,MAAM,WAAY,KAAI,SAAS,KAAK,EAAE,CAAC;AAAA,aACvC,GAAG,WAAW,SAAS,EAAG,KAAI,OAAO,EAAE,MAAM,UAAU,MAAM;AAAA,aAC7D,GAAG,WAAW,WAAW,EAAG,KAAI,SAAS,EAAE,MAAM,YAAY,MAAM;AAAA,EAC9E;AACA,SAAO;AACT;AAGA,SAAS,gBAAgB,KAAqC;AAC5D,QAAM,MAAO,KAA+B,WAAW;AACvD,QAAM,QAAQ,OAAO,QAAQ,aAAc,IAAsB,IAAI;AACrE,SAAO;AACT;AAEA,SAAS,OAAO,KAAsB;AACpC,SAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACxD;AAGA,eAAe,OAAsB;AACnC,QAAM,EAAE,MAAM,OAAO,IAAI,oBAAoB,QAAQ,KAAK,MAAM,CAAC,CAAC;AAClE,MAAI,CAAC,QAAQ,CAAC,QAAQ;AACpB,YAAQ,OAAO;AAAA,MACb;AAAA,WACc,qBAAqB,KAAK,KAAK,CAAC;AAAA;AAAA;AAAA,IAEhD;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,EAAE,cAAc,IAAI,MAAM,OAAO,KAAU;AACjD,QAAM,EAAE,QAAQ,IAAI,MAAM,OAAO,MAAW;AAC5C,QAAM,MAAM,MAAM,iBAAiB;AAAA,IACjC;AAAA,IACA,cAAc,YAAY,gBAAgB,MAAM,OAAO,cAAc,QAAQ,MAAM,CAAC,EAAE,KAAK;AAAA,EAC7F,CAAC;AACD,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,IAAI,UAAU,EAAE,OAAO,IAAI,MAAM,GAAG,MAAM,CAAC,CAAC;AAAA,CAAI;AACvF,MAAI,IAAI,MAAO,SAAQ,OAAO,MAAM,GAAG,IAAI,KAAK;AAAA,CAAI;AACpD,UAAQ,KAAK,IAAI,QAAQ;AAC3B;AAOA,IAAM,gBAAgB,OAAO,YAAY,cAAc,QAAQ,OAAO,CAAC,IAAI;AAC3E,IAAI,iBAAiB,gCAAgC,KAAK,aAAa,GAAG;AACxE,OAAK,KAAK;AACZ;","names":[]}

package/dist/chunk-OPVWXJ2H.js

@@ -0,0 +1,75 @@
+// src/redact.ts
+var redactedMarker = "[redacted]";
+var secretKeyPattern = /(api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(id|token)|cookie|bearer)/i;
+var valuePatterns = [
+  // Bearer tokens.
+  /\bBearer\s+[A-Za-z0-9._\-+/=]{8,}/gi,
+  // Provider-style API keys (sk-..., sk-tan-..., pk_live_..., ghp_...).
+  /\b(?:sk|pk|rk|ak)[-_][A-Za-z0-9_-]{12,}/g,
+  /\bgh[pousr]_[A-Za-z0-9]{20,}/g,
+  // AWS access key ids.
+  /\bAKIA[0-9A-Z]{16}\b/g,
+  // PEM private-key blocks.
+  /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
+  // Email addresses.
+  /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g
+];
+var secretAssignmentPattern = /((?:"|')?(?:api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(?:id|token)|cookie|bearer)(?:"|')?\s*[:=]\s*)(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s,;}]+)/gi;
+function scrubString(input) {
+  let out = input;
+  for (const pattern of valuePatterns) {
+    out = out.replace(pattern, redactedMarker);
+  }
+  return out.replace(secretAssignmentPattern, `$1${redactedMarker}`);
+}
+function defaultRedactor(value) {
+  return walk(value, /* @__PURE__ */ new WeakSet(), 0);
+}
+var maxDepth = 32;
+function walk(value, seen, depth) {
+  if (depth > maxDepth) return "[truncated]";
+  if (typeof value === "string") return scrubString(value);
+  if (value === null || typeof value !== "object") return value;
+  if (seen.has(value)) return "[circular]";
+  seen.add(value);
+  if (Array.isArray(value)) {
+    return value.map((item) => walk(item, seen, depth + 1));
+  }
+  const out = {};
+  for (const [key, v] of Object.entries(value)) {
+    if (secretKeyPattern.test(key)) {
+      out[key] = redactedMarker;
+      continue;
+    }
+    out[key] = walk(v, seen, depth + 1);
+  }
+  return out;
+}
+function defaultRedactorIdentityMaterial() {
+  const patternIdentity = (pattern) => ({
+    source: pattern.source,
+    flags: pattern.flags
+  });
+  return {
+    marker: redactedMarker,
+    secretKeyPattern: patternIdentity(secretKeyPattern),
+    valuePatterns: valuePatterns.map(patternIdentity),
+    secretAssignmentPattern: patternIdentity(secretAssignmentPattern),
+    maxDepth,
+    scrubString: Function.prototype.toString.call(scrubString),
+    walk: Function.prototype.toString.call(walk),
+    defaultRedactor: Function.prototype.toString.call(defaultRedactor)
+  };
+}
+function resolveRedactor(redact) {
+  if (redact === false) return (value) => value;
+  if (!redact) return defaultRedactor;
+  return (value) => defaultRedactor(redact(value));
+}
+
+export {
+  defaultRedactor,
+  defaultRedactorIdentityMaterial,
+  resolveRedactor
+};
+//# sourceMappingURL=chunk-OPVWXJ2H.js.map

package/dist/chunk-OPVWXJ2H.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/redact.ts"],"sourcesContent":["/**\n *\n * Redaction for values that may leave the Runtime process. The default scrubs\n * common leak classes (API keys, bearer tokens, emails, private keys) from\n * strings and walks nested objects and arrays. A customer with domain-specific\n * PII supplies their own `redact` hook.\n *\n * This is intentionally narrower than `src/sanitize.ts` (which redacts the\n * runtime's *event envelope* field-by-field): here the value is opaque\n * customer payload, so the scrub is value-shaped, not schema-shaped.\n *\n * @experimental\n */\n\n/** A redactor maps an arbitrary trace value to a safe-to-export value. Pure;\n *  must not throw on cyclic input (the default tolerates cycles). */\nexport type Redactor = (value: unknown) => unknown\n\nconst redactedMarker = '[redacted]'\n\n/** Secret-bearing key names: when an object key matches, its value is fully\n *  replaced regardless of the value's own content. Lowercased compare. */\nconst secretKeyPattern =\n  /(api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(id|token)|cookie|bearer)/i\n\n/** In-value secret/PII patterns scrubbed from any string, regardless of key. */\nconst valuePatterns: ReadonlyArray<RegExp> = [\n  // Bearer tokens.