@tangle-network/agent-runtime 0.143.0 → 0.153.1

package/dist/environment-provider-DCBJ13VP.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"environment-provider-DCBJ13VP.js","names":[],"sources":["../src/runtime/tangle-sandbox-exact-process-provider.ts","../src/runtime/environment-provider.ts"],"sourcesContent":["import { isDeepStrictEqual } from 'node:util'\n\nimport type { AgentCandidateTermination } from '@tangle-network/agent-interface'\nimport type {\n  AgentEnvironmentCapabilities,\n  AgentEnvironmentProvider,\n  AgentExactProcess,\n  AgentExactProcessEnvironment,\n  AgentExactProcessEnvironmentQuery,\n  AgentExactProcessProvider,\n  AgentExactProcessStatus,\n  CreateAgentExactProcessEnvironmentInput,\n} from '@tangle-network/agent-interface/environment-provider'\nimport type {\n  Process,\n  ProcessStatus,\n  Sandbox,\n  SandboxInstance,\n  SandboxResources,\n} from '@tangle-network/sandbox'\n\nexport type SandboxControlClient = Pick<Sandbox, 'create' | 'get' | 'list'>\n\ntype ExactSandboxEgressPolicy =\n  | { mode: 'blocked' }\n  | { mode: 'strict'; allowDomains: string[]; includeImplicitDomains: false }\n\nexport interface CreateTangleSandboxExactProcessProviderOptions {\n  name?: string\n}\n\nconst exactProcessProviderMarker = 'agent-runtime.exact-process-provider'\nconst exactProcessEgressMarker = 'agent-runtime.exact-process-egress'\n\n/**\n * Adapt Tangle Sandbox's managed control runtime to Runtime's exact-process provider.\n *\n * The adapter deliberately exposes no ordinary agent environment: an exact experiment\n * must start a fresh Sandbox with no managed agent and launch its declared argv directly.\n */\nexport function createTangleSandboxExactProcessProvider(\n  client: SandboxControlClient,\n  options: CreateTangleSandboxExactProcessProviderOptions = {},\n): AgentEnvironmentProvider {\n  const name = options.name ?? 'tangle-sandbox-exact-process'\n  if (!name.trim()) throw new Error('Tangle Sandbox exact-process provider name must not be empty')\n\n  const exactProcess: AgentExactProcessProvider = {\n    async create(input: CreateAgentExactProcessEnvironmentInput) {\n      throwIfAborted(input.signal)\n      assertNoProviderOptions(input.providerOptions)\n      const egressPolicy = sandboxEgressPolicy(input.egress)\n      const metadata = exactMetadata(input.metadata, name, egressPolicy)\n      const sandbox = await client.create(\n        {\n          environment: requiredText(input.image, 'exact-process image'),\n          agent: false,\n          bare: false,\n          ephemeral: true,\n          egressPolicy,\n          resources: sandboxResources(input),\n          maxLifetimeSeconds: sandboxLifetimeSeconds(input.maxLifetimeMs),\n          metadata,\n          idempotencyKey: requiredText(input.idempotencyKey, 'exact-process idempotency key'),\n        },\n        {\n          ...(input.provisionTimeoutMs === undefined\n            ? {}\n            : { timeoutMs: positiveInteger(input.provisionTimeoutMs, 'provision timeout') }),\n          ...(input.signal === undefined ? {} : { signal: input.signal }),\n        },\n      )\n      try {\n        throwIfAborted(input.signal)\n        assertExactSandboxMetadata(sandbox, metadata)\n        await assertExactSandboxEgress(sandbox, egressPolicy)\n      } catch (error) {\n        await discardInvalidSandbox(sandbox, error)\n      }\n      return sandboxAsExactProcessEnvironment(sandbox, name)\n    },\n    async get(id: string) {\n      const sandbox = await client.get(id)\n      if (!sandbox || !isExactSandbox(sandbox, name)) return null\n      await assertExactSandboxEgress(sandbox, egressFromMetadata(sandbox.metadata))\n      return sandboxAsExactProcessEnvironment(sandbox, name)\n    },\n    async list(query?: AgentExactProcessEnvironmentQuery) {\n      assertNoProviderOptions(query?.providerOptions)\n      const sandboxes = await client.list()\n      return Promise.all(\n        sandboxes\n          .filter((sandbox) => isExactSandbox(sandbox, name))\n          .filter((sandbox) => metadataMatches(sandbox.metadata, query?.metadata))\n          .map(async (sandbox) => {\n            await assertExactSandboxEgress(sandbox, egressFromMetadata(sandbox.metadata))\n            return sandboxAsExactProcessEnvironment(sandbox, name)\n          }),\n      )\n    },\n  }\n\n  return {\n    name,\n    exactProcess,\n    capabilities: exactProcessOnlyCapabilities,\n    async create() {\n      throw new Error(`agent environment provider \"${name}\" supports exactProcess.create() only`)\n    },\n  }\n}\n\nfunction sandboxAsExactProcessEnvironment(\n  sandbox: SandboxInstance,\n  provider: string,\n): AgentExactProcessEnvironment {\n  return {\n    id: requiredText(sandbox.id, 'Sandbox id'),\n    provider,\n    ...(sandbox.metadata ? { metadata: sandbox.metadata } : {}),\n    process: {\n      async list(): Promise<AgentExactProcessStatus[]> {\n        return (await sandbox.process.list()).map((status) => exactProcessStatus(status))\n      },\n      async get(pid: number): Promise<AgentExactProcess | null> {\n        const process = await sandbox.process.get(pid)\n        return process ? sandboxProcessAsExactProcess(process) : null\n      },\n      async spawn(input, options): Promise<AgentExactProcess> {\n        const process = await afterAbortCheck(options?.signal, () =>\n          sandbox.process.spawnExact(input.executable, [...input.args], {\n            cwd: input.cwd,\n            env: { ...input.env },\n            inheritEnv: false,\n            ...(input.stdin === undefined ? {} : { stdin: input.stdin }),\n            timeoutMs: input.timeoutMs,\n          }),\n        )\n        return sandboxProcessAsExactProcess(process)\n      },\n    },\n    async writeFile(path, bytes, options): Promise<void> {\n      if (sandbox.fs.supportsWriteMode !== true) {\n        throw new Error('Tangle Sandbox does not declare exact file-mode support')\n      }\n      await afterAbortCheck(options.signal, () =>\n        sandbox.fs.write(path, Buffer.from(bytes).toString('base64'), {\n          encoding: 'base64',\n          mode: fileMode(options.mode),\n        }),\n      )\n    },\n    async readFile(path, options): Promise<Uint8Array> {\n      const maxBytes = nonnegativeInteger(options.maxBytes, 'exact-process file read maximum')\n      const initialSize = nonnegativeInteger(\n        (await afterAbortCheck(options.signal, () => sandbox.fs.stat(path))).size,\n        `Tangle Sandbox file size for \"${path}\"`,\n      )\n      if (initialSize > maxBytes) {\n        throw new Error(\n          `Tangle Sandbox file \"${path}\" exceeds the ${maxBytes}-byte exact read maximum`,\n        )\n      }\n      const result = await afterAbortCheck(options.signal, () =>\n        sandbox.fs.readBatch([path], { encoding: 'base64' }),\n      )\n      const failure = result.errors.find((entry) => entry.path === path)\n      if (failure) {\n        throw new Error(`Tangle Sandbox failed to read \"${path}\": ${failure.error}`)\n      }\n      const files = result.files.filter((entry) => entry.path === path)\n      if (files.length !== 1) {\n        throw new Error(`Tangle Sandbox returned ${files.length} files for exact read \"${path}\"`)\n      }\n      const file = files[0]!\n      if (file.encoding !== 'base64') {\n        throw new Error(`Tangle Sandbox returned non-binary content for exact read \"${path}\"`)\n      }\n      const size = nonnegativeInteger(file.size, `Tangle Sandbox file size for \"${path}\"`)\n      if (size !== initialSize) {\n        throw new Error(`Tangle Sandbox file \"${path}\" changed during exact read`)\n      }\n      if (size > maxBytes) {\n        throw new Error(\n          `Tangle Sandbox file \"${path}\" exceeds the ${maxBytes}-byte exact read maximum`,\n        )\n      }\n      const bytes = Buffer.from(file.content, 'base64')\n      if (bytes.byteLength !== size || bytes.toString('base64') !== file.content) {\n        throw new Error(\n          `Tangle Sandbox returned an invalid binary payload for exact read \"${path}\"`,\n        )\n      }\n      return Uint8Array.from(bytes)\n    },\n    async destroy(): Promise<void> {\n      await sandbox.delete()\n    },\n  }\n}\n\nfunction sandboxProcessAsExactProcess(process: Process): AgentExactProcess {\n  const pid = positiveInteger(process.pid, 'Tangle Sandbox process pid')\n  return {\n    pid,\n    async status(): Promise<AgentExactProcessStatus> {\n      return exactProcessStatus(await process.status(), pid)\n    },\n    async wait(): Promise<AgentCandidateTermination> {\n      const waitExitCode = await process.wait()\n      if (!Number.isSafeInteger(waitExitCode)) {\n        throw new Error('Tangle Sandbox process wait returned an invalid exit code')\n      }\n      const status = exactProcessStatus(await process.status(), pid)\n      if (status.running || !status.termination) {\n        throw new Error('Tangle Sandbox process wait returned before terminal status')\n      }\n      if (status.termination.kind === 'exit' && status.termination.exitCode !== waitExitCode) {\n        throw new Error('Tangle Sandbox process wait and status disagree on exit code')\n      }\n      return status.termination\n    },\n    async kill(): Promise<void> {\n      await process.kill('SIGKILL', { tree: true })\n    },\n    async *stdout(): AsyncIterable<string> {\n      yield* process.stdout()\n    },\n    async *stderr(): AsyncIterable<string> {\n      yield* process.stderr()\n    },\n  }\n}\n\nfunction exactProcessStatus(status: ProcessStatus, expectedPid?: number): AgentExactProcessStatus {\n  const pid = positiveInteger(status.pid, 'Tangle Sandbox process pid')\n  if (expectedPid !== undefined && pid !== expectedPid) {\n    throw new Error('Tangle Sandbox process status changed process identity')\n  }\n  if (typeof status.running !== 'boolean') {\n    throw new Error('Tangle Sandbox process status is missing running state')\n  }\n  if (!Number.isSafeInteger(status.exitCode)) {\n    throw new Error('Tangle Sandbox process status is missing an integer exit code')\n  }\n  const exitSignal = optionalText(status.exitSignal, 'Tangle Sandbox process exit signal')\n  if (status.running) {\n    if (status.exitCode !== -1) {\n      throw new Error('Tangle Sandbox running process must report exit code -1')\n    }\n    if (exitSignal) {\n      throw new Error('Tangle Sandbox running process must not report an exit signal')\n    }\n    return {\n      pid,\n      running: true,\n      exitCode: -1,\n    }\n  }\n  const termination = exitSignal\n    ? ({ kind: 'signal', signal: exitSignal } as const)\n    : status.exitCode >= 0\n      ? ({ kind: 'exit', exitCode: status.exitCode } as const)\n      : undefined\n  if (!termination) {\n    throw new Error('Tangle Sandbox stopped process has no terminal reason')\n  }\n  return {\n    pid,\n    running: false,\n    exitCode: status.exitCode,\n    ...(exitSignal ? { exitSignal } : {}),\n    termination,\n  }\n}\n\nfunction exactMetadata(\n  metadata: Record<string, unknown>,\n  provider: string,\n  egressPolicy: ExactSandboxEgressPolicy,\n): Record<string, unknown> {\n  for (const marker of [exactProcessProviderMarker, exactProcessEgressMarker]) {\n    if (Object.hasOwn(metadata, marker)) {\n      throw new Error(`exact-process metadata must not set \"${marker}\"`)\n    }\n  }\n  return {\n    ...metadata,\n    [exactProcessProviderMarker]: provider,\n    [exactProcessEgressMarker]: serializeEgressPolicy(egressPolicy),\n  }\n}\n\nfunction isExactSandbox(sandbox: SandboxInstance, provider: string): boolean {\n  return sandbox.metadata?.[exactProcessProviderMarker] === provider\n}\n\nfunction metadataMatches(\n  metadata: Record<string, unknown> | undefined,\n  expected: Record<string, unknown> | undefined,\n): boolean {\n  return (\n    expected === undefined ||\n    Object.entries(expected).every(([key, value]) => isDeepStrictEqual(metadata?.[key], value))\n  )\n}\n\nfunction assertExactSandboxMetadata(\n  sandbox: SandboxInstance,\n  expected: Record<string, unknown>,\n): void {\n  if (!metadataMatches(sandbox.metadata, expected)) {\n    throw new Error('Tangle Sandbox did not persist exact-process metadata')\n  }\n}\n\nfunction egressFromMetadata(\n  metadata: Record<string, unknown> | undefined,\n): ExactSandboxEgressPolicy {\n  const encoded = metadata?.[exactProcessEgressMarker]\n  if (typeof encoded !== 'string') {\n    throw new Error('Tangle Sandbox exact-process environment is missing egress metadata')\n  }\n  try {\n    const parsed: unknown = JSON.parse(encoded)\n    if (!parsed || typeof parsed !== 'object') throw new Error('expected egress object')\n    const policy = parsed as {\n      mode?: unknown\n      allowDomains?: unknown\n      includeImplicitDomains?: unknown\n    }\n    if (policy.mode === 'blocked' && policy.allowDomains === undefined) return { mode: 'blocked' }\n    if (\n      policy.mode === 'strict' &&\n      policy.includeImplicitDomains === false &&\n      Array.isArray(policy.allowDomains) &&\n      policy.allowDomains.every((domain): domain is string => typeof domain === 'string')\n    ) {\n      const allowDomains = sortedDomains(policy.allowDomains)\n      if (new Set(allowDomains).size === allowDomains.length) {\n        return { mode: 'strict', allowDomains, includeImplicitDomains: false }\n      }\n    }\n  } catch {\n    throw new Error('Tangle Sandbox exact-process environment has invalid egress metadata')\n  }\n  throw new Error('Tangle Sandbox exact-process environment has invalid egress metadata')\n}\n\nasync function assertExactSandboxEgress(\n  sandbox: SandboxInstance,\n  expected: ExactSandboxEgressPolicy,\n): Promise<void> {\n  const actual = (await sandbox.egress.get()).policy\n  if (actual.mode !== expected.mode) {\n    throw new Error(\n      `Tangle Sandbox egress mismatch: expected ${expected.mode}, received ${actual.mode}`,\n    )\n  }\n  if (expected.mode === 'blocked') {\n    const allowDomains = (actual as { allowDomains?: unknown }).allowDomains\n    if (\n      actual.mode === 'blocked' &&\n      (allowDomains === undefined || (Array.isArray(allowDomains) && allowDomains.length === 0))\n    ) {\n      return\n    }\n    throw new Error('Tangle Sandbox blocked egress retained an allowlist')\n  }\n  if (actual.mode !== 'strict') {\n    throw new Error('Tangle Sandbox did not return strict egress policy')\n  }\n  const expectedDomains = sortedDomains(expected.allowDomains)\n  const actualDomains = sortedDomains(actual.allowDomains ?? [])\n  if (!isDeepStrictEqual(actualDomains, expectedDomains)) {\n    throw new Error('Tangle Sandbox strict egress differs from the exact allowlist')\n  }\n  if (actual.includeImplicitDomains !== false) {\n    throw new Error('Tangle Sandbox strict egress retained implicit domains')\n  }\n}\n\nfunction sandboxEgressPolicy(\n  input: CreateAgentExactProcessEnvironmentInput['egress'],\n): ExactSandboxEgressPolicy {\n  if (input.mode === 'blocked') return { mode: 'blocked' }\n  const allowDomains = input.allowDomains.map((domain) =>\n    requiredText(domain, 'strict egress domain'),\n  )\n  if (new Set(allowDomains).size !== allowDomains.length) {\n    throw new Error('strict egress domains must not contain duplicates')\n  }\n  return { mode: 'strict', allowDomains, includeImplicitDomains: false }\n}\n\nfunction serializeEgressPolicy(policy: ExactSandboxEgressPolicy): string {\n  return JSON.stringify(\n    policy.mode === 'blocked'\n      ? { mode: 'blocked' }\n      : {\n          mode: 'strict',\n          allowDomains: sortedDomains(policy.allowDomains),\n          includeImplicitDomains: false,\n        },\n  )\n}\n\nfunction sandboxResources(input: CreateAgentExactProcessEnvironmentInput): SandboxResources {\n  const cpuCores = positiveNumber(input.resources.cpu, 'exact-process cpu')\n  const memoryMB = positiveInteger(input.resources.memoryMb, 'exact-process memory')\n  const diskMb = positiveInteger(input.resources.diskMb, 'exact-process disk')\n  if (diskMb % 1024 !== 0) {\n    throw new Error('Tangle Sandbox exact-process disk must be a whole GiB')\n  }\n  return { cpuCores, memoryMB, diskGB: diskMb / 1024 }\n}\n\nfunction sandboxLifetimeSeconds(maxLifetimeMs: number): number {\n  const milliseconds = positiveInteger(maxLifetimeMs, 'exact-process maximum lifetime')\n  if (milliseconds % 1_000 !== 0) {\n    throw new Error(\n      'Tangle Sandbox exact-process maximum lifetime must be a whole number of seconds',\n    )\n  }\n  return milliseconds / 1_000\n}\n\nfunction fileMode(value: number): number {\n  const mode = nonnegativeInteger(value, 'exact-process file mode')\n  if (mode > 0o7777) throw new Error('exact-process file mode exceeds POSIX mode bits')\n  return mode\n}\n\nfunction assertNoProviderOptions(providerOptions: Record<string, unknown> | undefined): void {\n  if (providerOptions && Object.keys(providerOptions).length > 0) {\n    throw new Error('Tangle Sandbox exact-process provider does not accept providerOptions')\n  }\n}\n\nfunction exactProcessOnlyCapabilities(): AgentEnvironmentCapabilities {\n  return {\n    profile: {\n      namedProfiles: false,\n      // Exact-process runs a command as given and interprets no part of a profile, so neither\n      // spelling is honored and a profile carrying one is refused rather than silently dropped.\n      systemPrompt: { replace: false, append: false },\n      instructions: false,\n      tools: false,\n      permissions: false,\n      mcp: false,\n      subagents: false,\n      resources: {\n        files: false,\n        instructions: false,\n        tools: false,\n        skills: false,\n        agents: false,\n        commands: false,\n      },\n      hooks: false,\n      modes: false,\n      runtimeUpdate: false,\n      validation: false,\n    },\n    streaming: { live: false, replay: false, detach: false, turnIdempotency: false },\n    sessions: { continue: false, list: false, messages: false },\n    workspace: {\n      read: false,\n      write: false,\n      exec: false,\n      git: false,\n      upload: false,\n      download: false,\n    },\n    branching: { checkpoint: false, fork: false },\n    placement: false,\n    usage: false,\n    confidential: false,\n    exactProcess: { egress: ['blocked', 'strict'] },\n  }\n}\n\nasync function discardInvalidSandbox(sandbox: SandboxInstance, cause: unknown): Promise<never> {\n  try {\n    await sandbox.delete()\n  } catch (destroyError) {\n    throw new AggregateError(\n      [cause, destroyError],\n      'Tangle Sandbox exact-process creation failed and cleanup failed',\n    )\n  }\n  throw cause\n}\n\nfunction sortedDomains(domains: readonly string[]): string[] {\n  return [...domains].sort((left, right) => left.localeCompare(right))\n}\n\nfunction requiredText(value: string, label: string): string {\n  if (typeof value !== 'string' || !value.trim())\n    throw new Error(`${label} must be a non-empty string`)\n  return value\n}\n\nfunction optionalText(value: string | undefined, label: string): string | undefined {\n  if (value === undefined) return undefined\n  return requiredText(value, label)\n}\n\nfunction positiveNumber(value: number, label: string): number {\n  if (!Number.isFinite(value) || value <= 0) throw new Error(`${label} must be positive`)\n  return value\n}\n\nfunction positiveInteger(value: number, label: string): number {\n  if (!Number.isSafeInteger(value) || value < 1)\n    throw new Error(`${label} must be a positive integer`)\n  return value\n}\n\nfunction nonnegativeInteger(value: number, label: string): number {\n  if (!Number.isSafeInteger(value) || value < 0)\n    throw new Error(`${label} must be a non-negative integer`)\n  return value\n}\n\nfunction throwIfAborted(signal: AbortSignal | undefined): void {\n  signal?.throwIfAborted()\n}\n\nasync function afterAbortCheck<T>(\n  signal: AbortSignal | undefined,\n  operation: () => Promise<T>,\n): Promise<T> {\n  throwIfAborted(signal)\n  const result = await operation()\n  throwIfAborted(signal)\n  return result\n}\n","import {\n  type AgentExactRunControlRef,\n  AgentExactRunControlRefSchema,\n  type AgentProfile,\n  type AgentProfileValidationResult,\n  type AgentRunCancellationAcknowledgement,\n  type AgentRunCancellationRequest,\n  AgentRunCancellationRequestSchema,\n  type AgentRunControlRef,\n  harnessSystemPromptIntents,\n  type InteractionAcknowledgement,\n  type InteractionResponseCommand,\n  type TokenUsage,\n} from '@tangle-network/agent-interface'\nimport type {\n  AgentEnvironment,\n  AgentEnvironmentCapabilities,\n  AgentEnvironmentEvent,\n  AgentEnvironmentProvider,\n  AgentEnvironmentQuery,\n  AgentEnvironmentStatus,\n  AgentEnvironmentSummary,\n  AgentProfileRef,\n  AgentSession,\n  AgentSessionRef,\n  AgentSessionStatus,\n  AgentTurnInput,\n  AgentTurnResult,\n  CheckpointRef,\n  CheckpointRequest,\n  CreateAgentEnvironmentInput,\n  ExecRequest,\n  ExecResult,\n  ForkRequest,\n  PlacementInfo,\n  ResourceRequest,\n} from '@tangle-network/agent-interface/environment-provider'\nimport type {\n  BackendType,\n  CreateSandboxOptions,\n  PromptInputPart,\n  PromptOptions,\n  PromptResult,\n  SandboxEvent,\n  ExecResult as SandboxExecResult,\n  SandboxInstance,\n} from '@tangle-network/sandbox'\nimport { awaitAbortable, sameControlCoordinates } from './retained-run-binding'\nimport { canonicalStreamEventFromSandboxEvent } from './sandbox-events'\nimport type {\n  Executor,\n  ExecutorContext,\n  ExecutorFactory,\n  ExecutorResult,\n  Runtime,\n  Spend,\n  UsageEvent,\n} from './supervise/types'\nimport { promptFromAgentTurnInput, promptOptionsFromAgentTurnInput } from './turn-input'\nimport type { LoopSandboxPlacement, SandboxClient } from './types'\nimport { zeroTokenUsage } from './util'\n\n// Keep this file loadable from the lean `./environment-provider` export without agent-eval installed.