@tangle-network/agent-runtime 0.104.0 → 0.106.0

package/dist/chunk-B7K7V22Y.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/candidate-execution/bundle.ts","../src/candidate-execution/workspace-archive.ts"],"sourcesContent":["import type { AgentCandidateBundle } from '@tangle-network/agent-interface'\nimport { agentCandidateBundleSchema } from '@tangle-network/agent-interface'\n\nimport { canonicalCandidateDigest, immutableCandidateValue, omitTopLevelDigest } from './digest'\n\n/** Exact candidate wire shape before the runtime computes its canonical digest. */\nexport type AgentCandidateBundleInput = Omit<AgentCandidateBundle, 'digest'>\n\n/** Validate and content-address a candidate bundle before it crosses an approval boundary. */\nexport function sealAgentCandidateBundle(input: AgentCandidateBundleInput): AgentCandidateBundle {\n  const digest = canonicalCandidateDigest(input)\n  const parsed = agentCandidateBundleSchema.parse({ ...input, digest })\n  const parsedDigest = canonicalCandidateDigest(omitTopLevelDigest(parsed))\n  if (parsedDigest !== digest) {\n    throw new Error('candidate bundle changed while validating its canonical wire shape')\n  }\n  return immutableCandidateValue(parsed)\n}\n","import { randomUUID } from 'node:crypto'\nimport { constants as fsConstants } from 'node:fs'\nimport {\n  lstat,\n  mkdir,\n  mkdtemp,\n  open,\n  readdir,\n  readFile,\n  realpath,\n  rename,\n  rm,\n  writeFile,\n} from 'node:fs/promises'\nimport { tmpdir } from 'node:os'\nimport { dirname, isAbsolute, join, resolve, sep, win32 } from 'node:path'\nimport { isAnyArrayBuffer, isSharedArrayBuffer } from 'node:util/types'\n\nimport type {\n  AgentCandidateCapturedArtifact,\n  AgentCandidateWorkspaceSnapshotEvidence,\n} from '@tangle-network/agent-interface'\nimport { type Entry, extract, type Pack, pack } from 'tar-stream'\n\nimport {\n  candidateWorkspaceManifest,\n  captureMaterializedWorkspace,\n  verifyBytes,\n  verifyMaterializedWorkspace,\n} from './artifacts'\nimport {\n  canonicalCandidateBytes,\n  canonicalCandidateDigest,\n  deepFreezeCandidate,\n  embeddedCandidateArtifact,\n  sha256Bytes,\n} from './digest'\nimport {\n  assertNoGitIndirection,\n  readCandidateGitTreeFiles,\n  runCandidateGit,\n} from './git-materialize'\nimport { persistCandidateOutputArtifact } from './output-artifacts'\nimport type {\n  AgentCandidateExecutorWorkspaceFile,\n  AgentCandidateOutputArtifactPort,\n  AgentCandidateWorkspacePort,\n} from './types'\n\nconst archiveKind = 'agent-candidate-workspace-archive' as const\nconst workspaceEntryPrefix = 'workspace/'\nconst repositoryMetadataEntry = 'metadata/repository.json'\nconst repositoryBundleEntry = 'metadata/repository.bundle'\nconst fixedTarTime = new Date(0)\n\nexport interface AgentCandidateWorkspaceArchiveLimits {\n  maxArchiveBytes: number\n  maxEmbeddedArtifactBytes: number\n  maxFiles: number\n  maxFileBytes: number\n  maxTotalFileBytes: number\n  maxPathBytes: number\n  maxRepositoryBundleBytes: number\n}\n\nconst defaultLimits: AgentCandidateWorkspaceArchiveLimits = Object.freeze({\n  maxArchiveBytes: 512 * 1024 * 1024,\n  maxEmbeddedArtifactBytes: 1024 * 1024,\n  maxFiles: 50_000,\n  maxFileBytes: 128 * 1024 * 1024,\n  maxTotalFileBytes: 256 * 1024 * 1024,\n  maxPathBytes: 4_096,\n  maxRepositoryBundleBytes: 128 * 1024 * 1024,\n})\n\ninterface WorkspaceArchiveRepository {\n  headCommit: string\n  headTree: string\n  bundle: {\n    sha256: `sha256:${string}`\n    byteLength: number\n    bytes: Uint8Array\n  }\n}\n\ninterface WorkspaceArchiveRepositoryMetadata {\n  kind: typeof archiveKind\n  headCommit: string\n  headTree: string\n  bundle: {\n    sha256: `sha256:${string}`\n    byteLength: number\n  }\n}\n\ninterface DecodedWorkspaceArchive {\n  files: Array<{ path: string; mode: number; bytes: Uint8Array }>\n  repository?: WorkspaceArchiveRepository\n}\n\nexport interface CaptureAgentCandidateWorkspaceOptions {\n  /** Include Git HEAD so task preparation can prove its exact commit and tree. */\n  includeRepository?: boolean\n  limits?: Partial<AgentCandidateWorkspaceArchiveLimits>\n  /** Use the evaluator-owned artifact store when manifest or archive bytes should not be embedded. */\n  artifactPersistence?: {\n    executionId: string\n    outputArtifacts: AgentCandidateOutputArtifactPort\n    signal?: AbortSignal\n  }\n}\n\nexport interface CreateAgentCandidateWorkspacePortOptions {\n  limits?: Partial<AgentCandidateWorkspaceArchiveLimits>\n}\n\nexport interface CapturedAgentCandidateWorkspace {\n  readonly snapshot: AgentCandidateWorkspaceSnapshotEvidence\n  /** Caller-owned bytes accepted by createAgentCandidateWorkspacePort. */\n  readonly archive: Uint8Array\n}\n\n/** Capture one exact regular-file workspace for immutable candidate execution. */\nexport async function captureAgentCandidateWorkspace(\n  rootInput: string,\n  options: CaptureAgentCandidateWorkspaceOptions = {},\n): Promise<CapturedAgentCandidateWorkspace> {\n  const root = resolve(rootInput)\n  const limits = workspaceLimits(options.limits)\n  const captured = options.includeRepository\n    ? await captureRepository(root, limits)\n    : await captureMaterializedWorkspace(root, {\n        limits: {\n          maxFiles: limits.maxFiles,\n          maxFileBytes: limits.maxFileBytes,\n          maxTotalFileBytes: limits.maxTotalFileBytes,\n        },\n      })\n  assertWorkspaceFilesWithinLimits(captured.files, limits)\n  const repository = 'repository' in captured ? captured.repository : undefined\n  return captureWorkspaceFiles(captured.files, repository, limits, options.artifactPersistence)\n}\n\n/** Capture detached files returned by a remote executor into the standard archive. */\nexport async function captureAgentCandidateWorkspaceFiles(\n  input: readonly AgentCandidateExecutorWorkspaceFile[],\n  options: Omit<CaptureAgentCandidateWorkspaceOptions, 'includeRepository'> = {},\n): Promise<CapturedAgentCandidateWorkspace> {\n  const limits = workspaceLimits(options.limits)\n  return captureWorkspaceFiles(\n    normalizeWorkspaceFiles(input, limits),\n    undefined,\n    limits,\n    options.artifactPersistence,\n  )\n}\n\nasync function captureWorkspaceFiles(\n  files: readonly AgentCandidateExecutorWorkspaceFile[],\n  repository: WorkspaceArchiveRepository | undefined,\n  limits: AgentCandidateWorkspaceArchiveLimits,\n  artifactPersistence: CaptureAgentCandidateWorkspaceOptions['artifactPersistence'],\n): Promise<CapturedAgentCandidateWorkspace> {\n  const material = candidateWorkspaceManifest(files)\n  const manifest = canonicalCandidateBytes(material)\n  const archive = await encodeWorkspaceArchive(files, repository, limits.maxArchiveBytes)\n  if (\n    !artifactPersistence &&\n    (manifest.byteLength > limits.maxEmbeddedArtifactBytes ||\n      archive.byteLength > limits.maxEmbeddedArtifactBytes)\n  ) {\n    throw new Error(\n      'candidate workspace artifacts exceed maxEmbeddedArtifactBytes; artifactPersistence is required',\n    )\n  }\n  const manifestArtifact = await captureWorkspaceArtifact('manifest', manifest, artifactPersistence)\n  const archiveArtifact = await captureWorkspaceArtifact('archive', archive, artifactPersistence)\n  const snapshot = deepFreezeCandidate({\n    kind: 'agent-candidate-workspace-snapshot',\n    digest: canonicalCandidateDigest(material),\n    material,\n    manifest: manifestArtifact,\n    archive: archiveArtifact,\n  } satisfies AgentCandidateWorkspaceSnapshotEvidence)\n  return Object.freeze({ snapshot, archive })\n}\n\nasync function captureWorkspaceArtifact(\n  kind: 'manifest' | 'archive',\n  bytes: Uint8Array,\n  persistence: CaptureAgentCandidateWorkspaceOptions['artifactPersistence'],\n): Promise<AgentCandidateCapturedArtifact> {\n  if (!persistence) return embeddedCandidateArtifact(bytes)\n  if (!persistence.executionId.trim()) {\n    throw new Error('candidate workspace artifact persistence requires an executionId')\n  }\n  return persistCandidateOutputArtifact(persistence.outputArtifacts, {\n    executionId: persistence.executionId,\n    purpose: kind === 'manifest' ? 'candidate-workspace-manifest' : 'candidate-workspace-archive',\n    bytes,\n    ...(persistence.signal ? { signal: persistence.signal } : {}),\n  })\n}\n\n/** Create the standard bounded materializer for candidate execution ports. */\nexport function createAgentCandidateWorkspacePort(\n  options: CreateAgentCandidateWorkspacePortOptions = {},\n): AgentCandidateWorkspacePort {\n  const limits = workspaceLimits(options.limits)\n  const port: AgentCandidateWorkspacePort = {\n    materialize: async ({ role, snapshot, archive, destination }) => {\n      await materializeAgentCandidateWorkspace({\n        role,\n        snapshot,\n        archive,\n        destination,\n        limits,\n      })\n    },\n  }\n  return Object.freeze(port)\n}\n\nasync function materializeAgentCandidateWorkspace(input: {\n  role: 'task' | 'candidate' | 'knowledge' | 'memory'\n  snapshot: AgentCandidateWorkspaceSnapshotEvidence\n  archive: Uint8Array\n  destination: string\n  limits: AgentCandidateWorkspaceArchiveLimits\n}): Promise<void> {\n  verifyBytes(\n    input.archive,\n    input.snapshot.archive.sha256,\n    input.snapshot.archive.byteLength,\n    'candidate workspace archive',\n  )\n  const decoded = await parseWorkspaceArchive(input.archive, input.limits)\n  if (decoded.repository && input.role !