\n  /\\bBearer\\s+[A-Za-z0-9._\\-+/=]{8,}/gi,\n  // Provider-style API keys (sk-..., sk-tan-..., pk_live_..., ghp_...).\n  /\\b(?:sk|pk|rk|ak)[-_][A-Za-z0-9_-]{12,}/g,\n  /\\bgh[pousr]_[A-Za-z0-9]{20,}/g,\n  // AWS access key ids.\n  /\\bAKIA[0-9A-Z]{16}\\b/g,\n  // PEM private-key blocks.\n  /-----BEGIN [A-Z ]*PRIVATE KEY-----[\\s\\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,\n  // Email addresses.\n  /\\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}\\b/g,\n]\n\n/** Secret assignments embedded inside an otherwise opaque string, including\n * serialized JSON and log-style `key=value` text. */\nconst secretAssignmentPattern =\n  /((?:\"|')?(?:api[-_]?key|secret|token|password|passwd|authorization|auth|private[-_]?key|credential|access[-_]?key|client[-_]?secret|session[-_]?(?:id|token)|cookie|bearer)(?:\"|')?\\s*[:=]\\s*)(?:\"(?:\\\\.|[^\"\\\\])*\"|'(?:\\\\.|[^'\\\\])*'|[^\\s,;}]+)/gi\n\n/** Scrub a single string of in-value secret/PII patterns. */\nfunction scrubString(input: string): string {\n  let out = input\n  for (const pattern of valuePatterns) {\n    out = out.replace(pattern, redactedMarker)\n  }\n  return out.replace(secretAssignmentPattern, `$1${redactedMarker}`)\n}\n\n/**\n * The built-in redactor. Walks objects and arrays; replaces values under\n * secret-bearing keys wholesale; scrubs in-value patterns from every string.\n * Cycle-safe (a seen-set short-circuits self-referential payloads to\n * `'[circular]'`), depth-bounded, and total — never throws on customer input.\n */\nexport function defaultRedactor(value: unknown): unknown {\n  return walk(value, new WeakSet(), 0)\n}\n\nconst maxDepth = 32\n\nfunction walk(value: unknown, seen: WeakSet<object>, depth: number): unknown {\n  if (depth > maxDepth) return '[truncated]'\n  if (typeof value === 'string') return scrubString(value)\n  if (value === null || typeof value !== 'object') return value\n  if (seen.has(value)) return '[circular]'\n  seen.add(value)\n\n  if (Array.isArray(value)) {\n    return value.map((item) => walk(item, seen, depth + 1))\n  }\n\n  const out: Record<string, unknown> = {}\n  for (const [key, v] of Object.entries(value as Record<string, unknown>)) {\n    if (secretKeyPattern.test(key)) {\n      out[key] = redactedMarker\n      continue\n    }\n    out[key] = walk(v, seen, depth + 1)\n  }\n  return out\n}\n\n/** Stable identity input for saved work that depends on built-in redaction behavior. */\nexport function defaultRedactorIdentityMaterial(): unknown {\n  const patternIdentity = (pattern: RegExp) => ({\n    source: pattern.source,\n    flags: pattern.flags,\n  })\n  return {\n    marker: redactedMarker,\n    secretKeyPattern: patternIdentity(secretKeyPattern),\n    valuePatterns: valuePatterns.map(patternIdentity),\n    secretAssignmentPattern: patternIdentity(secretAssignmentPattern),\n    maxDepth,\n    scrubString: Function.prototype.toString.call(scrubString),\n    walk: Function.prototype.toString.call(walk),\n    defaultRedactor: Function.prototype.toString.call(defaultRedactor),\n  }\n}\n\n/**\n * Resolve the redactor a client uses. A caller-supplied hook handles\n * domain-specific values first, then the built-in scrubber still removes\n * common credentials and email addresses. Returning `false` is the explicit\n * opt-out for already-reviewed public values.\n */\nexport function resolveRedactor(redact: Redactor | false | undefined): Redactor {\n  if (redact === false) return (value) => value\n  if (!redact) return defaultRedactor\n  return (value) => defaultRedactor(redact(value))\n}\n"],"mappings":";AAkBA,IAAM,iBAAiB;AAIvB,IAAM,mBACJ;AAGF,IAAM,gBAAuC;AAAA;AAAA,EAE3C;AAAA;AAAA,EAEA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AACF;AAIA,IAAM,0BACJ;AAGF,SAAS,YAAY,OAAuB;AAC1C,MAAI,MAAM;AACV,aAAW,WAAW,eAAe;AACnC,UAAM,IAAI,QAAQ,SAAS,cAAc;AAAA,EAC3C;AACA,SAAO,IAAI,QAAQ,yBAAyB,KAAK,cAAc,EAAE;AACnE;AAQO,SAAS,gBAAgB,OAAyB;AACvD,SAAO,KAAK,OAAO,oBAAI,QAAQ,GAAG,CAAC;AACrC;AAEA,IAAM,WAAW;AAEjB,SAAS,KAAK,OAAgB,MAAuB,OAAwB;AAC3E,MAAI,QAAQ,SAAU,QAAO;AAC7B,MAAI,OAAO,UAAU,SAAU,QAAO,YAAY,KAAK;AACvD,MAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO;AACxD,MAAI,KAAK,IAAI,KAAK,EAAG,QAAO;AAC5B,OAAK,IAAI,KAAK;AAEd,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,IAAI,CAAC,SAAS,KAAK,MAAM,MAAM,QAAQ,CAAC,CAAC;AAAA,EACxD;AAEA,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,KAAK,CAAC,KAAK,OAAO,QAAQ,KAAgC,GAAG;AACvE,QAAI,iBAAiB,KAAK,GAAG,GAAG;AAC9B,UAAI,GAAG,IAAI;AACX;AAAA,IACF;AACA,QAAI,GAAG,IAAI,KAAK,GAAG,MAAM,QAAQ,CAAC;AAAA,EACpC;AACA,SAAO;AACT;AAGO,SAAS,kCAA2C;AACzD,QAAM,kBAAkB,CAAC,aAAqB;AAAA,IAC5C,QAAQ,QAAQ;AAAA,IAChB,OAAO,QAAQ;AAAA,EACjB;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,kBAAkB,gBAAgB,gBAAgB;AAAA,IAClD,eAAe,cAAc,IAAI,eAAe;AAAA,IAChD,yBAAyB,gBAAgB,uBAAuB;AAAA,IAChE;AAAA,IACA,aAAa,SAAS,UAAU,SAAS,KAAK,WAAW;AAAA,IACzD,MAAM,SAAS,UAAU,SAAS,KAAK,IAAI;AAAA,IAC3C,iBAAiB,SAAS,UAAU,SAAS,KAAK,eAAe;AAAA,EACnE;AACF;AAQO,SAAS,gBAAgB,QAAgD;AAC9E,MAAI,WAAW,MAAO,QAAO,CAAC,UAAU;AACxC,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,CAAC,UAAU,gBAAgB,OAAO,KAAK,CAAC;AACjD;","names":[]}