\nclass ValidationError extends Error {\n  constructor(message: string, options?: { cause?: unknown }) {\n    super(message, options)\n    this.name = 'ValidationError'\n  }\n}\n\nexport type {\n  AgentEnvironment,\n  AgentEnvironmentCapabilities,\n  AgentEnvironmentEvent,\n  AgentEnvironmentProvider,\n  AgentEnvironmentQuery,\n  AgentEnvironmentStatus,\n  AgentEnvironmentSummary,\n  AgentProfileRef,\n  AgentSession,\n  AgentSessionRef,\n  AgentSessionStatus,\n  AgentTurnInput,\n  AgentTurnResult,\n  CheckpointRef,\n  CheckpointRequest,\n  CreateAgentEnvironmentInput,\n  ExecRequest,\n  ExecResult,\n  ForkRequest,\n  PlacementInfo,\n  ResourceRequest,\n  WorkspaceRequest,\n} from '@tangle-network/agent-interface/environment-provider'\n\nexport {\n  type CreateTangleSandboxExactProcessProviderOptions,\n  createTangleSandboxExactProcessProvider,\n} from './tangle-sandbox-exact-process-provider'\n\n/** Provider object or registry name accepted by runtime provider adapters.\n * @experimental */\nexport type AgentEnvironmentProviderRef = AgentEnvironmentProvider | string\n\n/** In-memory registry for named `AgentEnvironmentProvider` instances.\n * @experimental */\nexport interface AgentEnvironmentProviderRegistry {\n  register(provider: AgentEnvironmentProvider, options?: { replace?: boolean }): void\n  has(name: string): boolean\n  get(name: string): AgentEnvironmentProvider | undefined\n  require(name: string): AgentEnvironmentProvider\n  names(): string[]\n  providers(): AgentEnvironmentProvider[]\n  capabilities(name: string): Promise<AgentEnvironmentCapabilities>\n}\n\n/** Create a registry that resolves provider names to concrete provider instances.\n * @experimental */\nexport function createAgentEnvironmentProviderRegistry(\n  providers: Iterable<AgentEnvironmentProvider> = [],\n): AgentEnvironmentProviderRegistry {\n  const entries = new Map<string, AgentEnvironmentProvider>()\n\n  const registry: AgentEnvironmentProviderRegistry = {\n    register(provider, options = {}): void {\n      if (!provider.name) {\n        throw new ValidationError('agent environment provider registry: provider.name required')\n      }\n      if (!options.replace && entries.has(provider.name)) {\n        throw new ValidationError(\n          `agent environment provider registry: provider \"${provider.name}\" already registered`,\n        )\n      }\n      entries.set(provider.name, provider)\n    },\n    has(name): boolean {\n      return entries.has(name)\n    },\n    get(name): AgentEnvironmentProvider | undefined {\n      return entries.get(name)\n    },\n    require(name): AgentEnvironmentProvider {\n      const provider = entries.get(name)\n      if (!provider) {\n        const available = Array.from(entries.keys()).sort()\n        const suffix = available.length > 0 ? `; available: ${available.join(', ')}` : ''\n        throw new ValidationError(\n          `agent environment provider registry: provider \"${name}\" is not registered${suffix}`,\n        )\n      }\n      return provider\n    },\n    names(): string[] {\n      return Array.from(entries.keys()).sort()\n    },\n    providers(): AgentEnvironmentProvider[] {\n      return registry.names().map((name) => registry.require(name))\n    },\n    async capabilities(name): Promise<AgentEnvironmentCapabilities> {\n      return registry.require(name).capabilities()\n    },\n  }\n\n  for (const provider of providers) registry.register(provider)\n  return registry\n}\n\n/** Resolve a provider instance or registry name, failing loudly when a name is unknown.\n * @experimental */\nexport function resolveAgentEnvironmentProvider(\n  provider: AgentEnvironmentProviderRef,\n  registry?: AgentEnvironmentProviderRegistry,\n): AgentEnvironmentProvider {\n  if (typeof provider !== 'string') return provider\n  if (!registry) {\n    throw new ValidationError(\n      `agent environment provider \"${provider}\" requires an AgentEnvironmentProviderRegistry`,\n    )\n  }\n  return registry.require(provider)\n}\n\n/** Options for exposing an `AgentEnvironmentProvider` through the legacy sandbox client port.\n * @experimental */\nexport interface ProviderAsSandboxClientOptions {\n  defaults?: Partial<CreateAgentEnvironmentInput>\n  requireTerminalEvent?: boolean\n  /** Require declared live continuation plus concrete session controls. */\n  requireSession?: boolean\n  mapCreateOptions?: (\n    options: CreateSandboxOptions | undefined,\n  ) => Partial<CreateAgentEnvironmentInput>\n}\n\n/** Adapt a neutral environment provider to the `SandboxClient` interface used by existing loop paths.\n * @experimental */\nexport function providerAsSandboxClient(\n  provider: AgentEnvironmentProvider,\n  options: ProviderAsSandboxClientOptions = {},\n): SandboxClient {\n  return {\n    async create(createOptions?: CreateSandboxOptions): Promise<SandboxInstance> {\n      const defaults = options.defaults ?? {}\n      const sandboxInput = createInputFromSandboxOptions(createOptions)\n      const customInput = options.mapCreateOptions?.(createOptions) ?? {}\n      const mapped = {\n        ...defaults,\n        ...sandboxInput,\n        ...customInput,\n        providerOptions: {\n          ...(defaults.providerOptions ?? {}),\n          ...(sandboxInput.providerOptions ?? {}),\n          ...(customInput.providerOptions ?? {}),\n        },\n      }\n      if (mapped.backend === undefined) delete mapped.backend\n      if (mapped.profile === undefined) {\n        throw new ValidationError(\n          `providerAsSandboxClient(${provider.name}): profile required in defaults or CreateSandboxOptions.backend.profile`,\n        )\n      }\n      if (options.requireSession) {\n        const capabilities = await provider.capabilities()\n        if (!capabilities.streaming.live || !capabilities.sessions.continue) {\n          throw new ValidationError(\n            `providerAsSandboxClient(${provider.name}): live session continuation is required`,\n          )\n        }\n      }\n      const environment = await provider.create(mapped as CreateAgentEnvironmentInput)\n      if (options.requireSession && !environment.session) {\n        await environment.destroy?.()\n        throw new ValidationError(\n          `providerAsSandboxClient(${provider.name}): session() is required`,\n        )\n      }\n      return environmentAsSandboxInstance(environment, {\n        requireTerminalEvent: options.requireTerminalEvent ?? true,\n      })\n    },\n  }\n}\n\n/** Options for wrapping the current Tangle sandbox client as an environment provider.\n * @experimental */\nexport interface SandboxClientProviderOptions {\n  name?: string\n  defaultBackend?: BackendType\n  capabilities?:\n    | AgentEnvironmentCapabilities\n    | (() => AgentEnvironmentCapabilities | Promise<AgentEnvironmentCapabilities>)\n  validateProfile?: (\n    profile: AgentProfileRef,\n  ) => AgentProfileValidationResult | Promise<AgentProfileValidationResult>\n  /** Resolve a named profile before calling Sandbox, which accepts inline profiles only. */\n  resolveProfile?: (profileId: string) => AgentProfile | Promise<AgentProfile>\n  mapCreateInput?: (input: CreateAgentEnvironmentInput) => CreateSandboxOptions\n}\n\n/** Adapt a `SandboxClient` into the shared `AgentEnvironmentProvider` contract.\n * @experimental */\nexport function sandboxClientAsProvider(\n  client: SandboxClient,\n  options: SandboxClientProviderOptions = {},\n): AgentEnvironmentProvider {\n  const providerName = options.name ?? 'tangle-sandbox'\n  return {\n    name: providerName,\n    capabilities: async () => {\n      if (options.capabilities) {\n        return typeof options.capabilities === 'function'\n          ? options.capabilities()\n          : options.capabilities\n      }\n      return defaultTangleSandboxCapabilities({\n        namedProfiles: options.resolveProfile !== undefined,\n      })\n    },\n    ...(options.validateProfile ? { validateProfile: options.validateProfile } : {}),\n    async create(input: CreateAgentEnvironmentInput): Promise<AgentEnvironment> {\n      const createOptions =\n        options.mapCreateInput?.(input) ??\n        (await sandboxOptionsFromCreateInput(\n          input,\n          options.defaultBackend ?? 'opencode',\n          options.resolveProfile,\n        ))\n      const box = await client.create(\n        createOptions,\n        input.signal === undefined ? undefined : { signal: input.signal },\n      )\n      return sandboxInstanceAsEnvironment(box, providerName, client)\n    },\n    ...(hasGet(client)\n      ? {\n          async get(id: string): Promise<AgentEnvironment | null> {\n            const box = await client.get(id)\n            return box ? sandboxInstanceAsEnvironment(box, providerName, client) : null\n          },\n        }\n      : {}),\n    ...(hasList(client)\n      ? {\n          async list(query?: AgentEnvironmentQuery): Promise<AgentEnvironmentSummary[]> {\n            const boxes = await client.list(query?.providerOptions)\n            return boxes.map((box) => ({\n              id: String(box.id),\n              provider: providerName,\n              name: typeof box.name === 'string' ? box.name : undefined,\n              status: statusFromUnknown(readBoxStatus(box)),\n              metadata: readBoxMetadata(box),\n            }))\n          },\n        }\n      : {}),\n  }\n}\n\n/** Options for running a provider as a supervise-mode executor.\n * @experimental */\nexport interface ProviderExecutorOptions {\n  defaults?: Partial<CreateAgentEnvironmentInput>\n  runtime?: Runtime\n  destroyOnSettle?: boolean\n  requireTerminalEvent?: boolean\n  /** Transform only the profile sent to `provider.create`. The original profile\n   * remains the input to `taskToTurn`, so execution-only normalization cannot\n   * rewrite the caller's task mapping. */\n  profileForCreate?: (profile: AgentProfile) => AgentProfile\n  taskToTurn?: (task: unknown, specProfile: AgentProfile) => AgentTurnInput\n}\n\n/** Adapt an environment provider into an `ExecutorFactory` for `createExecutor`.\n * @experimental */\nexport function providerAsExecutor(\n  provider: AgentEnvironmentProvider,\n  options: ProviderExecutorOptions = {},\n): ExecutorFactory<unknown> {\n  return (spec, ctx) => createProviderExecutor(provider, spec.profile, ctx, options)\n}\n\nfunction createProviderExecutor(\n  provider: AgentEnvironmentProvider,\n  profile: AgentProfile,\n  ctx: ExecutorContext,\n  options: ProviderExecutorOptions,\n): Executor<unknown> {\n  const controller = new AbortController()\n  const abortIfSignalled = () => {\n    if (ctx.signal.aborted) controller.abort()\n  }\n  abortIfSignalled()\n  if (!ctx.signal.aborted) ctx.signal.addEventListener('abort', abortIfSignalled, { once: true })\n\n  let environment: AgentEnvironment | undefined\n  let artifact: ExecutorResult<unknown> | undefined\n\n  return {\n    runtime: options.runtime ?? (provider.name as Runtime),\n    execute(task, signal): AsyncIterable<UsageEvent> {\n      return streamProviderExecutor({\n        provider,\n        profile,\n        task,\n        signal,\n        controller,\n        options,\n        onEnvironment: (env) => {\n          environment = env\n        },\n        onArtifact: (next) => {\n          artifact = next\n        },\n      })\n    },\n    async teardown(_grace): Promise<{ destroyed: boolean }> {\n      controller.abort()\n      await environment?.destroy?.()\n      return { destroyed: true }\n    },\n    resultArtifact(): ExecutorResult<unknown> {\n      if (!artifact) {\n        throw new ValidationError(\n          `providerAsExecutor(${provider.name}): resultArtifact() read before stream drained`,\n        )\n      }\n      return artifact\n    },\n  }\n}\n\ninterface StreamProviderExecutorArgs {\n  provider: AgentEnvironmentProvider\n  profile: AgentProfile\n  task: unknown\n  signal: AbortSignal\n  controller: AbortController\n  options: ProviderExecutorOptions\n  onEnvironment: (environment: AgentEnvironment) => void\n  onArtifact: (artifact: ExecutorResult<unknown>) => void\n}\n\nasync function* streamProviderExecutor(\n  args: StreamProviderExecutorArgs,\n): AsyncIterable<UsageEvent> {\n  const started = Date.now()\n  const linked = mergeAbortSignals(args.signal, args.controller.signal)\n  const createProfile = args.options.profileForCreate?.(args.profile) ?? args.profile\n  const environment = await args.provider.create({\n    ...(args.options.defaults ?? {}),\n    profile: createProfile,\n    signal: linked,\n  })\n  args.onEnvironment(environment)\n\n  const turn =\n    args.options.taskToTurn?.(args.task, args.profile) ?? taskToTurnInput(args.task, linked)\n  const events: AgentEnvironmentEvent[] = []\n  const tokens = zeroTokenUsage()\n  let usd = 0\n  let text = ''\n  let terminal = false\n  try {\n    for await (const event of environment.stream({ ...turn, signal: linked })) {\n      events.push(event)\n      text += textFromEnvironmentEvent(event)\n      const usage = usageFromEnvironmentEvent(event)\n      if (usage.input || usage.output) {\n        tokens.input += usage.input\n        tokens.output += usage.output\n        yield { kind: 'tokens', input: usage.input, output: usage.output }\n      }\n      if (usage.usd) {\n        usd += usage.usd\n        yield { kind: 'cost', usd: usage.usd }\n      }\n      if (isTerminalEnvironmentEvent(event)) terminal = true\n    }\n    if ((args.options.requireTerminalEvent ?? true) && !terminal) {\n      throw new ValidationError(\n        `providerAsExecutor(${args.provider.name}): stream ended without a terminal result/done/status event`,\n      )\n    }\n    yield { kind: 'iteration' }\n    const result = resultFromEvents(events, text)\n    const spent: Spend = {\n      iterations: 1,\n      tokens,\n      usd,\n      ms: Date.now() - started,\n    }\n    args.onArtifact({\n      outRef: contentRef(`provider:${args.provider.name}`, result),\n      out: result,\n      spent,\n    })\n  } finally {\n    if (args.options.destroyOnSettle ?? true) await environment.destroy?.()\n  }\n}\n\nfunction createInputFromSandboxOptions(\n  options: CreateSandboxOptions | undefined,\n): Partial<CreateAgentEnvironmentInput> {\n  const profile = options?.backend?.profile\n  const backend = options?.backend?.type\n  const workspace = {\n    ...(options?.environment ? { environment: options.environment } : {}),\n    ...(options?.git?.url ? { repoUrl: options.git.url } : {}),\n    ...(options?.git?.ref ? { gitRef: options.git.ref } : {}),\n  }\n  return {\n    ...(profile !== undefined ? { profile } : {}),\n    ...(backend ? { backend } : {}),\n    ...(Object.keys(workspace).length > 0 ? { workspace } : {}),\n    ...(options?.resources ? { resources: options.resources as ResourceRequest } : {}),\n    ...(options?.env ? { env: options.env } : {}),\n    ...(options?.secrets ? { secrets: options.secrets } : {}),\n    ...(options?.metadata ? { metadata: options.metadata } : {}),\n    ...(options?.name ? { name: options.name } : {}),\n    ...(options?.idempotencyKey ? { idempotencyKey: options.idempotencyKey } : {}),\n    providerOptions: { sandboxCreateOptions: options ?? {} },\n  }\n}\n\nasync function sandboxOptionsFromCreateInput(\n  input: CreateAgentEnvironmentInput,\n  defaultBackend: BackendType,\n  resolveProfile?: SandboxClientProviderOptions['resolveProfile'],\n): Promise<CreateSandboxOptions> {\n  const backendType = (input.backend ?? defaultBackend) as BackendType\n  const workspace = input.workspace ?? {}\n  const environment = sandboxEnvironmentFromWorkspace(workspace)\n  const providerOptions = input.providerOptions?.sandboxCreateOptions\n  const base =\n    providerOptions && typeof providerOptions === 'object'\n      ? ({ ...(providerOptions as CreateSandboxOptions) } as CreateSandboxOptions)\n      : ({} satisfies CreateSandboxOptions)\n  assertSandboxSecretNames(input.secrets)\n  assertSandboxSecretNames((base as { secrets?: unknown }).secrets)\n  const profile = await sandboxProfileFromReference(input.profile, resolveProfile)\n  const { profile: _baseProfile, ...baseBackend } = base.backend ?? {}\n  return {\n    ...base,\n    ...(environment ? { environment } : {}),\n    ...(workspace.repoUrl ? { git: { url: workspace.repoUrl, ref: workspace.gitRef } } : {}),\n    ...(input.resources ? { resources: input.resources as CreateSandboxOptions['resources'] } : {}),\n    ...(input.env ? { env: input.env } : {}),\n    ...(Array.isArray(input.secrets) ? { secrets: input.secrets } : {}),\n    ...(input.metadata ? { metadata: input.metadata } : {}),\n    ...(input.name ? { name: input.name } : {}),\n    ...(input.idempotencyKey ? { idempotencyKey: input.idempotencyKey } : {}),\n    backend: {\n      ...baseBackend,\n      type: backendType,\n      profile,\n    },\n  }\n}\n\nfunction assertSandboxSecretNames(secrets: unknown): asserts secrets is string[] | undefined {\n  if (\n    secrets !== undefined &&\n    (!Array.isArray(secrets) ||\n      secrets.some((secret) => typeof secret !== 'string' || secret.trim().length === 0))\n  ) {\n    throw new ValidationError(\n      'Tangle Sandbox secret names must be non-empty strings; secret values are unsupported',\n    )\n  }\n}\n\nfunction sandboxEnvironmentFromWorkspace(\n  workspace: NonNullable<CreateAgentEnvironmentInput['workspace']>,\n): string | undefined {\n  if (\n    workspace.environment !== undefined &&\n    workspace.image !== undefined &&\n    workspace.environment !== workspace.image\n  ) {\n    throw new ValidationError(\n      'Tangle Sandbox accepts one environment value; workspace.environment and workspace.image must match',\n    )\n  }\n  return workspace.environment ?? workspace.image\n}\n\nasync function sandboxProfileFromReference(\n  profile: AgentProfileRef,\n  resolveProfile: SandboxClientProviderOptions['resolveProfile'],\n): Promise<AgentProfile> {\n  if (typeof profile !== 'string') return profile\n  if (!resolveProfile) {\n    throw new ValidationError(\n      `Tangle Sandbox requires an inline AgentProfile; named profile \"${profile}\" needs SandboxClientProviderOptions.resolveProfile`,\n    )\n  }\n  return resolveProfile(profile)\n}\n\nfunction environmentAsSandboxInstance(\n  environment: AgentEnvironment,\n  options: { requireTerminalEvent: boolean },\n): SandboxInstance {\n  const box = {\n    id: environment.id,\n    name: environment.name,\n    status: 'running',\n    async refresh(): Promise<void> {\n      await environment.refresh?.()\n    },\n    async *streamPrompt(\n      message: string | PromptInputPart[],\n      promptOptions?: PromptOptions,\n    ): AsyncGenerator<SandboxEvent> {\n      let terminal = false\n      const input = turnInputFromPrompt(message, promptOptions)\n      let cancellation: Promise<void> | undefined\n      let cancellationStarted = false\n      let cancellationFailed = false\n      let cancellationError: unknown\n      const cancel = () => {\n        if (cancellationStarted || !input.sessionId || !environment.session) return\n        cancellationStarted = true\n        try {\n          const session = environment.session(input.sessionId, {\n            ...(input.controlRef === undefined ? {} : { controlRef: input.controlRef }),\n            ...(input.signal === undefined ? {} : { signal: input.signal }),\n          })\n          assertScopedSessionForInput(session, input)\n          cancellation = session.cancel().catch((error: unknown) => {\n            cancellationFailed = true\n            cancellationError = error\n          })\n        } catch (error) {\n          cancellationFailed = true\n          cancellationError = error\n        }\n      }\n      input.signal?.addEventListener('abort', cancel, { once: true })\n      if (input.signal?.aborted) cancel()\n      let streamFailed = false\n      let streamError: unknown\n      try {\n        for await (const event of environment.stream(input)) {\n          if (isTerminalEnvironmentEvent(event)) terminal = true\n          const usageEvent = usageSandboxEvent(event)\n          if (usageEvent) yield usageEvent\n          yield sandboxEventFromEnvironmentEvent(event)\n        }\n      } catch (error) {\n        streamFailed = true\n        streamError = error\n      } finally {\n        input.signal?.removeEventListener('abort', cancel)\n        if (input.signal?.aborted) {\n          cancel()\n          await cancellation\n        }\n      }\n      if (input.signal?.aborted) {\n        const abortError = new DOMException('Provider session stream aborted', 'AbortError')\n        const causes = [\n          ...(streamFailed ? [streamError] : []),\n          ...(cancellationFailed ? [cancellationError] : []),\n        ]\n        if (causes.length > 0) {\n          Object.defineProperty(abortError, 'cause', {\n            value:\n              causes.length === 1\n                ? causes[0]\n                : new AggregateError(causes, 'Provider stream and cancellation failed'),\n          })\n        }\n        throw abortError\n      }\n      if (streamFailed) throw streamError\n      if (cancellationFailed) throw cancellationError\n      if (options.requireTerminalEvent && !terminal) {\n        throw new ValidationError(\n          `providerAsSandboxClient(${environment.provider}): stream ended without a terminal result/done/status event`,\n        )\n      }\n    },\n    async prompt(\n      message: string | PromptInputPart[],\n      promptOptions?: PromptOptions,\n    ): Promise<PromptResult> {\n      const events: AgentEnvironmentEvent[] = []\n      let text = ''\n      let usage: TokenUsage | undefined\n      let terminal = false\n      for await (const event of environment.stream(turnInputFromPrompt(message, promptOptions))) {\n        events.push(event)\n        if (isTerminalEnvironmentEvent(event)) terminal = true\n        text += textFromEnvironmentEvent(event)\n        usage = mergeTokenUsage(usage, event.usage)\n      }\n      if (options.requireTerminalEvent && !terminal) {\n        throw new ValidationError(\n          `providerAsSandboxClient(${environment.provider}): prompt ended without a terminal result/done/status event`,\n        )\n      }\n      return {\n        response: resultFromEvents(events, text).content,\n        success: true,\n        status: 'success',\n        durationMs: 0,\n        ...