== 'task') {\n    throw new Error('only task workspaces may carry a Git repository')\n  }\n  assertArchiveMatchesSnapshot(decoded.files, input.snapshot)\n  const destination = resolve(input.destination)\n  await prepareEmptyDestination(destination)\n  const staging = await mkdtemp(`${destination}.materializing-`)\n  try {\n    await writeWorkspaceFiles(staging, decoded.files)\n    if (decoded.repository) {\n      await materializeRepository(decoded.repository, staging)\n    }\n    await verifyMaterializedWorkspace(staging, input.snapshot.material, {\n      ignoredProtectedRootEntries: decoded.repository ? ['.git'] : [],\n    })\n    await rename(staging, destination)\n  } catch (error) {\n    await rm(staging, { recursive: true, force: true })\n    await rm(destination, { recursive: true, force: true })\n    throw error\n  }\n}\n\nasync function captureRepository(\n  root: string,\n  limits: AgentCandidateWorkspaceArchiveLimits,\n): Promise<{\n  files: Array<{ path: string; mode: number; bytes: Uint8Array }>\n  repository: WorkspaceArchiveRepository\n}> {\n  const stats = await lstat(root)\n  if (!stats.isDirectory() || stats.isSymbolicLink() || (await realpath(root)) !== root) {\n    throw new Error('candidate repository root must be a real directory')\n  }\n  const topLevel = (await runCandidateGit(root, ['rev-parse', '--show-toplevel'])).stdout\n    .toString('utf8')\n    .trim()\n  if (resolve(topLevel) !== root) {\n    throw new Error('candidate repository capture must start at the Git worktree root')\n  }\n  const gitDir = resolve(\n    (await runCandidateGit(root, ['rev-parse', '--absolute-git-dir'])).stdout\n      .toString('utf8')\n      .trim(),\n  )\n  if ((await realpath(gitDir)) !== gitDir || gitDir.includes(':')) {\n    throw new Error('candidate repository Git object store has an unsupported path')\n  }\n  await assertNoGitIndirection(root, gitDir, 'candidate repository')\n  const headCommit = (await runCandidateGit(root, ['rev-parse', 'HEAD'])).stdout\n    .toString('utf8')\n    .trim()\n  const headTree = (await runCandidateGit(root, ['rev-parse', 'HEAD^{tree}'])).stdout\n    .toString('utf8')\n    .trim()\n  assertGitObjectId(headCommit, 'HEAD')\n  assertGitObjectId(headTree, 'HEAD tree')\n  if (headCommit.length !== headTree.length) {\n    throw new Error('candidate repository HEAD and tree use different object formats')\n  }\n  const files = await readCandidateGitTreeFiles(root, headTree, {}, limits)\n  assertWorkspaceFilesWithinLimits(files, limits)\n  const reachableBytesText = (\n    await runCandidateGit(root, ['rev-list', '--disk-usage', '--objects', 'HEAD'])\n  ).stdout\n    .toString('utf8')\n    .trim()\n  const reachableBytes = Number(reachableBytesText)\n  if (!Number.isSafeInteger(reachableBytes) || reachableBytes < 0) {\n    throw new Error('candidate repository reachable size is invalid')\n  }\n  if (reachableBytes > limits.maxRepositoryBundleBytes) {\n    throw new Error('candidate repository exceeds maxRepositoryBundleBytes')\n  }\n  const temporary = await mkdtemp(join(tmpdir(), 'agent-candidate-workspace-bundle-'))\n  const bundlePath = join(temporary, `${randomUUID()}.bundle`)\n  try {\n    await runCandidateGit(root, ['bundle', 'create', bundlePath, 'HEAD'])\n    const bundle = Uint8Array.from(await readFile(bundlePath))\n    if (bundle.byteLength > limits.maxRepositoryBundleBytes) {\n      throw new Error('candidate repository bundle exceeds maxRepositoryBundleBytes')\n    }\n    return {\n      files,\n      repository: {\n        headCommit,\n        headTree,\n        bundle: {\n          sha256: sha256Bytes(bundle),\n          byteLength: bundle.byteLength,\n          bytes: bundle,\n        },\n      },\n    }\n  } finally {\n    await rm(temporary, { recursive: true, force: true })\n  }\n}\n\nasync function encodeWorkspaceArchive(\n  files: ReadonlyArray<{ path: string; mode: number; bytes: Uint8Array }>,\n  repository: WorkspaceArchiveRepository | undefined,\n  maxArchiveBytes: number,\n): Promise<Uint8Array> {\n  const archive = pack()\n  const output = collectStream(archive, maxArchiveBytes, 'candidate workspace archive')\n  try {\n    await writeWorkspaceArchiveEntries(archive, files, repository)\n    archive.finalize()\n    return await output\n  } catch (error) {\n    archive.destroy(error instanceof Error ? error : new Error(String(error)))\n    await output.catch(() => undefined)\n    throw error\n  }\n}\n\nasync function verifyCanonicalWorkspaceArchive(\n  files: ReadonlyArray<{ path: string; mode: number; bytes: Uint8Array }>,\n  repository: WorkspaceArchiveRepository | undefined,\n  expected: Uint8Array,\n  maxArchiveBytes: number,\n): Promise<void> {\n  const archive = pack()\n  const comparison = streamEqualsBytes(\n    archive,\n    expected,\n    maxArchiveBytes,\n    'candidate workspace archive',\n  )\n  try {\n    await writeWorkspaceArchiveEntries(archive, files, repository)\n    archive.finalize()\n    if (!(await comparison)) throw new Error('candidate workspace tar is not canonical')\n  } catch (error) {\n    archive.destroy(error instanceof Error ? error : new Error(String(error)))\n    await comparison.catch(() => undefined)\n    throw error\n  }\n}\n\nasync function writeWorkspaceArchiveEntries(\n  archive: Pack,\n  files: ReadonlyArray<{ path: string; mode: number; bytes: Uint8Array }>,\n  repository: WorkspaceArchiveRepository | undefined,\n): Promise<void> {\n  for (const file of files) {\n    await writeTarEntry(archive, `${workspaceEntryPrefix}${file.path}`, file.mode, file.bytes)\n  }\n  if (!repository) return\n  const metadata = canonicalCandidateBytes({\n    kind: archiveKind,\n    headCommit: repository.headCommit,\n    headTree: repository.headTree,\n    bundle: {\n      sha256: repository.bundle.sha256,\n      byteLength: repository.bundle.byteLength,\n    },\n  } satisfies WorkspaceArchiveRepositoryMetadata)\n  await writeTarEntry(archive, repositoryMetadataEntry, 0o600, metadata)\n  await writeTarEntry(archive, repositoryBundleEntry, 0o600, repository.bundle.bytes)\n}\n\nasync function parseWorkspaceArchive(\n  bytes: Uint8Array,\n  limits: AgentCandidateWorkspaceArchiveLimits,\n): Promise<DecodedWorkspaceArchive> {\n  if (bytes.byteLength > limits.maxArchiveBytes) {\n    throw new Error('candidate workspace archive exceeds maxArchiveBytes')\n  }\n  const parser = extract()\n  const files: DecodedWorkspaceArchive['files'] = []\n  const observedEntryNames = new Set<string>()\n  const observedPaths = new Set<string>()\n  let totalBytes = 0\n  let retainedEntryBytes = 0\n  let previousPath: string | undefined\n  let repositoryMetadata: WorkspaceArchiveRepositoryMetadata | undefined\n  let repositoryBundle: Uint8Array | undefined\n  const decoded = (async () => {\n    for await (const entry of parser) {\n      const name = entry.header.name\n      if (\n        entry.header.type !== 'file' ||\n        typeof name !== 'string' ||\n        observedEntryNames.has(name)\n      ) {\n        throw new Error('candidate workspace tar contains an invalid entry')\n      }\n      observedEntryNames.add(name)\n      if (name.startsWith(workspaceEntryPrefix)) {\n        if (files.length >= limits.maxFiles) {\n          throw new Error('candidate workspace archive has an invalid file count')\n        }\n        const path = safeArchivePath(name.slice(workspaceEntryPrefix.length), limits.maxPathBytes)\n        if (!isWorkspaceFileMode(entry.header.mode)) {\n          throw new Error(`candidate workspace archive has an unsupported mode: ${path}`)\n        }\n        assertRetainedArchiveSize(bytes.byteLength, retainedEntryBytes, entry.header.size, limits)\n        const fileBytes = await readTarEntry(entry, limits.maxFileBytes, `workspace file ${path}`)\n        retainedEntryBytes += fileBytes.byteLength\n        assertWorkspacePathOrder(\n          path,\n          previousPath,\n          observedPaths,\n          'candidate workspace archive paths must be unique and sorted',\n        )\n        previousPath = path\n        if (fileBytes.byteLength > limits.maxTotalFileBytes - totalBytes) {\n          throw new Error('candidate workspace archive exceeds maxTotalFileBytes')\n        }\n        totalBytes += fileBytes.byteLength\n        files.push({ path, mode: entry.header.mode, bytes: fileBytes })\n      } else if (name === repositoryMetadataEntry) {\n        if (entry.header.mode !== 0o600 || repositoryMetadata) {\n          throw new Error('candidate workspace archive repository metadata is invalid')\n        }\n        assertRetainedArchiveSize(bytes.byteLength, retainedEntryBytes, entry.header.size, limits)\n        const metadataBytes = await readTarEntry(\n          entry,\n          limits.maxPathBytes,\n          'candidate repository metadata',\n        )\n        retainedEntryBytes += metadataBytes.byteLength\n        repositoryMetadata = parseRepositoryMetadata(metadataBytes, limits.maxRepositoryBundleBytes)\n      } else if (name === repositoryBundleEntry) {\n        if (entry.header.mode !== 0o600 || repositoryBundle) {\n          throw new Error('candidate workspace archive repository bundle is invalid')\n        }\n        assertRetainedArchiveSize(bytes.byteLength, retainedEntryBytes, entry.header.size, limits)\n        repositoryBundle = await readTarEntry(\n          entry,\n          limits.maxRepositoryBundleBytes,\n          'candidate Git bundle',\n        )\n        retainedEntryBytes += repositoryBundle.byteLength\n      } else {\n        throw new Error(`candidate workspace tar contains an unsupported entry: ${name}`)\n      }\n    }\n    if (Boolean(repositoryMetadata) !== Boolean(repositoryBundle)) {\n      throw new Error('candidate workspace archive repository evidence is incomplete')\n    }\n    const repository =\n      repositoryMetadata && repositoryBundle\n        ? repositoryFromTar(repositoryMetadata, repositoryBundle)\n        : undefined\n    return { files, ...