package/dist/{chunk-B7K7V22Y.js → chunk-RDOAVVHY.js}

@@ -14,7 +14,7 @@ import {
   sha256Bytes,
   verifyBytes,
   verifyMaterializedWorkspace
-} from "./chunk-SBTWKPVR.js";
+} from "./chunk-WSTRQZYQ.js";
 
 // src/candidate-execution/bundle.ts
 import { agentCandidateBundleSchema } from "@tangle-network/agent-interface";
@@ -696,4 +696,4 @@ export {
   captureAgentCandidateWorkspaceFiles,
   createAgentCandidateWorkspacePort
 };
-//# sourceMappingURL=chunk-B7K7V22Y.js.map
+//# sourceMappingURL=chunk-RDOAVVHY.js.map

package/dist/{chunk-L5DST3QC.js → chunk-SMQXZGLZ.js}

@@ -348,4 +348,4 @@ export {
   readMemoryItemsFile,
   resolveMemoryFromEnv
 };
-//# sourceMappingURL=chunk-L5DST3QC.js.map
+//# sourceMappingURL=chunk-SMQXZGLZ.js.map

package/dist/chunk-SMQXZGLZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/mcp/tool-server.ts","../src/mcp/memory-server.ts"],"sourcesContent":["/**\n * `createStdioToolServer` — the generic newline-delimited JSON-RPC 2.0 MCP\n * server core: `initialize` / `notifications/initialized` / `tools/list` /\n * `tools/call` over a stdio-shaped transport, protocol 2024-11-05.\n *\n * Extracted from `createMcpServer` (server.ts) so every in-repo MCP server —\n * the delegation server, the memory server — serves the ONE wire protocol the\n * same-host client (`connectStdioMcp`, runtime/stdio-mcp-client.ts) speaks.\n * A second hand-rolled serve loop could drift from what the client expects;\n * this core makes that impossible by construction.\n *\n * @experimental\n */\n\nimport { createInterface, type Interface as ReadlineInterface } from 'node:readline'\nimport { ValidationError } from '../errors'\n\nconst PROTOCOL_VERSION = '2024-11-05'\n\n/** @experimental */\nexport interface McpToolDescriptor {\n  name: string\n  description: string\n  inputSchema: Record<string, unknown>\n  handler: (raw: unknown) => Promise<unknown>\n}\n\n/** @experimental */\nexport interface McpTransport {\n  input: NodeJS.ReadableStream\n  output: NodeJS.WritableStream\n}\n\n/** @experimental */\nexport interface JsonRpcMessage {\n  jsonrpc: '2.0'\n  id?: number | string | null\n  method: string\n  params?: unknown\n}\n\n/** @experimental */\nexport interface JsonRpcResponse {\n  jsonrpc: '2.0'\n  id: number | string | null\n  result?: unknown\n  error?: { code: number; message: string; data?: unknown }\n}\n\n/** @experimental */\nexport interface StdioToolServerOptions {\n  /** Server display name surfaced via `initialize`. */\n  serverName: string\n  /** Server version surfaced via `initialize`. */\n  serverVersion: string\n  /** The tools to serve. Duplicate names throw — a silent shadow would hide a tool. */\n  tools: readonly McpToolDescriptor[]\n}\n\n/** @experimental */\nexport interface StdioToolServer {\n  /** Tools currently registered, keyed by name. */\n  readonly tools: ReadonlyMap<string, McpToolDescriptor>\n  /** Handle a single parsed JSON-RPC message. Returns the response object (or `null` for notifications). */\n  handle(message: JsonRpcMessage): Promise<JsonRpcResponse | null>\n  /** Drive the server on a stdio-shaped transport until `stop()` is called. */\n  serve(transport?: McpTransport): Promise<void>\n  /** Stop a `serve` call. Subsequent requests are rejected. */\n  stop(): void\n}\n\n/** Build the generic stdio JSON-RPC tool server. */\nexport function createStdioToolServer(options: StdioToolServerOptions): StdioToolServer {\n  const tools = new Map<string, McpToolDescriptor>()\n  for (const tool of options.tools) {\n    if (tools.has(tool.name)) {\n      throw new ValidationError(`createStdioToolServer: duplicate tool name \"${tool.name}\"`)\n    }\n    tools.set(tool.name, tool)\n  }\n\n  let stopped = false\n  let activeReadline: ReadlineInterface | undefined\n\n  async function handle(message: JsonRpcMessage): Promise<JsonRpcResponse | null> {\n    if (stopped) {\n      return rpcError(message.id ?? null, -32099, 'server stopped')\n    }\n    if (message.method === 'initialize') {\n      return rpcResult(message.id ?? null, {\n        protocolVersion: PROTOCOL_VERSION,\n        capabilities: { tools: {} },\n        serverInfo: { name: options.serverName, version: options.serverVersion },\n      })\n    }\n    if (message.method === 'notifications/initialized') {\n      // MCP clients send this after the handshake; it has no id and expects\n      // no response.\n      return null\n    }\n    if (message.method === 'tools/list') {\n      return rpcResult(message.id ?? null, {\n        tools: [...tools.values()].map((tool) => ({\n          name: tool.name,\n          description: tool.description,\n          inputSchema: tool.inputSchema,\n        })),\n      })\n    }\n    if (message.method === 'tools/call') {\n      const params = (message.params ?? {}) as { name?: unknown; arguments?: unknown }\n      const name = typeof params.name === 'string' ? params.name : ''\n      const tool = tools.get(name)\n      if (!tool) {\n        return rpcError(message.id ?? null, -32601, `unknown tool: ${name}`)\n      }\n      try {\n        const output = await tool.handler(params.arguments ?? {})\n        return rpcResult(message.id ?? null, {\n          