(usage ? { usage } : {}),\n      }\n    },\n    ...(environment.dispatch && environment.session\n      ? {\n          async dispatchPrompt(message: string | PromptInputPart[], promptOptions?: PromptOptions) {\n            const session = await environment.dispatch?.(\n              turnInputFromPrompt(message, promptOptions),\n            )\n            if (!session)\n              throw new ValidationError('providerAsSandboxClient: dispatch returned no session')\n            return sandboxDispatchResultFromSessionRef(session)\n          },\n        }\n      : {}),\n    ...(environment.session\n      ? {\n          session(id: string, sessionOptions?: { controlRef?: AgentRunControlRef }) {\n            return sandboxSessionFromAgentSession(\n              environment.session?.(id, sessionOptions),\n              sessionOptions?.controlRef,\n            )\n          },\n        }\n      : {}),\n    ...(environment.read ? { read: environment.read.bind(environment) } : {}),\n    ...(environment.write ? { write: environment.write.bind(environment) } : {}),\n    ...(environment.exec\n      ? {\n          exec: environment.exec.bind(environment),\n        }\n      : {}),\n    ...(environment.checkpoint\n      ? {\n          async checkpoint(checkpointOptions?: CheckpointRequest) {\n            const checkpoint = await environment.checkpoint?.(checkpointOptions)\n            return { checkpointId: checkpoint?.id, id: checkpoint?.id }\n          },\n        }\n      : {}),\n    ...(environment.fork\n      ? {\n          async fork(checkpointId: string, forkOptions?: ForkRequest) {\n            const forked = await environment.fork?.({ id: checkpointId }, forkOptions)\n            if (!forked)\n              throw new ValidationError('providerAsSandboxClient: fork returned no environment')\n            return environmentAsSandboxInstance(forked, options)\n          },\n        }\n      : {}),\n    async delete(): Promise<void> {\n      await environment.destroy?.()\n    },\n  }\n  return box as unknown as SandboxInstance\n}\n\nfunction sandboxInstanceAsEnvironment(\n  box: SandboxInstance,\n  providerName: string,\n  client: SandboxClient,\n): AgentEnvironment {\n  const environment: AgentEnvironment = {\n    id: String(box.id),\n    provider: providerName,\n    ...(typeof box.name === 'string' ? { name: box.name } : {}),\n    ...(readBoxMetadata(box) ? { metadata: readBoxMetadata(box) } : {}),\n    async status(): Promise<AgentEnvironmentStatus> {\n      await maybeRefresh(box)\n      return statusFromUnknown(readBoxStatus(box))\n    },\n    async *stream(input: AgentTurnInput): AsyncIterable<AgentEnvironmentEvent> {\n      for await (const event of box.streamPrompt(\n        promptFromAgentTurnInput(input),\n        promptOptionsFromAgentTurnInput(input),\n      )) {\n        yield environmentEventFromSandboxEvent(event)\n      }\n    },\n    ...(hasDispatchPrompt(box)\n      ? {\n          async dispatch(input: AgentTurnInput): Promise<AgentSessionRef> {\n            const dispatched = await box.dispatchPrompt(\n              promptFromAgentTurnInput(input),\n              promptOptionsFromAgentTurnInput(input),\n            )\n            return sessionRefFromSandboxDispatch(dispatched, providerName)\n          },\n        }\n      : {}),\n    ...(hasSession(box)\n      ? {\n          session(id: string, sessionOptions?: { controlRef?: AgentRunControlRef }): AgentSession {\n            return sandboxSessionAsAgentSession(box.session(id), sessionOptions?.controlRef)\n          },\n          async respondToInteraction(\n            command: InteractionResponseCommand,\n            options?: { signal?: AbortSignal },\n          ): Promise<InteractionAcknowledgement> {\n            const response = await box\n              .session(command.binding.sessionId)\n              .respondToInteraction(command, options)\n            return response.acknowledgement\n          },\n        }\n      : {}),\n    ...(hasRead(box) ? { read: box.read.bind(box) } : {}),\n    ...(hasWrite(box) ? { write: box.write.bind(box) } : {}),\n    ...(hasExec(box)\n      ? {\n          async exec(command: string, options?: ExecRequest): Promise<ExecResult> {\n            return execResultFromSandboxExecResult(await box.exec(command, options as never))\n          },\n        }\n      : {}),\n    async checkpoint(options?: CheckpointRequest): Promise<CheckpointRef> {\n      const result = await box.snapshot({\n        ...(options?.name ? { tags: [options.name] } : {}),\n      })\n      return {\n        id: result.snapshotId,\n        provider: providerName,\n        ...(options?.metadata ? { metadata: options.metadata } : {}),\n      }\n    },\n    async fork(checkpoint: CheckpointRef, options?: ForkRequest): Promise<AgentEnvironment> {\n      const forked = await client.create({\n        fromSnapshot: checkpoint.id,\n        fromSandboxId: String(box.id),\n        ...(options?.name ? { name: options.name } : {}),\n        ...(options?.metadata ? { metadata: options.metadata } : {}),\n      })\n      return sandboxInstanceAsEnvironment(forked, providerName, client)\n    },\n    async placement(): Promise<PlacementInfo> {\n      return placementInfoFromLoopPlacement(client.describePlacement?.(box), box)\n    },\n    async refresh(): Promise<void> {\n      await maybeRefresh(box)\n    },\n    async destroy(): Promise<void> {\n      await destroyBox(box)\n    },\n  }\n  return environment\n}\n\nfunction sandboxSessionAsAgentSession(\n  session: SandboxSessionLike,\n  expectedControlRef?: AgentRunControlRef,\n): AgentSession {\n  // SandboxSession has no synchronous controlRef property. The exact ref\n  // returned by dispatch is therefore the wrapper's persisted binding, while\n  // any ref later exposed by status is still validated below.\n  const controlRef = resolveSessionControlRef(session.controlRef, expectedControlRef, {\n    allowExpectedWhenActualAbsent: true,\n  })\n  return {\n    id: session.id,\n    ...(controlRef === undefined ? {} : { controlRef }),\n    async status(): Promise<AgentSessionStatus | null> {\n      const status = await session.status()\n      if (!status) return null\n      assertSandboxStatusBinding(status, controlRef)\n      return sessionStatusFromUnknown((status as { status?: unknown }).status)\n    },\n    async *events(options?: {\n      since?: string\n      executionId?: string\n      signal?: AbortSignal\n    }): AsyncIterable<AgentEnvironmentEvent> {\n      const executionId = scopedExecutionId(controlRef, options?.executionId)\n      for await (const event of session.events({\n        ...(options?.since === undefined ? {} : { since: options.since }),\n        ...(executionId === undefined ? {} : { executionId }),\n        ...(options?.signal === undefined ? {} : { signal: options.signal }),\n      }))\n        yield environmentEventFromSandboxEvent(event)\n    },\n    async result(options?: { signal?: AbortSignal }): Promise<AgentTurnResult> {\n      return agentTurnResultFromPromptResult(\n        await awaitAbortable(\n          Promise.resolve().then(() =>\n            session.result({\n              ...(controlRef?.executionId === undefined\n                ? {}\n                : { executionId: controlRef.executionId }),\n            }),\n          ),\n          options?.signal,\n        ),\n      )\n    },\n    async prompt(input: AgentTurnInput): Promise<AgentTurnResult> {\n      return agentTurnResultFromPromptResult(\n        await session.prompt(\n          promptFromAgentTurnInput(input),\n          promptOptionsFromAgentTurnInput(input),\n        ),\n      )\n    },\n    ...(session.respondToInteraction\n      ? {\n          async respondToInteraction(\n            command: InteractionResponseCommand,\n            options?: { signal?: AbortSignal },\n          ): Promise<InteractionAcknowledgement> {\n            assertInteractionCommandScope(command, controlRef)\n            const response = await session.respondToInteraction!(command, options)\n            return response.acknowledgement\n          },\n        }\n      : {}),\n    ...(session.cancelRun\n      ? {\n          async cancelRun(\n            request: AgentRunCancellationRequest,\n            options?: { signal?: AbortSignal },\n          ): Promise<AgentRunCancellationAcknowledgement> {\n            assertCancellationScope(request, controlRef)\n            return session.cancelRun!(request, options)\n          },\n        }\n      : {}),\n    cancel(): Promise<void> {\n      return session\n        .interrupt(\n          controlRef?.executionId === undefined\n            ? undefined\n            : { executionId: controlRef.executionId },\n        )\n        .then(() => undefined)\n    },\n  }\n}\n\nfunction sandboxSessionFromAgentSession(\n  session: AgentSession | undefined,\n  expectedControlRef?: AgentRunControlRef,\n): SandboxSessionLike {\n  if (!session) throw new ValidationError('providerAsSandboxClient: session is unavailable')\n  const controlRef = resolveSessionControlRef(session.controlRef, expectedControlRef)\n  return {\n    id: session.id,\n    ...(controlRef === undefined ? {} : { controlRef }),\n    async status() {\n      const status = await session.status()\n      if (!status) return null\n      return {\n        id: session.id,\n        status: sandboxSessionStatusFromAgentSessionStatus(status),\n      }\n    },\n    async *events(options?: {\n      since?: string\n      executionId?: string\n      signal?: AbortSignal\n    }): AsyncGenerator<SandboxEvent> {\n      const executionId = scopedExecutionId(controlRef, options?.executionId)\n      for await (const event of session.events({\n        ...(options?.since === undefined ? {} : { since: options.since }),\n        ...(executionId === undefined ? {} : { executionId }),\n        ...(options?.signal === undefined ? {} : { signal: options.signal }),\n      }))\n        yield sandboxEventFromEnvironmentEvent(event)\n    },\n    async result(options?: { executionId?: string }): Promise<PromptResult> {\n      scopedExecutionId(controlRef, options?.executionId)\n      return promptResultFromAgentTurnResult(await session.result())\n    },\n    async prompt(\n      message: string | PromptInputPart[],\n      options?: PromptOptions,\n    ): Promise<PromptResult> {\n      return promptResultFromAgentTurnResult(\n        await session.prompt(turnInputFromPrompt(message, options)),\n      )\n    },\n    ...(session.respondToInteraction\n      ? {\n          async respondToInteraction(\n            command: InteractionResponseCommand,\n            options?: { signal?: AbortSignal },\n          ) {\n            assertInteractionCommandScope(command, controlRef)\n            return {\n              acknowledgement: await session.respondToInteraction!(command, options),\n            }\n          },\n        }\n      : {}),\n    ...(session.cancelRun\n      ? {\n          async cancelRun(\n            request: AgentRunCancellationRequest,\n            options?: { signal?: AbortSignal },\n          ): Promise<AgentRunCancellationAcknowledgement> {\n            assertCancellationScope(request, controlRef)\n            return session.cancelRun!(request, options)\n          },\n        }\n      : {}),\n    async interrupt(options?: { executionId?: string }) {\n      scopedExecutionId(controlRef, options?.executionId)\n      await session.cancel()\n      return { cancelled: true }\n    },\n  }\n}\n\nfunction sandboxSessionStatusFromAgentSessionStatus(\n  status: AgentSessionStatus,\n): 'queued' | 'running' | 'completed' | 'failed' | 'cancelled' {\n  switch (status) {\n    case 'pending':\n    case 'provisioning':\n      return 'queued'\n    case 'running':\n      return 'running'\n    case 'completed':\n      return 'completed'\n    case 'cancelled':\n      return 'cancelled'\n    // Sandbox has no neutral stopped state; do not report completion without success proof.\n    case 'stopped':\n    case 'failed':\n    case 'expired':\n    case 'unknown':\n      return 'failed'\n  }\n}\n\nfunction promptResultFromAgentTurnResult(result: AgentTurnResult): PromptResult {\n  return {\n    response: result.text,\n    success: result.success,\n    status: result.success ? 'success' : 'failed',\n    durationMs: 0,\n    ...(result.error ? { error: result.error } : {}),\n    ...(result.usage\n      ? {\n          usage: {\n            inputTokens: result.usage.inputTokens,\n            outputTokens: result.usage.outputTokens,\n          },\n          ...(result.usage.cost === undefined ? {} : { costUsd: result.usage.cost }),\n        }\n      : {}),\n  }\n}\n\nfunction environmentEventFromSandboxEvent(event: SandboxEvent): AgentEnvironmentEvent {\n  const data =\n    event.data && typeof event.data === 'object'\n      ? (event.data as Record<string, unknown>)\n      : ({} as Record<string, unknown>)\n  const normalized = canonicalStreamEventFromSandboxEvent(event)\n  return {\n    type: String(event.type),\n    data,\n    ...(event.id ? { id: event.id } : {}),\n    ...(normalized ? { normalized } : {}),\n    usage: tokenUsageFromData(data),\n    providerEvent: event,\n  }\n}\n\nfunction sandboxEventFromEnvironmentEvent(event: AgentEnvironmentEvent): SandboxEvent {\n  const normalized = event.normalized\n  const type = normalized?.type ?? event.type\n  const baseData = normalized ? sandboxDataFromNormalizedEvent(event.data, normalized) : event.data\n  const usage = event.usage ? tokenUsageData(event.usage) : undefined\n  const data = (() => {\n    if (!usage) return baseData\n    if (isUsageType(type))\n      return {\n        ...baseData,\n        tokensIn: event.usage?.inputTokens,\n        tokensOut: event.usage?.outputTokens,\n        ...(event.usage?.cost !== undefined ? { costUsd: event.usage.cost } : {}),\n        ...usage,\n      }\n    if (isNestedUsageType(type)) return { ...baseData, usage }\n    if (type === 'done') {\n      return {\n        ...baseData,\n        tokenUsage: usage,\n        ...(usage.totalCostUsd !== undefined ? { totalCostUsd: usage.totalCostUsd } : {}),\n      }\n    }\n    return baseData\n  })()\n  return {\n    type,\n    data,\n    ...(event.id ? { id: event.id } : {}),\n  }\n}\n\nfunction usageSandboxEvent(event: AgentEnvironmentEvent): SandboxEvent | undefined {\n  const type = event.normalized?.type ?? event.type\n  if (!event.usage || isUsageType(type) || isNestedUsageType(type) || type === 'done') {\n    return undefined\n  }\n  const usage = tokenUsageData(event.usage)\n  if (\n    usage.inputTokens === undefined &&\n    usage.outputTokens === undefined &&\n    usage.totalCostUsd === undefined\n  ) {\n    return undefined\n  }\n  return { type: 'llm_call', data: usage }\n}\n\nfunction sandboxDataFromNormalizedEvent(\n  rawData: Record<string, unknown>,\n  normalized: NonNullable<AgentEnvironmentEvent['normalized']>,\n): Record<string, unknown> {\n  const { type: _type, ...normalizedData } = normalized\n  return {\n    ...rawData,\n    ...normalizedData,\n    ...(normalized.type === 'message.part.updated' && normalized.part.type === 'text'\n      ? { text: normalized.part.text }\n      : {}),\n  }\n}\n\nfunction tokenUsageData(usage: TokenUsage): Record<string, number> {\n  return {\n    inputTokens: usage.inputTokens,\n    outputTokens: usage.outputTokens,\n    ...(usage.totalTokens !== undefined ? { totalTokens: usage.totalTokens } : {}),\n    ...(usage.cacheReadInputTokens !== undefined\n      ? { cacheReadInputTokens: usage.cacheReadInputTokens }\n      : {}),\n    ...(usage.cacheCreationInputTokens !== undefined\n      ? { cacheCreationInputTokens: usage.cacheCreationInputTokens }\n      : {}),\n    ...(usage.reasoningTokens !== undefined ? { reasoningTokens: usage.reasoningTokens } : {}),\n    ...(usage.cost !== undefined ? { totalCostUsd: usage.cost } : {}),\n  }\n}\n\nfunction turnInputFromPrompt(\n  message: string | PromptInputPart[],\n  options?: PromptOptions,\n): AgentTurnInput {\n  return {\n    ...(typeof message === 'string' ? { prompt: message } : { parts: message }),\n    ...(options?.sessionId ? { sessionId: options.sessionId } : {}),\n    ...(options?.model ? { model: options.model } : {}),\n    ...(options?.timeoutMs ? { timeoutMs: options.timeoutMs } : {}),\n    ...(options?.executionId ? { executionId: options.executionId } : {}),\n    ...(options?.lastEventId ? { lastEventId: options.lastEventId } : {}),\n    ...(options?.turnId ? { turnId: options.turnId } : {}),\n    ...(options?.detach !== undefined ? { detach: options.detach } : {}),\n    ...(options?.context ? { context: options.context } : {}),\n    ...(options?.runControlRef ? { controlRef: options.runControlRef } : {}),\n    ...(options?.backend?.interactions ? { interactions: options.backend.interactions } : {}),\n    ...(options?.signal ? { signal: options.signal } : {}),\n    ...(options?.backend ? { providerOptions: { backend: options.backend } } : {}),\n  }\n}\n\nfunction resolveSessionControlRef(\n  actual: AgentRunControlRef | undefined,\n  expected: AgentRunControlRef | undefined,\n  options: { allowExpectedWhenActualAbsent?: boolean } = {},\n): AgentExactRunControlRef | undefined {\n  if (expected === undefined) {\n    if (actual === undefined) return undefined\n    return AgentExactRunControlRefSchema.parse(actual)\n  }\n  const expectedExact = AgentExactRunControlRefSchema.parse(expected)\n  if (actual === undefined) {\n    if (options.allowExpectedWhenActualAbsent === true) return expectedExact\n    throw new ValidationError('provider session omitted the required exact run control reference')\n  }\n  const actualExact = AgentExactRunControlRefSchema.safeParse(actual)\n  if (!actualExact.success) {\n    throw new ValidationError('provider session returned an invalid exact run control reference')\n  }\n  if (!sameControlCoordinates(actualExact.data, expectedExact)) {\n    throw new ValidationError('provider session returned a different exact run control reference')\n  }\n  return actualExact.data\n}\n\nfunction assertSandboxStatusBinding(\n  status: unknown,\n  controlRef: AgentExactRunControlRef | undefined,\n): void {\n  if (!status || typeof status !== 'object' || controlRef === undefined) return\n  const record = status as Record<string, unknown>\n  if (record.runControlRef !== undefined) {\n    const statusControlRef = AgentExactRunControlRefSchema.parse(record.runControlRef)\n    if (!sameControlCoordinates(statusControlRef, controlRef)) {\n      throw new ValidationError('sandbox status returned a different exact run control reference')\n    }\n  }\n  for (const key of ['activeExecutionId', 'latestExecutionId']) {\n    const executionId = record[key]\n    if (executionId !== undefined && executionId !== controlRef.executionId) {\n      throw new ValidationError('sandbox status returned a different execution')\n    }\n  }\n}\n\nfunction assertInteractionCommandScope(\n  command: InteractionResponseCommand,\n  controlRef: AgentRunControlRef | undefined,\n): void {\n  if (controlRef === undefined) return\n  if (\n    command.binding.runId !== controlRef.runId ||\n    command.binding.provider !== controlRef.provider ||\n    command.binding.environmentId !== controlRef.environmentId ||\n    command.binding.sessionId !== controlRef.sessionId ||\n    command.binding.executionId !== controlRef.executionId\n  ) {\n    throw new ValidationError('interaction response targeted a different execution')\n  }\n}\n\nfunction assertCancellationScope(\n  request: AgentRunCancellationRequest,\n  controlRef: AgentExactRunControlRef | undefined,\n): void {\n  if (controlRef === undefined) {\n    throw new ValidationError(\n      'durable cancellation requires an exact wrapper run control reference',\n    )\n  }\n  const exactRequest = AgentRunCancellationRequestSchema.parse(request)\n  if (!sameControlCoordinates(exactRequest.run, controlRef)) {\n    throw new ValidationError('cancellation targeted a different execution')\n  }\n}\n\nfunction scopedExecutionId(\n  controlRef: AgentRunControlRef | undefined,\n  requested: string | undefined,\n): string | undefined {\n  if (\n    controlRef?.executionId !== undefined &&\n    requested !== undefined &&\n    controlRef.executionId !== requested\n  ) {\n    throw new ValidationError('session operation targeted a different execution')\n  }\n  return controlRef?.executionId ?? requested\n}\n\nfunction assertScopedSessionForInput(session: AgentSession, input: AgentTurnInput): void {\n  if (input.executionId === undefined && input.controlRef === undefined) return\n  const sessionControlRef = AgentExactRunControlRefSchema.safeParse(session.controlRef)\n  if (!sessionControlRef.success) {\n    throw new ValidationError(\n      'provider session did not expose an exact run control reference for scoped cancellation',\n    )\n  }\n  const expectedControlRef =\n    input.controlRef === undefined\n      ? undefined\n      : AgentExactRunControlRefSchema.parse(input.controlRef)\n  if (\n    (input.executionId !== undefined && sessionControlRef.data.executionId !== input.executionId) ||\n    (expectedControlRef !== undefined &&\n      !sameControlCoordinates(sessionControlRef.data, expectedControlRef))\n  ) {\n    throw new ValidationError('provider session returned a different exact run control reference')\n  }\n}\n\nfunction taskToTurnInput(task: unknown, signal: AbortSignal): AgentTurnInput {\n  return { prompt: taskToPrompt(task), signal }\n}\n\nfunction taskToPrompt(task: unknown): string {\n  if (typeof task === 'string') return task\n  if (task && typeof task === 'object') {\n    const record = task as Record<string, unknown>\n    for (const key of ['prompt', 'content', 'task', 'message']) {\n      if (typeof record[key] === 'string') return record[key]\n    }\n  }\n  return JSON.stringify(task)\n}\n\nfunction resultFromEvents(\n  events: AgentEnvironmentEvent[],\n  fallbackText: string,\n): { content: string; events: AgentEnvironmentEvent[] } {\n  for (let i = events.length - 1; i >= 0; i -= 1) {\n    const event = events[i]\n    const text = event ? resultTextFromData(event.data) : undefined\n    if (text !