(repository ? { repository } : {}) }\n  })()\n  parser.end(Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength))\n  const result = await decoded\n  await verifyCanonicalWorkspaceArchive(\n    result.files,\n    result.repository,\n    bytes,\n    limits.maxArchiveBytes,\n  )\n  return result\n}\n\nfunction assertRetainedArchiveSize(\n  archiveBytes: number,\n  retainedEntryBytes: number,\n  entryBytes: number | undefined,\n  limits: AgentCandidateWorkspaceArchiveLimits,\n): void {\n  if (\n    !Number.isSafeInteger(entryBytes) ||\n    entryBytes === undefined ||\n    entryBytes < 0 ||\n    entryBytes > limits.maxArchiveBytes - archiveBytes - retainedEntryBytes\n  ) {\n    throw new Error('candidate workspace archive exceeds maxArchiveBytes while decoding')\n  }\n}\n\nfunction parseRepositoryMetadata(\n  bytes: Uint8Array,\n  maxBundleBytes: number,\n): WorkspaceArchiveRepositoryMetadata {\n  let value: unknown\n  try {\n    value = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(bytes))\n  } catch (error) {\n    throw new Error('candidate workspace archive repository metadata is invalid', { cause: error })\n  }\n  if (\n    !isRecord(value) ||\n    Object.keys(value).sort().join(',') !== 'bundle,headCommit,headTree,kind' ||\n    value.kind !== archiveKind ||\n    typeof value.headCommit !== 'string' ||\n    typeof value.headTree !== 'string' ||\n    !isRecord(value.bundle) ||\n    Object.keys(value.bundle).sort().join(',') !== 'byteLength,sha256' ||\n    typeof value.bundle.sha256 !== 'string' ||\n    !/^sha256:[a-f0-9]{64}$/.test(value.bundle.sha256) ||\n    !Number.isSafeInteger(value.bundle.byteLength) ||\n    (value.bundle.byteLength as number) <= 0 ||\n    (value.bundle.byteLength as number) > maxBundleBytes\n  ) {\n    throw new Error('candidate workspace archive repository is invalid')\n  }\n  if (!Buffer.from(canonicalCandidateBytes(value)).equals(Buffer.from(bytes))) {\n    throw new Error('candidate workspace archive repository metadata is not canonical')\n  }\n  assertGitObjectId(value.headCommit, 'repository HEAD')\n  assertGitObjectId(value.headTree, 'repository HEAD tree')\n  if (value.headCommit.length !== value.headTree.length) {\n    throw new Error('candidate repository HEAD and tree use different object formats')\n  }\n  return {\n    kind: archiveKind,\n    headCommit: value.headCommit,\n    headTree: value.headTree,\n    bundle: {\n      sha256: value.bundle.sha256 as `sha256:${string}`,\n      byteLength: value.bundle.byteLength as number,\n    },\n  }\n}\n\nfunction repositoryFromTar(\n  metadata: WorkspaceArchiveRepositoryMetadata,\n  bundle: Uint8Array,\n): WorkspaceArchiveRepository {\n  verifyBytes(bundle, metadata.bundle.sha256, metadata.bundle.byteLength, 'candidate Git bundle')\n  return {\n    headCommit: metadata.headCommit,\n    headTree: metadata.headTree,\n    bundle: { ...metadata.bundle, bytes: bundle },\n  }\n}\n\nasync function writeTarEntry(\n  archive: Pack,\n  name: string,\n  mode: number,\n  bytes: Uint8Array,\n): Promise<void> {\n  await new Promise<void>((resolveEntry, rejectEntry) => {\n    archive.entry(\n      {\n        name,\n        mode,\n        uid: 0,\n        gid: 0,\n        size: bytes.byteLength,\n        mtime: fixedTarTime,\n        type: 'file',\n        uname: '',\n        gname: '',\n      },\n      Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength),\n      (error) => (error ? rejectEntry(error) : resolveEntry()),\n    )\n  })\n}\n\nasync function readTarEntry(entry: Entry, maxBytes: number, label: string): Promise<Uint8Array> {\n  const size = entry.header.size\n  if (!Number.isSafeInteger(size) || size === undefined || size < 0 || size > maxBytes) {\n    throw new Error(`${label} has an invalid tar size`)\n  }\n  const bytes = await collectStream(entry, maxBytes, label)\n  if (bytes.byteLength !== size) throw new Error(`${label} differs from its tar size`)\n  return bytes\n}\n\nasync function collectStream(\n  stream: AsyncIterable<Uint8Array>,\n  maxBytes: number,\n  label: string,\n): Promise<Uint8Array> {\n  const chunks: Buffer[] = []\n  let totalBytes = 0\n  for await (const chunk of stream) {\n    if (chunk.byteLength > maxBytes - totalBytes) {\n      const error = new Error(`${label} exceeds its size limit`)\n      if ('destroy' in stream && typeof stream.destroy === 'function') stream.destroy(error)\n      throw error\n    }\n    const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)\n    chunks.push(bytes)\n    totalBytes += bytes.byteLength\n  }\n  return Buffer.concat(chunks, totalBytes)\n}\n\nasync function streamEqualsBytes(\n  stream: AsyncIterable<Uint8Array>,\n  expected: Uint8Array,\n  maxBytes: number,\n  label: string,\n): Promise<boolean> {\n  const expectedBuffer = Buffer.from(expected.buffer, expected.byteOffset, expected.byteLength)\n  let equal = true\n  let offset = 0\n  for await (const chunk of stream) {\n    if (chunk.byteLength > maxBytes - offset) {\n      const error = new Error(`${label} exceeds its size limit`)\n      if ('destroy' in stream && typeof stream.destroy === 'function') stream.destroy(error)\n      throw error\n    }\n    const observed = Buffer.from(chunk.buffer, chunk.byteOffset, chunk.byteLength)\n    if (\n      offset + observed.byteLength > expectedBuffer.byteLength ||\n      !observed.equals(expectedBuffer.subarray(offset, offset + observed.byteLength))\n    ) {\n      equal = false\n    }\n    offset += observed.byteLength\n  }\n  return equal && offset === expectedBuffer.byteLength\n}\n\nasync function prepareEmptyDestination(destination: string): Promise<void> {\n  await mkdir(destination, { recursive: true, mode: 0o700 })\n  const stats = await lstat(destination)\n  if (\n    !stats.isDirectory() ||\n    stats.isSymbolicLink() ||\n    (await realpath(destination)) !== destination\n  ) {\n    throw new Error('candidate workspace destination must be a real directory')\n  }\n  if ((await readdir(destination)).length > 0) {\n    throw new Error('candidate workspace destination must be empty')\n  }\n}\n\nasync function writeWorkspaceFiles(\n  destination: string,\n  files: ReadonlyArray<{ path: string; mode: number; bytes: Uint8Array }>,\n): Promise<void> {\n  for (const file of files) {\n    const path = workspacePath(destination, file.path)\n    await mkdir(dirname(path), { recursive: true, mode: 0o700 })\n    const descriptor = await open(\n      path,\n      fsConstants.O_WRONLY |\n        fsConstants.O_CREAT |\n        fsConstants.O_EXCL |\n        (typeof fsConstants.O_NOFOLLOW === 'number' ? fsConstants.O_NOFOLLOW : 0),\n      0o600,\n    )\n    try {\n      await descriptor.writeFile(file.bytes)\n      const stats = await descriptor.stat()\n      if (!stats.isFile() || stats.nlink !== 1) {\n        throw new Error(`candidate workspace file identity changed while writing: ${file.path}`)\n      }\n      await descriptor.chmod(file.mode)\n    } finally {\n      await descriptor.close()\n    }\n  }\n}\n\nasync function materializeRepository(\n  repository: WorkspaceArchiveRepository,\n  destination: string,\n): Promise<void> {\n  const temporary = await mkdtemp(join(tmpdir(), 'agent-candidate-workspace-bundle-'))\n  const bundlePath = join(temporary, `${randomUUID()}.bundle`)\n  try {\n    await writeFile(bundlePath, repository.bundle.bytes, { flag: 'wx', mode: 0o600 })\n    await runCandidateGit(destination, [\n      'init',\n      '--quiet',\n      '--initial-branch=candidate',\n      `--object-format=${repository.headCommit.length === 64 ? 'sha256' : 'sha1'}`,\n    ])\n    await runCandidateGit(destination, ['bundle', 'verify', bundlePath])\n    await runCandidateGit(destination, ['bundle', 'unbundle', bundlePath])\n    const objectType = (\n      await runCandidateGit(destination, ['cat-file', '-t', repository.headCommit])\n    ).stdout\n      .toString('utf8')\n      .trim()\n    if (objectType !== 'commit') throw new Error('candidate repository HEAD is not a commit')\n    const observedTree = (\n      await runCandidateGit(destination, ['rev-parse', `${repository.headCommit}^{tree}`])\n    ).stdout\n      .toString('utf8')\n      .trim()\n    if (observedTree !== repository.headTree) {\n      throw new Error('candidate repository bundle HEAD tree changed')\n    }\n    await runCandidateGit(destination, ['update-ref', '--no-deref', 'HEAD', repository.headCommit])\n    await runCandidateGit(destination, ['read-tree', repository.headTree])\n    const status = (\n      await runCandidateGit(destination, ['status', '--porcelain=v1', '--untracked-files=all'])\n    ).stdout\n      .toString('utf8')\n      .trim()\n    if (status) throw new Error('candidate repository files do not exactly match HEAD')\n  } finally {\n    await rm(temporary, { recursive: true, force: true })\n  }\n}\n\nfunction assertArchiveMatchesSnapshot(\n  files: ReadonlyArray<{ path: string; mode: number; bytes: Uint8Array }>,\n  snapshot: AgentCandidateWorkspaceSnapshotEvidence,\n): void {\n  const material = candidateWorkspaceManifest(files)\n  const materialBytes = canonicalCandidateBytes(material)\n  verifyBytes(\n    materialBytes,\n    snapshot.manifest.sha256,\n    snapshot.manifest.byteLength,\n    'candidate workspace manifest',\n  )\n  if (\n    canonicalCandidateDigest(material) !