content: [{ type: 'text', text: JSON.stringify(output) }],\n          structuredContent: output,\n          isError: false,\n        })\n      } catch (err) {\n        const reason = err instanceof Error ? err.message : String(err)\n        const code = err instanceof TypeError || err instanceof RangeError ? -32602 : -32000\n        return rpcError(message.id ?? null, code, reason)\n      }\n    }\n    if (message.id === undefined || message.id === null) return null\n    return rpcError(message.id, -32601, `unknown method: ${message.method}`)\n  }\n\n  async function serve(transport?: McpTransport): Promise<void> {\n    const input = transport?.input ?? process.stdin\n    const output = transport?.output ?? process.stdout\n    const rl = createInterface({ input, crlfDelay: Number.POSITIVE_INFINITY })\n    activeReadline = rl\n    return new Promise<void>((resolve, reject) => {\n      rl.on('line', (line) => {\n        const trimmed = line.trim()\n        if (!trimmed) return\n        let parsed: JsonRpcMessage | undefined\n        try {\n          parsed = JSON.parse(trimmed) as JsonRpcMessage\n        } catch (err) {\n          writeResponse(output, rpcError(null, -32700, `parse error: ${(err as Error).message}`))\n          return\n        }\n        if (!parsed || parsed.jsonrpc !== '2.0' || typeof parsed.method !== 'string') {\n          writeResponse(output, rpcError(parsed?.id ?? null, -32600, 'invalid request'))\n          return\n        }\n        void handle(parsed).then((response) => {\n          if (response) writeResponse(output, response)\n        })\n      })\n      rl.on('close', () => resolve())\n      rl.on('error', (err) => reject(err))\n      if (stopped) {\n        rl.close()\n        resolve()\n      }\n    })\n  }\n\n  function stop(): void {\n    stopped = true\n    activeReadline?.close()\n    activeReadline = undefined\n  }\n\n  return { tools, handle, serve, stop }\n}\n\nfunction rpcResult(id: number | string | null, result: unknown): JsonRpcResponse {\n  return { jsonrpc: '2.0', id, result }\n}\n\nfunction rpcError(\n  id: number | string | null,\n  code: number,\n  message: string,\n  data?: unknown,\n): JsonRpcResponse {\n  return {\n    jsonrpc: '2.0',\n    id,\n    error: data === undefined ? { code, message } : { code, message, data },\n  }\n}\n\nfunction writeResponse(output: NodeJS.WritableStream, response: JsonRpcResponse): void {\n  output.write(`${JSON.stringify(response)}\\n`)\n}\n","/**\n * Memory MCP server — the LIVE serving half of the `memory` profile surface\n * (Phase 5). A curated memory (lessons distilled from prior runs) is only\n * real if the DRIVEN agent can query it mid-task; this module serves a flat\n * store of `MemoryItem` rows as `memory_search` / `memory_get` tools over the\n * ONE in-repo stdio JSON-RPC core (`createStdioToolServer`), so the exact\n * wire protocol the same-host client (`connectStdioMcp` /\n * `materializeLocalMcp`, runtime/stdio-mcp-client.ts) speaks is guaranteed by\n * construction — serve and consume cannot drift.\n *\n * Retrieval is DETERMINISTIC lexical overlap (no vectors, no LLM): a lift\n * measured with this memory mounted is attributable to the lessons\n * themselves, never to retrieval-model noise. Every\n * `memory_search` can append one JSONL row to a retrieval log (`logPath`) —\n * the per-query record an off-policy retrieval estimator (agent-knowledge's\n * `RetrievalHoldout`) consumes. agent-knowledge is NOT a dependency of this\n * repo, so the log file is the flagged cross-package seam, not an import.\n *\n * Fail-loud discipline (mirrors `materializeLocalMcp`): an EMPTY memory is\n * never served — a profile without memory simply omits the artifact, and\n * silently serving zero rows would fake the with/without ablation.\n *\n * @experimental\n */\n\nimport { appendFileSync, mkdirSync, readFileSync } from 'node:fs'\nimport { dirname } from 'node:path'\nimport type { AgentProfileMcpServer } from '@tangle-network/agent-interface'\nimport { ValidationError } from '../errors'\nimport { createStdioToolServer, type McpToolDescriptor, type StdioToolServer } from './tool-server'\n\n/** One row of agent memory: a crisp lesson/fact with provenance. */\nexport interface MemoryItem {\n  /** Stable id (content-hash by convention; see `memoryArtifactFromLessons`). */\n  id: string\n  /** The lesson itself — one imperative or observation the agent should recall. */\n  text: string\n  /** Optional retrieval tags, matched by `memory_search` alongside the text. */\n  tags?: string[]\n  /** Provenance: the finding / trace / curation pass this row came from. */\n  source?: string\n}\n\n/**\n * The `memory` artifact payload — HOW a profile's memory is stored and served:\n *\n *   - `store: 'file'` — served by the in-repo memory bin\n *     (`agent-runtime-memory-mcp`, src/mcp/memory-bin.ts): rows load from\n *     `path` (a JSON array or JSONL file of `MemoryItem`) and/or the inline\n *     `items` seed (inline wins on id collision). At least one of\n *     `path`/`items` is required.\n *   - `store: 'mcp'`  — an EXTERNAL, already-runnable MCP server that exposes\n *     the memory tools itself; `server` is required and mounts verbatim.