== undefined) return { content: text, events }\n  }\n  return { content: fallbackText, events }\n}\n\nfunction textFromEnvironmentEvent(event: AgentEnvironmentEvent): string {\n  if (\n    typeof event.normalized === 'object' &&\n    event.normalized &&\n    event.normalized.type === 'message.part.updated'\n  ) {\n    return typeof event.normalized.delta === 'string' ? event.normalized.delta : ''\n  }\n  const data = event.data\n  for (const key of ['delta', 'chunk', 'content', 'text']) {\n    if (typeof data[key] === 'string' && !isTerminalEnvironmentEvent(event)) return data[key]\n  }\n  return ''\n}\n\nfunction resultTextFromData(data: Record<string, unknown>): string | undefined {\n  for (const key of ['finalText', 'text', 'response', 'resultSummary', 'content']) {\n    if (typeof data[key] === 'string') return data[key]\n  }\n  return undefined\n}\n\nfunction isTerminalEnvironmentEvent(event: AgentEnvironmentEvent): boolean {\n  if (isTerminalEventShape(event.type, event.data)) return true\n  const normalized = event.normalized\n  return (\n    normalized?.type === 'status' &&\n    (normalized.status === 'completed' || normalized.status === 'failed')\n  )\n}\n\nfunction isTerminalEventShape(type: string, data: Record<string, unknown>): boolean {\n  if (type === 'result' || type === 'done' || type === 'final') return true\n  if (type.endsWith('.completed') || type.endsWith('.failed')) return true\n  if (type !== 'status') return false\n  return data.status === 'completed' || data.status === 'failed' || data.status === 'cancelled'\n}\n\nfunction isUsageType(type: string): boolean {\n  return type === 'llm_call' || type === 'usage' || type === 'cost.usage'\n}\n\nfunction isNestedUsageType(type: string): boolean {\n  return type === 'message.completed' || type === 'result' || type === 'final'\n}\n\nfunction usageFromEnvironmentEvent(event: AgentEnvironmentEvent): {\n  input: number\n  output: number\n  usd: number\n} {\n  const usage = event.usage ?? tokenUsageFromData(event.data)\n  return {\n    input: finiteNumber(usage?.inputTokens) ?? 0,\n    output: (finiteNumber(usage?.outputTokens) ?? 0) + (finiteNumber(usage?.reasoningTokens) ?? 0),\n    usd:\n      finiteNumber(usage?.cost) ??\n      finiteNumber(event.data.costUsd) ??\n      finiteNumber(event.data.totalCostUsd) ??\n      0,\n  }\n}\n\nfunction tokenUsageFromData(data: Record<string, unknown>): TokenUsage | undefined {\n  const usageRecord =\n    data.usage && typeof data.usage === 'object'\n      ? (data.usage as Record<string, unknown>)\n      : data.tokenUsage && typeof data.tokenUsage === 'object'\n        ? (data.tokenUsage as Record<string, unknown>)\n        : data\n  const inputTokens =\n    finiteNumber(usageRecord.inputTokens) ??\n    finiteNumber(usageRecord.tokensIn) ??\n    finiteNumber(usageRecord.prompt_tokens)\n  const outputTokens =\n    finiteNumber(usageRecord.outputTokens) ??\n    finiteNumber(usageRecord.tokensOut) ??\n    finiteNumber(usageRecord.completion_tokens)\n  const totalTokens = finiteNumber(usageRecord.totalTokens)\n  const cacheReadInputTokens = finiteNumber(usageRecord.cacheReadInputTokens)\n  const cacheCreationInputTokens = finiteNumber(usageRecord.cacheCreationInputTokens)\n  const reasoningTokens = finiteNumber(usageRecord.reasoningTokens)\n  const cost =\n    finiteNumber(usageRecord.cost) ??\n    finiteNumber(usageRecord.costUsd) ??\n    finiteNumber(usageRecord.totalCostUsd) ??\n    finiteNumber(data.costUsd) ??\n    finiteNumber(data.totalCostUsd)\n  if (\n    inputTokens === undefined &&\n    outputTokens === undefined &&\n    totalTokens === undefined &&\n    cacheReadInputTokens === undefined &&\n    cacheCreationInputTokens === undefined &&\n    reasoningTokens === undefined &&\n    cost === undefined\n  )\n    return undefined\n  return {\n    inputTokens: inputTokens ?? 0,\n    outputTokens: outputTokens ?? 0,\n    ...(totalTokens !== undefined ? { totalTokens } : {}),\n    ...(cacheReadInputTokens !== undefined ? { cacheReadInputTokens } : {}),\n    ...(cacheCreationInputTokens !== undefined ? { cacheCreationInputTokens } : {}),\n    ...(reasoningTokens !== undefined ? { reasoningTokens } : {}),\n    ...(cost !== undefined ? { cost } : {}),\n  }\n}\n\nfunction mergeTokenUsage(\n  left: TokenUsage | undefined,\n  right: TokenUsage | undefined,\n): TokenUsage | undefined {\n  if (!left) return right\n  if (!right) return left\n  return {\n    inputTokens: left.inputTokens + right.inputTokens,\n    outputTokens: left.outputTokens + right.outputTokens,\n    ...(left.totalTokens !== undefined || right.totalTokens !== undefined\n      ? { totalTokens: (left.totalTokens ?? 0) + (right.totalTokens ?? 0) }\n      : {}),\n    ...(left.cacheReadInputTokens !== undefined || right.cacheReadInputTokens !== undefined\n      ? {\n          cacheReadInputTokens:\n            (left.cacheReadInputTokens ?? 0) + (right.cacheReadInputTokens ?? 0),\n        }\n      : {}),\n    ...(left.cacheCreationInputTokens !== undefined || right.cacheCreationInputTokens !== undefined\n      ? {\n          cacheCreationInputTokens:\n            (left.cacheCreationInputTokens ?? 0) + (right.cacheCreationInputTokens ?? 0),\n        }\n      : {}),\n    ...(left.reasoningTokens !== undefined || right.reasoningTokens !== undefined\n      ? { reasoningTokens: (left.reasoningTokens ?? 0) + (right.reasoningTokens ?? 0) }\n      : {}),\n    ...(left.cost !== undefined || right.cost !== undefined\n      ? { cost: (left.cost ?? 0) + (right.cost ?? 0) }\n      : {}),\n  }\n}\n\nfunction finiteNumber(value: unknown): number | undefined {\n  return typeof value === 'number' && Number.isFinite(value) ? value : undefined\n}\n\nfunction agentTurnResultFromPromptResult(result: PromptResult): AgentTurnResult {\n  const record = result as unknown as Record<string, unknown>\n  const text =\n    typeof record.response === 'string'\n      ? record.response\n      : typeof record.text === 'string'\n        ? record.text\n        : typeof record.finalText === 'string'\n          ? record.finalText\n          : ''\n  const success = typeof record.success === 'boolean' ? record.success : true\n  return {\n    text,\n    success,\n    ...(typeof record.error === 'string' ? { error: record.error } : {}),\n    usage: tokenUsageFromData(record),\n  }\n}\n\nfunction sandboxDispatchResultFromSessionRef(session: AgentSessionRef): Record<string, unknown> {\n  const controlRef =\n    session.controlRef === undefined\n      ? undefined\n      : AgentExactRunControlRefSchema.parse(session.controlRef)\n  const metadataExecutionId = optionalDispatchIdentity(session.metadata?.executionId, 'executionId')\n  if (controlRef !== undefined) {\n    if (controlRef.sessionId !== session.id) {\n      throw new ValidationError(\n        'provider dispatch returned a control reference for another session',\n      )\n    }\n    if (session.provider !== undefined && controlRef.provider !== session.provider) {\n      throw new ValidationError(\n        'provider dispatch returned a control reference for another provider',\n      )\n    }\n    if (metadataExecutionId !== undefined && metadataExecutionId !== controlRef.executionId) {\n      throw new ValidationError('provider dispatch returned conflicting execution identities')\n    }\n  }\n  const hasStatus = session.metadata && Object.hasOwn(session.metadata, 'status')\n  const status = hasStatus ? sessionStatusFromUnknown(session.metadata?.status) : 'running'\n  return {\n    sessionId: session.id,\n    status,\n    alreadyExisted: session.metadata?.alreadyExisted === true,\n    ...(session.metadata?.dispatched === undefined\n      ? {}\n      : { dispatched: session.metadata.dispatched === true }),\n    ...(controlRef === undefined\n      ? metadataExecutionId === undefined\n        ? {}\n        : { executionId: metadataExecutionId }\n      : { executionId: controlRef.executionId, runControlRef: controlRef }),\n  }\n}\n\nfunction sessionRefFromSandboxDispatch(dispatched: unknown, providerName: string): AgentSessionRef {\n  const record =\n    dispatched && typeof dispatched === 'object'\n      ? (dispatched as Record<string, unknown>)\n      : undefined\n  const id = record?.sessionId ?? record?.id\n  if (typeof id !== 'string' || id.length === 0) {\n    throw new ValidationError('sandboxClientAsProvider: dispatch returned no session id')\n  }\n  if (!record) {\n    throw new ValidationError('sandboxClientAsProvider: dispatch returned no session record')\n  }\n  const executionId = optionalDispatchIdentity(record.executionId, 'executionId')\n  const controlRef =\n    record.runControlRef === undefined\n      ? undefined\n      : AgentExactRunControlRefSchema.parse(record.runControlRef)\n  if (controlRef !== undefined) {\n    if (controlRef.sessionId !== id || controlRef.provider !== providerName) {\n      throw new ValidationError('sandbox dispatch returned a control reference for another session')\n    }\n    if (executionId !== undefined && controlRef.executionId !== executionId) {\n      throw new ValidationError('sandbox dispatch returned conflicting execution identities')\n    }\n  }\n  if (record.alreadyExisted !== undefined && typeof record.alreadyExisted !== 'boolean') {\n    throw new ValidationError('sandbox dispatch returned an invalid alreadyExisted flag')\n  }\n  if (record.dispatched !== undefined && typeof record.dispatched !== 'boolean') {\n    throw new ValidationError('sandbox dispatch returned an invalid dispatched flag')\n  }\n  if (record.status !== undefined && !isSandboxSessionStatus(record.status)) {\n    throw new ValidationError('sandbox dispatch returned an invalid session status')\n  }\n  return {\n    id,\n    provider: providerName,\n    ...(controlRef === undefined ? {} : { controlRef }),\n    metadata: {\n      ...(record.status ? { status: record.status } : {}),\n      ...(executionId === undefined ? {} : { executionId }),\n      ...(record.alreadyExisted !== undefined ? { alreadyExisted: record.alreadyExisted } : {}),\n      ...(record.dispatched !== undefined ? { dispatched: record.dispatched } : {}),\n    },\n  }\n}\n\nfunction optionalDispatchIdentity(value: unknown, label: string): string | undefined {\n  if (value === undefined) return undefined\n  if (typeof value !== 'string' || value.length === 0) {\n    throw new ValidationError(`sandbox dispatch returned an invalid ${label}`)\n  }\n  return value\n}\n\nfunction isSandboxSessionStatus(value: unknown): boolean {\n  return (\n    value === 'queued' ||\n    value === 'running' ||\n    value === 'completed' ||\n    value === 'failed' ||\n    value === 'cancelled'\n  )\n}\n\nfunction execResultFromSandboxExecResult(result: SandboxExecResult): ExecResult {\n  const record = result as unknown as Record<string, unknown>\n  const exitCode = finiteNumber(record.exitCode) ?? finiteNumber(record.code)\n  if (exitCode === undefined) {\n    throw new ValidationError('sandboxClientAsProvider: exec returned no exit code')\n  }\n  return {\n    exitCode,\n    stdout: typeof record.stdout === 'string' ? record.stdout : '',\n    stderr: typeof record.stderr === 'string' ? record.stderr : '',\n  }\n}\n\nfunction statusFromUnknown(status: unknown): AgentEnvironmentStatus {\n  if (status === 'pending' || status === 'provisioning' || status === 'running') return status\n  if (status === 'stopped' || status === 'failed' || status === 'expired') return status\n  if (status === 'completed') return 'stopped'\n  if (status === 'cancelled') return 'stopped'\n  return 'unknown'\n}\n\nfunction sessionStatusFromUnknown(status: unknown): AgentSessionStatus | null {\n  if (status === 'completed' || status === 'cancelled') return status\n  return statusFromUnknown(status)\n}\n\nfunction readBoxStatus(box: SandboxInstance): unknown {\n  return (box as unknown as { status?: unknown }).status\n}\n\nfunction readBoxMetadata(box: SandboxInstance): Record<string, unknown> | undefined {\n  const metadata = (box as unknown as { metadata?: unknown }).metadata\n  return metadata && typeof metadata === 'object'\n    ? (metadata as Record<string, unknown>)\n    : undefined\n}\n\nasync function maybeRefresh(box: SandboxInstance): Promise<void> {\n  const refresh = (box as unknown as { refresh?: () => Promise<void> }).refresh\n  if (typeof refresh === 'function') await refresh.call(box)\n}\n\nasync function destroyBox(box: SandboxInstance): Promise<void> {\n  const deleteBox = (box as unknown as { delete?: () => Promise<void> }).delete\n  if (typeof deleteBox === 'function') await deleteBox.call(box)\n}\n\nfunction placementInfoFromLoopPlacement(\n  placement: LoopSandboxPlacement | undefined,\n  box: SandboxInstance,\n): PlacementInfo {\n  if (!placement) return { kind: 'sandbox', sandboxId: String(box.id) }\n  return {\n    kind: placement.kind === 'fleet' ? 'fleet' : 'sandbox',\n    ...(placement.sandboxId ? { sandboxId: placement.sandboxId } : { sandboxId: String(box.id) }),\n    ...(placement.fleetId ? { fleetId: placement.fleetId } : {}),\n    ...(placement.machineId ? { machineId: placement.machineId } : {}),\n  }\n}\n\nfunction defaultTangleSandboxCapabilities(options: {\n  namedProfiles: boolean\n}): AgentEnvironmentCapabilities {\n  return {\n    profile: {\n      namedProfiles: options.namedProfiles,\n      systemPrompt: { ...harnessSystemPromptIntents(undefined) },\n      instructions: true,\n      tools: true,\n      permissions: true,\n      mcp: true,\n      subagents: true,\n      resources: {\n        files: true,\n        instructions: true,\n        tools: true,\n        skills: true,\n        agents: true,\n        commands: true,\n      },\n      hooks: true,\n      modes: true,\n      runtimeUpdate: true,\n      validation: true,\n    },\n    streaming: { live: true, replay: true, detach: true, turnIdempotency: true },\n    sessions: { continue: true, list: true, messages: true },\n    workspace: { read: true, write: true, exec: true, git: true, upload: true, download: true },\n    branching: { checkpoint: true, fork: true },\n    placement: true,\n    usage: true,\n    confidential: true,\n  }\n}\n\nfunction mergeAbortSignals(a: AbortSignal, b: AbortSignal): AbortSignal {\n  const controller = new AbortController()\n  // Forward the firing signal's reason. Dropping it here renamed every cascaded death to the\n  // generic \"execution aborted\", which is what made this class undiagnosable from a journal.\n  const reasonOf = (signal: AbortSignal): unknown => {\n    const reason = signal.reason\n    if (typeof reason === 'string' && reason.length > 0) return reason\n    // A bare `abort()` sets a DOMException carrying the platform placeholder message, which\n    // is no more diagnostic than the generic death — name the scope instead.\n    if (reason instanceof Error && reason.name !== 'AbortError' && reason.message.length > 0) {\n      return reason.message\n    }\n    return 'aborted by parent scope'\n  }\n  if (a.aborted || b.aborted) controller.abort(reasonOf(a.aborted ? a : b))\n  else {\n    a.addEventListener('abort', () => controller.abort(reasonOf(a)), { once: true })\n    b.addEventListener('abort', () => controller.abort(reasonOf(b)), { once: true })\n  }\n  return controller.signal\n}\n\nfunction contentRef(prefix: string, value: unknown): string {\n  let str: string\n  try {\n    str = JSON.stringify(value) ?? String(value)\n  } catch {\n    str = String(value)\n  }\n  let hash = 0x811c9dc5\n  for (let i = 0; i < str.length; i += 1) {\n    hash ^= str.charCodeAt(i)\n    hash = Math.imul(hash, 0x01000193)\n  }\n  return `${prefix}:${(hash >>> 0).toString(16).padStart(8, '0')}`\n}\n\nfunction hasGet(\n  client: SandboxClient,\n): client is SandboxClient & { get(id: string): Promise<SandboxInstance | null> } {\n  return typeof (client as { get?: unknown }).get === 'function'\n}\n\nfunction hasList(\n  client: SandboxClient,\n): client is SandboxClient & { list(options?: unknown): Promise<SandboxInstance[]> } {\n  return typeof (client as { list?: unknown }).list === 'function'\n}\n\nfunction hasDispatchPrompt(box: SandboxInstance): box is SandboxInstance & {\n  dispatchPrompt(message: string | PromptInputPart[], options?: PromptOptions): Promise<unknown>\n} {\n  return typeof (box as { dispatchPrompt?: unknown }).dispatchPrompt === 'function'\n}\n\nfunction hasSession(\n  box: SandboxInstance,\n): box is SandboxInstance & { session(id: string): SandboxSessionLike } {\n  return typeof (box as { session?: unknown }).session === 'function'\n}\n\nfunction hasRead(box: SandboxInstance): box is SandboxInstance & {\n  read(path: string, options?: { sessionId?: string }): Promise<string>\n} {\n  return typeof (box as { read?: unknown }).read === 'function'\n}\n\nfunction hasWrite(\n  box: SandboxInstance,\n): box is SandboxInstance & { write(path: string, content: string): Promise<void> } {\n  return typeof (box as { write?: unknown }).write === 'function'\n}\n\nfunction hasExec(box: SandboxInstance): box is SandboxInstance & {\n  exec(command: string, options?: unknown): Promise<SandboxExecResult>\n} {\n  return typeof (box as { exec?: unknown }).exec === 'function'\n}\n\ninterface SandboxSessionLike {\n  readonly id: string\n  readonly controlRef?: AgentRunControlRef\n  status(): Promise<unknown | null>\n  events(options?: {\n    since?: string\n    executionId?: string\n    signal?: AbortSignal\n  }): AsyncIterable<SandboxEvent>\n  result(options?: { executionId?: string }): Promise<PromptResult>\n  prompt(message: string | PromptInputPart[], options?: PromptOptions): Promise<PromptResult>\n  respondToInteraction?(\n    command: InteractionResponseCommand,\n    options?: { signal?: AbortSignal },\n  ): Promise<{ acknowledgement: InteractionAcknowledgement }>\n  cancelRun?(\n    request: AgentRunCancellationRequest,\n    options?: { signal?: AbortSignal },\n  ): Promise<AgentRunCancellationAcknowledgement>\n  interrupt(options?: { executionId?: string }): Promise<unknown>\n}\n"],"mappings":";;;;;;AA+BA,MAAM,6BAA6B;AACnC,MAAM,2BAA2B;;;;;;;AAQjC,SAAgB,wCACd,QACA,UAA0D,CAAC,GACjC;CAC1B,MAAM,OAAO,QAAQ,QAAQ;CAC7B,IAAI,CAAC,KAAK,KAAK,GAAG,MAAM,IAAI,MAAM,8DAA8D;CAyDhG,OAAO;EACL;EACA,cAAA;GAxDA,MAAM,OAAO,OAAgD;IAC3D,eAAe,MAAM,MAAM;IAC3B,wBAAwB,MAAM,eAAe;IAC7C,MAAM,eAAe,oBAAoB,MAAM,MAAM;IACrD,MAAM,WAAW,cAAc,MAAM,UAAU,MAAM,YAAY;IACjE,MAAM,UAAU,MAAM,OAAO,OAC3B;KACE,aAAa,aAAa,MAAM,OAAO,qBAAqB;KAC5D,OAAO;KACP,MAAM;KACN,WAAW;KACX;KACA,WAAW,iBAAiB,KAAK;KACjC,oBAAoB,uBAAuB,MAAM,aAAa;KAC9D;KACA,gBAAgB,aAAa,MAAM,gBAAgB,+BAA+B;IACpF,GACA;KACE,GAAI,MAAM,uBAAuB,KAAA,IAC7B,CAAC,IACD,EAAE,WAAW,gBAAgB,MAAM,oBAAoB,mBAAmB,EAAE;KAChF,GAAI,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO;IAC/D,CACF;IACA,IAAI;KACF,eAAe,MAAM,MAAM;KAC3B,2BAA2B,SAAS,QAAQ;KAC5C,MAAM,yBAAyB,SAAS,YAAY;IACtD,SAAS,OAAO;KACd,MAAM,sBAAsB,SAAS,KAAK;IAC5C;IACA,OAAO,iCAAiC,SAAS,IAAI;GACvD;GACA,MAAM,IAAI,IAAY;IACpB,MAAM,UAAU,MAAM,OAAO,IAAI,EAAE;IACnC,IAAI,CAAC,WAAW,CAAC,eAAe,SAAS,IAAI,GAAG,OAAO;IACvD,MAAM,yBAAyB,SAAS,mBAAmB,QAAQ,QAAQ,CAAC;IAC5E,OAAO,iCAAiC,SAAS,IAAI;GACvD;GACA,MAAM,KAAK,OAA2C;IACpD,wBAAwB,OAAO,eAAe;IAC9C,MAAM,YAAY,MAAM,OAAO,KAAK;IACpC,OAAO,QAAQ,IACb,UACG,QAAQ,YAAY,eAAe,SAAS,IAAI,CAAC,CAAC,CAClD,QAAQ,YAAY,gBAAgB,QAAQ,UAAU,OAAO,QAAQ,CAAC,CAAC,CACvE,IAAI,OAAO,YAAY;KACtB,MAAM,yBAAyB,SAAS,mBAAmB,QAAQ,QAAQ,CAAC;KAC5E,OAAO,iCAAiC,SAAS,IAAI;IACvD,CAAC,CACL;GACF;EAKW;EACX,cAAc;EACd,MAAM,SAAS;GACb,MAAM,IAAI,MAAM,+BAA+B,KAAK,sCAAsC;EAC5F;CACF;AACF;AAEA,SAAS,iCACP,SACA,UAC8B;CAC9B,OAAO;EACL,IAAI,aAAa,QAAQ,IAAI,YAAY;EACzC;EACA,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;EACzD,SAAS;GACP,MAAM,OAA2C;IAC/C,QAAQ,MAAM,QAAQ,QAAQ,KAAK,EAAA,CAAG,KAAK,WAAW,mBAAmB,MAAM,CAAC;GAClF;GACA,MAAM,IAAI,KAAgD;IACxD,MAAM,UAAU,MAAM,QAAQ,QAAQ,IAAI,GAAG;IAC7C,OAAO,UAAU,6BAA6B,OAAO,IAAI;GAC3D;GACA,MAAM,MAAM,OAAO,SAAqC;IAUtD,OAAO,6BAA6B,MATd,gBAAgB,SAAS,cAC7C,QAAQ,QAAQ,WAAW,MAAM,YAAY,CAAC,GAAG,MAAM,IAAI,GAAG;KAC5D,KAAK,MAAM;KACX,KAAK,EAAE,GAAG,MAAM,IAAI;KACpB,YAAY;KACZ,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;KAC1D,WAAW,MAAM;IACnB,CAAC,CACH,CAC2C;GAC7C;EACF;EACA,MAAM,UAAU,MAAM,OAAO,SAAwB;GACnD,IAAI,QAAQ,GAAG,sBAAsB,MACnC,MAAM,IAAI,MAAM,yDAAyD;GAE3E,MAAM,gBAAgB,QAAQ,cAC5B,QAAQ,GAAG,MAAM,MAAM,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,QAAQ,GAAG;IAC5D,UAAU;IACV,MAAM,SAAS,QAAQ,IAAI;GAC7B,CAAC,CACH;EACF;EACA,MAAM,SAAS,MAAM,SAA8B;GACjD,MAAM,WAAW,mBAAmB,QAAQ,UAAU,iCAAiC;GACvF,MAAM,cAAc,oBACjB,MAAM,gBAAgB,QAAQ,cAAc,QAAQ,GAAG,KAAK,IAAI,CAAC,EAAA,CAAG,MACrE,iCAAiC,KAAK,EACxC;GACA,IAAI,cAAc,UAChB,MAAM,IAAI,MACR,wBAAwB,KAAK,gBAAgB,SAAS,yBACxD;GAEF,MAAM,SAAS,MAAM,gBAAgB,QAAQ,cAC3C,QAAQ,GAAG,UAAU,CAAC,IAAI,GAAG,EAAE,UAAU,SAAS,CAAC,CACrD;GACA,MAAM,UAAU,OAAO,OAAO,MAAM,UAAU,MAAM,SAAS,IAAI;GACjE,IAAI,SACF,MAAM,IAAI,MAAM,kCAAkC,KAAK,KAAK,QAAQ,OAAO;GAE7E,MAAM,QAAQ,OAAO,MAAM,QAAQ,UAAU,MAAM,SAAS,IAAI;GAChE,IAAI,MAAM,WAAW,GACnB,MAAM,IAAI,MAAM,2BAA2B,MAAM,OAAO,yBAAyB,KAAK,EAAE;GAE1F,MAAM,OAAO,MAAM;GACnB,IAAI,KAAK,aAAa,UACpB,MAAM,IAAI,MAAM,8DAA8D,KAAK,EAAE;GAEvF,MAAM,OAAO,mBAAmB,KAAK,MAAM,iCAAiC,KAAK,EAAE;GACnF,IAAI,SAAS,aACX,MAAM,IAAI,MAAM,wBAAwB,KAAK,4BAA4B;GAE3E,IAAI,OAAO,UACT,MAAM,IAAI,MACR,wBAAwB,KAAK,gBAAgB,SAAS,yBACxD;GAEF,MAAM,QAAQ,OAAO,KAAK,KAAK,SAAS,QAAQ;GAChD,IAAI,MAAM,eAAe,QAAQ,MAAM,SAAS,QAAQ,MAAM,KAAK,SACjE,MAAM,IAAI,MACR,qEAAqE,KAAK,EAC5E;GAEF,OAAO,WAAW,KAAK,KAAK;EAC9B;EACA,MAAM,UAAyB;GAC7B,MAAM,QAAQ,OAAO;EACvB;CACF;AACF;AAEA,SAAS,6BAA6B,SAAqC;CACzE,MAAM,MAAM,gBAAgB,QAAQ,KAAK,4BAA4B;CACrE,OAAO;EACL;EACA,MAAM,SAA2C;GAC/C,OAAO,mBAAmB,MAAM,QAAQ,OAAO,GAAG,GAAG;EACvD;EACA,MAAM,OAA2C;GAC/C