== snapshot.digest ||\n    !Buffer.from(materialBytes).equals(Buffer.from(canonicalCandidateBytes(snapshot.material)))\n  ) {\n    throw new Error('candidate workspace archive does not match its snapshot manifest')\n  }\n}\n\nfunction assertWorkspaceFilesWithinLimits(\n  files: ReadonlyArray<{ path: string; mode: number; bytes: Uint8Array }>,\n  limits: AgentCandidateWorkspaceArchiveLimits,\n): void {\n  if (files.length > limits.maxFiles) {\n    throw new Error('candidate workspace exceeds maxFiles')\n  }\n  let totalBytes = 0\n  let previousPath: string | undefined\n  const observedPaths = new Set<string>()\n  for (const file of files) {\n    const path = safeArchivePath(file.path, limits.maxPathBytes)\n    assertWorkspacePathOrder(\n      path,\n      previousPath,\n      observedPaths,\n      'candidate workspace paths must be unique and sorted',\n    )\n    previousPath = path\n    if (!isWorkspaceFileMode(file.mode)) {\n      throw new Error(`candidate workspace file has unsupported mode: ${path}`)\n    }\n    if (file.bytes.byteLength > limits.maxFileBytes) {\n      throw new Error(`candidate workspace file exceeds maxFileBytes: ${path}`)\n    }\n    totalBytes += file.bytes.byteLength\n    if (totalBytes > limits.maxTotalFileBytes) {\n      throw new Error('candidate workspace exceeds maxTotalFileBytes')\n    }\n  }\n}\n\nfunction normalizeWorkspaceFiles(\n  input: readonly AgentCandidateExecutorWorkspaceFile[],\n  limits: AgentCandidateWorkspaceArchiveLimits,\n): AgentCandidateExecutorWorkspaceFile[] {\n  if (!Array.isArray(input)) {\n    throw new Error('candidate workspace files must be an array')\n  }\n  const fileCount = input.length\n  if (fileCount > limits.maxFiles) {\n    throw new Error('candidate workspace exceeds maxFiles')\n  }\n  let totalBytes = 0\n  const files: AgentCandidateExecutorWorkspaceFile[] = []\n  for (let index = 0; index < fileCount; index++) {\n    const inputFile = input[index]\n    if (!isRecord(inputFile) || Object.keys(inputFile).sort().join(',') !== 'bytes,mode,path') {\n      throw new Error(`candidate workspace file ${index} is invalid`)\n    }\n    const descriptors = Object.getOwnPropertyDescriptors(inputFile)\n    if (\n      !('value' in (descriptors.path ?? {})) ||\n      !('value' in (descriptors.mode ?? {})) ||\n      !('value' in (descriptors.bytes ?? {}))\n    ) {\n      throw new Error(`candidate workspace file ${index} must use fixed values`)\n    }\n    const path = safeArchivePath(descriptors.path?.value, limits.maxPathBytes)\n    const mode = descriptors.mode?.value\n    const inputBytes = descriptors.bytes?.value\n    if (!isWorkspaceFileMode(mode)) {\n      throw new Error(`candidate workspace file has unsupported mode: ${path}`)\n    }\n    const view = inspectWorkspaceBytes(inputBytes, path)\n    if (view.byteLength > limits.maxFileBytes) {\n      throw new Error(`candidate workspace file exceeds maxFileBytes: ${path}`)\n    }\n    if (view.byteLength > limits.maxTotalFileBytes - totalBytes) {\n      throw new Error('candidate workspace exceeds maxTotalFileBytes')\n    }\n    if (view.byteLength > Math.max(0, limits.maxArchiveBytes - 1024)) {\n      throw new Error('candidate workspace archive exceeds maxArchiveBytes')\n    }\n    totalBytes += view.byteLength\n    files.push({ path, mode, bytes: detachWorkspaceBytes(view) })\n  }\n  files.sort((left, right) => (left.path < right.path ? -1 : left.path > right.path ? 1 : 0))\n  assertWorkspaceFilesWithinLimits(files, limits)\n  return files\n}\n\nfunction isWorkspaceFileMode(value: unknown): value is number {\n  return Number.isSafeInteger(value) && (value as number) >= 0 && (value as number) <= 0o777\n}\n\nfunction workspaceLimits(\n  overrides: Partial<AgentCandidateWorkspaceArchiveLimits> | undefined,\n): AgentCandidateWorkspaceArchiveLimits {\n  const limits = { ...defaultLimits, ...overrides }\n  for (const [name, value] of Object.entries(limits)) {\n    if (!Number.isSafeInteger(value) || value <= 0) {\n      throw new Error(`candidate workspace ${name} must be a positive safe integer`)\n    }\n  }\n  return Object.freeze(limits)\n}\n\nfunction safeArchivePath(value: unknown, maxPathBytes: number): string {\n  if (\n    typeof value !== 'string' ||\n    !value ||\n    !isWellFormedUnicode(value) ||\n    Buffer.byteLength(value, 'utf8') > maxPathBytes ||\n    isAbsolute(value) ||\n    win32.isAbsolute(value) ||\n    value.includes('\\\\') ||\n    value.includes('\\0') ||\n    hasControlCharacter(value) ||\n    value.split('/').some((part) => !part || part === '.' || part === '..') ||\n    ['.git', '.sidecar'].includes(value.split('/')[0]?.toLowerCase() ?? '')\n  ) {\n    throw new Error(`candidate workspace archive contains an unsafe path: ${String(value)}`)\n  }\n  return value\n}\n\nfunction assertWorkspacePathOrder(\n  path: string,\n  previousPath: string | undefined,\n  observedPaths: Set<string>,\n  errorMessage: string,\n): void {\n  if (previousPath !== undefined && previousPath >= path) throw new Error(errorMessage)\n  for (let slash = path.indexOf('/'); slash !== -1; slash = path.indexOf('/', slash + 1)) {\n    if (observedPaths.has(path.slice(0, slash))) throw new Error(errorMessage)\n  }\n  observedPaths.add(path)\n}\n\nfunction inspectWorkspaceBytes(\n  input: unknown,\n  path: string,\n): { buffer: ArrayBuffer; byteOffset: number; byteLength: number } {\n  let buffer: ArrayBufferLike\n  let byteOffset: number\n  let byteLength: number\n  try {\n    buffer = typedArrayBufferGetter.call(input as Uint8Array) as ArrayBufferLike\n    byteOffset = typedArrayByteOffsetGetter.call(input as Uint8Array) as number\n    byteLength = typedArrayByteLengthGetter.call(input as Uint8Array) as number\n  } catch {\n    throw new Error(`candidate workspace file bytes are invalid: ${path}`)\n  }\n  if (isSharedArrayBuffer(buffer)) {\n    throw new Error(`candidate workspace file uses shared bytes: ${path}`)\n  }\n  if (!isAnyArrayBuffer(buffer)) {\n    throw new Error(`candidate workspace file bytes are invalid: ${path}`)\n  }\n  return { buffer, byteOffset, byteLength }\n}\n\nfunction detachWorkspaceBytes(input: {\n  buffer: ArrayBuffer\n  byteOffset: number\n  byteLength: number\n}): Uint8Array {\n  const { buffer, byteOffset, byteLength } = input\n  const copy = new Uint8Array(byteLength)\n  Uint8Array.prototype.set.call(copy, new Uint8Array(buffer, byteOffset, byteLength))\n  return copy\n}\n\nfunction isWellFormedUnicode(value: string): boolean {\n  for (let index = 0; index < value.length; index++) {\n    const code = value.charCodeAt(index)\n    if (code >= 0xd800 && code <= 0xdbff) {\n      const next = value.charCodeAt(index + 1)\n      if (!(next >= 0xdc00 && next <= 0xdfff)) return false\n      index++\n    } else if (code >= 0xdc00 && code <= 0xdfff) {\n      return false\n    }\n  }\n  return true\n}\n\nfunction workspacePath(root: string, relativePath: string): string {\n  const path = resolve(root, relativePath)\n  if (!path.startsWith(`${root}${sep}`)) {\n    throw new Error(`candidate workspace archive path escapes its destination: ${relativePath}`)\n  }\n  return path\n}\n\nfunction assertGitObjectId(value: string, label: string): void {\n  if (!/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(value)) {\n    throw new Error(`candidate repository ${label} is not a Git object id`)\n  }\n}\n\nfunction hasControlCharacter(value: string): boolean {\n  for (let index = 0; index < value.length; index++) {\n    const code = value.charCodeAt(index)\n    if (code < 0x20 || code === 0x7f) return true\n  }\n  return false\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\ntype TypedArrayGetter = (this: Uint8Array) => unknown\n\nfunction requireTypedArrayGetter(name: 'buffer' | 'byteOffset' | 'byteLength'): TypedArrayGetter {\n  const typedArrayPrototype = Object.getPrototypeOf(Uint8Array.prototype) as object\n  const getter = Object.getOwnPropertyDescriptor(typedArrayPrototype, name)?.get\n  if (!getter) throw new Error(`typed array intrinsic ${name} accessor is unavailable`)\n  return getter\n}\n\nconst typedArrayBufferGetter = requireTypedArrayGetter('buffer')\nconst typedArrayByteOffsetGetter = requireTypedArrayGetter('byteOffset')\nconst typedArrayByteLengthGetter = requireTypedArrayGetter('byteLength')\n"],"mappings":";;;;;;;;;;;;;;;;;;;AACA,SAAS,kCAAkC;AAQpC,SAAS,yBAAyB,OAAwD;AAC/F,QAAM,SAAS,yBAAyB,KAAK;AAC7C,QAAM,SAAS,2BAA2B,MAAM,EAAE,GAAG,OAAO,OAAO,CAAC;AACpE,QAAM,eAAe,yBAAyB,mBAAmB,MAAM,CAAC;AACxE,MAAI,iBAAiB,QAAQ;AAC3B,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACA,SAAO,wBAAwB,MAAM;AACvC;;;ACjBA,SAAS,kBAAkB;AAC3B,SAAS,aAAa,mBAAmB;AACzC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,cAAc;AACvB,SAAS,SAAS,YAAY,MAAM,SAAS,KAAK,aAAa;AAC/D,SAAS,kBAAkB,2BAA2B;AAMtD,SAAqB,SAAoB,YAAY;AA2BrD,IAAM,cAAc;AACpB,IAAM,uBAAuB;AAC7B,IAAM,0BAA0B;AAChC,IAAM,wBAAwB;AAC9B,IAAM,eAAe,oBAAI,KAAK,CAAC;AAY/B,IAAM,gBAAsD,OAAO,OAAO;AAAA,EACxE,iBAAiB,MAAM,OAAO;AAAA,EAC9B,0BAA0B,OAAO;AAAA,EACjC,UAAU;AAAA,EACV,cAAc,MAAM,OAAO;AAAA,EAC3B,mBAAmB,MAAM,OAAO;AAAA,EAChC,cAAc;AAAA,EACd,0BAA0B,MAAM,OAAO;AACzC,CAAC;AAkDD,eAAsB,+BACpB,WACA,UAAiD,CAAC,GACR;AAC1C,QAAM,OAAO,QAAQ,SAAS;AAC9B,QAAM,SAAS,gBAAgB,QAAQ,MAAM;AAC7C,QAAM,WAAW,QAAQ,oBACrB,MAAM,kBAAkB,MAAM,MAAM,IACpC,MAAM,6BAA6B,MAAM;AAAA,IACvC,QAAQ;AAAA,MACN,UAAU,OAAO;AAAA,MACjB,cAAc,OAAO;AAAA,MACrB,mBAAmB,OAAO;AAAA,IAC5B;AAAA,EACF,CAAC;AACL,mCAAiC,SAAS,OAAO,MAAM;AACvD,QAAM,aAAa,gBAAgB,WAAW,SAAS,aAAa;AACpE,SAAO,sBAAsB,SAAS,OAAO,YAAY,QAAQ,QAAQ,mBAAmB;AAC9F;AAGA,eAAsB,oCACpB,OACA,UAA4E,CAAC,GACnC;AAC1C,QAAM,SAAS,gBAAgB,QAAQ,MAAM;AAC7C,SAAO;AAAA,IACL,wBAAwB,OAAO,MAAM;AAAA,IACrC;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,EACV;AACF;AAEA,eAAe,sBACb,OACA,YACA,QACA,qBAC0C;AAC1C,QAAM,WAAW,2BAA2B,KAAK;AACjD,QAAM,WAAW,wBAAwB,QAAQ;AACjD,QAAM,UAAU,MAAM,uBAAuB,OAAO,YAAY,OAAO,eAAe;AACtF,MACE,CAAC,wBACA,SAAS,aAAa,OAAO,4BAC5B,QAAQ,aAAa,OAAO,2BAC9B;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,mBAAmB,MAAM,yBAAyB,YAAY,UAAU,mBAAmB;AACjG,QAAM,kBAAkB,MAAM,yBAAyB,WAAW,SAAS,mBAAmB;AAC9F,QAAM,WAAW,oBAAoB;AAAA,IACnC,MAAM;AAAA,IACN,QAAQ,yBAAyB,QAAQ;AAAA,IACzC;AAAA,IACA,UAAU;AAAA,IACV,SAAS;AAAA,EACX,CAAmD;AACnD,SAAO,OAAO,OAAO,EAAE,UAAU,QAAQ,CAAC;AAC5C;AAEA,eAAe,yBACb,MACA,OACA,aACyC;AACzC,MAAI,CAAC,YAAa,QAAO,0BAA0B,KAAK;AACxD,MAAI,CAAC,YAAY,YAAY,KAAK,GAAG;AACnC,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACA,SAAO,+BAA+B,YAAY,iBAAiB;AAAA,IACjE,aAAa,YAAY;AAAA,IACzB,SAAS,