\n *\n * `logPath` makes the served memory append one JSONL row per `memory_search`\n * — the retrieval log a holdout estimator reads (see module doc).\n */\nexport interface AgentMemorySpec {\n  store: 'file' | 'mcp'\n  /** `store:'file'` — host path to the durable row store (JSON array or JSONL). */\n  path?: string\n  /** Inline seed rows, served alongside (and winning over) `path` rows. */\n  items?: MemoryItem[]\n  /** `store:'mcp'` — the external server that already serves memory tools. */\n  server?: AgentProfileMcpServer\n  /** JSONL retrieval log: one row per `memory_search` (ts, query, k, returned). */\n  logPath?: string\n}\n\n/** Env var naming the durable row store file the memory bin loads (the\n *  `memoryMcpServer` ↔ memory-bin contract). */\nexport const MEMORY_FILE_ENV = 'AGENT_MEMORY_FILE'\n/** Env var carrying inline JSON `MemoryItem` rows (win over file rows on id). */\nexport const MEMORY_ITEMS_ENV = 'AGENT_MEMORY_ITEMS'\n/** Env var naming the JSONL retrieval log (one row per `memory_search`). */\nexport const MEMORY_LOG_ENV = 'AGENT_MEMORY_LOG'\n/** Env var overriding the served display name (default 'agent-memory'). */\nexport const MEMORY_NAME_ENV = 'AGENT_MEMORY_NAME'\n\nexport interface CreateMemoryToolServerOptions {\n  /** The rows to serve. MUST be non-empty (an empty memory is never served). */\n  items: readonly MemoryItem[]\n  /** Server display name surfaced via `initialize`. Default 'agent-memory'. */\n  serverName?: string\n  /** Server version surfaced via `initialize`. Default '0'. */\n  serverVersion?: string\n  /** Default result count for `memory_search`. Default 5. */\n  defaultK?: number\n  /** Append one JSONL row per `memory_search` (the retrieval-holdout seam). */\n  logPath?: string\n}\n\n/**\n * Build the memory MCP server: `memory_search` (lexical top-k over the rows)\n * and `memory_get` (one row by id) on the generic stdio JSON-RPC core.\n */\nexport function createMemoryToolServer(opts: CreateMemoryToolServerOptions): StdioToolServer {\n  if (opts.items.length === 0) {\n    throw new ValidationError(\n      'createMemoryToolServer: refusing to serve an EMPTY memory — a profile without memory omits the artifact; serving zero rows would fake the with/without ablation',\n    )\n  }\n  const byId = new Map<string, MemoryItem>()\n  for (const item of opts.items) {\n    if (byId.has(item.id)) {\n      throw new ValidationError(`createMemoryToolServer: duplicate memory item id '${item.id}'`)\n    }\n    byId.set(item.id, item)\n  }\n  const items = [...byId.values()]\n  const defaultK = opts.defaultK ?? 5\n  const logPath = opts.logPath\n  if (logPath) mkdirSync(dirname(logPath), { recursive: true })\n\n  const search: McpToolDescriptor = {\n    name: 'memory_search',\n    description:\n      'Search the agent memory of lessons learned from prior runs. Give what you are about to do or the problem you face; returns the top-k lessons ranked by relevance. Consult it BEFORE repeating work a prior run already learned from.',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        query: {\n          type: 'string',\n          description: 'The task/problem at hand — matched against lesson text and tags.',\n        },\n        k: { type: 'number', description: `Max results (default ${defaultK}).` },\n        tags: {\n          type: 'array',\n          items: { type: 'string' },\n          description: 'Only return items carrying at least one of these tags.',\n        },\n      },\n      required: ['query'],\n    },\n    handler: async (raw) => {\n      const args = (raw ?? {}) as { query?: unknown; k?: unknown; tags?: unknown }\n      if (typeof args.query !== 'string' || args.query.trim().length === 0) {\n        throw new TypeError('memory_search: query must be a non-empty string')\n      }\n      const k = args.k === undefined ? defaultK : Math.floor(Number(args.k))\n      if (!Number.isFinite(k) || k < 1) {\n        throw new TypeError('memory_search: k must be a positive integer')\n      }\n      let tagFilter: string[] | undefined\n      if (args.tags !== undefined) {\n        if (!Array.isArray(args.tags) || args.tags.some((t) => typeof t !== 'string')) {\n          throw new TypeError('memory_search: tags must be an array of strings')\n        }\n        tagFilter = args.tags as string[]\n      }\n      const queryTokens = tokenize(args.query)\n      const pool = tagFilter\n        ? items.filter((i) => (i.tags ?? []).some((t) => tagFilter.includes(t)))\n        : items\n      const results = pool\n        .map((item) => ({ item, score: scoreItem(queryTokens, item) }))\n        .filter((r) => r.score > 0)\n        // Highest score first; stable on ties (curation order is the tiebreak).\n        .sort((a, b) => b.score - a.score)\n        .slice(0, k)\n        .map(({ item, score }) => ({\n          id: item.id,\n          text: item.text,\n          score: Number(score.toFixed(4)),\n          ...(item.tags ? { tags: item.tags } : {}),\n          ...(item.source ? { source: item.source } : {}),\n        }))\n      if (logPath) {\n        // The retrieval log: what was asked, what came back, at what rank —\n        // exactly the per-query record an off-policy estimator needs.