,MAAM,eAAe,MAAM,QAAQ,KAAK;GACxC,IAAI,CAAC,OAAO,cAAc,YAAY,GACpC,MAAM,IAAI,MAAM,2DAA2D;GAE7E,MAAM,SAAS,mBAAmB,MAAM,QAAQ,OAAO,GAAG,GAAG;GAC7D,IAAI,OAAO,WAAW,CAAC,OAAO,aAC5B,MAAM,IAAI,MAAM,6DAA6D;GAE/E,IAAI,OAAO,YAAY,SAAS,UAAU,OAAO,YAAY,aAAa,cACxE,MAAM,IAAI,MAAM,8DAA8D;GAEhF,OAAO,OAAO;EAChB;EACA,MAAM,OAAsB;GAC1B,MAAM,QAAQ,KAAK,WAAW,EAAE,MAAM,KAAK,CAAC;EAC9C;EACA,OAAO,SAAgC;GACrC,OAAO,QAAQ,OAAO;EACxB;EACA,OAAO,SAAgC;GACrC,OAAO,QAAQ,OAAO;EACxB;CACF;AACF;AAEA,SAAS,mBAAmB,QAAuB,aAA+C;CAChG,MAAM,MAAM,gBAAgB,OAAO,KAAK,4BAA4B;CACpE,IAAI,gBAAgB,KAAA,KAAa,QAAQ,aACvC,MAAM,IAAI,MAAM,wDAAwD;CAE1E,IAAI,OAAO,OAAO,YAAY,WAC5B,MAAM,IAAI,MAAM,wDAAwD;CAE1E,IAAI,CAAC,OAAO,cAAc,OAAO,QAAQ,GACvC,MAAM,IAAI,MAAM,+DAA+D;CAEjF,MAAM,aAAa,aAAa,OAAO,YAAY,oCAAoC;CACvF,IAAI,OAAO,SAAS;EAClB,IAAI,OAAO,aAAa,IACtB,MAAM,IAAI,MAAM,yDAAyD;EAE3E,IAAI,YACF,MAAM,IAAI,MAAM,+DAA+D;EAEjF,OAAO;GACL;GACA,SAAS;GACT,UAAU;EACZ;CACF;CACA,MAAM,cAAc,aACf;EAAE,MAAM;EAAU,QAAQ;CAAW,IACtC,OAAO,YAAY,IAChB;EAAE,MAAM;EAAQ,UAAU,OAAO;CAAS,IAC3C,KAAA;CACN,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,uDAAuD;CAEzE,OAAO;EACL;EACA,SAAS;EACT,UAAU,OAAO;EACjB,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;EACnC;CACF;AACF;AAEA,SAAS,cACP,UACA,UACA,cACyB;CACzB,KAAK,MAAM,UAAU,CAAC,4BAA4B,wBAAwB,GACxE,IAAI,OAAO,OAAO,UAAU,MAAM,GAChC,MAAM,IAAI,MAAM,wCAAwC,OAAO,EAAE;CAGrE,OAAO;EACL,GAAG;GACF,6BAA6B;GAC7B,2BAA2B,sBAAsB,YAAY;CAChE;AACF;AAEA,SAAS,eAAe,SAA0B,UAA2B;CAC3E,OAAO,QAAQ,WAAW,gCAAgC;AAC5D;AAEA,SAAS,gBACP,UACA,UACS;CACT,OACE,aAAa,KAAA,KACb,OAAO,QAAQ,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,WAAW,kBAAkB,WAAW,MAAM,KAAK,CAAC;AAE9F;AAEA,SAAS,2BACP,SACA,UACM;CACN,IAAI,CAAC,gBAAgB,QAAQ,UAAU,QAAQ,GAC7C,MAAM,IAAI,MAAM,uDAAuD;AAE3E;AAEA,SAAS,mBACP,UAC0B;CAC1B,MAAM,UAAU,WAAW;CAC3B,IAAI,OAAO,YAAY,UACrB,MAAM,IAAI,MAAM,qEAAqE;CAEvF,IAAI;EACF,MAAM,SAAkB,KAAK,MAAM,OAAO;EAC1C,IAAI,CAAC,UAAU,OAAO,WAAW,UAAU,MAAM,IAAI,MAAM,wBAAwB;EACnF,MAAM,SAAS;EAKf,IAAI,OAAO,SAAS,aAAa,OAAO,iBAAiB,KAAA,GAAW,OAAO,EAAE,MAAM,UAAU;EAC7F,IACE,OAAO,SAAS,YAChB,OAAO,2BAA2B,SAClC,MAAM,QAAQ,OAAO,YAAY,KACjC,OAAO,aAAa,OAAO,WAA6B,OAAO,WAAW,QAAQ,GAClF;GACA,MAAM,eAAe,cAAc,OAAO,YAAY;GACtD,IAAI,IAAI,IAAI,YAAY,CAAC,CAAC,SAAS,aAAa,QAC9C,OAAO;IAAE,MAAM;IAAU;IAAc,wBAAwB;GAAM;EAEzE;CACF,QAAQ;EACN,MAAM,IAAI,MAAM,sEAAsE;CACxF;CACA,MAAM,IAAI,MAAM,sEAAsE;AACxF;AAEA,eAAe,yBACb,SACA,UACe;CACf,MAAM,UAAU,MAAM,QAAQ,OAAO,IAAI,EAAA,CAAG;CAC5C,IAAI,OAAO,SAAS,SAAS,MAC3B,MAAM,IAAI,MACR,4CAA4C,SAAS,KAAK,aAAa,OAAO,MAChF;CAEF,IAAI,SAAS,SAAS,WAAW;EAC/B,MAAM,eAAgB,OAAsC;EAC5D,IACE,OAAO,SAAS,cACf,iBAAiB,KAAA,KAAc,MAAM,QAAQ,YAAY,KAAK,aAAa,WAAW,IAEvF;EAEF,MAAM,IAAI,MAAM,qDAAqD;CACvE;CACA,IAAI,OAAO,SAAS,UAClB,MAAM,IAAI,MAAM,oDAAoD;CAEtE,MAAM,kBAAkB,cAAc,SAAS,YAAY;CAE3D,IAAI,CAAC,kBADiB,cAAc,OAAO,gBAAgB,CAAC,CACzB,GAAG,eAAe,GACnD,MAAM,IAAI,MAAM,+DAA+D;CAEjF,IAAI,OAAO,2BAA2B,OACpC,MAAM,IAAI,MAAM,wDAAwD;AAE5E;AAEA,SAAS,oBACP,OAC0B;CAC1B,IAAI,MAAM,SAAS,WAAW,OAAO,EAAE,MAAM,UAAU;CACvD,MAAM,eAAe,MAAM,aAAa,KAAK,WAC3C,aAAa,QAAQ,sBAAsB,CAC7C;CACA,IAAI,IAAI,IAAI,YAAY,CAAC,CAAC,SAAS,aAAa,QAC9C,MAAM,IAAI,MAAM,mDAAmD;CAErE,OAAO;EAAE,MAAM;EAAU;EAAc,wBAAwB;CAAM;AACvE;AAEA,SAAS,sBAAsB,QAA0C;CACvE,OAAO,KAAK,UACV,OAAO,SAAS,YACZ,EAAE,MAAM,UAAU,IAClB;EACE,MAAM;EACN,cAAc,cAAc,OAAO,YAAY;EAC/C,wBAAwB;CAC1B,CACN;AACF;AAEA,SAAS,iBAAiB,OAAkE;CAC1F,MAAM,WAAW,eAAe,MAAM,UAAU,KAAK,mBAAmB;CACxE,MAAM,WAAW,gBAAgB,MAAM,UAAU,UAAU,sBAAsB;CACjF,MAAM,SAAS,gBAAgB,MAAM,UAAU,QAAQ,oBAAoB;CAC3E,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,MAAM,uDAAuD;CAEzE,OAAO;EAAE;EAAU;EAAU,QAAQ,SAAS;CAAK;AACrD;AAEA,SAAS,uBAAuB,eAA+B;CAC7D,MAAM,eAAe,gBAAgB,eAAe,gCAAgC;CACpF,IAAI,eAAe,QAAU,GAC3B,MAAM,IAAI,MACR,iFACF;CAEF,OAAO,eAAe;AACxB;AAEA,SAAS,SAAS,OAAuB;CACvC,MAAM,OAAO,mBAAmB,OAAO,yBAAyB;CAChE,IAAI,OAAO,MAAQ,MAAM,IAAI,MAAM,iDAAiD;CACpF,OAAO;AACT;AAEA,SAAS,wBAAwB,iBAA4D;CAC3F,IAAI,mBAAmB,OAAO,KAAK,eAAe,CAAC,CAAC,SAAS,GAC3D,MAAM,IAAI,MAAM,uEAAuE;AAE3F;AAEA,SAAS,+BAA6D;CACpE,OAAO;EACL,SAAS;GACP,eAAe;GAGf,cAAc;IAAE,SAAS;IAAO,QAAQ;GAAM;GAC9C,cAAc;GACd,OAAO;GACP,aAAa;GACb,KAAK;GACL,WAAW;GACX,WAAW;IACT,OAAO;IACP,cAAc;IACd,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,UAAU;GACZ;GACA,OAAO;GACP,OAAO;GACP,eAAe;GACf,YAAY;EACd;EACA,WAAW;GAAE,MAAM;GAAO,QAAQ;GAAO,QAAQ;GAAO,iBAAiB;EAAM;EAC/E,UAAU;GAAE,UAAU;GAAO,MAAM;GAAO,UAAU;EAAM;EAC1D,WAAW;GACT,MAAM;GACN,OAAO;GACP,MAAM;GACN,KAAK;GACL,QAAQ;GACR,UAAU;EACZ;EACA,WAAW;GAAE,YAAY;GAAO,MAAM;EAAM;EAC5C,WAAW;EACX,OAAO;EACP,cAAc;EACd,cAAc,EAAE,QAAQ,CAAC,WAAW,QAAQ,EAAE;CAChD;AACF;AAEA,eAAe,sBAAsB,SAA0B,OAAgC;CAC7F,IAAI;EACF,MAAM,QAAQ,OAAO;CACvB,SAAS,cAAc;EACrB,MAAM,IAAI,eACR,CAAC,OAAO,YAAY,GACpB,iEACF;CACF;CACA,MAAM;AACR;AAEA,SAAS,cAAc,SAAsC;CAC3D,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AACrE;AAEA,SAAS,aAAa,OAAe,OAAuB;CAC1D,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAC3C,MAAM,IAAI,MAAM,GAAG,MAAM,4BAA4B;CACvD,OAAO;AACT;AAEA,SAAS,aAAa,OAA2B,OAAmC;CAClF,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,OAAO,aAAa,OAAO,KAAK;AAClC;AAEA,SAAS,eAAe,OAAe,OAAuB;CAC5D,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,kBAAkB;CACtF,OAAO;AACT;AAEA,SAAS,gBAAgB,OAAe,OAAuB;CAC7D,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GAC1C,MAAM,IAAI,MAAM,GAAG,MAAM,4BAA4B;CACvD,OAAO;AACT;AAEA,SAAS,mBAAmB,OAAe,OAAuB;CAChE,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GAC1C,MAAM,IAAI,MAAM,GAAG,MAAM,gCAAgC;CAC3D,OAAO;AACT;AAEA,SAAS,eAAe,QAAuC;CAC7D,QAAQ,eAAe;AACzB;AAEA,eAAe,gBACb,QACA,WACY;CACZ,eAAe,MAAM;CACrB,MAAM,SAAS,MAAM,UAAU;CAC/B,eAAe,MAAM;CACrB,OAAO;AACT;;;AC3dA,IAAM,kBAAN,cAA8B,MAAM;CAClC,YAAY,SAAiB,SAA+B;EAC1D,MAAM,SAAS,OAAO;EACtB,KAAK,OAAO;CACd;AACF;;;AAkDA,SAAgB,uCACd,YAAgD,CAAC,GACf;CAClC,MAAM,0BAAU,IAAI,IAAsC;CAE1D,MAAM,WAA6C;EACjD,SAAS,UAAU,UAAU,CAAC,GAAS;GACrC,IAAI,CAAC,SAAS,MACZ,MAAM,IAAI,gBAAgB,6DAA6D;GAEzF,IAAI,CAAC,QAAQ,WAAW,QAAQ,IAAI,SAAS,IAAI,GAC/C,MAAM,IAAI,gBACR,kDAAkD,SAAS,KAAK,qBAClE;GAEF,QAAQ,IAAI,SAAS,MAAM,QAAQ;EACrC;EACA,IAAI,MAAe;GACjB,OAAO,QAAQ,IAAI,IAAI;EACzB;EACA,IAAI,MAA4C;GAC9C,OAAO,QAAQ,IAAI,IAAI;EACzB;EACA,QAAQ,MAAgC;GACtC,MAAM,WAAW,QAAQ,IAAI,IAAI;GACjC,IAAI,CAAC,UAAU;IACb,MAAM,YAAY,MAAM,KAAK,QAAQ,KAAK,CAAC,CAAC,CAAC,KAAK;IAElD,MAAM,IAAI,gBACR,kDAAkD,KAAK,qBAF1C,UAAU,SAAS,IAAI,gBAAgB,UAAU,KAAK,IAAI,MAAM,IAG/E;GACF;GACA,OAAO;EACT;EACA,QAAkB;GAChB,OAAO,MAAM,KAAK,QAAQ,KAAK,CAAC,CAAC,CAAC,KAAK;EACzC;EACA,YAAwC;GACtC,OAAO,SAAS,MAAM,CAAC,CAAC,KAAK,SAAS,SAAS,QAAQ,IAAI,CAAC;EAC9D;EACA,MAAM,aAAa,MAA6C;GAC9D,OAAO,SAAS,QAAQ,IAAI,CAAC,CAAC,aAAa;EAC7C;CACF;CAEA,KAAK,MAAM,YAAY,WAAW,SAAS,SAAS,QAAQ;CAC5D,OAAO;AACT;;;AAIA,SAAgB,gCACd,UACA,UAC0B;CAC1B,IAAI,OAAO,aAAa,UAAU,OAAO;CACzC,IAAI,CAAC,UACH,MAAM,IAAI,gBACR,+BAA+B,SAAS,+CAC1C;CAEF,OAAO,SAAS,QAAQ,QAAQ;AAClC;;;AAgBA,SAAgB,wBACd,UACA,UAA0C,CAAC,GAC5B;CACf,OAAO,EACL,MAAM,OAAO,eAAgE;EAC3E,MAAM,WAAW,QAAQ,YAAY,CAAC;EACtC,MAAM,eAAe,8BAA8B,aAAa;EAChE,MAAM,cAAc,QAAQ,mBAAmB,aAAa,KAAK,CAAC;EAClE,MAAM,SAAS;GACb,GAAG;GACH,GAAG;GACH,GAAG;GACH,iBAAiB;IACf,GAAI,SAAS,mBAAmB,CAAC;IACjC,GAAI,aAAa,mBAAmB,CAAC;IACrC,GAAI,YAAY,mBAAmB,CAAC;GACtC;EACF;EACA,IAAI,OAAO,YAAY,KAAA,GAAW,OAAO,OAAO;EAChD,IAAI,OAAO,YAAY,KAAA,GACrB,MAAM,IAAI,gBACR,2BAA2B,SAAS,KAAK,wEAC3C;EAEF,IAAI,QAAQ,gBAAgB;GAC1B,MAAM,eAAe,MAAM,SAAS,aAAa;GACjD,IAAI,CAAC,aAAa,UAAU,QAAQ,CAAC,aAAa,SAAS,UACzD,MAAM,IAAI,gBACR,2BAA2B,SAAS,KAAK,yCAC3C;EAEJ;EACA,MAAM,cAAc,MAAM,SAAS,OAAO,MAAqC;EAC/E,IAAI,QAAQ,kBAAkB,CAAC,YAAY,SAAS;GAClD,MAAM,YAAY,UAAU;GAC5B,MAAM,IAAI,gBACR,2BAA2B,SAAS,KAAK,yBAC3C;EACF;EACA,OAAO,6BAA6B,aAAa,EAC/C,sBAAsB,QAAQ,wBAAwB,KACxD,CAAC;CACH,EACF;AACF;;;AAoBA,SAAgB,wBACd,QACA,UAAwC,CAAC,GACf;CAC1B,MAAM,eAAe,QAAQ,QAAQ;CACrC,OAAO;EACL,MAAM;EACN,cAAc,YAAY;GACxB,IAAI,QAAQ,cACV,OAAO,OAAO,QAAQ,iBAAiB,aACnC,QAAQ,aAAa,IACrB,QAAQ;GAEd,OAAO,iCAAiC,EACtC,eAAe,QAAQ,mBAAmB,KAAA,EAC5C,CAAC;EACH;EACA,GAAI,QAAQ,kBAAkB,EAAE,iBAAiB,QAAQ,gBAAgB,IAAI,CAAC;EAC9E,MAAM,OAAO,OAA+D;GAC1E,MAAM,gBACJ,QAAQ,iBAAiB,KAAK,KAC7B,MAAM,8BACL,OACA,QAAQ,kBAAkB,YAC1B,QAAQ,cACV;GAKF,OAAO,6BAA6B,MAJlB,OAAO,OACvB,eACA,MAAM,WAAW,KAAA,IAAY,KAAA,IAAY,EAAE,QAAQ,MAAM,OAAO,CAClE,GACyC,cAAc,MAAM;EAC/D;EACA,GAAI,OAAO,MAAM,IACb,EACE,MAAM,IAAI,IAA8C;GACtD,MAAM,MAAM,MAAM,OAAO,IAAI,EAAE;GAC/B,OAAO,MAAM,6BAA6B,KAAK,cAAc,MAAM,IAAI;EACzE,EACF,IACA,CAAC;EACL,GAAI,QAAQ,MAAM,IACd,EACE,MAAM,KAAK,OAAmE;GAE5E,QAAO,MADa,OAAO,KAAK,OAAO,eAAe,EAAA,CACzC,KAAK,SAAS;IACzB,IAAI,OAAO,IAAI,EAAE;IACjB,UAAU;IACV,MAAM,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO,KAAA;IAChD,QAAQ,kBAAkB,cAAc,GAAG,CAAC;IAC5C,UAAU,gBAAgB,GAAG;GAC/B,EAAE;EACJ,EACF,IACA,CAAC;CACP;AACF;;;AAkBA,SAAgB,mBACd,UACA,UAAmC,CAAC,GACV;CAC1B,QAAQ,MAAM,QAAQ,uBAAuB,UAAU,KAAK,SAAS,KAAK,OAAO;AACnF;AAEA,SAAS,uBACP,UACA,SACA,KACA,SACmB;CACnB,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,yBAAyB;EAC7B,IAAI,IAAI,OAAO,SAAS,WAAW,MAAM;CAC3C;CACA,iBAAiB;CACjB,IAAI,CAAC,IAAI,OAAO,SAAS,IAAI,OAAO,iBAAiB,SAAS,kBAAkB,EAAE,MAAM,KAAK,CAAC;CAE9F,IAAI;CACJ,IAAI;CAEJ,OAAO;EACL,SAAS,QAAQ,WAAY,SAAS;EACtC,QAAQ,MAAM,QAAmC;GAC/C,OAAO,uBAAuB;IAC5B;IACA;IACA;IACA;IACA;IACA;IACA,gBAAgB,QAAQ;KACtB,cAAc;IAChB;IACA,aAAa,SAAS;KACpB,WAAW;IACb;GACF,CAAC;EACH;EACA,MAAM,SAAS,QAAyC;GACtD,WAAW,MAAM;GACjB,MAAM,aAAa,UAAU;GAC7B,OAAO,EAAE,WAAW,KAAK;EAC3B;EACA,iBAA0C;GACxC,IAAI,CAAC,UACH,MAAM,IAAI,gBACR,sBAAsB,SAAS,KAAK,+CACtC;GAEF,OAAO;EACT;CACF;AACF;AAaA,gBAAgB,uBACd,MAC2B;CAC3B,MAAM,UAAU,KAAK,IAAI;CACzB,MAAM,SAAS,kBAAkB,KAAK,QAAQ,KAAK,WAAW,MAAM;CACpE,MAAM,gBAAgB,KAAK,QAAQ,mBAAmB,KAAK,OAAO,KAAK,KAAK;CAC5E,MAAM,cAAc,MAAM,KAAK,SAAS,OAAO;EAC7C,GAAI,KAAK,QAAQ,YAAY,CAAC;EAC9B,SAAS;EACT,QAAQ;CACV,CAAC;CACD,KAAK,cAAc,WAAW;CAE9B,MAAM,OACJ,KAAK,QAAQ,aAAa,KAAK,MAAM,KAAK,OAAO,KAAK,gBAAgB,KAAK,MAAM,MAAM;CACzF,MAAM,SAAkC,CAAC;CACzC,MAAM,SAAS,eAAe;CAC9B,IAAI,MAAM;CACV,IAAI,OAAO;CACX,IAAI,WAAW;CACf,IAAI;EACF,WAAW,MAAM,SAAS,YAAY,OAAO;GAAE,GAAG;GAAM,QAAQ;EAAO,CAAC,GAAG;GACzE,OAAO,KAAK,KAAK;GACjB,QAAQ,yBAAyB,KAAK;GACtC,MAAM,QAAQ,0BAA0B,KAAK;GAC7C,IAAI,MAAM,SAAS,MAAM,QAAQ;IAC/B,OAAO,SAAS,MAAM;IACtB,OAAO,UAAU,MAAM;IACvB,MAAM;KAAE,MAAM;KAAU,OAAO,MAAM;KAAO,QAAQ,MAAM;IAAO;GACnE;GACA,IAAI,MAAM,KAAK;IACb,OAAO,MAAM;IACb,MAAM;KAAE,MAAM;KAAQ,KAAK,MAAM;IAAI;GACvC;GACA,IAAI,2BAA2B,KAAK,GAAG,WAAW;EACpD;EACA,KAAK,KAAK,QAAQ,wBAAwB,SAAS,CAAC,UAClD,MAAM,IAAI,gBACR,sBAAsB,KAAK,SAAS,KAAK,4DAC3C;EAEF,MAAM,EAAE,MAAM,YAAY;EAC1B,MAAM,SAAS,iBAAiB,QAAQ,IAAI;EAC5C,MAAM,QAAe;GACnB,YAAY;GACZ;GACA;GACA,IAAI,KAAK,IAAI,IAAI;EACnB;EACA,KAAK,WAAW;GACd,QAAQ,WAAW,YAAY,KAAK,SAAS,QAAQ,MAAM;GAC3D,KAAK;GACL;EACF,CAAC;CACH,UAAU;EACR,IAAI,KAAK,QAAQ,mBAAmB,MAAM,MAAM,YAAY,UAAU;CACxE;AACF;AAEA,SAAS,8BACP,SACsC;CACtC,MAAM,UAAU,SAAS,SAAS;CAClC,MAAM,UAAU,SAAS,SAAS;CAClC,MAAM,YAAY;EAChB,GAAI,SAAS,cAAc,EAAE,aAAa,QAAQ,YAAY,IAAI,CAAC;EACnE,GAAI,SAAS,KAAK,MAAM,EAAE,SAAS,QAAQ,IAAI,IAAI,IAAI,CAAC;EACxD,GAAI,SAAS,KAAK,MAAM,EAAE,QAAQ,QAAQ,IAAI,IAAI,IAAI,CAAC;CACzD;CACA,OAAO;EACL,GAAI,YAAY,KAAA,IAAY,EAAE,QAAQ,IAAI,CAAC;EAC3C,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;EAC7B,GAAI,OAAO,KAAK,SAAS,CAAC,CAAC,SAAS,IAAI,EAAE,UAAU,IAAI,CAAC;EACzD,GAAI,SAAS,YAAY,EAAE,WAAW,QAAQ,UAA6B,IAAI,CAAC;EAChF,GAAI,SAAS,MAAM,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC;EAC3C,GAAI,SAAS,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;EACvD,GAAI,SAAS,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;EAC1D,GAAI,SAAS,OAAO,EAAE,MAAM,QAAQ,KAAK,IAAI,CAAC;EAC9C,GAAI,SAAS,iBAAiB,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;EAC5E,iBAAiB,EAAE,sBAAsB,WAAW,CAAC,EAAE;CACzD;AACF;AAEA,eAAe,8BACb,OACA,gBACA,gBAC+B;CAC/B,MAAM,cAAe,MAAM,WAAW;CACtC,MAAM,YAAY,MAAM,aAAa,CAAC;CACtC,MAAM,cAAc,gCAAgC,SAAS;CAC7D,MAAM,kBAAkB,MAAM,iBAAiB;CAC/C,MAAM,OACJ,mBAAmB,OAAO,oBAAoB,WACzC,EAAE,GAAI,gBAAyC,IAC/C,CAAC;CACR,yBAAyB,MAAM,OAAO;CACtC,yBAA0B,KAA+B,OAAO;CAChE,MAAM,UAAU,MAAM,4BAA4B,MAAM,SAAS,cAAc;CAC/E,MAAM,EAAE,SAAS,cAAc,GAAG,gBAAgB,KAAK,WAAW,CAAC;CACnE,OAAO;EACL,GAAG;EACH,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;EACrC,GAAI,UAAU,UAAU,EAAE,KAAK;GAAE,KAAK,UAAU;GAAS,KAAK,UAAU;EAAO,EAAE,IAAI,CAAC;EACtF,GAAI,MAAM,YAAY,EAAE,WAAW,MAAM,UAA+C,IAAI,CAAC;EAC7F,GAAI,MAAM,MAAM,EAAE,KAAK,MAAM,IAAI,IAAI,CAAC;EACtC,GAAI,MAAM,QAAQ,MAAM,OAAO,IAAI,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;EACjE,GAAI,MAAM,WAAW,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;EACrD,GAAI,MAAM,OAAO,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;EACzC,GAAI,MAAM,iBAAiB,EAAE,gBAAgB,MAAM,eAAe,IAAI,CAAC;EACvE,SAAS;GACP,GAAG;GACH,MAAM;GACN;EACF;CACF;AACF;AAEA,SAAS,yBAAyB,SAA2D;CAC3F,IACE,YAAY,KAAA,MACX,CAAC,MAAM,QAAQ,OAAO,KACrB,QAAQ,MAAM,WAAW,OAAO,WAAW,YAAY,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,IAEnF,MAAM,IAAI,gBACR,sFACF;AAEJ;AAEA,SAAS,gCACP,WACoB;CACpB,IACE,UAAU,gBAAgB,KAAA,KAC1B,UAAU,UAAU,KAAA,KACpB,UAAU,gBAAgB,UAAU,OAEpC,MAAM,IAAI,gBACR,oGACF;CAEF,OAAO,UAAU,eAAe,UAAU;AAC5C;AAEA,eAAe,4BACb,SACA,gBACuB;CACvB,IAAI,OAAO,YAAY,UAAU,OAAO;CACxC,IAAI,CAAC,gBACH,MAAM,IAAI,gBACR,kEAAkE,QAAQ,oDAC5E;CAEF,OAAO,eAAe,OAAO;AAC/B;AAEA,SAAS,6BACP,aACA,SACiB;CA+JjB,OAAO;EA7JL,IAAI,YAAY;EAChB,MAAM,YAAY;EAClB,QAAQ;EACR,MAAM,UAAyB;GAC7B,MAAM,YAAY,UAAU;EAC9B;EACA,OAAO,aACL,SACA,eAC8B;GAC9B,IAAI,WAAW;GACf,MAAM,QAAQ,oBAAoB,SAAS,aAAa;GACxD,IAAI;GACJ,IAAI,sBAAsB;GAC1B,IAAI,qBAAqB;GACzB,IAAI;GACJ,MAAM,eAAe;IACnB,IAAI,uBAAuB,CAAC,MAAM,aAAa,CAAC,YAAY,SAAS;IACrE,sBAAsB;IACtB,IAAI;KACF,MAAM,UAAU,YAAY,QAAQ,MAAM,WAAW;MACnD,GAAI,MAAM,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,MAAM,WAAW;MACzE,GAAI,MAAM,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO;KAC/D,CAAC;KACD,4BAA4B,SAAS,KAAK;KAC1C,eAAe,QAAQ,OAAO,CAAC,CAAC,OAAO,UAAmB;MACxD,qBAAqB;MACrB,oBAAoB;KACtB,CAAC;IACH,SAAS,OAAO;KACd,qBAAqB;KACrB,oBAAoB;IACtB;GACF;GACA,MAAM,QAAQ,iBAAiB,SAAS,QAAQ,EAAE,MAAM,KAAK,CAAC;GAC9D,IAAI,MAAM,QAAQ,SAAS,OAAO;GAClC,IAAI,eAAe;GACnB,IAAI;GACJ,IAAI;IACF,WAAW,MAAM,SAAS,YAAY,OAAO,KAAK,GAAG;KACnD,IAAI,2BAA2B,KAAK,GAAG,WAAW;KAClD,MAAM,aAAa,kBAAkB,KAAK;KAC1C,IAAI,YAAY,MAAM;KACtB,MAAM,iCAAiC,KAAK;IAC9C;GACF,SAAS,OAAO;IACd,eAAe;IACf,cAAc;GAChB,UAAU;IACR,MAAM,QAAQ,oBAAoB,SAAS,MAAM;IACjD,IAAI,MAAM,QAAQ,SAAS;KACzB,OAAO;KACP,MAAM;IACR;GACF;GACA,IAAI,MAAM,QAAQ,SAAS;IACzB,MAAM,aAAa,IAAI,aAAa,mCAAmC,YAAY;IACnF,MAAM,SAAS,CACb,GAAI,eAAe,CAAC,WAAW,IAAI,CAAC,GACpC,GAAI,qBAAqB,CAAC,iBAAiB,IAAI,CAAC,CAClD;IACA,IAAI,OAAO,SAAS,GAClB,OAAO,eAAe,YAAY,SAAS,EACzC,OACE,OAAO,WAAW,IACd,OAAO,KACP,IAAI,eAAe,QAAQ,yCAAyC,EAC5E,CAAC;IAEH,MAAM;GACR;GACA,IAAI,cAAc,MAAM;GACxB,IAAI,oBAAoB,MAAM;GAC9B,IAAI,QAAQ,wBAAwB,CAAC,UACnC,MAAM,IAAI,gBACR,2BAA2B,YAAY,SAAS,4DAClD;EAEJ;EACA,MAAM,OACJ,SACA,eACuB;GACvB,MAAM,SAAkC,CAAC;GACzC,IAAI,OAAO;GACX,IAAI;GACJ,IAAI,WAAW;GACf,WAAW,MAAM,SAAS,YAAY,OAAO,oBAAoB,SAAS,aAAa,CAAC,GAAG;IACzF,OAAO,KAAK,KAAK;IACjB,IAAI,2BAA2B,KAAK,GAAG,WAAW;IAClD,QAAQ,yBAAyB,KAAK;IACtC,QAAQ,gBAAgB,OAAO,MAAM,KAAK;GAC5C;GACA,IAAI,QAAQ,wBAAwB,CAAC,UACnC,MAAM,IAAI,gBACR,2BAA2B,YAAY,SAAS,4DAClD;GAEF,OAAO;IACL,UAAU,iBAAiB,QAAQ,IAAI,CAAC,CAAC;IACzC,SAAS;IACT,QAAQ;IACR,YAAY;IACZ,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;GAC3B;EACF;EACA,GAAI,YAAY,YAAY,YAAY,UACpC,EACE,MAAM,eAAe,SAAqC,eAA+B;GACvF,MAAM,UAAU,MAAM,YAAY,WAChC,oBAAoB,SAAS,aAAa,CAC5C;GACA,IAAI,CAAC,SACH,MAAM,IAAI,gBAAgB,uDAAuD;GACnF,OAAO,oCAAoC,OAAO;EACpD,EACF,IACA,CAAC;EACL,GAAI,YAAY,UACZ,EACE,QAAQ,IAAY,gBAAsD;GACxE,OAAO,+BACL,YAAY,UAAU,IAAI,cAAc,GACxC,gBAAgB,UAClB;EACF,EACF,IACA,CAAC;EACL,GAAI,YAAY,OAAO,EAAE,MAAM,YAAY,KAAK,KAAK,WAAW,EAAE,IAAI,CAAC;EACvE,GAAI,YAAY,QAAQ,EAAE,OAAO,YAAY,MAAM,KAAK,WAAW,EAAE,IAAI,CAAC;EAC1E,GAAI,YAAY,OACZ,EACE,MAAM,YAAY,KAAK,KAAK,WAAW,EACzC,IACA,CAAC;EACL,GAAI,YAAY,aACZ,EACE,MAAM,WAAW,mBAAuC;GACtD,MAAM,aAAa,MAAM,YAAY,aAAa,iBAAiB;GACnE,OAAO;IAAE,cAAc,YAAY;IAAI,IAAI,YAAY;GAAG;EAC5D,EACF,IACA,CAAC;EACL,GAAI,YAAY,OACZ,EACE,MAAM,KAAK,cAAsB,aAA2B;GAC1D,MAAM,SAAS,MAAM,YAAY,OAAO,EAAE,IAAI,aAAa,GAAG,WAAW;GACzE,IAAI,CAAC,QACH,MAAM,IAAI,gBAAgB,uDAAuD;GACnF,OAAO,6BAA6B,QAAQ,OAAO;EACrD,EACF,IACA,CAAC;EACL,MAAM,SAAwB;GAC5B,MAAM,YAAY,UAAU;EAC9B;CAEO;AACX;AAEA,SAAS,6BACP,KACA,cACA,QACkB;CAmFlB,OAAO;EAjFL,IAAI,OAAO,IAAI,EAAE;EACjB,UAAU;EACV,GAAI,OAAO,IAAI,SAAS,WAAW,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;EACzD,GAAI,gBAAgB,GAAG,IAAI,EAAE,UAAU,gBAAgB,GAAG,EAAE,IAAI,CAAC;EACjE,MAAM,SAA0C;GAC9C,MAAM,aAAa,GAAG;GACtB,OAAO,kBAAkB,cAAc,GAAG,CAAC;EAC7C;EACA,OAAO,OAAO,OAA6D;GACzE,WAAW,MAAM,SAAS,IAAI,aAC5B,yBAAyB,KAAK,GAC9B,gCAAgC,KAAK,CACvC,GACE,MAAM,iCAAiC,KAAK;EAEhD;EACA,GAAI,kBAAkB,GAAG,IACrB,EACE,MAAM,SAAS,OAAiD;GAK9D,OAAO,8BAA8B,MAJZ,IAAI,eAC3B,yBAAyB,KAAK,GAC9B,gCAAgC,KAAK,CACvC,GACiD,YAAY;EAC/D,EACF,IACA,CAAC;EACL,GAAI,WAAW,GAAG,IACd;GACE,QAAQ,IAAY,gBAAoE;IACtF,OAAO,6BAA6B,IAAI,QAAQ,EAAE,GAAG,gBAAgB,UAAU;GACjF;GACA,MAAM,qBACJ,SACA,SACqC;IAIrC,QAAO,MAHgB,IACpB,QAAQ,QAAQ,QAAQ,SAAS,CAAC,CAClC,qBAAqB,SAAS,OAAO,EAAA,CACxB;GAClB;EACF,IACA,CAAC;EACL,GAAI,QAAQ,GAAG,IAAI,EAAE,MAAM,IAAI,KAAK,KAAK,GAAG,EAAE,IAAI,CAAC;EACnD,GAAI,SAAS,GAAG,IAAI,EAAE,OAAO,IAAI,MAAM,KAAK,GAAG,EAAE,IAAI,CAAC;EACtD,GAAI,QAAQ,GAAG,IACX,EACE,MAAM,KAAK,SAAiB,SAA4C;GACtE,OAAO,gCAAgC,MAAM,IAAI,KAAK,SAAS,OAAgB,CAAC;EAClF,EACF,IACA,CAAC;EACL,MAAM,WAAW,SAAqD;GAIpE,OAAO;IACL,KAAI,MAJe,IAAI,SAAS,EAChC,GAAI,SAAS,OAAO,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE,IAAI,CAAC,EAClD,CAAC,EAAA,CAEY;IACX,UAAU;IACV,GAAI,SAAS,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;GAC5D;EACF;EACA,MAAM,KAAK,YAA2B,SAAkD;GAOtF,OAAO,6BAA6B,MANf,OAAO,OAAO;IACjC,cAAc,WAAW;IACzB,eAAe,OAAO,IAAI,EAAE;IAC5B,GAAI,SAAS,OAAO,EAAE,MAAM,QAAQ,KAAK,IAAI,CAAC;IAC9C,GAAI,SAAS,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;GAC5D,CAAC,GAC2C,cAAc,MAAM;EAClE;EACA,MAAM,YAAoC;GACxC,OAAO,+BAA+B,OAAO,oBAAoB,GAAG,GAAG,GAAG;EAC5E;EACA,MAAM,UAAyB;GAC7B,MAAM,aAAa,GAAG;EACxB;EACA,MAAM,UAAyB;GAC7B,MAAM,WAAW,GAAG;EACtB;CAEe;AACnB;AAEA,SAAS,6BACP,SACA,oBACc;CAId,MAAM,aAAa,yBAAyB,QAAQ,YAAY,oBAAoB,EAClF,+BAA+B,KACjC,CAAC;CACD,OAAO;EACL,IAAI,QAAQ;EACZ,GAAI,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW;EACjD,MAAM,SAA6C;GACjD,MAAM,SAAS,MAAM,QAAQ,OAAO;GACpC,IAAI,CAAC,QAAQ,OAAO;GACpB,2BAA2B,QAAQ,UAAU;GAC7C,OAAO,yBAA0B,OAAgC,MAAM;EACzE;EACA,OAAO,OAAO,SAI2B;GACvC,MAAM,cAAc,kBAAkB,YAAY,SAAS,WAAW;GACtE,WAAW,MAAM,SAAS,QAAQ,OAAO;IACvC,GAAI,SAAS,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;IAC/D,GAAI,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY;IACnD,GAAI,SAAS,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;GACpE,CAAC,GACC,MAAM,iCAAiC,KAAK;EAChD;EACA,MAAM,OAAO,SAA8D;GACzE,OAAO,gCACL,MAAM,eACJ,QAAQ,QAAQ,CAAC,CAAC,WAChB,QAAQ,OAAO,EACb,GAAI,YAAY,gBAAgB,KAAA,IAC5B,CAAC,IACD,EAAE,aAAa,WAAW,YAAY,EAC5C,CAAC,CACH,GACA,SAAS,MACX,CACF;EACF;EACA,MAAM,OAAO,OAAiD;GAC5D,OAAO,gCACL,MAAM,QAAQ,OACZ,yBAAyB,KAAK,GAC9B,gCAAgC,KAAK,CACvC,CACF;EACF;EACA,GAAI,QAAQ,uBACR,EACE,MAAM,qBACJ,SACA,SACqC;GACrC,8BAA8B,SAAS,UAAU;GAEjD,QAAO,MADgB,QAAQ,qBAAsB,SAAS,OAAO,EAAA,CACrD;EAClB,EACF,IACA,CAAC;EACL,GAAI,QAAQ,YACR,EACE,MAAM,UACJ,SACA,SAC8C;GAC9C,wBAAwB,SAAS,UAAU;GAC3C,OAAO,QAAQ,UAAW,SAAS,OAAO;EAC5C,EACF,IACA,CAAC;EACL,SAAwB;GACtB,OAAO,QACJ,UACC,YAAY,gBAAgB,KAAA,IACxB,KAAA,IACA,EAAE,aAAa,WAAW,YAAY,CAC5C,CAAC,CACA,WAAW,KAAA,CAAS;EACzB;CACF;AACF;AAEA,SAAS,+BACP,SACA,oBACoB;CACpB,IAAI,CAAC,SAAS,MAAM,IAAI,gBAAgB,iDAAiD;CACzF,MAAM,aAAa,yBAAyB,QAAQ,YAAY,kBAAkB;CAClF,OAAO;EACL,IAAI,QAAQ;EACZ,GAAI,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW;EACjD,MAAM,SAAS;GACb,MAAM,SAAS,MAAM,QAAQ,OAAO;GACpC,IAAI,CAAC,QAAQ,OAAO;GACpB,OAAO;IACL,IAAI,QAAQ;IACZ,QAAQ,2CAA2C,MAAM;GAC3D;EACF;EACA,OAAO,OAAO,SAImB;GAC/B,MAAM,cAAc,kBAAkB,YAAY,SAAS,WAAW;GACtE,WAAW,MAAM,SAAS,QAAQ,OAAO;IACvC,GAAI,SAAS,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;IAC/D,GAAI,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY;IACnD,GAAI,SAAS,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;GACpE,CAAC,GACC,MAAM,iCAAiC,KAAK;EAChD;EACA,MAAM,OAAO,SAA2D;GACtE,kBAAkB,YAAY,SAAS,WAAW;GAClD,OAAO,gCAAgC,MAAM,QAAQ,OAAO,CAAC;EAC/D;EACA,MAAM,OACJ,SACA,SACuB;GACvB,OAAO,gCACL,MAAM,QAAQ,OAAO,oBAAoB,SAAS,OAAO,CAAC,CAC5D;EACF;EACA,GAAI,QAAQ,uBACR,EACE,MAAM,qBACJ,SACA,SACA;GACA,8BAA8B,SAAS,UAAU;GACjD,OAAO,EACL,iBAAiB,MAAM,QAAQ,qBAAsB,SAAS,OAAO,EACvE;EACF,EACF,IACA,CAAC;EACL,GAAI,QAAQ,YACR,EACE,MAAM,UACJ,SACA,SAC8C;GAC9C,wBAAwB,SAAS,UAAU;GAC3C,OAAO,QAAQ,UAAW,SAAS,OAAO;EAC5C,EACF,IACA,CAAC;EACL,MAAM,UAAU,SAAoC;GAClD,kBAAkB,YAAY,SAAS,WAAW;GAClD,MAAM,QAAQ,OAAO;GACrB,OAAO,EAAE,WAAW,KAAK;EAC3B;CACF;AACF;AAEA,SAAS,2CACP,QAC6D;CAC7D,QAAQ,QAAR;EACE,KAAK;EACL,KAAK,gBACH,OAAO;EACT,KAAK,WACH,OAAO;EACT,KAAK,aACH,OAAO;EACT,KAAK,aACH,OAAO;EAET,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,WACH,OAAO;CACX;AACF;AAEA,SAAS,gCAAgC,QAAuC;CAC9E,OAAO;EACL,UAAU,OAAO;EACjB,SAAS,OAAO;EAChB,QAAQ,OAAO,UAAU,YAAY;EACrC,YAAY;EACZ,GAAI,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;EAC9C,GAAI,OAAO,QACP;GACE,OAAO;IACL,aAAa,OAAO,MAAM;IAC1B,cAAc,OAAO,MAAM;GAC7B;GACA,GAAI,OAAO,MAAM,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,OAAO,MAAM,KAAK;EAC1E,IACA,CAAC;CACP;AACF;AAEA,SAAS,iCAAiC,OAA4C;CACpF,MAAM,OACJ,MAAM,QAAQ,OAAO,MAAM,SAAS,WAC/B,MAAM,OACN,CAAC;CACR,MAAM,aAAa,qCAAqC,KAAK;CAC7D,OAAO;EACL,MAAM,OAAO,MAAM,IAAI;EACvB;EACA,GAAI,MAAM,KAAK,EAAE,IAAI,MAAM,GAAG,IAAI,CAAC;EACnC,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;EACnC,OAAO,mBAAmB,IAAI;EAC9B,eAAe;CACjB;AACF;AAEA,SAAS,iCAAiC,OAA4C;CACpF,MAAM,aAAa,MAAM;CACzB,MAAM,OAAO,YAAY,QAAQ,MAAM;CACvC,MAAM,WAAW,aAAa,+BAA+B,MAAM,MAAM,UAAU,IAAI,MAAM;CAC7F,MAAM,QAAQ,MAAM,QAAQ,eAAe,MAAM,KAAK,IAAI,KAAA;CAqB1D,OAAO;EACL;EACA,aAtBkB;GAClB,IAAI,CAAC,OAAO,OAAO;GACnB,IAAI,YAAY,IAAI,GAClB,OAAO;IACL,GAAG;IACH,UAAU,MAAM,OAAO;IACvB,WAAW,MAAM,OAAO;IACxB,GAAI,MAAM,OAAO,SAAS,KAAA,IAAY,EAAE,SAAS,MAAM,MAAM,KAAK,IAAI,CAAC;IACvE,GAAG;GACL;GACF,IAAI,kBAAkB,IAAI,GAAG,OAAO;IAAE,GAAG;IAAU;GAAM;GACzD,IAAI,SAAS,QACX,OAAO;IACL,GAAG;IACH,YAAY;IACZ,GAAI,MAAM,iBAAiB,KAAA,IAAY,EAAE,cAAc,MAAM,aAAa,IAAI,CAAC;GACjF;GAEF,OAAO;EACT,EAAA,CAGK;EACH,GAAI,MAAM,KAAK,EAAE,IAAI,MAAM,GAAG,IAAI,CAAC;CACrC;AACF;AAEA,SAAS,kBAAkB,OAAwD;CACjF,MAAM,OAAO,MAAM,YAAY,QAAQ,MAAM;CAC7C,IAAI,CAAC,MAAM,SAAS,YAAY,IAAI,KAAK,kBAAkB,IAAI,KAAK,SAAS,QAC3E;CAEF,MAAM,QAAQ,eAAe,MAAM,KAAK;CACxC,IACE,MAAM,gBAAgB,KAAA,KACtB,MAAM,iBAAiB,KAAA,KACvB,MAAM,iBAAiB,KAAA,GAEvB;CAEF,OAAO;EAAE,MAAM;EAAY,MAAM;CAAM;AACzC;AAEA,SAAS,+BACP,SACA,YACyB;CACzB,MAAM,EAAE,MAAM,OAAO,GAAG,mBAAmB;CAC3C,OAAO;EACL,GAAG;EACH,GAAG;EACH,GAAI,WAAW,SAAS,0BAA0B,WAAW,KAAK,SAAS,SACvE,EAAE,MAAM,WAAW,KAAK,KAAK,IAC7B,CAAC;CACP;AACF;AAEA,SAAS,eAAe,OAA2C;CACjE,OAAO;EACL,aAAa,MAAM;EACnB,cAAc,MAAM;EACpB,GAAI,MAAM,gBAAgB,