SAAS,aAAa,iCAAiC;AAAA,IAChE;AAAA,IACA,GAAI,YAAY,SAAS,EAAE,QAAQ,YAAY,OAAO,IAAI,CAAC;AAAA,EAC7D,CAAC;AACH;AAGO,SAAS,kCACd,UAAoD,CAAC,GACxB;AAC7B,QAAM,SAAS,gBAAgB,QAAQ,MAAM;AAC7C,QAAM,OAAoC;AAAA,IACxC,aAAa,OAAO,EAAE,MAAM,UAAU,SAAS,YAAY,MAAM;AAC/D,YAAM,mCAAmC;AAAA,QACvC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO,OAAO,OAAO,IAAI;AAC3B;AAEA,eAAe,mCAAmC,OAMhC;AAChB;AAAA,IACE,MAAM;AAAA,IACN,MAAM,SAAS,QAAQ;AAAA,IACvB,MAAM,SAAS,QAAQ;AAAA,IACvB;AAAA,EACF;AACA,QAAM,UAAU,MAAM,sBAAsB,MAAM,SAAS,MAAM,MAAM;AACvE,MAAI,QAAQ,cAAc,MAAM,SAAS,QAAQ;AAC/C,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,+BAA6B,QAAQ,OAAO,MAAM,QAAQ;AAC1D,QAAM,cAAc,QAAQ,MAAM,WAAW;AAC7C,QAAM,wBAAwB,WAAW;AACzC,QAAM,UAAU,MAAM,QAAQ,GAAG,WAAW,iBAAiB;AAC7D,MAAI;AACF,UAAM,oBAAoB,SAAS,QAAQ,KAAK;AAChD,QAAI,QAAQ,YAAY;AACtB,YAAM,sBAAsB,QAAQ,YAAY,OAAO;AAAA,IACzD;AACA,UAAM,4BAA4B,SAAS,MAAM,SAAS,UAAU;AAAA,MAClE,6BAA6B,QAAQ,aAAa,CAAC,MAAM,IAAI,CAAC;AAAA,IAChE,CAAC;AACD,UAAM,OAAO,SAAS,WAAW;AAAA,EACnC,SAAS,OAAO;AACd,UAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAClD,UAAM,GAAG,aAAa,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AACtD,UAAM;AAAA,EACR;AACF;AAEA,eAAe,kBACb,MACA,QAIC;AACD,QAAM,QAAQ,MAAM,MAAM,IAAI;AAC9B,MAAI,CAAC,MAAM,YAAY,KAAK,MAAM,eAAe,KAAM,MAAM,SAAS,IAAI,MAAO,MAAM;AACrF,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AACA,QAAM,YAAY,MAAM,gBAAgB,MAAM,CAAC,aAAa,iBAAiB,CAAC,GAAG,OAC9E,SAAS,MAAM,EACf,KAAK;AACR,MAAI,QAAQ,QAAQ,MAAM,MAAM;AAC9B,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACA,QAAM,SAAS;AAAA,KACZ,MAAM,gBAAgB,MAAM,CAAC,aAAa,oBAAoB,CAAC,GAAG,OAChE,SAAS,MAAM,EACf,KAAK;AAAA,EACV;AACA,MAAK,MAAM,SAAS,MAAM,MAAO,UAAU,OAAO,SAAS,GAAG,GAAG;AAC/D,UAAM,IAAI,MAAM,+DAA+D;AAAA,EACjF;AACA,QAAM,uBAAuB,MAAM,QAAQ,sBAAsB;AACjE,QAAM,cAAc,MAAM,gBAAgB,MAAM,CAAC,aAAa,MAAM,CAAC,GAAG,OACrE,SAAS,MAAM,EACf,KAAK;AACR,QAAM,YAAY,MAAM,gBAAgB,MAAM,CAAC,aAAa,aAAa,CAAC,GAAG,OAC1E,SAAS,MAAM,EACf,KAAK;AACR,oBAAkB,YAAY,MAAM;AACpC,oBAAkB,UAAU,WAAW;AACvC,MAAI,WAAW,WAAW,SAAS,QAAQ;AACzC,UAAM,IAAI,MAAM,iEAAiE;AAAA,EACnF;AACA,QAAM,QAAQ,MAAM,0BAA0B,MAAM,UAAU,CAAC,GAAG,MAAM;AACxE,mCAAiC,OAAO,MAAM;AAC9C,QAAM,sBACJ,MAAM,gBAAgB,MAAM,CAAC,YAAY,gBAAgB,aAAa,MAAM,CAAC,GAC7E,OACC,SAAS,MAAM,EACf,KAAK;AACR,QAAM,iBAAiB,OAAO,kBAAkB;AAChD,MAAI,CAAC,OAAO,cAAc,cAAc,KAAK,iBAAiB,GAAG;AAC/D,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,MAAI,iBAAiB,OAAO,0BAA0B;AACpD,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,QAAM,YAAY,MAAM,QAAQ,KAAK,OAAO,GAAG,mCAAmC,CAAC;AACnF,QAAM,aAAa,KAAK,WAAW,GAAG,WAAW,CAAC,SAAS;AAC3D,MAAI;AACF,UAAM,gBAAgB,MAAM,CAAC,UAAU,UAAU,YAAY,MAAM,CAAC;AACpE,UAAM,SAAS,WAAW,KAAK,MAAM,SAAS,UAAU,CAAC;AACzD,QAAI,OAAO,aAAa,OAAO,0BAA0B;AACvD,YAAM,IAAI,MAAM,8DAA8D;AAAA,IAChF;AACA,WAAO;AAAA,MACL;AAAA,MACA,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ,YAAY,MAAM;AAAA,UAC1B,YAAY,OAAO;AAAA,UACnB,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,EACF,UAAE;AACA,UAAM,GAAG,WAAW,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACtD;AACF;AAEA,eAAe,uBACb,OACA,YACA,iBACqB;AACrB,QAAM,UAAU,KAAK;AACrB,QAAM,SAAS,cAAc,SAAS,iBAAiB,6BAA6B;AACpF,MAAI;AACF,UAAM,6BAA6B,SAAS,OAAO,UAAU;AAC7D,YAAQ,SAAS;AACjB,WAAO,MAAM;AAAA,EACf,SAAS,OAAO;AACd,YAAQ,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;AACzE,UAAM,OAAO,MAAM,MAAM,MAAS;AAClC,UAAM;AAAA,EACR;AACF;AAEA,eAAe,gCACb,OACA,YACA,UACA,iBACe;AACf,QAAM,UAAU,KAAK;AACrB,QAAM,aAAa;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI;AACF,UAAM,6BAA6B,SAAS,OAAO,UAAU;AAC7D,YAAQ,SAAS;AACjB,QAAI,CAAE,MAAM,WAAa,OAAM,IAAI,MAAM,0CAA0C;AAAA,EACrF,SAAS,OAAO;AACd,YAAQ,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;AACzE,UAAM,WAAW,MAAM,MAAM,MAAS;AACtC,UAAM;AAAA,EACR;AACF;AAEA,eAAe,6BACb,SACA,OACA,YACe;AACf,aAAW,QAAQ,OAAO;AACxB,UAAM,cAAc,SAAS,GAAG,oBAAoB,GAAG,KAAK,IAAI,IAAI,KAAK,MAAM,KAAK,KAAK;AAAA,EAC3F;AACA,MAAI,CAAC,WAAY;AACjB,QAAM,WAAW,wBAAwB;AAAA,IACvC,MAAM;AAAA,IACN,YAAY,WAAW;AAAA,IACvB,UAAU,WAAW;AAAA,IACrB,QAAQ;AAAA,MACN,QAAQ,WAAW,OAAO;AAAA,MAC1B,YAAY,WAAW,OAAO;AAAA,IAChC;AAAA,EACF,CAA8C;AAC9C,QAAM,cAAc,SAAS,yBAAyB,KAAO,QAAQ;AACrE,QAAM,cAAc,SAAS,uBAAuB,KAAO,WAAW,OAAO,KAAK;AACpF;AAEA,eAAe,sBACb,OACA,QACkC;AAClC,MAAI,MAAM,aAAa,OAAO,iBAAiB;AAC7C,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AACA,QAAM,SAAS,QAAQ;AACvB,QAAM,QAA0C,CAAC;AACjD,QAAM,qBAAqB,oBAAI,IAAY;AAC3C,QAAM,gBAAgB,oBAAI,IAAY;AACtC,MAAI,aAAa;AACjB,MAAI,qBAAqB;AACzB,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,QAAM,WAAW,YAAY;AAC3B,qBAAiB,SAAS,QAAQ;AAChC,YAAM,OAAO,MAAM,OAAO;AAC1B,UACE,MAAM,OAAO,SAAS,UACtB,OAAO,SAAS,YAChB,mBAAmB,IAAI,IAAI,GAC3B;AACA,cAAM,IAAI,MAAM,mDAAmD;AAAA,MACrE;AACA,yBAAmB,IAAI,IAAI;AAC3B,UAAI,KAAK,WAAW,oBAAoB,GAAG;AACzC,YAAI,MAAM,UAAU,OAAO,UAAU;AACnC,gBAAM,IAAI,MAAM,uDAAuD;AAAA,QACzE;AACA,cAAM,OAAO,gBAAgB,KAAK,MAAM,qBAAqB,MAAM,GAAG,OAAO,YAAY;AACzF,YAAI,CAAC,oBAAoB,MAAM,OAAO,IAAI,GAAG;AAC3C,gBAAM,IAAI,MAAM,wDAAwD,IAAI,EAAE;AAAA,QAChF;AACA,kCAA0B,MAAM,YAAY,oBAAoB,MAAM,OAAO,MAAM,MAAM;AACzF,cAAM,YAAY,MAAM,aAAa,OAAO,OAAO,cAAc,kBAAkB,IAAI,EAAE;AACzF,8BAAsB,UAAU;AAChC;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,uBAAe;AACf,YAAI,UAAU,aAAa,OAAO,oBAAoB,YAAY;AAChE,gBAAM,IAAI,MAAM,uDAAuD;AAAA,QACzE;AACA,sBAAc,UAAU;AACxB,cAAM,KAAK,EAAE,MAAM,MAAM,MAAM,OAAO,MAAM,OAAO,UAAU,CAAC;AAAA,MAChE,WAAW,SAAS,yBAAyB;AAC3C,YAAI,MAAM,OAAO,SAAS,OAAS,oBAAoB;AACrD,gBAAM,IAAI,MAAM,4DAA4D;AAAA,QAC9E;AACA,kCAA0B,MAAM,YAAY,oBAAoB,MAAM,OAAO,MAAM,MAAM;AACzF,cAAM,gBAAgB,MAAM;AAAA,UAC1B;AAAA,UACA,OAAO;AAAA,UACP;AAAA,QACF;AACA,8BAAsB,cAAc;AACpC,6BAAqB,wBAAwB,eAAe,OAAO,wBAAwB;AAAA,MAC7F,WAAW,SAAS,uBAAuB;AACzC,YAAI,MAAM,OAAO,SAAS,OAAS,kBAAkB;AACnD,gBAAM,IAAI,MAAM,0DAA0D;AAAA,QAC5E;AACA,kCAA0B,MAAM,YAAY,oBAAoB,MAAM,OAAO,MAAM,MAAM;AACzF,2BAAmB,MAAM;AAAA,UACvB;AAAA,UACA,OAAO;AAAA,UACP;AAAA,QACF;AACA,8BAAsB,iBAAiB;AAAA,MACzC,OAAO;AACL,cAAM,IAAI,MAAM,0DAA0D,IAAI,EAAE;AAAA,MAClF;AAAA,IACF;AACA,QAAI,QAAQ,kBAAkB,MAAM,QAAQ,gBAAgB,GAAG;AAC7D,YAAM,IAAI,MAAM,+DAA+D;AAAA,IACjF;AACA,UAAM,aACJ,sBAAsB,mBAClB,kBAAkB,oBAAoB,gBAAgB,IACtD;AACN,WAAO,EAAE,OAAO,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC,EAAG;AAAA,EACxD,GAAG;AACH,SAAO,IAAI,OAAO,KAAK,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU,CAAC;AACxE,QAAM,SAAS,MAAM;AACrB,QAAM;AAAA,IACJ,OAAO;AAAA,IACP,OAAO;AAAA,IACP;AAAA,IACA,OAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,0BACP,cACA,oBACA,YACA,QACM;AACN,MACE,CAAC,OAAO,cAAc,UAAU,KAChC,eAAe,UACf,aAAa,KACb,aAAa,OAAO,kBAAkB,eAAe,oBACrD;AACA,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACF;AAEA,SAAS,wBACP,OACA,gBACoC;AACpC,MAAI;AACJ,MAAI;AACF,YAAQ,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;AAAA,EAC5E,SAAS,OAAO;AACd,UAAM,IAAI,MAAM,8DAA8D,EAAE,OAAO,MAAM,CAAC;AAAA,EAChG;AACA,MACE,CAAC,SAAS,KAAK,KACf,OAAO,KAAK,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,qCACxC,MAAM,SAAS,eACf,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,aAAa,YAC1B,CAAC,SAAS,MAAM,MAAM,KACtB,OAAO,KAAK,MAAM,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,uBAC/C,OAAO,MAAM,OAAO,WAAW,YAC/B,CAAC,wBAAwB,KAAK,MAAM,OAAO,MAAM,KACjD,CAAC,OAAO,cAAc,MAAM,OAAO,UAAU,KAC5C,MAAM,OAAO,cAAyB,KACtC,MAAM,OAAO,aAAwB,gBACtC;AACA,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AACA,MAAI,CAAC,OAAO,KAAK,wBAAwB,KAAK,CAAC,EAAE,OAAO,OAAO,KAAK,KAAK,CAAC,GAAG;AAC3E,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACA,oBAAkB,MAAM,YAAY,iBAAiB;AACrD,oBAAkB,MAAM,UAAU,sBAAsB;AACxD,MAAI,MAAM,WAAW,WAAW,MAAM,SAAS,QAAQ;AACrD,UAAM,IAAI,MAAM,iEAAiE;AAAA,EACnF;AACA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,YAAY,MAAM;AAAA,IAClB,UAAU,MAAM;AAAA,IAChB,QAAQ;AAAA,MACN,QAAQ,MAAM,OAAO;AAAA,MACrB,YAAY,MAAM,OAAO;AAAA,IAC3B;AAAA,EACF;AACF;AAEA,SAAS,kBACP,UACA,QAC4B;AAC5B,cAAY,QAAQ,SAAS,OAAO,QAAQ,SAAS,OAAO,YAAY,sBAAsB;AAC9F,SAAO;AAAA,IACL,YAAY,SAAS;AAAA,IACrB,UAAU,SAAS;AAAA,IACnB,QAAQ,EAAE,GAAG,SAAS,QAAQ,OAAO,OAAO;AAAA,EAC9C;AACF;AAEA,eAAe,cACb,SACA,MACA,MACA,OACe;AACf,QAAM,IAAI,QAAc,CAAC,cAAc,gBAAgB;AACrD,YAAQ;AAAA,MACN;AAAA,QACE;AAAA,QACA;AAAA,QACA,KAAK;AAAA,QACL,KAAK;AAAA,QACL,MAAM,MAAM;AAAA,QACZ,OAAO;AAAA,QACP,MAAM;AAAA,QACN,OAAO;AAAA,QACP,OAAO;AAAA,MACT;AAAA,MACA,OAAO,KAAK,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU;AAAA,MAC5D,CAAC,UAAW,QAAQ,YAAY,KAAK,IAAI,aAAa;AAAA,IACxD;AAAA,EACF,CAAC;AACH;AAEA,eAAe,aAAa,OAAc,UAAkB,OAAoC;AAC9F,QAAM,OAAO,MAAM,OAAO;AAC1B,MAAI,CAAC,OAAO,cAAc,IAAI,KAAK,SAAS,UAAa,OAAO,KAAK,OAAO,UAAU;AACpF,UAAM,IAAI,MAAM,GAAG,KAAK,0BAA0B;AAAA,EACpD;AACA,QAAM,QAAQ,MAAM,cAAc,OAAO,UAAU,KAAK;AACxD,MAAI,MAAM,eAAe,KAAM,OAAM,IAAI,MAAM,GAAG,KAAK,4BAA4B;AACnF,SAAO;AACT;AAEA,eAAe,cACb,QACA,UACA,OACqB;AACrB,QAAM,SAAmB,CAAC;AAC1B,MAAI,aAAa;AACjB,mBAAiB,SAAS,QAAQ;AAChC,QAAI,MAAM,aAAa,WAAW,YAAY;AAC5C,YAAM,QAAQ,IAAI,MAAM,GAAG,KAAK,yBAAyB;AACzD,UAAI,aAAa,UAAU,OAAO,OAAO,YAAY,WAAY,QAAO,QAAQ,KAAK;AACrF,YAAM;AAAA,IACR;AACA,UAAM,QAAQ,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAK;AAChE,WAAO,KAAK,KAAK;AACjB,kBAAc,MAAM;AAAA,EACtB;AACA,SAAO,OAAO,OAAO,QAAQ,UAAU;AACzC;AAEA,eAAe,kBACb,QACA,UACA,UACA,OACkB;AAClB,QAAM,iBAAiB,OAAO,KAAK,SAAS,QAAQ,SAAS,YAAY,SAAS,UAAU;AAC5F,MAAI,QAAQ;AACZ,MAAI,SAAS;AACb,mBAAiB,SAAS,QAAQ;AAChC,QAAI,MAAM,aAAa,WAAW,QAAQ;AACxC,YAAM,QAAQ,IAAI,MAAM,GAAG,KAAK,yBAAyB;AACzD,UAAI,aAAa,UAAU,OAAO,OAAO,YAAY,WAAY,QAAO,QAAQ,KAAK;AACrF,YAAM;AAAA,IACR;AACA,UAAM,WAAW,OAAO,KAAK,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU;AAC7E,QACE,SAAS,SAAS,aAAa,eAAe,cAC9C,CAAC,SAAS,OAAO,eAAe,SAAS,QAAQ,SAAS,SAAS,UAAU,CAAC,GAC9E;AACA,cAAQ;AAAA,IACV;AACA,cAAU,SAAS;AAAA,EACrB;AACA,SAAO,SAAS,WAAW,eAAe;AAC5C;AAEA,eAAe,wBAAwB,aAAoC;AACzE,QAAM,MAAM,aAAa,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACzD,QAAM,QAAQ,MAAM,MAAM,WAAW;AACrC,MACE,CAAC,MAAM,YAAY,KACnB,MAAM,eAAe,KACpB,MAAM,SAAS,WAAW,MAAO,aAClC;AACA,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AACA,OAAK,MAAM,QAAQ,WAAW,GAAG,SAAS,GAAG;AAC3C,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACF;AAEA,eAAe,oBACb,aACA,OACe;AACf,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