\n        appendFileSync(\n          logPath,\n          `${JSON.stringify({\n            ts: new Date().toISOString(),\n            query: args.query,\n            k,\n            returned: results.map((r) => ({ id: r.id, score: r.score })),\n          })}\\n`,\n        )\n      }\n      return { query: args.query, results }\n    },\n  }\n\n  const get: McpToolDescriptor = {\n    name: 'memory_get',\n    description: 'Fetch one memory item verbatim by its id (ids come from memory_search results).',\n    inputSchema: {\n      type: 'object',\n      properties: { id: { type: 'string', description: 'The memory item id.' } },\n      required: ['id'],\n    },\n    handler: async (raw) => {\n      const args = (raw ?? {}) as { id?: unknown }\n      if (typeof args.id !== 'string' || args.id.trim().length === 0) {\n        throw new TypeError('memory_get: id must be a non-empty string')\n      }\n      const item = byId.get(args.id)\n      if (!item) throw new Error(`memory_get: no memory item with id '${args.id}'`)\n      return item\n    },\n  }\n\n  return createStdioToolServer({\n    serverName: opts.serverName ?? 'agent-memory',\n    serverVersion: opts.serverVersion ?? '0',\n    tools: [search, get],\n  })\n}\n\n/** Coerce an untrusted JSON array into validated `MemoryItem` rows. */\nexport function parseMemoryItems(value: unknown, source: string): MemoryItem[] {\n  if (!Array.isArray(value)) {\n    throw new ValidationError(`${source}: expected a JSON array of memory items`)\n  }\n  return value.map((row, i) => coerceMemoryItem(row, `${source}[${i}]`))\n}\n\n/** Read a memory store file: a JSON array, or JSONL (one `MemoryItem` per line). */\nexport function readMemoryItemsFile(path: string): MemoryItem[] {\n  let raw: string\n  try {\n    raw = readFileSync(path, 'utf8')\n  } catch (err) {\n    throw new ValidationError(\n      `readMemoryItemsFile: cannot read '${path}': ${err instanceof Error ? err.message : String(err)}`,\n    )\n  }\n  const trimmed = raw.trim()\n  if (trimmed.length === 0) return []\n  if (trimmed.startsWith('[')) {\n    let parsed: unknown\n    try {\n      parsed = JSON.parse(trimmed)\n    } catch (err) {\n      throw new ValidationError(\n        `readMemoryItemsFile: '${path}' is not valid JSON: ${(err as Error).message}`,\n      )\n    }\n    return parseMemoryItems(parsed, path)\n  }\n  return trimmed\n    .split('\\n')\n    .map((line) => line.trim())\n    .filter((line) => line.length > 0)\n    .map((line, i) => {\n      let parsed: unknown\n      try {\n        parsed = JSON.parse(line)\n      } catch (err) {\n        throw new ValidationError(\n          `readMemoryItemsFile: '${path}' line ${i + 1} is not valid JSON: ${(err as Error).message}`,\n        )\n      }\n      return coerceMemoryItem(parsed, `${path}:${i + 1}`)\n    })\n}\n\n/** What the memory bin resolved from its environment. */\nexport interface ResolvedMemoryEnv {\n  items: MemoryItem[]\n  serverName?: string\n  logPath?: string\n}\n\n/**\n * Resolve the bin's memory from `AGENT_MEMORY_FILE` (durable store) and/or\n * `AGENT_MEMORY_ITEMS` (inline JSON rows; wins on id collision). Zero rows is\n * a boot FAILURE, matching the fail-closed materialization discipline.\n */\nexport function resolveMemoryFromEnv(env: Record<string, string | undefined>): ResolvedMemoryEnv {\n  const filePath = env[MEMORY_FILE_ENV]\n  const inlineRaw = env[MEMORY_ITEMS_ENV]\n  const fromFile = filePath ? readMemoryItemsFile(filePath) : []\n  let inline: MemoryItem[] = []\n  if (inlineRaw) {\n    let parsed: unknown\n    try {\n      parsed = JSON.parse(inlineRaw)\n    } catch (err) {\n      throw new ValidationError(\n        `${MEMORY_ITEMS_ENV} is not valid JSON: ${err instanceof Error ? err.message : String(err)}`,\n      )\n    }\n    inline = parseMemoryItems(parsed, MEMORY_ITEMS_ENV)\n  }\n  const byId = new Map<string, MemoryItem>()\n  for (const item of fromFile) byId.set(item.id, item)\n  for (const item of inline) byId.set(item.id, item)\n  if (byId.size === 0) {\n    throw new ValidationError(\n      `memory bin: no memory items — set ${MEMORY_FILE_ENV} and/or ${MEMORY_ITEMS_ENV}; an EMPTY memory must never be served (a profile without memory omits the artifact)`,\n    )\n  }\n  const serverName = env[MEMORY_NAME_ENV]\n  const logPath = env[MEMORY_LOG_ENV]\n  return {\n    items: [...byId.values()],\n    ...(serverName ? { serverName } : {}),\n    ...(logPath ? { logPath } : {}),\n  }\n}\n\nfunction coerceMemoryItem(row: unknown, at: string): MemoryItem {\n  if (!row || typeof row !== 'object' || Array.isArray(row)) {\n    throw new ValidationError(`${at}: memory item must be an object`)\n  }\n  const r = row as Record<string, unknown>\n  if (typeof r.id !== 'string' || r.id.trim().length === 0) {\n    throw new ValidationError(`${at}: 'id' must be a non-empty string`)\n  }\n  if (typeof r.text !== 'string' || r.text.trim().length === 0) {\n    throw new ValidationError(`${at}: 'text' must be a non-empty string`)\n  }\n  let tags: string[] | undefined\n  if (r.tags !