KAAA,IAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;EAC5E,GAAI,MAAM,yBAAyB,KAAA,IAC/B,EAAE,sBAAsB,MAAM,qBAAqB,IACnD,CAAC;EACL,GAAI,MAAM,6BAA6B,KAAA,IACnC,EAAE,0BAA0B,MAAM,yBAAyB,IAC3D,CAAC;EACL,GAAI,MAAM,oBAAoB,KAAA,IAAY,EAAE,iBAAiB,MAAM,gBAAgB,IAAI,CAAC;EACxF,GAAI,MAAM,SAAS,KAAA,IAAY,EAAE,cAAc,MAAM,KAAK,IAAI,CAAC;CACjE;AACF;AAEA,SAAS,oBACP,SACA,SACgB;CAChB,OAAO;EACL,GAAI,OAAO,YAAY,WAAW,EAAE,QAAQ,QAAQ,IAAI,EAAE,OAAO,QAAQ;EACzE,GAAI,SAAS,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;EAC7D,GAAI,SAAS,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;EACjD,GAAI,SAAS,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;EAC7D,GAAI,SAAS,cAAc,EAAE,aAAa,QAAQ,YAAY,IAAI,CAAC;EACnE,GAAI,SAAS,cAAc,EAAE,aAAa,QAAQ,YAAY,IAAI,CAAC;EACnE,GAAI,SAAS,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;EACpD,GAAI,SAAS,WAAW,KAAA,IAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;EAClE,GAAI,SAAS,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;EACvD,GAAI,SAAS,gBAAgB,EAAE,YAAY,QAAQ,cAAc,IAAI,CAAC;EACtE,GAAI,SAAS,SAAS,eAAe,EAAE,cAAc,QAAQ,QAAQ,aAAa,IAAI,CAAC;EACvF,GAAI,SAAS,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;EACpD,GAAI,SAAS,UAAU,EAAE,iBAAiB,EAAE,SAAS,QAAQ,QAAQ,EAAE,IAAI,CAAC;CAC9E;AACF;AAEA,SAAS,yBACP,QACA,UACA,UAAuD,CAAC,GACnB;CACrC,IAAI,aAAa,KAAA,GAAW;EAC1B,IAAI,WAAW,KAAA,GAAW,OAAO,KAAA;EACjC,OAAO,8BAA8B,MAAM,MAAM;CACnD;CACA,MAAM,gBAAgB,8BAA8B,MAAM,QAAQ;CAClE,IAAI,WAAW,KAAA,GAAW;EACxB,IAAI,QAAQ,kCAAkC,MAAM,OAAO;EAC3D,MAAM,IAAI,gBAAgB,mEAAmE;CAC/F;CACA,MAAM,cAAc,8BAA8B,UAAU,MAAM;CAClE,IAAI,CAAC,YAAY,SACf,MAAM,IAAI,gBAAgB,kEAAkE;CAE9F,IAAI,CAAC,uBAAuB,YAAY,MAAM,aAAa,GACzD,MAAM,IAAI,gBAAgB,mEAAmE;CAE/F,OAAO,YAAY;AACrB;AAEA,SAAS,2BACP,QACA,YACM;CACN,IAAI,CAAC,UAAU,OAAO,WAAW,YAAY,eAAe,KAAA,GAAW;CACvE,MAAM,SAAS;CACf,IAAI,OAAO,kBAAkB,KAAA,GAEvB;MAAA,CAAC,uBADoB,8BAA8B,MAAM,OAAO,aACzB,GAAG,UAAU,GACtD,MAAM,IAAI,gBAAgB,iEAAiE;CAAA;CAG/F,KAAK,MAAM,OAAO,CAAC,qBAAqB,mBAAmB,GAAG;EAC5D,MAAM,cAAc,OAAO;EAC3B,IAAI,gBAAgB,KAAA,KAAa,gBAAgB,WAAW,aAC1D,MAAM,IAAI,gBAAgB,+CAA+C;CAE7E;AACF;AAEA,SAAS,8BACP,SACA,YACM;CACN,IAAI,eAAe,KAAA,GAAW;CAC9B,IACE,QAAQ,QAAQ,UAAU,WAAW,SACrC,QAAQ,QAAQ,aAAa,WAAW,YACxC,QAAQ,QAAQ,kBAAkB,WAAW,iBAC7C,QAAQ,QAAQ,cAAc,WAAW,aACzC,QAAQ,QAAQ,gBAAgB,WAAW,aAE3C,MAAM,IAAI,gBAAgB,qDAAqD;AAEnF;AAEA,SAAS,wBACP,SACA,YACM;CACN,IAAI,eAAe,KAAA,GACjB,MAAM,IAAI,gBACR,sEACF;CAGF,IAAI,CAAC,uBADgB,kCAAkC,MAAM,OACtB,CAAC,CAAC,KAAK,UAAU,GACtD,MAAM,IAAI,gBAAgB,6CAA6C;AAE3E;AAEA,SAAS,kBACP,YACA,WACoB;CACpB,IACE,YAAY,gBAAgB,KAAA,KAC5B,cAAc,KAAA,KACd,WAAW,gBAAgB,WAE3B,MAAM,IAAI,gBAAgB,kDAAkD;CAE9E,OAAO,YAAY,eAAe;AACpC;AAEA,SAAS,4BAA4B,SAAuB,OAA6B;CACvF,IAAI,MAAM,gBAAgB,KAAA,KAAa,MAAM,eAAe,KAAA,GAAW;CACvE,MAAM,oBAAoB,8BAA8B,UAAU,QAAQ,UAAU;CACpF,IAAI,CAAC,kBAAkB,SACrB,MAAM,IAAI,gBACR,wFACF;CAEF,MAAM,qBACJ,MAAM,eAAe,KAAA,IACjB,KAAA,IACA,8BAA8B,MAAM,MAAM,UAAU;CAC1D,IACG,MAAM,gBAAgB,KAAA,KAAa,kBAAkB,KAAK,gBAAgB,MAAM,eAChF,uBAAuB,KAAA,KACtB,CAAC,uBAAuB,kBAAkB,MAAM,kBAAkB,GAEpE,MAAM,IAAI,gBAAgB,mEAAmE;AAEjG;AAEA,SAAS,gBAAgB,MAAe,QAAqC;CAC3E,OAAO;EAAE,QAAQ,aAAa,IAAI;EAAG;CAAO;AAC9C;AAEA,SAAS,aAAa,MAAuB;CAC3C,IAAI,OAAO,SAAS,UAAU,OAAO;CACrC,IAAI,QAAQ,OAAO,SAAS,UAAU;EACpC,MAAM,SAAS;EACf,KAAK,MAAM,OAAO;GAAC;GAAU;GAAW;GAAQ;EAAS,GACvD,IAAI,OAAO,OAAO,SAAS,UAAU,OAAO,OAAO;CAEvD;CACA,OAAO,KAAK,UAAU,IAAI;AAC5B;AAEA,SAAS,iBACP,QACA,cACsD;CACtD,KAAK,IAAI,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG;EAC9C,MAAM,QAAQ,OAAO;EACrB,MAAM,OAAO,QAAQ,mBAAmB,MAAM,IAAI,IAAI,KAAA;EACtD,IAAI,SAAS,KAAA,GAAW,OAAO;GAAE,SAAS;GAAM;EAAO;CACzD;CACA,OAAO;EAAE,SAAS;EAAc;CAAO;AACzC;AAEA,SAAS,yBAAyB,OAAsC;CACtE,IACE,OAAO,MAAM,eAAe,YAC5B,MAAM,cACN,MAAM,WAAW,SAAS,wBAE1B,OAAO,OAAO,MAAM,WAAW,UAAU,WAAW,MAAM,WAAW,QAAQ;CAE/E,MAAM,OAAO,MAAM;CACnB,KAAK,MAAM,OAAO;EAAC;EAAS;EAAS;EAAW;CAAM,GACpD,IAAI,OAAO,KAAK,SAAS,YAAY,CAAC,2BAA2B,KAAK,GAAG,OAAO,KAAK;CAEvF,OAAO;AACT;AAEA,SAAS,mBAAmB,MAAmD;CAC7E,KAAK,MAAM,OAAO;EAAC;EAAa;EAAQ;EAAY;EAAiB;CAAS,GAC5E,IAAI,OAAO,KAAK,SAAS,UAAU,OAAO,KAAK;AAGnD;AAEA,SAAS,2BAA2B,OAAuC;CACzE,IAAI,qBAAqB,MAAM,MAAM,MAAM,IAAI,GAAG,OAAO;CACzD,MAAM,aAAa,MAAM;CACzB,OACE,YAAY,SAAS,aACpB,WAAW,WAAW,eAAe,WAAW,WAAW;AAEhE;AAEA,SAAS,qBAAqB,MAAc,MAAwC;CAClF,IAAI,SAAS,YAAY,SAAS,UAAU,SAAS,SAAS,OAAO;CACrE,IAAI,KAAK,SAAS,YAAY,KAAK,KAAK,SAAS,SAAS,GAAG,OAAO;CACpE,IAAI,SAAS,UAAU,OAAO;CAC9B,OAAO,KAAK,WAAW,eAAe,KAAK,WAAW,YAAY,KAAK,WAAW;AACpF;AAEA,SAAS,YAAY,MAAuB;CAC1C,OAAO,SAAS,cAAc,SAAS,WAAW,SAAS;AAC7D;AAEA,SAAS,kBAAkB,MAAuB;CAChD,OAAO,SAAS,uBAAuB,SAAS,YAAY,SAAS;AACvE;AAEA,SAAS,0BAA0B,OAIjC;CACA,MAAM,QAAQ,MAAM,SAAS,mBAAmB,MAAM,IAAI;CAC1D,OAAO;EACL,OAAO,aAAa,OAAO,WAAW,KAAK;EAC3C,SAAS,aAAa,OAAO,YAAY,KAAK,MAAM,aAAa,OAAO,eAAe,KAAK;EAC5F,KACE,aAAa,OAAO,IAAI,KACxB,aAAa,MAAM,KAAK,OAAO,KAC/B,aAAa,MAAM,KAAK,YAAY,KACpC;CACJ;AACF;AAEA,SAAS,mBAAmB,MAAuD;CACjF,MAAM,cACJ,KAAK,SAAS,OAAO,KAAK,UAAU,WAC/B,KAAK,QACN,KAAK,cAAc,OAAO,KAAK,eAAe,WAC3C,KAAK,aACN;CACR,MAAM,cACJ,aAAa,YAAY,WAAW,KACpC,aAAa,YAAY,QAAQ,KACjC,aAAa,YAAY,aAAa;CACxC,MAAM,eACJ,aAAa,YAAY,YAAY,KACrC,aAAa,YAAY,SAAS,KAClC,aAAa,YAAY,iBAAiB;CAC5C,MAAM,cAAc,aAAa,YAAY,WAAW;CACxD,MAAM,uBAAuB,aAAa,YAAY,oBAAoB;CAC1E,MAAM,2BAA2B,aAAa,YAAY,wBAAwB;CAClF,MAAM,kBAAkB,aAAa,YAAY,eAAe;CAChE,MAAM,OACJ,aAAa,YAAY,IAAI,KAC7B,aAAa,YAAY,OAAO,KAChC,aAAa,YAAY,YAAY,KACrC,aAAa,KAAK,OAAO,KACzB,aAAa,KAAK,YAAY;CAChC,IACE,gBAAgB,KAAA,KAChB,iBAAiB,KAAA,KACjB,gBAAgB,KAAA,KAChB,yBAAyB,KAAA,KACzB,6BAA6B,KAAA,KAC7B,oBAAoB,KAAA,KACpB,SAAS,KAAA,GAET,OAAO,KAAA;CACT,OAAO;EACL,aAAa,eAAe;EAC5B,cAAc,gBAAgB;EAC9B,GAAI,gBAAgB,KAAA,IAAY,EAAE,YAAY,IAAI,CAAC;EACnD,GAAI,yBAAyB,KAAA,IAAY,EAAE,qBAAqB,IAAI,CAAC;EACrE,GAAI,6BAA6B,KAAA,IAAY,EAAE,yBAAyB,IAAI,CAAC;EAC7E,GAAI,oBAAoB,KAAA,IAAY,EAAE,gBAAgB,IAAI,CAAC;EAC3D,GAAI,SAAS,KAAA,IAAY,EAAE,KAAK,IAAI,CAAC;CACvC;AACF;AAEA,SAAS,gBACP,MACA,OACwB;CACxB,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,CAAC,OAAO,OAAO;CACnB,OAAO;EACL,aAAa,KAAK,cAAc,MAAM;EACtC,cAAc,KAAK,eAAe,MAAM;EACxC,GAAI,KAAK,gBAAgB,KAAA,KAAa,MAAM,gBAAgB,KAAA,IACxD,EAAE,cAAc,KAAK,eAAe,MAAM,MAAM,eAAe,GAAG,IAClE,CAAC;EACL,GAAI,KAAK,yBAAyB,KAAA,KAAa,MAAM,yBAAyB,KAAA,IAC1E,EACE,uBACG,KAAK,wBAAwB,MAAM,MAAM,wBAAwB,GACtE,IACA,CAAC;EACL,GAAI,KAAK,6BAA6B,KAAA,KAAa,MAAM,6BAA6B,KAAA,IAClF,EACE,2BACG,KAAK,4BAA4B,MAAM,MAAM,4BAA4B,GAC9E,IACA,CAAC;EACL,GAAI,KAAK,oBAAoB,KAAA,KAAa,MAAM,oBAAoB,KAAA,IAChE,EAAE,kBAAkB,KAAK,mBAAmB,MAAM,MAAM,mBAAmB,GAAG,IAC9E,CAAC;EACL,GAAI,KAAK,SAAS,KAAA,KAAa,MAAM,SAAS,KAAA,IAC1C,EAAE,OAAO,KAAK,QAAQ,MAAM,MAAM,QAAQ,GAAG,IAC7C,CAAC;CACP;AACF;AAEA,SAAS,aAAa,OAAoC;CACxD,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ,KAAA;AACvE;AAEA,SAAS,gCAAgC,QAAuC;CAC9E,MAAM,SAAS;CAUf,OAAO;EACL,MATA,OAAO,OAAO,aAAa,WACvB,OAAO,WACP,OAAO,OAAO,SAAS,WACrB,OAAO,OACP,OAAO,OAAO,cAAc,WAC1B,OAAO,YACP;EAIR,SAHc,OAAO,OAAO,YAAY,YAAY,OAAO,UAAU;EAIrE,GAAI,OAAO,OAAO,UAAU,WAAW,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;EAClE,OAAO,mBAAmB,MAAM;CAClC;AACF;AAEA,SAAS,oCAAoC,SAAmD;CAC9F,MAAM,aACJ,QAAQ,eAAe,KAAA,IACnB,KAAA,IACA,8BAA8B,MAAM,QAAQ,UAAU;CAC5D,MAAM,sBAAsB,yBAAyB,QAAQ,UAAU,aAAa,aAAa;CACjG,IAAI,eAAe,KAAA,GAAW;EAC5B,IAAI,WAAW,cAAc,QAAQ,IACnC,MAAM,IAAI,gBACR,oEACF;EAEF,IAAI,QAAQ,aAAa,KAAA,KAAa,WAAW,aAAa,QAAQ,UACpE,MAAM,IAAI,gBACR,qEACF;EAEF,IAAI,wBAAwB,KAAA,KAAa,wBAAwB,WAAW,aAC1E,MAAM,IAAI,gBAAgB,6DAA6D;CAE3F;CAEA,MAAM,SADY,QAAQ,YAAY,OAAO,OAAO,QAAQ,UAAU,QAAQ,IACnD,yBAAyB,QAAQ,UAAU,MAAM,IAAI;CAChF,OAAO;EACL,WAAW,QAAQ;EACnB;EACA,gBAAgB,QAAQ,UAAU,mBAAmB;EACrD,GAAI,QAAQ,UAAU,eAAe,KAAA,IACjC,CAAC,IACD,EAAE,YAAY,QAAQ,SAAS,eAAe,KAAK;EACvD,GAAI,eAAe,KAAA,IACf,wBAAwB,KAAA,IACtB,CAAC,IACD,EAAE,aAAa,oBAAoB,IACrC;GAAE,aAAa,WAAW;GAAa,eAAe;EAAW;CACvE;AACF;AAEA,SAAS,8BAA8B,YAAqB,cAAuC;CACjG,MAAM,SACJ,cAAc,OAAO,eAAe,WAC/B,aACD,KAAA;CACN,MAAM,KAAK,QAAQ,aAAa,QAAQ;CACxC,IAAI,OAAO,OAAO,YAAY,GAAG,WAAW,GAC1C,MAAM,IAAI,gBAAgB,0DAA0D;CAEtF,IAAI,CAAC,QACH,MAAM,IAAI,gBAAgB,8DAA8D;CAE1F,MAAM,cAAc,yBAAyB,OAAO,aAAa,aAAa;CAC9E,MAAM,aACJ,OAAO,kBAAkB,KAAA,IACrB,KAAA,IACA,8BAA8B,MAAM,OAAO,aAAa;CAC9D,IAAI,eAAe,KAAA,GAAW;EAC5B,IAAI,WAAW,cAAc,MAAM,WAAW,aAAa,cACzD,MAAM,IAAI,gBAAgB,mEAAmE;EAE/F,IAAI,gBAAgB,KAAA,KAAa,WAAW,gBAAgB,aAC1D,MAAM,IAAI,gBAAgB,4DAA4D;CAE1F;CACA,IAAI,OAAO,mBAAmB,KAAA,KAAa,OAAO,OAAO,mBAAmB,WAC1E,MAAM,IAAI,gBAAgB,0DAA0D;CAEtF,IAAI,OAAO,eAAe,KAAA,KAAa,OAAO,OAAO,eAAe,WAClE,MAAM,IAAI,gBAAgB,sDAAsD;CAElF,IAAI,OAAO,WAAW,KAAA,KAAa,CAAC,uBAAuB,OAAO,MAAM,GACtE,MAAM,IAAI,gBAAgB,qDAAqD;CAEjF,OAAO;EACL;EACA,UAAU;EACV,GAAI,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW;EACjD,UAAU;GACR,GAAI,OAAO,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;GACjD,GAAI,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY;GACnD,GAAI,OAAO,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,OAAO,eAAe,IAAI,CAAC;GACvF,GAAI,OAAO,eAAe,KAAA,IAAY,EAAE,YAAY,OAAO,WAAW,IAAI,CAAC;EAC7E;CACF;AACF;AAEA,SAAS,yBAAyB,OAAgB,OAAmC;CACnF,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAChD,MAAM,IAAI,gBAAgB,wCAAwC,OAAO;CAE3E,OAAO;AACT;AAEA,SAAS,uBAAuB,OAAyB;CACvD,OACE,UAAU,YACV,UAAU,aACV,UAAU,eACV,UAAU,YACV,UAAU;AAEd;AAEA,SAAS,gCAAgC,QAAuC;CAC9E,MAAM,SAAS;CACf,MAAM,WAAW,aAAa,OAAO,QAAQ,KAAK,aAAa,OAAO,IAAI;CAC1E,IAAI,aAAa,KAAA,GACf,MAAM,IAAI,gBAAgB,qDAAqD;CAEjF,OAAO;EACL;EACA,QAAQ,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS;EAC5D,QAAQ,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS;CAC9D;AACF;AAEA,SAAS,kBAAkB,QAAyC;CAClE,IAAI,WAAW,aAAa,WAAW,kBAAkB,WAAW,WAAW,OAAO;CACtF,IAAI,WAAW,aAAa,WAAW,YAAY,WAAW,WAAW,OAAO;CAChF,IAAI,WAAW,aAAa,OAAO;CACnC,IAAI,WAAW,aAAa,OAAO;CACnC,OAAO;AACT;AAEA,SAAS,yBAAyB,QAA4C;CAC5E,IAAI,WAAW,eAAe,WAAW,aAAa,OAAO;CAC7D,OAAO,kBAAkB,MAAM;AACjC;AAEA,SAAS,cAAc,KAA+B;CACpD,OAAQ,IAAwC;AAClD;AAEA,SAAS,gBAAgB,KAA2D;CAClF,MAAM,WAAY,IAA0C;CAC5D,OAAO,YAAY,OAAO,aAAa,WAClC,WACD,KAAA;AACN;AAEA,eAAe,aAAa,KAAqC;CAC/D,MAAM,UAAW,IAAqD;CACtE,IAAI,OAAO,YAAY,YAAY,MAAM,QAAQ,KAAK,GAAG;AAC3D;AAEA,eAAe,WAAW,KAAqC;CAC7D,MAAM,YAAa,IAAoD;CACvE,IAAI,OAAO,cAAc,YAAY,MAAM,UAAU,KAAK,GAAG;AAC/D;AAEA,SAAS,+BACP,WACA,KACe;CACf,IAAI,CAAC,WAAW,OAAO;EAAE,MAAM;EAAW,WAAW,OAAO,IAAI,EAAE;CAAE;CACpE,OAAO;EACL,MAAM,UAAU,SAAS,UAAU,UAAU;EAC7C,GAAI,UAAU,YAAY,EAAE,WAAW,UAAU,UAAU,IAAI,EAAE,WAAW,OAAO,IAAI,EAAE,EAAE;EAC3F,GAAI,UAAU,UAAU,EAAE,SAAS,UAAU,QAAQ,IAAI,CAAC;EAC1D,GAAI,UAAU,YAAY,EAAE,WAAW,UAAU,UAAU,IAAI,CAAC;CAClE;AACF;AAEA,SAAS,iCAAiC,SAET;CAC/B,OAAO;EACL,SAAS;GACP,eAAe,QAAQ;GACvB,cAAc,EAAE,GAAG,2BAA2B,KAAA,CAAS,EAAE;GACzD,cAAc;GACd,OAAO;GACP,aAAa;GACb,KAAK;GACL,WAAW;GACX,WAAW;IACT,OAAO;IACP,cAAc;IACd,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,UAAU;GACZ;GACA,OAAO;GACP,OAAO;GACP,eAAe;GACf,YAAY;EACd;EACA,WAAW;GAAE,MAAM;GAAM,QAAQ;GAAM,QAAQ;GAAM,iBAAiB;EAAK;EAC3E,UAAU;GAAE,UAAU;GAAM,MAAM;GAAM,UAAU;EAAK;EACvD,WAAW;GAAE,MAAM;GAAM,OAAO;GAAM,MAAM;GAAM,KAAK;GAAM,QAAQ;GAAM,UAAU;EAAK;EAC1F,WAAW;GAAE,YAAY;GAAM,MAAM;EAAK;EAC1C,WAAW;EACX,OAAO;EACP,cAAc;CAChB;AACF;AAEA,SAAS,kBAAkB,GAAgB,GAA6B;CACtE,MAAM,aAAa,IAAI,gBAAgB;CAGvC,MAAM,YAAY,WAAiC;EACjD,MAAM,SAAS,OAAO;EACtB,IAAI,OAAO,WAAW,YAAY,OAAO,SAAS,GAAG,OAAO;EAG5D,IAAI,kBAAkB,SAAS,OAAO,SAAS,gBAAgB,OAAO,QAAQ,SAAS,GACrF,OAAO,OAAO;EAEhB,OAAO;CACT;CACA,IAAI,EAAE,WAAW,EAAE,SAAS,WAAW,MAAM,SAAS,EAAE,UAAU,IAAI,CAAC,CAAC;MACnE;EACH,EAAE,iBAAiB,eAAe,WAAW,MAAM,SAAS,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC;EAC/E,EAAE,iBAAiB,eAAe,WAAW,MAAM,SAAS,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC;CACjF;CACA,OAAO,WAAW;AACpB;AAEA,SAAS,WAAW,QAAgB,OAAwB;CAC1D,IAAI;CACJ,IAAI;EACF,MAAM,KAAK,UAAU,KAAK,KAAK,OAAO,KAAK;CAC7C,QAAQ;EACN,MAAM,OAAO,KAAK;CACpB;CACA,IAAI,OAAO;CACX,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK,GAAG;EACtC,QAAQ,IAAI,WAAW,CAAC;EACxB,OAAO,KAAK,KAAK,MAAM,QAAU;CACnC;CACA,OAAO,GAAG,OAAO,IAAI,SAAS,EAAA,CAAG,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG;AAC/D;AAEA,SAAS,OACP,QACgF;CAChF,OAAO,OAAQ,OAA6B,QAAQ;AACtD;AAEA,SAAS,QACP,QACmF;CACnF,OAAO,OAAQ,OAA8B,SAAS;AACxD;AAEA,SAAS,kBAAkB,KAEzB;CACA,OAAO,OAAQ,IAAqC,mBAAmB;AACzE;AAEA,SAAS,WACP,KACsE;CACtE,OAAO,OAAQ,IAA8B,YAAY;AAC3D;AAEA,SAAS,QAAQ,KAEf;CACA,OAAO,OAAQ,IAA2B,SAAS;AACrD;AAEA,SAAS,SACP,KACkF;CAClF,OAAO,OAAQ,IAA4B,UAAU;AACvD;AAEA,SAAS,QAAQ,KAEf;CACA,OAAO,OAAQ,IAA2B,SAAS;AACrD"}

package/dist/materialization-P86EciBw.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"materialization-P86EciBw.js","names":[],"sources":["../src/runtime/sandbox-outcome.ts","../src/runtime/supervise/executable-spec.ts","../src/runtime/supervise/materialization.ts"],"sourcesContent":["import type { AgentRunOutcome } from '@tangle-network/sandbox/runtime'\nimport type { AgentTaskStatus, BackendErrorDetail } from '../types'\nimport type { DefaultVerdict } from './supervise/types'\n\n/** The outcome carried by Runtime-owned Sandbox artifacts. */\nexport interface SandboxOutcomeCarrier {\n  outcome?: AgentRunOutcome\n}\n\n/** Runtime's terminal projection of the public Sandbox outcome contract. */\nexport interface SandboxOutcomeProjection {\n  status: AgentTaskStatus\n  reason: string\n  verdict: DefaultVerdict\n  error?: BackendErrorDetail\n}\n\n/** Map the public Sandbox outcome to Runtime's stream and verdict vocabulary. */\nexport function projectSandboxOutcome(outcome: AgentRunOutcome): SandboxOutcomeProjection {\n  if (outcome.status === 'success') {\n    return {\n      status: 'completed',\n      reason: 'turn completed',\n      verdict: { valid: true, score: 1 },\n    }\n  }\n\n  const reason = outcome.error ?? 'Sandbox agent run failed'\n  if (outcome.status === 'failed') {\n    return {\n      status: 'failed',\n      reason,\n      verdict: { valid: false, score: 0 },\n      error: { kind: 'backend', message: reason },\n    }\n  }\n\n  return {\n    status: 'blocked',\n    reason,\n    verdict: { valid: false, score: 0 },\n  }\n}\n\n/** Read an outcome that Runtime attached to one of its own executor artifacts. */\nexport function readSandboxOutcome(value: unknown): AgentRunOutcome | undefined {\n  if (!value || typeof value !== 'object') return undefined\n  const outcome = (value as SandboxOutcomeCarrier).outcome\n  if (!outcome || typeof outcome !== 'object') return undefined\n  return outcome\n}\n","import { type AgentProfile, agentProfileSchema } from '@tangle-network/agent-interface'\nimport { assertExecutableAgentProfile } from './model-policy'\nimport { detachedSnapshot } from './snapshot'\nimport type { AgentSpec } from './types'\n\n/**\n * Parse one untrusted profile into the exact immutable value execution may consume.\n *\n * Snapshotting before schema parsing reads caller-owned fields once. Snapshotting the parsed\n * result prevents downstream custom code from changing any identity or authority field.\n */\nexport function executableAgentProfileSnapshot(raw: unknown, context: string): AgentProfile {\n  const input = detachedSnapshot(raw, `${context}: AgentProfile input`)\n  const profile = agentProfileSchema.parse(input)\n  assertExecutableAgentProfile(profile, context)\n  return detachedSnapshot(profile, `${context}: parsed AgentProfile`)\n}\n\n/** Snapshot an executable spec while retaining trusted callbacks by reference. */\nexport function executableAgentSpecSnapshot(raw: AgentSpec, context: string): AgentSpec {\n  const {\n    profile: rawProfile,\n    harness,\n    execution: rawExecution,\n    ...runtimeExtensions\n  } = raw as AgentSpec & Readonly<Record<string, unknown>>\n  const profile = executableAgentProfileSnapshot(rawProfile, context)\n  const execution =\n    rawExecution === undefined\n      ? undefined\n      : detachedSnapshot(rawExecution, `${context}: execution attribution`)\n  return Object.freeze({\n    ...runtimeExtensions,\n    profile,\n    harness,\n    ...(execution === undefined ? {} : { execution }),\n  }) as AgentSpec\n}\n","import { randomUUID } from 'node:crypto'\nimport {\n  agentProfileSchema,\n  canonicalAgentProfileDigest,\n  canonicalCandidateDigest,\n  type Sha256Digest,\n} from '@tangle-network/agent-interface'\nimport { ValidationError } from '../../errors'\nimport { detachedSnapshot } from './snapshot'\nimport type {\n  ExecutionBindingReceipt,\n  Executor,\n  ExecutorExecutionBinding,\n  ExecutorMaterialization,\n  ProfileMaterializationReceipt,\n  ProviderModelAttemptEvidence,\n  ProviderModelExecutionEvidence,\n  Runtime,\n  UnknownMaterializationReason,\n} from './types'\n\ntype RuntimeOwnedExecutorMaterialization =\n  | {\n      readonly kind: 'known'\n      readonly declaration: ExecutorMaterialization\n      readonly binding?: ExecutorExecutionBinding\n    }\n  | {\n      /** A Runtime-owned external executor whose exact launch is known, but whose remote\n       * materializer has not yet returned its terminal acknowledgement. This private state lets\n       * Runtime validate the planned authority before execution without presenting it as proof\n       * that the remote process actually used that plan. */\n      readonly kind: 'pending'\n      readonly runtime: Runtime\n      readonly declaration: ExecutorMaterialization\n      readonly binding: ExecutorExecutionBinding\n    }\n  | { readonly kind: 'deferred'; readonly runtime: Runtime }\n\ninterface RuntimeOwnedExecutorMaterializationRef {\n  current: RuntimeOwnedExecutorMaterialization\n}\n\nconst runtimeOwnedExecutorMaterializations = new WeakMap<\n  object,\n  RuntimeOwnedExecutorMaterializationRef\n>()\nconst runtimeOwnedScopeOwners = new WeakMap<object, Runtime>()\nconst runtimeOwnedExecutorProviderEvidenceState = new WeakMap<\n  object,\n  {\n    readonly attempts: Array<{\n      readonly observations: string[]\n      identityConflict?: boolean\n      providerDispatch?: 'not_started'\n    }>\n  }\n>()\nconst runtimeOwnedDriveHarnessProviderEvidenceState = new WeakMap<\n  object,\n  ProviderModelExecutionEvidence\n>()\n\ninterface KnownReceiptInput {\n  readonly authoredProfileDigest: Sha256Digest\n  readonly runtime: Runtime\n  readonly declaration: ExecutorMaterialization\n}\n\ninterface UnknownReceiptInput {\n  readonly authoredProfileDigest?: Sha256Digest\n  readonly runtime: Runtime\n  readonly reason: UnknownMaterializationReason\n}\n\nconst declarationKeys = new Set([\n  'effectiveProfile',\n  'backend',\n  'model',\n  'execution',\n  'materializer',\n  'plan',\n  'platformAttachments',\n])\n\n/**\n * Bind a declaration to a runtime-owned executor without putting an attestable method on the\n * public Executor interface. This module is not a package export: arbitrary caller executors stay\n * unknown even if they add a lookalike `materialization()` property.\n */\nexport function attestRuntimeOwnedExecutor<Out>(\n  executor: Executor<Out>,\n  declaration: ExecutorMaterialization,\n  binding?: ExecutorExecutionBinding,\n): Executor<Out> {\n  runtimeOwnedExecutorMaterializations.set(executor as object, {\n    current: Object.freeze({\n      kind: 'known',\n      declaration: detachedSnapshot(declaration, 'runtime-owned executor materialization'),\n      ...(binding === undefined\n        ? {}\n        : {\n            binding: detachedSnapshot(binding, 'runtime-owned executor execution binding'),\n          }),\n    }),\n  })\n  ensureProviderEvidenceState(executor)\n  return executor\n}\n\n/** Brand an external Runtime executor whose exact remote materialization is provable only after\n * its terminal protocol acknowledgement. The declaration is a planned authority check, never a\n * known receipt; callers must finalize this same object after validating the acknowledgement. */\nexport function attestRuntimeOwnedPendingExecutor<Out>(\n  executor: Executor<Out>,\n  runtime: Runtime,\n  declaration: ExecutorMaterialization,\n  binding: ExecutorExecutionBinding,\n): Executor<Out> {\n  runtimeOwnedExecutorMaterializations.set(executor as object, {\n    current: Object.freeze({\n      kind: 'pending',\n      runtime,\n      declaration: detachedSnapshot(declaration, 'pending executor materialization'),\n      binding: detachedSnapshot(binding, 'pending executor execution binding'),\n    }),\n  })\n  return executor\n}\n\n/** Replace a private pending brand with terminally acknowledged evidence. A caller-owned executor\n * cannot enter this path because only this module can create the pending WeakMap entry. */\nexport function finalizeRuntimeOwnedPendingExecutor<Out>(\n  executor: Executor<Out>,\n  declaration: ExecutorMaterialization,\n  binding: ExecutorExecutionBinding,\n): Executor<Out> {\n  const ref = runtimeOwnedExecutorMaterializations.get(executor as object)\n  if (ref?.current.kind !== 'pending' || ref.current.runtime !== executor.runtime) {\n    throw new ValidationError(\n      'executor materialization: terminal acknowledgement has no matching Runtime-owned pending executor',\n    )\n  }\n  ref.current = Object.freeze({\n    kind: 'known',\n    declaration: detachedSnapshot(declaration, 'runtime-owned executor materialization'),\n    binding: detachedSnapshot(binding, 'runtime-owned executor execution binding'),\n  })\n  return executor\n}\n\n/** Mark a runtime-owned orchestration executor whose exact leaf declaration is published through\n * its private nested Scope before the first backend inference. Arbitrary executors cannot opt in. */\nexport function attestRuntimeOwnedDeferredExecutor<Out>(\n  executor: Executor<Out>,\n  runtime: Runtime,\n): Executor<Out> {\n  runtimeOwnedExecutorMaterializations.set(executor as object, {\n    current: Object.freeze({ kind: 'deferred', runtime }),\n  })\n  return executor\n}\n\n/** Preserve the runtime-owned attestation when a trusted wrapper changes result semantics only. */\nexport function inheritRuntimeOwnedExecutorAttestation<In, Out>(\n  source: Executor<In>,\n  wrapper: Executor<Out>,\n): Executor<Out> {\n  const ref = runtimeOwnedExecutorMaterializations.get(source as object)\n  if (ref !== undefined) {\n    runtimeOwnedExecutorMaterializations.set(wrapper as object, ref)\n  }\n  const providerState = ensureProviderEvidenceState(source)\n  runtimeOwnedExecutorProviderEvidenceState.set(wrapper as object, providerState)\n  return wrapper\n}\n\nfunction ensureProviderEvidenceState<Out>(executor: Executor<Out>): {\n  readonly attempts: Array<{\n    readonly observations: string[]\n    identityConflict?: boolean\n    providerDispatch?: 'not_started'\n  }>\n} {\n  const existing = runtimeOwnedExecutorProviderEvidenceState.get(executor as object)\n  if (existing !