,cAAc,aAAa,KAAK,IAAI;AACjD,UAAM,MAAM,QAAQ,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC3D,UAAM,aAAa,MAAM;AAAA,MACvB;AAAA,MACA,YAAY,WACV,YAAY,UACZ,YAAY,UACX,OAAO,YAAY,eAAe,WAAW,YAAY,aAAa;AAAA,MACzE;AAAA,IACF;AACA,QAAI;AACF,YAAM,WAAW,UAAU,KAAK,KAAK;AACrC,YAAM,QAAQ,MAAM,WAAW,KAAK;AACpC,UAAI,CAAC,MAAM,OAAO,KAAK,MAAM,UAAU,GAAG;AACxC,cAAM,IAAI,MAAM,4DAA4D,KAAK,IAAI,EAAE;AAAA,MACzF;AACA,YAAM,WAAW,MAAM,KAAK,IAAI;AAAA,IAClC,UAAE;AACA,YAAM,WAAW,MAAM;AAAA,IACzB;AAAA,EACF;AACF;AAEA,eAAe,sBACb,YACA,aACe;AACf,QAAM,YAAY,MAAM,QAAQ,KAAK,OAAO,GAAG,mCAAmC,CAAC;AACnF,QAAM,aAAa,KAAK,WAAW,GAAG,WAAW,CAAC,SAAS;AAC3D,MAAI;AACF,UAAM,UAAU,YAAY,WAAW,OAAO,OAAO,EAAE,MAAM,MAAM,MAAM,IAAM,CAAC;AAChF,UAAM,gBAAgB,aAAa;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,MACA,mBAAmB,WAAW,WAAW,WAAW,KAAK,WAAW,MAAM;AAAA,IAC5E,CAAC;AACD,UAAM,gBAAgB,aAAa,CAAC,UAAU,UAAU,UAAU,CAAC;AACnE,UAAM,gBAAgB,aAAa,CAAC,UAAU,YAAY,UAAU,CAAC;AACrE,UAAM,cACJ,MAAM,gBAAgB,aAAa,CAAC,YAAY,MAAM,WAAW,UAAU,CAAC,GAC5E,OACC,SAAS,MAAM,EACf,KAAK;AACR,QAAI,eAAe,SAAU,OAAM,IAAI,MAAM,2CAA2C;AACxF,UAAM,gBACJ,MAAM,gBAAgB,aAAa,CAAC,aAAa,GAAG,WAAW,UAAU,SAAS,CAAC,GACnF,OACC,SAAS,MAAM,EACf,KAAK;AACR,QAAI,iBAAiB,WAAW,UAAU;AACxC,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AACA,UAAM,gBAAgB,aAAa,CAAC,cAAc,cAAc,QAAQ,WAAW,UAAU,CAAC;AAC9F,UAAM,gBAAgB,aAAa,CAAC,aAAa,WAAW,QAAQ,CAAC;AACrE,UAAM,UACJ,MAAM,gBAAgB,aAAa,CAAC,UAAU,kBAAkB,uBAAuB,CAAC,GACxF,OACC,SAAS,MAAM,EACf,KAAK;AACR,QAAI,OAAQ,OAAM,IAAI,MAAM,sDAAsD;AAAA,EACpF,UAAE;AACA,UAAM,GAAG,WAAW,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACtD;AACF;AAEA,SAAS,6BACP,OACA,UACM;AACN,QAAM,WAAW,2BAA2B,KAAK;AACjD,QAAM,gBAAgB,wBAAwB,QAAQ;AACtD;AAAA,IACE;AAAA,IACA,SAAS,SAAS;AAAA,IAClB,SAAS,SAAS;AAAA,IAClB;AAAA,EACF;AACA,MACE,yBAAyB,QAAQ,MAAM,SAAS,UAChD,CAAC,OAAO,KAAK,aAAa,EAAE,OAAO,OAAO,KAAK,wBAAwB,SAAS,QAAQ,CAAC,CAAC,GAC1F;AACA,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACF;AAEA,SAAS,iCACP,OACA,QACM;AACN,MAAI,MAAM,SAAS,OAAO,UAAU;AAClC,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACA,MAAI,aAAa;AACjB,MAAI;AACJ,QAAM,gBAAgB,oBAAI,IAAY;AACtC,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,gBAAgB,KAAK,MAAM,OAAO,YAAY;AAC3D;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,mBAAe;AACf,QAAI,CAAC,oBAAoB,KAAK,IAAI,GAAG;AACnC,YAAM,IAAI,MAAM,kDAAkD,IAAI,EAAE;AAAA,IAC1E;AACA,QAAI,KAAK,MAAM,aAAa,OAAO,cAAc;AAC/C,YAAM,IAAI,MAAM,kDAAkD,IAAI,EAAE;AAAA,IAC1E;AACA,kBAAc,KAAK,MAAM;AACzB,QAAI,aAAa,OAAO,mBAAmB;AACzC,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AAAA,EACF;AACF;AAEA,SAAS,wBACP,OACA,QACuC;AACvC,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AACA,QAAM,YAAY,MAAM;AACxB,MAAI,YAAY,OAAO,UAAU;AAC/B,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACA,MAAI,aAAa;AACjB,QAAM,QAA+C,CAAC;AACtD,WAAS,QAAQ,GAAG,QAAQ,WAAW,SAAS;AAC9C,UAAM,YAAY,MAAM,KAAK;AAC7B,QAAI,CAAC,SAAS,SAAS,KAAK,OAAO,KAAK,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,mBAAmB;AACzF,YAAM,IAAI,MAAM,4BAA4B,KAAK,aAAa;AAAA,IAChE;AACA,UAAM,cAAc,OAAO,0BAA0B,SAAS;AAC9D,QACE,EAAE,YAAY,YAAY,QAAQ,CAAC,OACnC,EAAE,YAAY,YAAY,QAAQ,CAAC,OACnC,EAAE,YAAY,YAAY,SAAS,CAAC,KACpC;AACA,YAAM,IAAI,MAAM,4BAA4B,KAAK,wBAAwB;AAAA,IAC3E;AACA,UAAM,OAAO,gBAAgB,YAAY,MAAM,OAAO,OAAO,YAAY;AACzE,UAAM,OAAO,YAAY,MAAM;AAC/B,UAAM,aAAa,YAAY,OAAO;AACtC,QAAI,CAAC,oBAAoB,IAAI,GAAG;AAC9B,YAAM,IAAI,MAAM,kDAAkD,IAAI,EAAE;AAAA,IAC1E;AACA,UAAM,OAAO,sBAAsB,YAAY,IAAI;AACnD,QAAI,KAAK,aAAa,OAAO,cAAc;AACzC,YAAM,IAAI,MAAM,kDAAkD,IAAI,EAAE;AAAA,IAC1E;AACA,QAAI,KAAK,aAAa,OAAO,oBAAoB,YAAY;AAC3D,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AACA,QAAI,KAAK,aAAa,KAAK,IAAI,GAAG,OAAO,kBAAkB,IAAI,GAAG;AAChE,YAAM,IAAI,MAAM,qDAAqD;AAAA,IACvE;AACA,kBAAc,KAAK;AACnB,UAAM,KAAK,EAAE,MAAM,MAAM,OAAO,qBAAqB,IAAI,EAAE,CAAC;AAAA,EAC9D;AACA,QAAM,KAAK,CAAC,MAAM,UAAW,KAAK,OAAO,MAAM,OAAO,KAAK,KAAK,OAAO,MAAM,OAAO,IAAI,CAAE;AAC1F,mCAAiC,OAAO,MAAM;AAC9C,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAiC;AAC5D,SAAO,OAAO,cAAc,KAAK,KAAM,SAAoB,KAAM,SAAoB;AACvF;AAEA,SAAS,gBACP,WACsC;AACtC,QAAM,SAAS,EAAE,GAAG,eAAe,GAAG,UAAU;AAChD,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AAClD,QAAI,CAAC,OAAO,cAAc,KAAK,KAAK,SAAS,GAAG;AAC9C,YAAM,IAAI,MAAM,uBAAuB,IAAI,kCAAkC;AAAA,IAC/E;AAAA,EACF;AACA,SAAO,OAAO,OAAO,MAAM;AAC7B;AAEA,SAAS,gBAAgB,OAAgB,cAA8B;AACrE,MACE,OAAO,UAAU,YACjB,CAAC,SACD,CAAC,oBAAoB,KAAK,KAC1B,OAAO,WAAW,OAAO,MAAM,IAAI,gBACnC,WAAW,KAAK,KAChB,MAAM,WAAW,KAAK,KACtB,MAAM,SAAS,IAAI,KACnB,MAAM,SAAS,IAAI,KACnB,oBAAoB,KAAK,KACzB,MAAM,MAAM,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,SAAS,OAAO,SAAS,IAAI,KACtE,CAAC,QAAQ,UAAU,EAAE,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,YAAY,KAAK,EAAE,GACtE;AACA,UAAM,IAAI,MAAM,wDAAwD,OAAO,KAAK,CAAC,EAAE;AAAA,EACzF;AACA,SAAO;AACT;AAEA,SAAS,yBACP,MACA,cACA,eACA,cACM;AACN,MAAI,iBAAiB,UAAa,gBAAgB,KAAM,OAAM,IAAI,MAAM,YAAY;AACpF,WAAS,QAAQ,KAAK,QAAQ,GAAG,GAAG,UAAU,IAAI,QAAQ,KAAK,QAAQ,KAAK,QAAQ,CAAC,GAAG;AACtF,QAAI,cAAc,IAAI,KAAK,MAAM,GAAG,KAAK,CAAC,EAAG,OAAM,IAAI,MAAM,YAAY;AAAA,EAC3E;AACA,gBAAc,IAAI,IAAI;AACxB;AAEA,SAAS,sBACP,OACA,MACiE;AACjE,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,aAAS,uBAAuB,KAAK,KAAmB;AACxD,iBAAa,2BAA2B,KAAK,KAAmB;AAChE,iBAAa,2BAA2B,KAAK,KAAmB;AAAA,EAClE,QAAQ;AACN,UAAM,IAAI,MAAM,+CAA+C,IAAI,EAAE;AAAA,EACvE;AACA,MAAI,oBAAoB,MAAM,GAAG;AAC/B,UAAM,IAAI,MAAM,+CAA+C,IAAI,EAAE;AAAA,EACvE;AACA,MAAI,CAAC,iBAAiB,MAAM,GAAG;AAC7B,UAAM,IAAI,MAAM,+CAA+C,IAAI,EAAE;AAAA,EACvE;AACA,SAAO,EAAE,QAAQ,YAAY,WAAW;AAC1C;AAEA,SAAS,qBAAqB,OAIf;AACb,QAAM,EAAE,QAAQ,YAAY,WAAW,IAAI;AAC3C,QAAM,OAAO,IAAI,WAAW,UAAU;AACtC,aAAW,UAAU,IAAI,KAAK,MAAM,IAAI,WAAW,QAAQ,YAAY,UAAU,CAAC;AAClF,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAwB;AACnD,WAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;AACjD,UAAM,OAAO,MAAM,WAAW,KAAK;AACnC,QAAI,QAAQ,SAAU,QAAQ,OAAQ;AACpC,YAAM,OAAO,MAAM,WAAW,QAAQ,CAAC;AACvC,UAAI,EAAE,QAAQ,SAAU,QAAQ,OAAS,QAAO;AAChD;AAAA,IACF,WAAW,QAAQ,SAAU,QAAQ,OAAQ;AAC3C,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,cAAc,MAAc,cAA8B;AACjE,QAAM,OAAO,QAAQ,MAAM,YAAY;AACvC,MAAI,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,GAAG,EAAE,GAAG;AACrC,UAAM,IAAI,MAAM,6DAA6D,YAAY,EAAE;AAAA,EAC7F;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,OAAe,OAAqB;AAC7D,MAAI,CAAC,kCAAkC,KAAK,KAAK,GAAG;AAClD,UAAM,IAAI,MAAM,wBAAwB,KAAK,yBAAyB;AAAA,EACxE;AACF;AAEA,SAAS,oBAAoB,OAAwB;AACnD,WAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;AACjD,UAAM,OAAO,MAAM,WAAW,KAAK;AACnC,QAAI,OAAO,MAAQ,SAAS,IAAM,QAAO;AAAA,EAC3C;AACA,SAAO;AACT;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAIA,SAAS,wBAAwB,MAAgE;AAC/F,QAAM,sBAAsB,OAAO,eAAe,WAAW,SAAS;AACtE,QAAM,SAAS,OAAO,yBAAyB,qBAAqB,IAAI,GAAG;AAC3E,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,yBAAyB,IAAI,0BAA0B;AACpF,SAAO;AACT;AAEA,IAAM,yBAAyB,wBAAwB,QAAQ;AAC/D,IAAM,6BAA6B,wBAAwB,YAAY;AACvE,IAAM,6BAA6B,wBAAwB,YAAY;","names":[]}

package/dist/chunk-DPEUKJRO.js

@@ -1,27 +0,0 @@
-// src/profiles/ui-auditor/substrate.ts
-var UI_LENSES = [
-  "consistency",
-  "hierarchy",
-  "layout",
-  "ux-flow",
-  "duplication",
-  "accessibility",
-  "responsive",
-  "states",
-  "content",
-  "interaction",
-  "performance-perceived",
-  "other"
-];
-var UI_FINDING_SEVERITIES = [
-  "critical",
-  "high",
-  "med",
-  "low"
-];
-
-export {
-  UI_LENSES,
-  UI_FINDING_SEVERITIES
-};
-//# sourceMappingURL=chunk-DPEUKJRO.js.map

package/dist/chunk-DPEUKJRO.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/profiles/ui-auditor/substrate.ts"],"sourcesContent":["/**\n *\n * UI audit finding shapes — the unit of evidence a contributor can act on.\n *\n * A finding describes a single, actionable UI problem: lens, severity,\n * route, observation, impact, suggested fix, and screenshot evidence.\n * Findings are produced by the auditor profile, persisted by the issue\n * writer as self-contained GitHub-issue Markdown, and surfaced over MCP.\n *\n * The shapes are deliberately constraining — the validator + writer\n * hard-fail on missing screenshot evidence, missing lens, missing title.\n *\n * @experimental\n */\n\n/**\n * Canonical audit lenses. Each lens scopes a finding to a single class of\n * problem so a single audit pass can iterate them without pile-on findings\n * under a generic label.\n */\nexport type UiLens =\n  | 'consistency'\n  | 'hierarchy'\n  | 'layout'\n  | 'ux-flow'\n  | 'duplication'\n  | 'accessibility'\n  | 'responsive'\n  | 'states'\n  | 'content'\n  | 'interaction'\n  | 'performance-perceived'\n  | 'other'\n\n/** Frozen tuple of lenses for validation + iteration. */\nexport const UI_LENSES: readonly UiLens[] = [\n  'consistency',\n  'hierarchy',\n  'layout',\n  'ux-flow',\n  'duplication',\n  'accessibility',\n  'responsive',\n  'states',\n  'content',\n  'interaction',\n  'performance-perceived',\n  'other',\n] as const\n\n/**\n * Severity scale.\n *   - `critical` — blocks a core task or is an accessibility blocker.\n *   - `high`     — confusing, broken-looking, or noticeable friction.\n *   - `med`      — visible polish issue, would be caught in code review.\n *   - `low`      — nitpick worth fixing eventually.\n */\nexport type UiFindingSeverity = 'low' | 'med' | 'high' | 'critical'\n\n/** Frozen severity tuple, ordered worst → least bad for sort/report. */\nexport const UI_FINDING_SEVERITIES: readonly UiFindingSeverity[] = [\n  'critical',\n  'high',\n  'med',\n  'low',\n] as const\n\n/** Pointer to a screenshot referenced by a finding (workspace-relative path). */\nexport interface UiFindingScreenshot {\n  path: string\n  viewport?: string\n  label?: string\n}\n\n/**\n * A single UI audit finding — the unit of work a contributor can act on.\n *\n * Every field except the documented optionals is required. The auditor\n * validator + writer hard-fail on missing screenshot evidence, missing\n * lens, missing title, etc.