== undefined) {\n    if (!Array.isArray(r.tags) || r.tags.some((t) => typeof t !== 'string')) {\n      throw new ValidationError(`${at}: 'tags' must be an array of strings`)\n    }\n    tags = r.tags as string[]\n  }\n  if (r.source !== undefined && typeof r.source !== 'string') {\n    throw new ValidationError(`${at}: 'source' must be a string`)\n  }\n  return {\n    id: r.id,\n    text: r.text,\n    ...(tags ? { tags } : {}),\n    ...(typeof r.source === 'string' ? { source: r.source } : {}),\n  }\n}\n\n/** Unique lowercase alphanumeric tokens of length >= 2. */\nfunction tokenize(text: string): string[] {\n  return [\n    ...new Set(\n      text\n        .toLowerCase()\n        .split(/[^a-z0-9]+/)\n        .filter((t) => t.length >= 2),\n    ),\n  ]\n}\n\n/** Fraction of query tokens present in the item's text + tags (0..1). */\nfunction scoreItem(queryTokens: readonly string[], item: MemoryItem): number {\n  if (queryTokens.length === 0) return 0\n  const hay = new Set(tokenize(`${item.text} ${(item.tags ?? []).join(' ')}`))\n  let hit = 0\n  for (const t of queryTokens) if (hay.has(t)) hit += 1\n  return hit / queryTokens.length\n}\n"],"mappings":";;;;;AAcA,SAAS,uBAA4D;AAGrE,IAAM,mBAAmB;AAuDlB,SAAS,sBAAsB,SAAkD;AACtF,QAAM,QAAQ,oBAAI,IAA+B;AACjD,aAAW,QAAQ,QAAQ,OAAO;AAChC,QAAI,MAAM,IAAI,KAAK,IAAI,GAAG;AACxB,YAAM,IAAI,gBAAgB,+CAA+C,KAAK,IAAI,GAAG;AAAA,IACvF;AACA,UAAM,IAAI,KAAK,MAAM,IAAI;AAAA,EAC3B;AAEA,MAAI,UAAU;AACd,MAAI;AAEJ,iBAAe,OAAO,SAA0D;AAC9E,QAAI,SAAS;AACX,aAAO,SAAS,QAAQ,MAAM,MAAM,QAAQ,gBAAgB;AAAA,IAC9D;AACA,QAAI,QAAQ,WAAW,cAAc;AACnC,aAAO,UAAU,QAAQ,MAAM,MAAM;AAAA,QACnC,iBAAiB;AAAA,QACjB,cAAc,EAAE,OAAO,CAAC,EAAE;AAAA,QAC1B,YAAY,EAAE,MAAM,QAAQ,YAAY,SAAS,QAAQ,cAAc;AAAA,MACzE,CAAC;AAAA,IACH;AACA,QAAI,QAAQ,WAAW,6BAA6B;AAGlD,aAAO;AAAA,IACT;AACA,QAAI,QAAQ,WAAW,cAAc;AACnC,aAAO,UAAU,QAAQ,MAAM,MAAM;AAAA,QACnC,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,CAAC,UAAU;AAAA,UACxC,MAAM,KAAK;AAAA,UACX,aAAa,KAAK;AAAA,UAClB,aAAa,KAAK;AAAA,QACpB,EAAE;AAAA,MACJ,CAAC;AAAA,IACH;AACA,QAAI,QAAQ,WAAW,cAAc;AACnC,YAAM,SAAU,QAAQ,UAAU,CAAC;AACnC,YAAM,OAAO,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAC7D,YAAM,OAAO,MAAM,IAAI,IAAI;AAC3B,UAAI,CAAC,MAAM;AACT,eAAO,SAAS,QAAQ,MAAM,MAAM,QAAQ,iBAAiB,IAAI,EAAE;AAAA,MACrE;AACA,UAAI;AACF,cAAM,SAAS,MAAM,KAAK,QAAQ,OAAO,aAAa,CAAC,CAAC;AACxD,eAAO,UAAU,QAAQ,MAAM,MAAM;AAAA,UACnC,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,UAAU,MAAM,EAAE,CAAC;AAAA,UACxD,mBAAmB;AAAA,UACnB,SAAS;AAAA,QACX,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC9D,cAAM,OAAO,eAAe,aAAa,eAAe,aAAa,SAAS;AAC9E,eAAO,SAAS,QAAQ,MAAM,MAAM,MAAM,MAAM;AAAA,MAClD;AAAA,IACF;AACA,QAAI,QAAQ,OAAO,UAAa,QAAQ,OAAO,KAAM,QAAO;AAC5D,WAAO,SAAS,QAAQ,IAAI,QAAQ,mBAAmB,QAAQ,MAAM,EAAE;AAAA,EACzE;AAEA,iBAAe,MAAM,WAAyC;AAC5D,UAAM,QAAQ,WAAW,SAAS,QAAQ;AAC1C,UAAM,SAAS,WAAW,UAAU,QAAQ;AAC5C,UAAM,KAAK,gBAAgB,EAAE,OAAO,WAAW,OAAO,kBAAkB,CAAC;AACzE,qBAAiB;AACjB,WAAO,IAAI,QAAc,CAAC,SAAS,WAAW;AAC5C,SAAG,GAAG,QAAQ,CAAC,SAAS;AACtB,cAAM,UAAU,KAAK,KAAK;AAC1B,YAAI,CAAC,QAAS;AACd,YAAI;AACJ,YAAI;AACF,mBAAS,KAAK,MAAM,OAAO;AAAA,QAC7B,SAAS,KAAK;AACZ,wBAAc,QAAQ,SAAS,MAAM,QAAQ,gBAAiB,IAAc,OAAO,EAAE,CAAC;AACtF;AAAA,QACF;AACA,YAAI,CAAC,UAAU,OAAO,YAAY,SAAS,OAAO,OAAO,WAAW,UAAU;AAC5E,wBAAc,QAAQ,SAAS,QAAQ,MAAM,MAAM,QAAQ,iBAAiB,CAAC;AAC7E;AAAA,QACF;AACA,aAAK,OAAO,MAAM,EAAE,KAAK,CAAC,aAAa;AACrC,cAAI,SAAU,eAAc,QAAQ,QAAQ;AAAA,QAC9C,CAAC;AAAA,MACH,CAAC;AACD,SAAG,GAAG,SAAS,MAAM,QAAQ,CAAC;AAC9B,SAAG,GAAG,SAAS,CAAC,QAAQ,OAAO,GAAG,CAAC;AACnC,UAAI,SAAS;AACX,WAAG,MAAM;AACT,gBAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH;AAEA,WAAS,OAAa;AACpB,cAAU;AACV,oBAAgB,MAAM;AACtB,qBAAiB;AAAA,EACnB;AAEA,SAAO,EAAE,OAAO,QAAQ,OAAO,KAAK;AACtC;AAEA,SAAS,UAAU,IAA4B,QAAkC;AAC/E,SAAO,EAAE,SAAS,OAAO,IAAI,OAAO;AACtC;AAEA,SAAS,SACP,IACA,MACA,SACA,MACiB;AACjB,SAAO;AAAA,IACL,SAAS;AAAA,IACT;AAAA,IACA,OAAO,SAAS,SAAY,EAAE,MAAM,QAAQ,IAAI,EAAE,MAAM,SAAS,KAAK;AAAA,EACxE;AACF;AAEA,SAAS,cAAc,QAA+B,UAAiC;AACrF,SAAO,MAAM,GAAG,KAAK,UAAU,QAAQ,CAAC;AAAA,CAAI;AAC9C;;;ACzKA,SAAS,gBAAgB,WAAW,oBAAoB;AACxD,SAAS,eAAe;AA6CjB,IAAM,kBAAkB;AAExB,IAAM,mBAAmB;AAEzB,IAAM,iBAAiB;AAEvB,IAAM,kBAAkB;AAmBxB,SAAS,uBAAuB,MAAsD;AAC3F,MAAI,KAAK,MAAM,WAAW,GAAG;AAC3B,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,OAAO,oBAAI,IAAwB;AACzC,aAAW,QAAQ,KAAK,OAAO;AAC7B,QAAI,KAAK,IAAI,KAAK,EAAE,GAAG;AACrB,YAAM,IAAI,gBAAgB,qDAAqD,KAAK,EAAE,GAAG;AAAA,IAC3F;AACA,SAAK,IAAI,KAAK,IAAI,IAAI;AAAA,EACxB;AACA,QAAM,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC;AAC/B,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,UAAU,KAAK;AACrB,MAAI,QAAS,WAAU,QAAQ,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AAE5D,QAAM,SAA4B;AAAA,IAChC,MAAM;AAAA,IACN,aACE;AAAA,IACF,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,OAAO;AAAA,UACL,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,QACA,GAAG,EAAE,MAAM,UAAU,aAAa,wBAAwB,QAAQ,KAAK;AAAA,QACvE,MAAM;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,MAAM,SAAS;AAAA,UACxB,aAAa;AAAA,QACf;AAAA,MACF;AAAA,MACA,UAAU,CAAC,OAAO;AAAA,IACpB;AAAA,IACA,SAAS,OAAO,QAAQ;AACtB,YAAM,OAAQ,OAAO,CAAC;AACtB,UAAI,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,KAAK,EAAE,WAAW,GAAG;AACpE,cAAM,IAAI,UAAU,iDAAiD;AAAA,MACvE;AACA,YAAM,IAAI,KAAK,MAAM,SAAY,WAAW,KAAK,MAAM,OAAO,KAAK,CAAC,CAAC;AACrE,UAAI,CAAC,OAAO,SAAS,CAAC,KAAK,IAAI,GAAG;AAChC,cAAM,IAAI,UAAU,6CAA6C;AAAA,MACnE;AACA,UAAI;AACJ,UAAI,KAAK,SAAS,QAAW;AAC3B,YAAI,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,KAAK,KAAK,KAAK,CAAC,MAAM,OAAO,MAAM,QAAQ,GAAG;AAC7E,gBAAM,IAAI,UAAU,iDAAiD;AAAA,QACvE;AACA,oBAAY,KAAK;AAAA,MACnB;AACA,YAAM,cAAc,SAAS,KAAK,KAAK;AACvC,YAAM,OAAO,YACT,MAAM,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC,MAAM,UAAU,SAAS,CAAC,CAAC,CAAC,IACrE;AACJ,YAAM,UAAU,KACb,IAAI,CAAC,UAAU,EAAE,MAAM,OAAO,UAAU,aAAa,IAAI,EAAE,EAAE,EAC7D,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAEzB,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,EAChC,MAAM,GAAG,CAAC,EACV,IAAI,CAAC,EAAE,MAAM,MAAM,OAAO;AAAA,QACzB,IAAI,KAAK;AAAA,QACT,MAAM,KAAK;AAAA,QACX,OAAO,OAAO,MAAM,QAAQ,CAAC,CAAC;AAAA,QAC9B,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,QACvC,GAAI,KAAK,SAAS,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC;AAAA,MAC/C,EAAE;AACJ,UAAI,SAAS;AAGX;AAAA,UACE;AAAA,UACA,GAAG,KAAK,UAAU;AAAA,YAChB,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,YAC3B,OAAO,KAAK;AAAA,YACZ;AAAA,YACA,UAAU,QAAQ,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,MAAM,EAAE;AAAA,UAC7D,CAAC,CAAC;AAAA;AAAA,QACJ;AAAA,MACF;AACA,aAAO,EAAE,OAAO,KAAK,OAAO,QAAQ;AAAA,IACtC;AAAA,EACF;AAEA,QAAM,MAAyB;AAAA,IAC7B,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY,EAAE,IAAI,EAAE,MAAM,UAAU,aAAa,sBAAsB,EAAE;AAAA,MACzE,UAAU,CAAC,IAAI;AAAA,IACjB;AAAA,IACA,SAAS,OAAO,QAAQ;AACtB,YAAM,OAAQ,OAAO,CAAC;AACtB,UAAI,OAAO,KAAK,OAAO,YAAY,KAAK,GAAG,KAAK,EAAE,WAAW,GAAG;AAC9D,cAAM,IAAI,UAAU,2CAA2C;AAAA,MACjE;AACA,YAAM,OAAO,KAAK,IAAI,KAAK,EAAE;AAC7B,UAAI,CAAC,KAAM,OAAM,IAAI,MAAM,uCAAuC,KAAK,EAAE,GAAG;AAC5E,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO,sBAAsB;AAAA,IAC3B,YAAY,KAAK,cAAc;AAAA,IAC/B,eAAe,KAAK,iBAAiB;AAAA,IACrC,OAAO,CAAC,QAAQ,GAAG;AAAA,EACrB,CAAC;AACH;AAGO,SAAS,iBAAiB,OAAgB,QAA8B;AAC7E,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,UAAM,IAAI,gBAAgB,GAAG,MAAM,yCAAyC;AAAA,EAC9E;AACA,SAAO,MAAM,IAAI,CAAC,KAAK,MAAM,iBAAiB,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC;AACvE;AAGO,SAAS,oBAAoB,MAA4B;AAC9D,MAAI;AACJ,MAAI;AACF,UAAM,aAAa,MAAM,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,UAAM,IAAI;AAAA,MACR,qCAAqC,IAAI,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IACjG;AAAA,EACF;AACA,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,QAAQ,WAAW,EAAG,QAAO,CAAC;AAClC,MAAI,QAAQ,WAAW,GAAG,GAAG;AAC3B,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,OAAO;AAAA,IAC7B,SAAS,KAAK;AACZ,YAAM,IAAI;AAAA,QACR,yBAAyB,IAAI,wBAAyB,IAAc,OAAO;AAAA,MAC7E;AAAA,IACF;AACA,WAAO,iBAAiB,QAAQ,IAAI;AAAA,EACtC;AACA,SAAO,QACJ,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,EAChC,IAAI,CAAC,MAAM,MAAM;AAChB,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,IAAI;AAAA,IAC1B,SAAS,KAAK;AACZ,YAAM,IAAI;AAAA,QACR,yBAAyB,IAAI,UAAU,IAAI,CAAC,uBAAwB,IAAc,OAAO;AAAA,MAC3F;AAAA,IACF;AACA,WAAO,iBAAiB,QAAQ,GAAG,IAAI,IAAI,IAAI,CAAC,EAAE;AAAA,EACpD,CAAC;AACL;AAcO,SAAS,qBAAqB,KAA4D;AAC/F,QAAM,WAAW,IAAI,eAAe;AACpC,QAAM,YAAY,IAAI,gBAAgB;AACtC,QAAM,WAAW,WAAW,oBAAoB,QAAQ,IAAI,CAAC;AAC7D,MAAI,SAAuB,CAAC;AAC5B,MAAI,WAAW;AACb,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,SAAS;AAAA,IAC/B,SAAS,KAAK;AACZ,YAAM,IAAI;AAAA,QACR,GAAG,gBAAgB,uBAAuB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,MAC5F;AAAA,IACF;AACA,aAAS,iBAAiB,QAAQ,gBAAgB;AAAA,EACpD;AACA,QAAM,OAAO,oBAAI,IAAwB;AACzC,aAAW,QAAQ,SAAU,MAAK,IAAI,KAAK,IAAI,IAAI;AACnD,aAAW,QAAQ,OAAQ,MAAK,IAAI,KAAK,IAAI,IAAI;AACjD,MAAI,KAAK,SAAS,GAAG;AACnB,UAAM,IAAI;AAAA,MACR,0CAAqC,eAAe,WAAW,gBAAgB;AAAA,IACjF;AAAA,EACF;AACA,QAAM,aAAa,IAAI,eAAe;AACtC,QAAM,UAAU,IAAI,cAAc;AAClC,SAAO;AAAA,IACL,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC;AAAA,IACxB,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,IACnC,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/B;AACF;AAEA,SAAS,iBAAiB,KAAc,IAAwB;AAC9D,MAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,GAAG;AACzD,UAAM,IAAI,gBAAgB,GAAG,EAAE,iCAAiC;AAAA,EAClE;AACA,QAAM,IAAI;AACV,MAAI,OAAO,EAAE,OAAO,YAAY,EAAE,GAAG,KAAK,EAAE,WAAW,GAAG;AACxD,UAAM,IAAI,gBAAgB,GAAG,EAAE,mCAAmC;AAAA,EACpE;AACA,MAAI,OAAO,EAAE,SAAS,YAAY,EAAE,KAAK,KAAK,EAAE,WAAW,GAAG;AAC5D,UAAM,IAAI,gBAAgB,GAAG,EAAE,qCAAqC;AAAA,EACtE;AACA,MAAI;AACJ,MAAI,EAAE,SAAS,QAAW;AACxB,QAAI,CAAC,MAAM,QAAQ,EAAE,IAAI,KAAK,EAAE,KAAK,KAAK,CAAC,MAAM,OAAO,MAAM,QAAQ,GAAG;AACvE,YAAM,IAAI,gBAAgB,GAAG,EAAE,sCAAsC;AAAA,IACvE;AACA,WAAO,EAAE;AAAA,EACX;AACA,MAAI,EAAE,WAAW,UAAa,OAAO,EAAE,WAAW,UAAU;AAC1D,UAAM,IAAI,gBAAgB,GAAG,EAAE,6BAA6B;AAAA,EAC9D;AACA,SAAO;AAAA,IACL,IAAI,EAAE;AAAA,IACN,MAAM,EAAE;AAAA,IACR,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,IACvB,GAAI,OAAO,EAAE,WAAW,WAAW,EAAE,QAAQ,EAAE,OAAO,IAAI,CAAC;AAAA,EAC7D;AACF;AAGA,SAAS,SAAS,MAAwB;AACxC,SAAO;AAAA,IACL,GAAG,IAAI;AAAA,MACL,KACG,YAAY,EACZ,MAAM,YAAY,EAClB,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC;AAAA,IAChC;AAAA,EACF;AACF;AAGA,SAAS,UAAU,aAAgC,MAA0B;AAC3E,MAAI,YAAY,WAAW,EAAG,QAAO;AACrC,QAAM,MAAM,IAAI,IAAI,SAAS,GAAG,KAAK,IAAI,KAAK,KAAK,QAAQ,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;AAC3E,MAAI,MAAM;AACV,aAAW,KAAK,YAAa,KAAI,IAAI,IAAI,CAAC,EAAG,QAAO;AACpD,SAAO,MAAM,YAAY;AAC3B;","names":[]}