\n */\nexport interface UiFinding {\n  /** Monotonic id assigned by the writer when persisting. Optional in-transit. */\n  id?: number\n  title: string\n  lens: UiLens\n  severity: UiFindingSeverity\n  /** Logical route the finding was observed on (e.g. `home`, `checkout-step-2`). */\n  route: string\n  /** Fully qualified URL the finding was observed at. */\n  url?: string\n  /** Viewport string the offending capture was taken at (e.g. `1280x800`). */\n  viewport?: string\n  /** CSS selector pinning the offending element, when one can be identified. */\n  selector?: string\n  /** 1–3 sentences describing what the screenshot shows that is wrong. */\n  observation: string\n  /** Who is affected and how. */\n  impact: string\n  /** A specific change a contributor could apply without asking back. */\n  suggestedFix: string\n  /** Optional explicit reproduction steps. Writer synthesizes from route/url/selector when omitted. */\n  reproSteps?: string\n  /** Free-form tags. */\n  tags?: readonly string[]\n  /** Screenshot references — must be non-empty for actionable findings. */\n  screenshots: readonly UiFindingScreenshot[]\n  /** Cross-references to similar findings already on file, by id. */\n  similarTo?: readonly number[]\n  /** ISO-8601 creation timestamp set by the writer when persisted. */\n  createdAt?: string\n}\n"],"mappings":";AAmCO,IAAM,YAA+B;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAYO,IAAM,wBAAsD;AAAA,EACjE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;","names":[]}

package/dist/chunk-FD2MBMOH.js

@@ -1,494 +0,0 @@
-import {
-  extractLlmCallEvent
-} from "./chunk-M22PL4GH.js";
-import {
-  AnalystError
-} from "./chunk-YEJR7IXO.js";
-
-// src/analyst-loop/iterations-to-trace-store.ts
-import {
-  DEFAULT_TRACE_ANALYST_BUDGETS,
-  TRACE_ANALYST_TRUNCATION_MARKER_PREFIX
-} from "@tangle-network/agent-eval";
-var bytesOf = (v) => Buffer.byteLength(JSON.stringify(v) ?? "", "utf8");
-var iso = (ms) => new Date(ms).toISOString();
-function normalizeSignature(message) {
-  return message.replace(/0x[0-9a-fA-F]+/g, "HEX").replace(/[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}/g, "UUID").replace(/(\/[\w.-]+){2,}/g, "PATH").replace(/\b\d+(\.\d+)?(ms|s|m|h)\b/g, "DUR").replace(/\b\d+\b/g, "#").replace(/\s+/g, " ").trim().slice(0, 200);
-}
-function spanKindFor(event, agentRunName) {
-  const llm = extractLlmCallEvent(event, agentRunName);
-  if (llm) return { kind: "LLM", model: llm.model ?? null, tool: null };
-  const type = String(event?.type ?? "");
-  if (/tool/i.test(type)) {
-    const d = event?.data;
-    const tool = typeof d?.name === "string" ? d.name : typeof d?.tool === "string" ? d.tool : type;
-    return { kind: "TOOL", model: null, tool };
-  }
-  return { kind: "SPAN", model: null, tool: null };
-}
-function errorMessageOf(event) {
-  const type = String(event?.type ?? "");
-  const d = event?.data;
-  if (/error|fail/i.test(type) || d?.error) {
-    const m = d?.error ?? d?.message;
-    return typeof m === "string" ? m : `${type} error`;
-  }
-  return void 0;
-}
-function projectIteration(iter) {
-  const traceId = iter.events.find((e) => e?.data?.sandboxId)?.data?.sandboxId ?? `iter-${iter.index}`;
-  const start = iso(iter.startedAt);
-  const end = iso(iter.endedAt || iter.startedAt);
-  const durationMs = Math.max(0, (iter.endedAt || iter.startedAt) - iter.startedAt);
-  const rootId = `${traceId}:root`;
-  const iterErrored = Boolean(iter.error) || iter.verdict?.valid === false;
-  const spans = [
-    {
-      trace_id: traceId,
-      span_id: rootId,
-      parent_span_id: null,
-      name: iter.agentRunName,
-      kind: "AGENT",
-      start_time: start,
-      end_time: end,
-      duration_ms: durationMs,
-      status: iter.error ? "ERROR" : "OK",
-      status_message: iter.error?.message,
-      service_name: "agent-runtime",
-      agent_name: iter.agentRunName,
-      model_name: null,
-      tool_name: null,
-      attributes: {
-        "iteration.index": iter.index,
-        "verdict.valid": iter.verdict?.valid,
-        "verdict.score": iter.verdict?.score,
-        "output.preview": iter.output === void 0 ? void 0 : String(iter.output).slice(0, 2e3)
-      }
-    }
-  ];
-  const models = /* @__PURE__ */ new Set();
-  const tools = /* @__PURE__ */ new Set();
-  iter.events.forEach((event, i) => {
-    const { kind, model, tool } = spanKindFor(event, iter.agentRunName);
-    if (model) models.add(model);
-    if (tool) tools.add(tool);
-    const errMsg = errorMessageOf(event);
-    spans.push({
-      trace_id: traceId,
-      span_id: `${traceId}:e${i}`,
-      parent_span_id: rootId,
-      name: String(event?.type ?? "event"),
-      kind,
-      start_time: start,
-      end_time: end,
-      duration_ms: 0,
-      status: errMsg ? "ERROR" : "OK",
-      status_message: errMsg,
-      service_name: "agent-runtime",
-      agent_name: iter.agentRunName,
-      model_name: model,
-      tool_name: tool,
-      attributes: event?.data ?? {}
-    });
-  });
-  const hasErrors = spans.some((s) => s.status === "ERROR") || iterErrored;
-  const summary = {
-    trace_id: traceId,
-    service_name: "agent-runtime",
-    agent_name: iter.agentRunName,
-    span_count: spans.length,
-    has_errors: hasErrors,
-    start_time: start,
-    end_time: end,
-    duration_ms: durationMs,
-    raw_jsonl_bytes: bytesOf(spans),
-    models: [...models],
-    tools: [...tools]
-  };
-  return { summary, spans, rawBytes: summary.raw_jsonl_bytes };
-}
-function matchesFilters(t, f) {
-  if (!f) return true;
-  if (f.has_errors !== void 0 && t.summary.has_errors !== f.has_errors) return false;
-  if (f.service_names?.length && !f.service_names.includes(t.summary.service_name ?? ""))
-    return false;
-  if (f.agent_names?.length && !f.agent_names.includes(t.summary.agent_name ?? "")) return false;
-  if (f.model_names?.length && !f.model_names.some((m) => t.summary.models.includes(m)))
-    return false;
-  if (f.tool_names?.length && !f.tool_names.some((tn) => t.summary.tools.includes(tn))) return false;
-  if (f.start_time_after && t.summary.start_time < f.start_time_after) return false;
-  if (f.start_time_before && t.summary.start_time > f.start_time_before) return false;
-  if (f.regex_pattern && !new RegExp(f.regex_pattern).test(JSON.stringify(t.spans))) return false;
-  return true;
-}
-function capAttributes(attributes, perAttrCap) {
-  let truncated = 0;
-  const capped = {};
-  for (const [k, v] of Object.entries(attributes)) {
-    const s = typeof v === "string" ? v : JSON.stringify(v);
-    if (typeof s === "string" && s.length > perAttrCap) {
-      truncated += 1;
-      capped[k] = `${TRACE_ANALYST_TRUNCATION_MARKER_PREFIX} ${s.length}b]${s.slice(0, perAttrCap)}`;
-    } else {
-      capped[k] = v;
-    }
-  }
-  return { capped, truncated };
-}
-function iterationsToTraceStore(iterations, budgets = DEFAULT_TRACE_ANALYST_BUDGETS) {
-  if (iterations.length === 0) {
-    throw new AnalystError("iterationsToTraceStore: no iterations to analyze (empty round)");
-  }
-  const traces = iterations.map((it) => projectIteration(it));
-  const byId = new Map(traces.map((t) => [t.summary.trace_id, t]));
-  const buildClusters = (set) => {
-    const map = /* @__PURE__ */ new Map();
-    for (const t of set) {
-      for (const s of t.spans) {
-        if (s.status !== "ERROR" || !s.status_message) continue;
-        const sig = normalizeSignature(s.status_message);
-        const c = map.get(sig) ?? {
-          signature: sig,
-          status_message_sample: s.status_message,
-          span_name: s.name,
-          tool_name: s.tool_name,
-          trace_count: 0,
-          span_count: 0,
-          prevalence: 0,
-          exemplar_trace_ids: [],
-          exemplar_span_ids: []
-        };
-        c.span_count += 1;
-        if (!c.exemplar_trace_ids.includes(t.summary.trace_id) && c.exemplar_trace_ids.length < 10) {
-          c.exemplar_trace_ids.push(t.summary.trace_id);
-          c.trace_count += 1;
-        }
-        if (c.exemplar_span_ids.length < 10) c.exemplar_span_ids.push(s.span_id);
-        map.set(sig, c);
-      }
-    }
-    const errorTraces = set.filter((t) => t.summary.has_errors).length || 1;
-    const clusters = [...map.values()].map((c) => ({
-      ...c,
-      prevalence: c.trace_count / errorTraces
-    }));
-    return clusters.sort((a, b) => b.trace_count - a.trace_count);
-  };
-  return {
-    async getOverview(filters) {
-      const set = traces.filter((t) => matchesFilters(t, filters));
-      const services = /* @__PURE__ */ new Set();
-      const agents = /* @__PURE__ */ new Set();
-      const models = /* @__PURE__ */ new Set();
-      const tools = /* @__PURE__ */ new Set();
-      let errorSpans = 0;
-      for (const t of set) {
-        if (t.summary.service_name) services.add(t.summary.service_name);
-        if (t.summary.agent_name) agents.add(t.summary.agent_name);
-        for (const m of t.summary.models) models.add(m);
-        for (const tn of t.summary.tools) tools.add(tn);
-        errorSpans += t.spans.filter((s) => s.status === "ERROR").length;
-      }
-      const times = set.map((t) => t.summary.start_time).sort();
-      return {
-        total_traces: set.length,
-        raw_jsonl_bytes: set.reduce((n, t) => n + t.rawBytes, 0),
-        services: [...services],
-        agents: [...agents],
-        models: [...models],
-        tool_names: [...tools],
-        sample_trace_ids: set.slice(0, 20).map((t) => t.summary.trace_id),
-        errors: {
-          trace_count: set.filter((t) => t.summary.has_errors).length,
-          span_count: errorSpans
-        },
-        error_clusters: buildClusters(set),
-        time_range: times.length ? { earliest: times[0], latest: times[times.length - 1] } : null
-      };
-    },
-    async queryTraces(opts) {
-      const set = traces.filter((t) => matchesFilters(t, opts.filters));
-      const offset = opts.offset ?? 0;
-      const page = set.slice(offset, offset + opts.limit);
-      return {
-        traces: page.map((t) => t.summary),
-        total: set.length,
-        has_more: offset + opts.limit < set.length
-      };
-    },
-    async countTraces(filters) {
-      return traces.filter((t) => matchesFilters(t, filters)).length;
-    },
-    async viewTrace(opts) {
-      const t = byId.get(opts.trace_id);
-      if (!t) return { trace_id: opts.trace_id, spans: [] };
-      const cap = opts.per_attribute_byte_cap ?? budgets.perAttributeViewBudget;
-      const projected = t.spans.map((s) => ({
-        ...s,
-        attributes: capAttributes(s.attributes, cap).capped
-      }));
-      if (bytesOf(projected) > budgets.perCallByteCeiling) {
-        const names = /* @__PURE__ */ new Map();
-        for (const s of t.spans) names.set(s.name, (names.get(s.name) ?? 0) + 1);
-        return {
-          trace_id: opts.trace_id,
-          oversized: {
-            span_count: t.spans.length,
-            top_span_names: [...names.entries()].sort((a, b) => b[1] - a[1]).slice(0, 20),
-            span_response_bytes_max: Math.max(...t.spans.map((s) => bytesOf(s))),
-            error_span_count: t.spans.filter((s) => s.status === "ERROR").length
-          }
-        };
-      }
-      return { trace_id: opts.trace_id, spans: projected };
-    },
-    async viewSpans(opts) {
-      const t = byId.get(opts.trace_id);
-      const cap = opts.per_attribute_byte_cap ?? budgets.perAttributeSpanBudget;
-      const want = new Set(opts.span_ids);
-      const found = (t?.spans ?? []).filter((s) => want.has(s.span_id));
-      let truncated = 0;
-      const spans = found.map((s) => {
-        const { capped, truncated: n } = capAttributes(s.attributes, cap);
-        truncated += n;
-        return { ...s, attributes: capped };
-      });
-      const foundIds = new Set(found.map((s) => s.span_id));
-      return {
-        trace_id: opts.trace_id,
-        spans,
-        missing_span_ids: opts.span_ids.filter((id) => !foundIds.has(id)),
-        truncated_attribute_count: truncated
-      };
-    },
-    async searchTrace(opts) {
-      const t = byId.get(opts.trace_id);
-      const max = opts.max_matches ?? 50;
-      const hits = [];
-      for (const s of t?.spans ?? []) {
-        for (const hit of searchSpanAttrs(s, opts.regex_pattern, budgets.perMatchTextBudget)) {
-          if (hits.length >= max) break;
-          hits.push(hit);
-        }
-      }
-      return {
-        trace_id: opts.trace_id,
-        hits,
-        total_matches: hits.length,
-        has_more: hits.length >= max
-      };
-    },
-    async searchSpan(opts) {
-      const t = byId.get(opts.trace_id);
-      const max = opts.max_matches ?? 50;
-      const span = (t?.spans ?? []).find((s) => s.span_id === opts.span_id);
-      const hits = span ? searchSpanAttrs(span, opts.regex_pattern, budgets.perMatchTextBudget).slice(0, max) : [];
-      return {
-        trace_id: opts.trace_id,
-        span_id: opts.span_id,
-        hits,
-        total_matches: hits.length,
-        has_more: false
-      };
-    }
-  };
-}
-function searchSpanAttrs(span, pattern, textCap) {
-  const re = new RegExp(pattern, "g");
-  const hits = [];
-  for (const [k, v] of Object.entries(span.attributes)) {
-    const text = typeof v === "string" ? v : JSON.stringify(v);
-    if (typeof text !== "string") continue;
-    re.lastIndex = 0;
-    const m = re.exec(text);
-    if (!m) continue;
-    const at = m.index;
-    hits.push({
-      trace_id: span.trace_id,
-      span_id: span.span_id,
-      span_name: span.name,
-      span_kind: span.kind,
-      attribute_path: `attributes.${k}`,
-      matched_text: m[0].slice(0, textCap),
-      context_before: text.slice(Math.max(0, at - textCap / 2), at),
-      context_after: text.slice(at + m[0].length, at + m[0].length + textCap / 2),
-      match_offset: at
-    });
-  }
-  return hits;
-}
-
-// src/analyst-loop/run-analyst-loop.ts
-import { diffFindings } from "@tangle-network/agent-eval";
-async function runAnalystLoop(opts) {
-  const log = opts.log ?? defaultLog;
-  const strategy = opts.priorFindingsStrategy ?? "per-kind";
-  const emit = makeEmitter(opts.onEvent);
-  const startedAt = Date.now();
-  const baselineRunId = resolveBaselineRunId(opts);
-  const priorAll = baselineRunId ? opts.findingsStore?.loadRun(baselineRunId) ?? [] : [];
-  log("baseline resolved", { baselineRunId, prior_findings: priorAll.length });
-  await emit({
-    type: "baseline-resolved",
-    runId: opts.runId,
-    baselineRunId,
-    priorFindingCount: priorAll.length
-  });
-  const priorFindings = buildPriorFindingsInput(priorAll, strategy, opts.registry.list());
-  const analystResult = await runRegistry(opts, priorFindings, emit);
-  log("analyst run complete", {
-    findings: analystResult.findings.length,
-    cost_usd: analystResult.total_cost_usd,
-    per_analyst: analystResult.per_analyst.map((s) => ({
-      id: s.analyst_id,
-      status: s.status,
-      n: s.findings_count
-    }))
-  });
-  if (opts.findingsStore && analystResult.findings.length > 0) {
-    await opts.findingsStore.append(opts.runId, analystResult.findings);
-    await emit({
-      type: "findings-persisted",
-      runId: opts.runId,
-      count: analystResult.findings.length
-    });
-  }
-  let diff = null;
-  if (baselineRunId && analystResult.findings.length > 0) {
-    diff = diffFindings(
-      priorAll.map((f) => ({ ...f })),
-      analystResult.findings.map((f) => ({ ...f, run_id: opts.runId }))
-    );
-    log("diff vs baseline", {
-      appeared: diff.appeared.length,
-      disappeared: diff.disappeared.length,
-      persisted: diff.persisted.length,
-      changed: diff.changed.length
-    });
-    await emit({
-      type: "diff-computed",
-      runId: opts.runId,
-      baselineRunId,
-      appeared: diff.appeared.length,
-      disappeared: diff.disappeared.length,
-      persisted: diff.persisted.length,
-      changed: diff.changed.length
-    });
-  }
-  let knowledge = null;
-  if (opts.knowledgeProposalSource) {
-    knowledge = await runKnowledgeProposalSource(opts, analystResult.findings, log, emit);
-  }
-  let improvement = null;
-  if (opts.improvementProposalSource) {
-    improvement = await runImprovementProposalSource(opts, analystResult.findings, log, emit);
-  }
-  await emit({
-    type: "loop-completed",
-    runId: opts.runId,
-    durationMs: Date.now() - startedAt
-  });
-  return {
-    runId: opts.runId,
-    baselineRunId,
-    analystResult,
-    diff,
-    knowledge,
-    improvement
-  };
-}
-function makeEmitter(onEvent) {
-  if (!onEvent) return async () => {
-  };
-  return async (event) => {
-    await onEvent(event);
-  };
-}
-async function runRegistry(opts, priorFindings, emit) {
-  const reg = opts.registry;
-  if (typeof reg.runStream === "function" && opts.onEvent) {
-    let final = null;
-    for await (const ev of reg.runStream(opts.runId, opts.inputs, { priorFindings })) {
-      await emit({ type: "analyst", runId: opts.runId, event: ev });
-      if (ev.type === "run-completed") final = ev.result;
-    }
-    if (!final) {
-      throw new Error("runAnalystLoop: registry.runStream ended without run-completed event");
-    }
-    return final;
-  }
-  return opts.registry.run(opts.runId, opts.inputs, { priorFindings });
-}
-function resolveBaselineRunId(opts) {
-  if (opts.baselineRunId === null) return null;
-  if (typeof opts.baselineRunId === "string") return opts.baselineRunId;
-  if (!opts.findingsStore) return null;
-  const all = opts.findingsStore.loadAll();
-  let last = null;
-  for (const row of all) {
-    if (row.run_id === opts.runId) continue;
-    last = row.run_id;
-  }
-  return last;
-}
-function buildPriorFindingsInput(prior, strategy, registry) {
-  if (strategy === "none" || prior.length === 0) return void 0;
-  const stripped = prior.map(({ run_id: _run_id, ...rest }) => rest);
-  if (strategy === "wildcard") {
-    return { "*": stripped };
-  }
-  void registry;
-  return stripped;
-}
-async function runKnowledgeProposalSource(opts, findings, log, emit) {
-  const source = opts.knowledgeProposalSource;
-  const batch = await source.proposeFromFindings(findings);
-  log("knowledge.proposeFromFindings", {
-    proposals: batch.proposals.length,
-    skipped: batch.skipped,
-    errors: batch.errors.length
-  });
-  await emit({
-    type: "knowledge-proposed",
-    runId: opts.runId,
-    proposalCount: batch.proposals.length,
-    skipped: batch.skipped,
-    errors: batch.errors.length
-  });
-  return {
-    proposals: batch.proposals,
-    skipped: batch.skipped,
-    errors: batch.errors
-  };
-}
-async function runImprovementProposalSource(opts, findings, log, emit) {
-  const source = opts.improvementProposalSource;
-  const batch = await source.proposeFromFindings(findings);
-  log("improvement.proposeFromFindings", {
-    edits: batch.edits.length,
-    skipped: batch.skipped,
-    errors: batch.errors.length
-  });
-  await emit({
-    type: "improvement-proposed",
-    runId: opts.runId,
-    editCount: batch.edits.length,
-    skipped: batch.skipped,
-    errors: batch.errors.length
-  });
-  return {
-    edits: batch.edits,
-    skipped: batch.skipped,
-    errors: batch.errors
-  };
-}
-function defaultLog(msg, fields) {
-  if (fields) console.log(`[analyst-loop] ${msg}`, fields);
-  else console.log(`[analyst-loop] ${msg}`);
-}
-
-export {
-  iterationsToTraceStore,
-  runAnalystLoop
-};
-//# sourceMappingURL=chunk-FD2MBMOH.js.map