== undefined) return existing\n  const state = { attempts: [] }\n  runtimeOwnedExecutorProviderEvidenceState.set(executor as object, state)\n  return state\n}\n\n/** Read a declaration only when Runtime itself branded this exact executor object. */\nexport function runtimeOwnedExecutorMaterialization<Out>(\n  executor: Executor<Out>,\n): ExecutorMaterialization | undefined {\n  const attestation = runtimeOwnedExecutorMaterializations.get(executor as object)?.current\n  return attestation?.kind === 'known' ? attestation.declaration : undefined\n}\n\n/** Read one attempt binding only from the private brand on this exact executor object. */\nexport function runtimeOwnedExecutorExecutionBinding<Out>(\n  executor: Executor<Out>,\n): ExecutorExecutionBinding | undefined {\n  const attestation = runtimeOwnedExecutorMaterializations.get(executor as object)?.current\n  return attestation?.kind === 'known' ? attestation.binding : undefined\n}\n\n/** Read a planned external declaration only for Runtime's private pending brand. This is useful for\n * pre-execution authority checks, but must never be turned into a known durable receipt. */\nexport function runtimeOwnedPendingExecutorMaterialization<Out>(executor: Executor<Out>):\n  | {\n      readonly runtime: Runtime\n      readonly declaration: ExecutorMaterialization\n      readonly binding: ExecutorExecutionBinding\n    }\n  | undefined {\n  const attestation = runtimeOwnedExecutorMaterializations.get(executor as object)?.current\n  return attestation?.kind === 'pending'\n    ? {\n        runtime: attestation.runtime,\n        declaration: attestation.declaration,\n        binding: attestation.binding,\n      }\n    : undefined\n}\n\n/** Read the expected leaf runtime only for a privately branded deferred orchestration executor. */\nexport function runtimeOwnedDeferredExecutorRuntime<Out>(\n  executor: Executor<Out>,\n): Runtime | undefined {\n  const attestation = runtimeOwnedExecutorMaterializations.get(executor as object)?.current\n  return attestation?.kind === 'deferred' ? attestation.runtime : undefined\n}\n\n/** Propagate trust from a built-in driver adapter to the Agent and recursive executor it owns. */\nexport function attestRuntimeOwnedScopeOwner<T extends object>(owner: T, runtime: Runtime): T {\n  runtimeOwnedScopeOwners.set(owner, runtime)\n  return owner\n}\n\n/** Return a built-in scope owner's expected concrete leaf runtime; caller-owned functions/Agents\n * deliberately have no entry even if they add lookalike fields. */\nexport function runtimeOwnedScopeOwnerRuntime(owner: object): Runtime | undefined {\n  return runtimeOwnedScopeOwners.get(owner)\n}\n\n/** Mark one provider inference attempt on a Runtime-owned executor. */\nexport function recordRuntimeOwnedProviderAttemptStart<Out>(executor: Executor<Out>): void {\n  const state = ensureProviderEvidenceState(executor)\n  state.attempts.push({ observations: [] })\n}\n\n/** Mark the current attempt as rejected before provider dispatch.\n *\n * The caller may use this only after consuming the Router-owned\n * `provider_dispatch: \"not_started\"` fact. Any other error stays an empty,\n * unknown attempt and must not be upgraded here.\n */\nexport function recordRuntimeOwnedProviderDispatchNotStarted<Out>(executor: Executor<Out>): void {\n  const state = ensureProviderEvidenceState(executor)\n  const attempt = state.attempts.at(-1)\n  if (attempt === undefined) {\n    throw new ValidationError('provider dispatch rejection arrived before an attempt started')\n  }\n  if (attempt.observations.length > 0 || attempt.identityConflict === true) {\n    throw new ValidationError(\n      'provider dispatch rejection arrived after provider identity evidence was observed',\n    )\n  }\n  attempt.providerDispatch = 'not_started'\n}\n\n/** Record a trusted served model on the current provider attempt. */\nexport function recordRuntimeOwnedProviderModel<Out>(executor: Executor<Out>, model: string): void {\n  const state = runtimeOwnedExecutorProviderEvidenceState.get(executor as object)\n  const attempt = state?.attempts.at(-1)\n  if (attempt === undefined) {\n    throw new ValidationError('provider model observation arrived before an attempt started')\n  }\n  if (attempt.observations.at(-1) !== model) attempt.observations.push(model)\n}\n\n/** Convert process-local provider observations into a frozen, replayable evidence value. */\nexport function runtimeOwnedExecutorProviderEvidence<Out>(\n  executor: Executor<Out>,\n): ProviderModelExecutionEvidence | undefined {\n  const state = runtimeOwnedExecutorProviderEvidenceState.get(executor as object)\n  if (state === undefined || state.attempts.length === 0) return undefined\n  const attempts: ReadonlyArray<ProviderModelAttemptEvidence> = Object.freeze(\n    state.attempts.map((attempt) =>\n      Object.freeze({\n        observations: Object.freeze([...attempt.observations]),\n        ...(attempt.identityConflict ? { identityConflict: true } : {}),\n        ...(attempt.providerDispatch === 'not_started'\n          ? { providerDispatch: 'not_started' as const }\n          : {}),\n      }),\n    ),\n  )\n  const models = Object.freeze([...new Set(attempts.flatMap((attempt) => attempt.observations))])\n  const missing = attempts.some(\n    (attempt) => attempt.observations.length === 0 && attempt.providerDispatch !== 'not_started',\n  )\n  const conflict = attempts.some((attempt) => attempt.identityConflict === true)\n  const served = attempts.some((attempt) => attempt.observations.length > 0)\n  return Object.freeze(\n    missing || conflict || !served\n      ? {\n          status: 'unknown' as const,\n          attempts,\n          models,\n          reason: conflict\n            ? ('provider-model-conflict' as const)\n            : ('provider-model-missing' as const),\n        }\n      : { status: 'known' as const, attempts, models },\n  )\n}\n\n/** Mark the current provider attempt unusable after conflicting served identity metadata. */\nexport function recordRuntimeOwnedProviderIdentityConflict<Out>(executor: Executor<Out>): void {\n  const state = ensureProviderEvidenceState(executor)\n  const attempt = state.attempts.at(-1)\n  if (attempt === undefined) {\n    throw new ValidationError('provider identity conflict arrived before an attempt started')\n  }\n  attempt.identityConflict = true\n}\n\n/** Attach one executor's provider evidence to a Runtime-owned root drive for final projection. */\nexport function recordRuntimeOwnedDriveHarnessProviderEvidence(\n  owner: object,\n  evidence: ProviderModelExecutionEvidence | undefined,\n): void {\n  if (evidence === undefined) return\n  const prior = runtimeOwnedDriveHarnessProviderEvidenceState.get(owner)\n  if (prior === undefined) {\n    runtimeOwnedDriveHarnessProviderEvidenceState.set(owner, evidence)\n    return\n  }\n  const attempts = Object.freeze([...prior.attempts, ...evidence.attempts])\n  const models = Object.freeze([...new Set([...prior.models, ...evidence.models])])\n  const missing = attempts.some(\n    (attempt) => attempt.observations.length === 0 && attempt.providerDispatch !== 'not_started',\n  )\n  const conflict = attempts.some((attempt) => attempt.identityConflict === true)\n  const served = attempts.some((attempt) => attempt.observations.length > 0)\n  runtimeOwnedDriveHarnessProviderEvidenceState.set(\n    owner,\n    Object.freeze(\n      missing || conflict || !served\n        ? {\n            status: 'unknown' as const,\n            attempts,\n            models,\n            reason: conflict\n              ? ('provider-model-conflict' as const)\n              : ('provider-model-missing' as const),\n          }\n        : { status: 'known' as const, attempts, models },\n    ),\n  )\n}\n\n/** Read provider evidence recorded by a Runtime-owned root drive. */\nexport function runtimeOwnedDriveHarnessProviderEvidence(\n  owner: object,\n): ProviderModelExecutionEvidence | undefined {\n  return runtimeOwnedDriveHarnessProviderEvidenceState.get(owner)\n}\n\n/** Build one kernel-owned known receipt from a data-only executor declaration. */\nexport function knownMaterializationReceipt(\n  input: KnownReceiptInput,\n): ProfileMaterializationReceipt {\n  const declaration = detachedSnapshot(input.declaration, 'executor materialization')\n  assertExactDeclaration(declaration)\n  const effectiveProfile = agentProfileSchema.safeParse(declaration.effectiveProfile)\n  if (!effectiveProfile.success) {\n    throw new ValidationError('executor materialization: effectiveProfile must be an AgentProfile')\n  }\n  assertNonEmpty(declaration.backend, 'backend')\n  assertNonEmpty(declaration.materializer, 'materializer')\n  assertNonEmpty(declaration.execution?.kind, 'execution.kind')\n  assertNonEmpty(declaration.execution?.id, 'execution.id')\n  assertModel(declaration.model)\n\n  let effectiveProfileDigest: Sha256Digest\n  let materializationPlanDigest: Sha256Digest\n  let platformAttachmentsDigest: Sha256Digest | undefined\n  try {\n    effectiveProfileDigest = canonicalAgentProfileDigest(effectiveProfile.data)\n    materializationPlanDigest = canonicalCandidateDigest(jsonWireSnapshot(declaration.plan))\n    platformAttachmentsDigest =\n      declaration.platformAttachments === undefined\n        ? undefined\n        : canonicalCandidateDigest(jsonWireSnapshot(declaration.platformAttachments))\n  } catch (error) {\n    throw new ValidationError(\n      'executor materialization: profile, plan, and attachments must be finite RFC 8785 JSON',\n      { cause: error },\n    )\n  }\n\n  return Object.freeze({\n    status: 'known' as const,\n    authoredProfileDigest: input.authoredProfileDigest,\n    effectiveProfileDigest,\n    materializationPlanDigest,\n    ...(platformAttachmentsDigest === undefined ? {} : { platformAttachmentsDigest }),\n    runtime: input.runtime,\n    backend: declaration.backend,\n    model: declaration.model,\n    execution: declaration.execution,\n    materializer: declaration.materializer,\n  })\n}\n\n/** Build an explicit unknown receipt without fabricating any executor-owned identity. */\nexport function unknownMaterializationReceipt(\n  input: UnknownReceiptInput,\n): ProfileMaterializationReceipt {\n  return Object.freeze({\n    status: 'unknown' as const,\n    ...(input.authoredProfileDigest === undefined\n      ? {}\n      : { authoredProfileDigest: input.authoredProfileDigest }),\n    runtime: input.runtime,\n    reason: input.reason,\n  })\n}\n\n/** Mint a process-unique attempt id before executor construction. */\nexport function newExecutionAttemptId(nodeId: string): string {\n  return `${nodeId}:attempt:${randomUUID()}`\n}\n\n/** Build the immutable safe receipt for a full, transient execution binding. */\nexport function knownExecutionBindingReceipt(\n  materialization: ProfileMaterializationReceipt,\n  bindingInput: ExecutorExecutionBinding,\n): ExecutionBindingReceipt {\n  const binding = detachedSnapshot(bindingInput, 'executor execution binding')\n  assertNonEmpty(binding.attemptId, 'binding.attemptId')\n  assertSafeDescriptor(binding.descriptor)\n  let materializationReceiptDigest: Sha256Digest\n  let bindingDigest: Sha256Digest\n  try {\n    materializationReceiptDigest = canonicalCandidateDigest(materialization)\n    // Bind the exact JSON document a backend receives. Optional AgentProfile fields are represented\n    // as `undefined` in memory but omitted by JSON transport; normalize that one distinction while\n    // rejecting every non-finite/non-data value instead of silently coercing it.\n    bindingDigest = canonicalCandidateDigest(jsonWireSnapshot(binding.binding))\n  } catch (error) {\n    throw new ValidationError('executor binding must be finite RFC 8785 JSON', { cause: error })\n  }\n  return Object.freeze({\n    status: 'known' as const,\n    attemptId: binding.attemptId,\n    materializationReceiptDigest,\n    bindingDigest,\n    descriptor: binding.descriptor,\n  })\n}\n\n/** Preserve an attempt boundary even when its caller-owned transport cannot be attested. */\nexport function unknownExecutionBindingReceipt(\n  materialization: ProfileMaterializationReceipt,\n  attemptId: string,\n  reason: UnknownMaterializationReason,\n): ExecutionBindingReceipt {\n  assertNonEmpty(attemptId, 'binding.attemptId')\n  return Object.freeze({\n    status: 'unknown' as const,\n    attemptId,\n    materializationReceiptDigest: canonicalCandidateDigest(materialization),\n    reason,\n  })\n}\n\n/** Derive an authored-profile digest without turning non-canonical input into a fake identity. */\nexport function authoredProfileDigest(profile: unknown): Sha256Digest | undefined {\n  try {\n    return canonicalAgentProfileDigest(agentProfileSchema.parse(profile))\n  } catch {\n    return undefined\n  }\n}\n\nfunction assertExactDeclaration(value: ExecutorMaterialization): void {\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n    throw new ValidationError('executor materialization: declaration must be an object')\n  }\n  const unknown = Object.keys(value).filter((key) => !declarationKeys.has(key))\n  if (unknown.length > 0) {\n    throw new ValidationError(\n      `executor materialization: unknown declaration fields: ${unknown.sort().join(', ')}`,\n    )\n  }\n  if (!Object.hasOwn(value, 'plan')) {\n    throw new ValidationError('executor materialization: plan is required')\n  }\n}\n\nfunction assertModel(model: ExecutorMaterialization['model']): void {\n  if (typeof model !== 'object' || model === null || Array.isArray(model)) {\n    throw new ValidationError('executor materialization: model must be a known/unknown identity')\n  }\n  const keys = Object.keys(model).sort()\n  if (model.status === 'known') {\n    if (keys.join(',') !== 'id,status') {\n      throw new ValidationError('executor materialization: known model accepts only status and id')\n    }\n    assertNonEmpty(model.id, 'model.id')\n    return\n  }\n  if (model.status === 'unknown') {\n    if (keys.join(',') !== 'reason,status') {\n      throw new ValidationError(\n        'executor materialization: unknown model accepts only status and reason',\n      )\n    }\n    assertNonEmpty(model.reason, 'model.reason')\n    return\n  }\n  throw new ValidationError('executor materialization: model.status must be known or unknown')\n}\n\nfunction assertNonEmpty(value: unknown, field: string): asserts value is string {\n  if (typeof value !== 'string' || value.trim().length === 0) {\n    throw new ValidationError(`executor materialization: ${field} must be a non-empty string`)\n  }\n}\n\nfunction assertSafeDescriptor(descriptor: ExecutorExecutionBinding['descriptor']): void {\n  if (typeof descriptor !== 'object' || descriptor === null || Array.isArray(descriptor)) {\n    throw new ValidationError('executor binding: descriptor must be an object')\n  }\n  for (const [key, value] of Object.entries(descriptor)) {\n    if (/(url|uri|token|key|secret|bearer|credential|authorization)/i.test(key)) {\n      throw new ValidationError(`executor binding: unsafe descriptor key ${JSON.stringify(key)}`)\n    }\n    if (\n      value !== null &&\n      typeof value !== 'string' &&\n      typeof value !== 'number' &&\n      typeof value !== 'boolean'\n    ) {\n      throw new ValidationError(\n        `executor binding: descriptor ${JSON.stringify(key)} must be scalar`,\n      )\n    }\n    if (typeof value === 'string' && (value.includes('://') || value.includes('@'))) {\n      throw new ValidationError(\n        `executor binding: descriptor ${JSON.stringify(key)} contains transport or credential text`,\n      )\n    }\n  }\n}\n\nfunction jsonWireSnapshot(value: unknown, path = '$'): unknown {\n  if (value === null || typeof value === 'string' || typeof value === 'boolean') return value\n  if (typeof value === 'number') {\n    if (!Number.isFinite(value)) {\n      throw new ValidationError(`executor binding: ${path} must be finite`)\n    }\n    return value\n  }\n  if (Array.isArray(value)) {\n    return value.map((item, index) => {\n      if (item === undefined) {\n        throw new ValidationError(`executor binding: ${path}[${index}] cannot be undefined`)\n      }\n      return jsonWireSnapshot(item, `${path}[${index}]`)\n    })\n  }\n  if (typeof value !== 'object' || value === null) {\n    throw new ValidationError(`executor binding: ${path} must be JSON data`)\n  }\n  const prototype = Object.getPrototypeOf(value)\n  if (prototype !== Object.prototype && prototype !== null) {\n    throw new ValidationError(`executor binding: ${path} must be a plain object`)\n  }\n  const out: Record<string, unknown> = {}\n  for (const [key, item] of Object.entries(value as Record<string, unknown>)) {\n    if (item === undefined) continue\n    out[key] = jsonWireSnapshot(item, `${path}.${key}`)\n  }\n  return out\n}\n"],"mappings":";;;;;;;AAkBA,SAAgB,sBAAsB,SAAoD;CACxF,IAAI,QAAQ,WAAW,WACrB,OAAO;EACL,QAAQ;EACR,QAAQ;EACR,SAAS;GAAE,OAAO;GAAM,OAAO;EAAE;CACnC;CAGF,MAAM,SAAS,QAAQ,SAAS;CAChC,IAAI,QAAQ,WAAW,UACrB,OAAO;EACL,QAAQ;EACR;EACA,SAAS;GAAE,OAAO;GAAO,OAAO;EAAE;EAClC,OAAO;GAAE,MAAM;GAAW,SAAS;EAAO;CAC5C;CAGF,OAAO;EACL,QAAQ;EACR;EACA,SAAS;GAAE,OAAO;GAAO,OAAO;EAAE;CACpC;AACF;;AAGA,SAAgB,mBAAmB,OAA6C;CAC9E,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO,KAAA;CAChD,MAAM,UAAW,MAAgC;CACjD,IAAI,CAAC,WAAW,OAAO,YAAY,UAAU,OAAO,KAAA;CACpD,OAAO;AACT;;;;;;;;;ACvCA,SAAgB,+BAA+B,KAAc,SAA+B;CAC1F,MAAM,QAAQ,iBAAiB,KAAK,GAAG,QAAQ,qBAAqB;CACpE,MAAM,UAAU,mBAAmB,MAAM,KAAK;CAC9C,6BAA6B,SAAS,OAAO;CAC7C,OAAO,iBAAiB,SAAS,GAAG,QAAQ,sBAAsB;AACpE;;AAGA,SAAgB,4BAA4B,KAAgB,SAA4B;CACtF,MAAM,EACJ,SAAS,YACT,SACA,WAAW,cACX,GAAG,sBACD;CACJ,MAAM,UAAU,+BAA+B,YAAY,OAAO;CAClE,MAAM,YACJ,iBAAiB,KAAA,IACb,KAAA,IACA,iBAAiB,cAAc,GAAG,QAAQ,wBAAwB;CACxE,OAAO,OAAO,OAAO;EACnB,GAAG;EACH;EACA;EACA,GAAI,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU;CACjD,CAAC;AACH;;;ACMA,MAAM,uDAAuC,IAAI,QAG/C;AACF,MAAM,0CAA0B,IAAI,QAAyB;AAC7D,MAAM,4DAA4C,IAAI,QASpD;AACF,MAAM,gEAAgD,IAAI,QAGxD;AAcF,MAAM,kCAAkB,IAAI,IAAI;CAC9B;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;;AAOD,SAAgB,2BACd,UACA,aACA,SACe;CACf,qCAAqC,IAAI,UAAoB,EAC3D,SAAS,OAAO,OAAO;EACrB,MAAM;EACN,aAAa,iBAAiB,aAAa,wCAAwC;EACnF,GAAI,YAAY,KAAA,IACZ,CAAC,IACD,EACE,SAAS,iBAAiB,SAAS,0CAA0C,EAC/E;CACN,CAAC,EACH,CAAC;CACD,4BAA4B,QAAQ;CACpC,OAAO;AACT;;;;AAKA,SAAgB,kCACd,UACA,SACA,aACA,SACe;CACf,qCAAqC,IAAI,UAAoB,EAC3D,SAAS,OAAO,OAAO;EACrB,MAAM;EACN;EACA,aAAa,iBAAiB,aAAa,kCAAkC;EAC7E,SAAS,iBAAiB,SAAS,oCAAoC;CACzE,CAAC,EACH,CAAC;CACD,OAAO;AACT;;;AAIA,SAAgB,oCACd,UACA,aACA,SACe;CACf,MAAM,MAAM,qCAAqC,IAAI,QAAkB;CACvE,IAAI,KAAK,QAAQ,SAAS,aAAa,IAAI,QAAQ,YAAY,SAAS,SACtE,MAAM,IAAI,gBACR,mGACF;CAEF,IAAI,UAAU,OAAO,OAAO;EAC1B,MAAM;EACN,aAAa,iBAAiB,aAAa,wCAAwC;EACnF,SAAS,iBAAiB,SAAS,0CAA0C;CAC/E,CAAC;CACD,OAAO;AACT;;;AAIA,SAAgB,mCACd,UACA,SACe;CACf,qCAAqC,IAAI,UAAoB,EAC3D,SAAS,OAAO,OAAO;EAAE,MAAM;EAAY;CAAQ,CAAC,EACtD,CAAC;CACD,OAAO;AACT;;AAGA,SAAgB,uCACd,QACA,SACe;CACf,MAAM,MAAM,qCAAqC,IAAI,MAAgB;CACrE,IAAI,QAAQ,KAAA,GACV,qCAAqC,IAAI,SAAmB,GAAG;CAEjE,MAAM,gBAAgB,4BAA4B,MAAM;CACxD,0CAA0C,IAAI,SAAmB,aAAa;CAC9E,OAAO;AACT;AAEA,SAAS,4BAAiC,UAMxC;CACA,MAAM,WAAW,0CAA0C,IAAI,QAAkB;CACjF,IAAI,aAAa,KAAA,GAAW,OAAO;CACnC,MAAM,QAAQ,EAAE,UAAU,CAAC,EAAE;CAC7B,0CAA0C,IAAI,UAAoB,KAAK;CACvE,OAAO;AACT;;AAGA,SAAgB,oCACd,UACqC;CACrC,MAAM,cAAc,qCAAqC,IAAI,QAAkB,CAAC,EAAE;CAClF,OAAO,aAAa,SAAS,UAAU,YAAY,cAAc,KAAA;AACnE;;AAGA,SAAgB,qCACd,UACsC;CACtC,MAAM,cAAc,qCAAqC,IAAI,QAAkB,CAAC,EAAE;CAClF,OAAO,aAAa,SAAS,UAAU,YAAY,UAAU,KAAA;AAC/D;;;AAIA,SAAgB,2CAAgD,UAMlD;CACZ,MAAM,cAAc,qCAAqC,IAAI,QAAkB,CAAC,EAAE;CAClF,OAAO,aAAa,SAAS,YACzB;EACE,SAAS,YAAY;EACrB,aAAa,YAAY;EACzB,SAAS,YAAY;CACvB,IACA,KAAA;AACN;;AAGA,SAAgB,oCACd,UACqB;CACrB,MAAM,cAAc,qCAAqC,IAAI,QAAkB,CAAC,EAAE;CAClF,OAAO,aAAa,SAAS,aAAa,YAAY,UAAU,KAAA;AAClE;;AAGA,SAAgB,6BAA+C,OAAU,SAAqB;CAC5F,wBAAwB,IAAI,OAAO,OAAO;CAC1C,OAAO;AACT;;;AAIA,SAAgB,8BAA8B,OAAoC;CAChF,OAAO,wBAAwB,IAAI,KAAK;AAC1C;;AAGA,SAAgB,uCAA4C,UAA+B;CAEzF,4BAD0C,QACtC,CAAC,CAAC,SAAS,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;AAC1C;;;;;;;AAQA,SAAgB,6CAAkD,UAA+B;CAE/F,MAAM,UADQ,4BAA4B,QACtB,CAAC,CAAC,SAAS,GAAG,EAAE;CACpC,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,gBAAgB,+DAA+D;CAE3F,IAAI,QAAQ,aAAa,SAAS,KAAK,QAAQ,qBAAqB,MAClE,MAAM,IAAI,gBACR,mFACF;CAEF,QAAQ,mBAAmB;AAC7B;;AAGA,SAAgB,gCAAqC,UAAyB,OAAqB;CAEjG,MAAM,UADQ,0CAA0C,IAAI,QACxC,CAAC,EAAE,SAAS,GAAG,EAAE;CACrC,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,gBAAgB,8DAA8D;CAE1F,IAAI,QAAQ,aAAa,GAAG,EAAE,MAAM,OAAO,QAAQ,aAAa,KAAK,KAAK;AAC5E;;AAGA,SAAgB,qCACd,UAC4C;CAC5C,MAAM,QAAQ,0CAA0C,IAAI,QAAkB;CAC9E,IAAI,UAAU,KAAA,KAAa,MAAM,SAAS,WAAW,GAAG,OAAO,KAAA;CAC/D,MAAM,WAAwD,OAAO,OACnE,MAAM,SAAS,KAAK,YAClB,OAAO,OAAO;EACZ,cAAc,OAAO,OAAO,CAAC,GAAG,QAAQ,YAAY,CAAC;EACrD,GAAI,QAAQ,mBAAmB,EAAE,kBAAkB,KAAK,IAAI,CAAC;EAC7D,GAAI,QAAQ,qBAAqB,gBAC7B,EAAE,kBAAkB,cAAuB,IAC3C,CAAC;CACP,CAAC,CACH,CACF;CACA,MAAM,SAAS,OAAO,OAAO,CAAC,GAAG,IAAI,IAAI,SAAS,SAAS,YAAY,QAAQ,YAAY,CAAC,CAAC,CAAC;CAC9F,MAAM,UAAU,SAAS,MACtB,YAAY,QAAQ,aAAa,WAAW,KAAK,QAAQ,qBAAqB,aACjF;CACA,MAAM,WAAW,SAAS,MAAM,YAAY,QAAQ,qBAAqB,IAAI;CAC7E,MAAM,SAAS,SAAS,MAAM,YAAY,QAAQ,aAAa,SAAS,CAAC;CACzE,OAAO,OAAO,OACZ,WAAW,YAAY,CAAC,SACpB;EACE,QAAQ;EACR;EACA;EACA,QAAQ,WACH,4BACA;CACP,IACA;EAAE,QAAQ;EAAkB;EAAU;CAAO,CACnD;AACF;;AAGA,SAAgB,2CAAgD,UAA+B;CAE7F,MAAM,UADQ,4BAA4B,QACtB,CAAC,CAAC,SAAS,GAAG,EAAE;CACpC,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,gBAAgB,8DAA8D;CAE1F,QAAQ,mBAAmB;AAC7B;;AAGA,SAAgB,+CACd,OACA,UACM;CACN,IAAI,aAAa,KAAA,GAAW;CAC5B,MAAM,QAAQ,8CAA8C,IAAI,KAAK;CACrE,IAAI,UAAU,KAAA,GAAW;EACvB,8CAA8C,IAAI,OAAO,QAAQ;EACjE;CACF;CACA,MAAM,WAAW,OAAO,OAAO,CAAC,GAAG,MAAM,UAAU,GAAG,SAAS,QAAQ,CAAC;CACxE,MAAM,SAAS,OAAO,OAAO,CAAC,mBAAG,IAAI,IAAI,CAAC,GAAG,MAAM,QAAQ,GAAG,SAAS,MAAM,CAAC,CAAC,CAAC;CAChF,MAAM,UAAU,SAAS,MACtB,YAAY,QAAQ,aAAa,WAAW,KAAK,QAAQ,qBAAqB,aACjF;CACA,MAAM,WAAW,SAAS,MAAM,YAAY,QAAQ,qBAAqB,IAAI;CAC7E,MAAM,SAAS,SAAS,MAAM,YAAY,QAAQ,aAAa,SAAS,CAAC;CACzE,8CAA8C,IAC5C,OACA,OAAO,OACL,WAAW,YAAY,CAAC,SACpB;EACE,QAAQ;EACR;EACA;EACA,QAAQ,WACH,4BACA;CACP,IACA;EAAE,QAAQ;EAAkB;EAAU;CAAO,CACnD,CACF;AACF;;AAGA,SAAgB,yCACd,OAC4C;CAC5C,OAAO,8CAA8C,IAAI,KAAK;AAChE;;AAGA,SAAgB,4BACd,OAC+B;CAC/B,MAAM,cAAc,iBAAiB,MAAM,aAAa,0BAA0B;CAClF,uBAAuB,WAAW;CAClC,MAAM,mBAAmB,mBAAmB,UAAU,YAAY,gBAAgB;CAClF,IAAI,CAAC,iBAAiB,SACpB,MAAM,IAAI,gBAAgB,oEAAoE;CAEhG,eAAe,YAAY,SAAS,SAAS;CAC7C,eAAe,YAAY,cAAc,cAAc;CACvD,eAAe,YAAY,WAAW,MAAM,gBAAgB;CAC5D,eAAe,YAAY,WAAW,IAAI,cAAc;CACxD,YAAY,YAAY,KAAK;CAE7B,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,yBAAyB,4BAA4B,iBAAiB,IAAI;EAC1E,4BAA4B,yBAAyB,iBAAiB,YAAY,IAAI,CAAC;EACvF,4BACE,YAAY,wBAAwB,KAAA,IAChC,KAAA,IACA,yBAAyB,iBAAiB,YAAY,mBAAmB,CAAC;CAClF,SAAS,OAAO;EACd,MAAM,IAAI,gBACR,yFACA,EAAE,OAAO,MAAM,CACjB;CACF;CAEA,OAAO,OAAO,OAAO;EACnB,QAAQ;EACR,uBAAuB,MAAM;EAC7B;EACA;EACA,GAAI,8BAA8B,KAAA,IAAY,CAAC,IAAI,EAAE,0BAA0B;EAC/E,SAAS,MAAM;EACf,SAAS,YAAY;EACrB,OAAO,YAAY;EACnB,WAAW,YAAY;EACvB,cAAc,YAAY;CAC5B,CAAC;AACH;;AAGA,SAAgB,8BACd,OAC+B;CAC/B,OAAO,OAAO,OAAO;EACnB,QAAQ;EACR,GAAI,MAAM,0BAA0B,KAAA,IAChC,CAAC,IACD,EAAE,uBAAuB,MAAM,sBAAsB;EACzD,SAAS,MAAM;EACf,QAAQ,MAAM;CAChB,CAAC;AACH;;AAGA,SAAgB,sBAAsB,QAAwB;CAC5D,OAAO,GAAG,OAAO,WAAW,WAAW;AACzC;;AAGA,SAAgB,6BACd,iBACA,cACyB;CACzB,MAAM,UAAU,iBAAiB,cAAc,4BAA4B;CAC3E,eAAe,QAAQ,WAAW,mBAAmB;CACrD,qBAAqB,QAAQ,UAAU;CACvC,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,+BAA+B,yBAAyB,eAAe;EAIvE,gBAAgB,yBAAyB,iBAAiB,QAAQ,OAAO,CAAC;CAC5E,SAAS,OAAO;EACd,MAAM,IAAI,gBAAgB,iDAAiD,EAAE,OAAO,MAAM,CAAC;CAC7F;CACA,OAAO,OAAO,OAAO;EACnB,QAAQ;EACR,WAAW,QAAQ;EACnB;EACA;EACA,YAAY,QAAQ;CACtB,CAAC;AACH;;AAGA,SAAgB,+BACd,iBACA,WACA,QACyB;CACzB,eAAe,WAAW,mBAAmB;CAC7C,OAAO,OAAO,OAAO;EACnB,QAAQ;EACR;EACA,8BAA8B,yBAAyB,eAAe;EACtE;CACF,CAAC;AACH;;AAGA,SAAgB,sBAAsB,SAA4C;CAChF,IAAI;EACF,OAAO,4BAA4B,mBAAmB,MAAM,OAAO,CAAC;CACtE,QAAQ;EACN;CACF;AACF;AAEA,SAAS,uBAAuB,OAAsC;CACpE,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,gBAAgB,yDAAyD;CAErF,MAAM,UAAU,OAAO,KAAK,KAAK,CAAC,CAAC,QAAQ,QAAQ,CAAC,gBAAgB,IAAI,GAAG,CAAC;CAC5E,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,gBACR,yDAAyD,QAAQ,KAAK,CAAC,CAAC,KAAK,IAAI,GACnF;CAEF,IAAI,CAAC,OAAO,OAAO,OAAO,MAAM,GAC9B,MAAM,IAAI,gBAAgB,4CAA4C;AAE1E;AAEA,SAAS,YAAY,OAA+C;CAClE,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,gBAAgB,kEAAkE;CAE9F,MAAM,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,KAAK;CACrC,IAAI,MAAM,WAAW,SAAS;EAC5B,IAAI,KAAK,KAAK,GAAG,MAAM,aACrB,MAAM,IAAI,gBAAgB,kEAAkE;EAE9F,eAAe,MAAM,IAAI,UAAU;EACnC;CACF;CACA,IAAI,MAAM,WAAW,WAAW;EAC9B,IAAI,KAAK,KAAK,GAAG,MAAM,iBACrB,MAAM,IAAI,gBACR,wEACF;EAEF,eAAe,MAAM,QAAQ,cAAc;EAC3C;CACF;CACA,MAAM,IAAI,gBAAgB,iEAAiE;AAC7F;AAEA,SAAS,eAAe,OAAgB,OAAwC;CAC9E,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,WAAW,GACvD,MAAM,IAAI,gBAAgB,6BAA6B,MAAM,4BAA4B;AAE7F;AAEA,SAAS,qBAAqB,YAA0D;CACtF,IAAI,OAAO,eAAe,YAAY,eAAe,QAAQ,MAAM,QAAQ,UAAU,GACnF,MAAM,IAAI,gBAAgB,gDAAgD;CAE5E,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,GAAG;EACrD,IAAI,8DAA8D,KAAK,GAAG,GACxE,MAAM,IAAI,gBAAgB,2CAA2C,KAAK,UAAU,GAAG,GAAG;EAE5F,IACE,UAAU,QACV,OAAO,UAAU,YACjB,OAAO,UAAU,YACjB,OAAO,UAAU,WAEjB,MAAM,IAAI,gBACR,gCAAgC,KAAK,UAAU,GAAG,EAAE,gBACtD;EAEF,IAAI,OAAO,UAAU,aAAa,MAAM,SAAS,KAAK,KAAK,MAAM,SAAS,GAAG,IAC3E,MAAM,IAAI,gBACR,gCAAgC,KAAK,UAAU,GAAG,EAAE,uCACtD;CAEJ;AACF;AAEA,SAAS,iBAAiB,OAAgB,OAAO,KAAc;CAC7D,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW,OAAO;CACtF,IAAI,OAAO,UAAU,UAAU;EAC7B,IAAI,CAAC,OAAO,SAAS,KAAK,GACxB,MAAM,IAAI,gBAAgB,qBAAqB,KAAK,gBAAgB;EAEtE,OAAO;CACT;CACA,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,KAAK,MAAM,UAAU;EAChC,IAAI,SAAS,KAAA,GACX,MAAM,IAAI,gBAAgB,qBAAqB,KAAK,GAAG,MAAM,sBAAsB;EAErF,OAAO,iBAAiB,MAAM,GAAG,KAAK,GAAG,MAAM,EAAE;CACnD,CAAC;CAEH,IAAI,OAAO,UAAU,YAAY,UAAU,MACzC,MAAM,IAAI,gBAAgB,qBAAqB,KAAK,mBAAmB;CAEzE,MAAM,YAAY,OAAO,eAAe,KAAK;CAC7C,IAAI,cAAc,OAAO,aAAa,cAAc,MAClD,MAAM,IAAI,gBAAgB,qBAAqB,KAAK,wBAAwB;CAE9E,MAAM,MAA+B,CAAC;CACtC,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,KAAgC,GAAG;EAC1E,IAAI,SAAS,KAAA,GAAW;EACxB,IAAI,OAAO,iBAAiB,MAAM,GAAG,KAAK,GAAG,KAAK;CACpD;CACA,OAAO;AACT"}

package/dist/model-policy-DgRJIJse.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"model-policy-DgRJIJse.js","names":["positiveInteger"],"sources":["../src/runtime/harness-role.ts","../src/runtime/router-retry-policy.ts","../src/runtime/supervise/model-policy.ts"],"sourcesContent":["/**\n * Which `HarnessType` values name a real coding-agent runtime, and which name a MODE that has no\n * agent behind it.\n *\n * `cli-base` is the router-backed mode — a plain multi-turn router call with no coding-agent\n * harness (`@tangle-network/agent-interface`'s `HarnessType` doc, and the same table's\n * `harnessReasoningCeiling['cli-base'] = 'none'` commented \"cli-base has no agent\"). The\n * distinction is REAL; what was accidental is that three call sites each spelled the test\n * themselves, so a second no-agent mode would have to be remembered in three places.\n *\n * SHOULD UPSTREAM: this belongs next to `harnessHonorsEffort` in agent-interface's\n * `harness-capabilities.ts`, which already encodes the fact but exports no predicate for it.\n * Until it does, this is the one local copy — extend the set here, never re-test the name.\n */\n\nimport type { HarnessType } from '@tangle-network/agent-interface'\n\n/**\n * Harness ids that select a router/no-agent mode rather than a coding-agent runtime.\n *\n * `nanoclaw` is deliberately ABSENT: the shared capability table clamps its reasoning ceiling the\n * same way it clamps `cli-base`, but nanoclaw does run an agent (a socket-bridge runner to the\n * NanoClaw daemon) and every caller here treats it as a full harness. Add a row only with the\n * behavior change stated, never to make the two clamps look symmetric.\n */\nconst NO_AGENT_HARNESSES: ReadonlySet<string> = new Set<string>(['cli-base' satisfies HarnessType])\n\n/** Whether this profile harness selects a real coding-agent runtime (vs. the router/no-agent mode\n *  or no preference at all). Accepts the looser `string` some local profile shapes declare, and\n *  preserves the caller's own harness type when it is narrower. */\nexport function harnessRunsAgent<T extends string>(harness: T | null | undefined): harness is T {\n  return harness != null && !NO_AGENT_HARNESSES.has(harness)\n}\n\n/** The coding-agent harness this profile selects, or `undefined` when it selects none — the shape\n *  callers want when a no-agent mode must fall through to the router arm. */\nexport function agentHarness<T extends string>(harness: T | null | undefined): T | undefined {\n  return harnessRunsAgent(harness) ? harness : undefined\n}\n","import { ValidationError } from '../errors'\n\n/** Exact retry controls accepted at `AgentProfile.model.metadata.retry`. */\nexport interface RouterRetryPolicy {\n  /** Total attempts, including the first request. */\n  readonly maxAttempts?: number\n  /** Delay before the second attempt. Later delays grow exponentially. */\n  readonly initialBackoffMs?: number\n  /** Maximum delay between attempts. */\n  readonly maxBackoffMs?: number\n  /** Symmetric random variation around each delay, from 0 through 1. */\n  readonly jitter?: number\n  /** HTTP statuses that may be retried. */\n  readonly retryStatuses?: ReadonlyArray<number>\n  /** Deadline for receiving one attempt's response headers. Zero disables it. */\n  readonly requestTimeoutMs?: number\n}\n\nexport interface ResolvedRouterRetryPolicy {\n  readonly maxAttempts: number\n  readonly initialBackoffMs: number\n  readonly maxBackoffMs: number\n  readonly jitter: number\n  readonly retryStatuses: ReadonlyArray<number>\n  readonly requestTimeoutMs: number\n}\n\nconst maximumTimerMs = 2_147_483_647\nconst defaultRetryStatuses = Object.freeze([408, 425, 429, 500, 502, 503, 504, 520, 522, 524])\nconst retryPolicyKeys = new Set([\n  'initialBackoffMs',\n  'jitter',\n  'maxAttempts',\n  'maxBackoffMs',\n  'requestTimeoutMs',\n  'retryStatuses',\n])\n\n/** Parse untrusted profile/config data once and return an immutable complete policy. */\nexport function resolveRouterRetryPolicy(\n  input: unknown,\n  context: string,\n): ResolvedRouterRetryPolicy {\n  if (\n    input !== undefined &&\n    (typeof input !== 'object' || input === null || Array.isArray(input))\n  ) {\n    throw new ValidationError(`${context} must be an object`)\n  }\n  const policy = input === undefined ? {} : Object.fromEntries(Object.entries(input))\n  const unknown = Object.keys(policy).filter((key) => !retryPolicyKeys.has(key))\n  if (unknown.length > 0) {\n    throw new ValidationError(`${context} has unsupported fields: ${unknown.join(', ')}`)\n  }\n  const maxAttempts = positiveInteger(policy.maxAttempts, 5, `${context}.maxAttempts`)\n  const initialBackoffMs = timerInteger(\n    policy.initialBackoffMs,\n    1_000,\n    `${context}.initialBackoffMs`,\n  )\n  const maxBackoffMs = timerInteger(policy.maxBackoffMs, 30_000, `${context}.maxBackoffMs`)\n  const requestTimeoutMs = timerInteger(policy.requestTimeoutMs, 0, `${context}.requestTimeoutMs`)\n  const jitter = policy.jitter ?? 0.25\n  if (typeof jitter !== 'number' || !Number.isFinite(jitter) || jitter < 0 || jitter > 1) {\n    throw new ValidationError(`${context}.jitter must be a finite number from 0 through 1`)\n  }\n  const retryStatuses = parseRetryStatuses(policy.retryStatuses, context)\n  return Object.freeze({\n    maxAttempts,\n    initialBackoffMs,\n    maxBackoffMs,\n    jitter,\n    retryStatuses,\n    requestTimeoutMs,\n  })\n}\n\nfunction parseRetryStatuses(value: unknown, context: string): ReadonlyArray<number> {\n  if (value === undefined) return defaultRetryStatuses\n  if (!Array.isArray(value)) {\n    throw new ValidationError(`${context}.retryStatuses must be an array of HTTP statuses`)\n  }\n  const statuses: number[] = []\n  const seen = new Set<number>()\n  for (const status of value) {\n    if (!Number.isSafeInteger(status) || status < 100 || status > 599) {\n      throw new ValidationError(\n        `${context}.retryStatuses must contain integer HTTP statuses from 100 through 599`,\n      )\n    }\n    if (seen.has(status)) {\n      throw new ValidationError(`${context}.retryStatuses must not contain duplicates`)\n    }\n    seen.add(status)\n    statuses.push(status)\n  }\n  return Object.freeze(statuses)\n}\n\nfunction positiveInteger(value: unknown, fallback: number, context: string): number {\n  const parsed = value ?? fallback\n  if (typeof parsed !== 'number' || !Number.isSafeInteger(parsed) || parsed < 1) {\n    throw new ValidationError(`${context} must be a positive safe integer`)\n  }\n  return parsed\n}\n\nfunction timerInteger(value: unknown, fallback: number, context: string): number {\n  const parsed = value ?? fallback\n  if (\n    typeof parsed !== 'number' ||\n    !Number.isSafeInteger(parsed) ||\n    parsed < 0 ||\n    parsed > maximumTimerMs\n  ) {\n    throw new ValidationError(\n      `${context} must be a nonnegative safe integer no greater than ${maximumTimerMs}`,\n    )\n  }\n  return parsed\n}\n","/**\n * `assertModelAllowed` — a fail-loud guard that restricts a run to a chosen subset of\n * models. The two front doors (`supervise()` / `improve()`) call it once per configured\n * model at resolve time, so a run that names a model outside the allowed set throws before\n * any compute is spent — never silently swapped or silently allowed.\n */\nimport { HARNESS_NATIVE_MODEL } from '@tangle-network/agent-eval'\nimport type { AgentProfile } from '@tangle-network/agent-interface'\nimport { ConfigError } from '../../errors'\nimport { agentHarness } from '../harness-role'\nimport { type ResolvedRouterRetryPolicy, resolveRouterRetryPolicy } from '../router-retry-policy'\n\n/**\n * Return the model id an executor may send to a provider.\n *\n * Eval stamps {@link HARNESS_NATIVE_MODEL} into a profile when model selection is deliberately\n * delegated to the configured runtime. That marker belongs in experiment identity and cost\n * admission; it is not a provider model id.\n */\nexport function concreteModelId(model: string | undefined): string | undefined {\n  if (model === undefined) return undefined\n  const id = model.trim()\n  return id.length > 0 && !isHarnessNativeModel(id) ? id : undefined\n}\n\n/** Whether a model value delegates selection to the chosen execution system. */\nexport function isHarnessNativeModel(model: string | undefined): boolean {\n  return model?.trim() === HARNESS_NATIVE_MODEL\n}\n\n/** Return a profile's explicitly selected provider model, if it has one. */\nexport function concreteProfileModel(profile: Pick<AgentProfile, 'model'>): string | undefined {\n  return concreteModelId(profile.model?.default)\n}\n\n/** The provider-facing model id declared by a profile. Direct Router execution uses this form:\n * the endpoint already selects the provider, so the model id itself is not harness-prefixed. */\nexport function profileProviderModel(profile: Pick<AgentProfile, 'model'>): string | undefined {\n  return concreteProfileModel(profile)\n}\n\n/** The full cli-bridge wire id declared by a profile: harness/provider/model. */\nexport function profileBridgeWireModel(\n  profile: Pick<AgentProfile, 'harness' | 'model'>,\n): string | undefined {\n  const model = concreteProfileModel(profile)\n  const provider = profile.model?.provider\n  const harness = agentHarness(profile.harness)\n  const modelWithoutHarness =\n    model && harness && model.startsWith(`${harness}/`) ? model.slice(harness.length + 1) : model\n  const providerModel = modelWithoutHarness\n    ? provider && !modelWithoutHarness.startsWith(`${provider}/`)\n      ? `${provider}/${modelWithoutHarness}`\n      : modelWithoutHarness\n    : undefined\n  if (!harness) return providerModel\n  if (!providerModel) return harness\n  return providerModel.startsWith(`${harness}/`) ? providerModel : `${harness}/${providerModel}`\n}\n\n/**\n * Refuse an incomplete execution identity before any backend may fill it from ambient config.\n * `AgentProfile` is the sole behavioral authority: harness, provider, and concrete model all\n * participate in its digest. Eval's runtime-selected marker is a matrix-planning value, never an\n * executable model.\n */\nexport function assertExecutableAgentProfile(profile: AgentProfile, context: string): void {\n  if (profile.harness === undefined) {\n    throw new ConfigError(`${context}: AgentProfile.harness must be explicit before execution`)\n  }\n  const declared = profile.model?.default\n  const model = concreteModelId(declared)\n  if (!model) {\n    const reason = isHarnessNativeModel(declared) ? 'runtime-selected' : 'missing'\n    throw new ConfigError(\n      `${context}: AgentProfile.model.default is ${reason}; execution requires a concrete model`,\n    )\n  }\n  if (!profile.model?.provider?.trim()) {\n    throw new ConfigError(\n      `${context}: AgentProfile.model.provider must be explicit before execution`,\n    )\n  }\n}\n\n/** Generation and loop controls that may affect one model execution. */\nexport interface ProfileModelExecutionSettings {\n  readonly temperature?: number\n  readonly maxTokens?: number\n  readonly retry?: ResolvedRouterRetryPolicy\n  readonly seed?: number\n  readonly toolChoice?: 'auto' | 'required' | 'none'\n  readonly extraBody?: Readonly<Record<string, unknown>>\n  /** Zero means no turn-count cap; conserved budgets and deadlines still apply. */\n  readonly maxTurns?: number\n  readonly stream?: boolean\n}\n\nconst PROFILE_MODEL_METADATA_KEYS = new Set([\n  'extraBody',\n  'maxTokens',\n  'maxTurns',\n  'retry',\n  'seed',\n  'stream',\n  'temperature',\n  'toolChoice',\n])\n\n/**\n * Read every Router-affecting control from the exact profile and reject unknown controls.\n * Backends receive endpoint/auth and executable ports only; they cannot silently alter behavior.\n */\nexport function profileModelExecutionSettings(\n  profile: Pick<AgentProfile, 'model'>,\n  context: string,\n): ProfileModelExecutionSettings {\n  const metadata = profile.model?.metadata ?? {}\n  const unknown = Object.keys(metadata).filter((key) => !PROFILE_MODEL_METADATA_KEYS.has(key))\n  if (unknown.length > 0) {\n    throw new ConfigError(\n      `${context}: unsupported AgentProfile.model.metadata fields: ${unknown.join(', ')}`,\n    )\n  }\n  const temperature = finiteNumber(metadata.temperature, `${context}: temperature`)\n  const maxTokens = positiveInteger(metadata.maxTokens, `${context}: maxTokens`)\n  const retryInput = metadata.retry\n  const retry =\n    retryInput === undefined\n      ? undefined\n      : resolveRouterRetryPolicy(retryInput, `${context}: AgentProfile.model.metadata.retry`)\n  const seed = safeInteger(metadata.seed, `${context}: seed`)\n  const maxTurns = nonnegativeInteger(metadata.maxTurns, `${context}: maxTurns`)\n  const stream = optionalBoolean(metadata.stream, `${context}: stream`)\n  const toolChoice = metadata.toolChoice\n  if (\n    toolChoice !== undefined &&\n    toolChoice !== 'auto' &&\n    toolChoice !== 'required' &&\n    toolChoice !== 'none'\n  ) {\n    throw new ConfigError(`${context}: toolChoice must be auto, required, or none`)\n  }\n  const extraBody = metadata.extraBody\n  if (\n    extraBody !== undefined &&\n    (typeof extraBody !== 'object' || extraBody === null || Array.isArray(extraBody))\n  ) {\n    throw new ConfigError(`${context}: extraBody must be an object`)\n  }\n  return {\n    ...(temperature !== undefined ? { temperature } : {}),\n    ...(maxTokens !== undefined ? { maxTokens } : {}),\n    ...(retry !== undefined ? { retry } : {}),\n    ...(seed !== undefined ? { seed } : {}),\n    ...(toolChoice !== undefined ? { toolChoice } : {}),\n    ...(extraBody !== undefined\n      ? { extraBody: Object.freeze({ ...(extraBody as Record<string, unknown>) }) }\n      : {}),\n    ...(maxTurns !== undefined ? { maxTurns } : {}),\n    ...(stream !== undefined ? { stream } : {}),\n  }\n}\n\nfunction finiteNumber(value: unknown, context: string): number | undefined {\n  if (value === undefined) return undefined\n  if (typeof value !== 'number' || !Number.isFinite(value)) {\n    throw new ConfigError(`${context} must be a finite number`)\n  }\n  return value\n}\n\nfunction safeInteger(value: unknown, context: string): number | undefined {\n  if (value === undefined) return undefined\n  if (!Number.isSafeInteger(value)) throw new ConfigError(`${context} must be a safe integer`)\n  return value as number\n}\n\nfunction positiveInteger(value: unknown, context: string): number | undefined {\n  const parsed = safeInteger(value, context)\n  if (parsed !== undefined && parsed < 1) {\n    throw new ConfigError(`${context} must be positive`)\n  }\n  return parsed\n}\n\nfunction nonnegativeInteger(value: unknown, context: string): number | undefined {\n  const parsed = safeInteger(value, context)\n  if (parsed !== undefined && parsed < 0) {\n    throw new ConfigError(`${context} must be nonnegative`)\n  }\n  return parsed\n}\n\nfunction optionalBoolean(value: unknown, context: string): boolean | undefined {\n  if (value === undefined) return undefined\n  if (typeof value !== 'boolean') throw new ConfigError(`${context} must be boolean`)\n  return value\n}\n\n/**\n * Throw a `ConfigError` when `allowed` is set, `model` is defined, and `model` is not a\n * member of `allowed`. No-op when `allowed` is unset (the unrestricted default) or when\n * `model` is undefined (nothing was configured to check).\n */\nexport function assertModelAllowed(\n  model: string | undefined,\n  allowed: readonly string[] | undefined,\n): void {\n  if (!allowed || model === undefined) return\n  if (!allowed.includes(model)) {\n    throw new ConfigError(\n      `model ${JSON.stringify(model)} is not in the allowed set ${JSON.stringify([...allowed])}`,\n    )\n  }\n}\n\n/** Check every canonical model-bearing field in a complete profile, including the models a\n * backend may select for cheap work, named subagents, or modes. */\nexport function assertProfileModelsAllowed(\n  profile: AgentProfile,\n  allowed: readonly string[] | undefined,\n): void {\n  assertModelAllowed(profile.model?.default, allowed)\n  assertModelAllowed(profile.model?.small, allowed)\n  for (const subagent of Object.values(profile.subagents ?? {})) {\n    assertModelAllowed(subagent.model, allowed)\n  }\n  for (const mode of Object.values(profile.modes ?? {})) {\n    assertModelAllowed(mode.model, allowed)\n  }\n}\n"],"mappings":";;;;;;;;;;;AAyBA,MAAM,qCAA0C,IAAI,IAAY,CAAC,UAAgC,CAAC;;;;AAKlG,SAAgB,iBAAmC,SAA6C;CAC9F,OAAO,WAAW,QAAQ,CAAC,mBAAmB,IAAI,OAAO;AAC3D;;;AAIA,SAAgB,aAA+B,SAA8C;CAC3F,OAAO,iBAAiB,OAAO,IAAI,UAAU,KAAA;AAC/C;;;ACXA,MAAM,iBAAiB;AACvB,MAAM,uBAAuB,OAAO,OAAO;CAAC;CAAK;CAAK;CAAK;CAAK;CAAK;CAAK;CAAK;CAAK;CAAK;AAAG,CAAC;AAC7F,MAAM,kCAAkB,IAAI,IAAI;CAC9B;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;AAGD,SAAgB,yBACd,OACA,SAC2B;CAC3B,IACE,UAAU,KAAA,MACT,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,IAEnE,MAAM,IAAI,gBAAgB,GAAG,QAAQ,mBAAmB;CAE1D,MAAM,SAAS,UAAU,KAAA,IAAY,CAAC,IAAI,OAAO,YAAY,OAAO,QAAQ,KAAK,CAAC;CAClF,MAAM,UAAU,OAAO,KAAK,MAAM,CAAC,CAAC,QAAQ,QAAQ,CAAC,gBAAgB,IAAI,GAAG,CAAC;CAC7E,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,gBAAgB,GAAG,QAAQ,2BAA2B,QAAQ,KAAK,IAAI,GAAG;CAEtF,MAAM,cAAcA,kBAAgB,OAAO,aAAa,GAAG,GAAG,QAAQ,aAAa;CACnF,MAAM,mBAAmB,aACvB,OAAO,kBACP,KACA,GAAG,QAAQ,kBACb;CACA,MAAM,eAAe,aAAa,OAAO,cAAc,KAAQ,GAAG,QAAQ,cAAc;CACxF,MAAM,mBAAmB,aAAa,OAAO,kBAAkB,GAAG,GAAG,QAAQ,kBAAkB;CAC/F,MAAM,SAAS,OAAO,UAAU;CAChC,IAAI,OAAO,WAAW,YAAY,CAAC,OAAO,SAAS,MAAM,KAAK,SAAS,KAAK,SAAS,GACnF,MAAM,IAAI,gBAAgB,GAAG,QAAQ,iDAAiD;CAExF,MAAM,gBAAgB,mBAAmB,OAAO,eAAe,OAAO;CACtE,OAAO,OAAO,OAAO;EACnB;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;AACH;AAEA,SAAS,mBAAmB,OAAgB,SAAwC;CAClF,IAAI,UAAU,KAAA,GAAW,OAAO;CAChC,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,MAAM,IAAI,gBAAgB,GAAG,QAAQ,iDAAiD;CAExF,MAAM,WAAqB,CAAC;CAC5B,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,UAAU,OAAO;EAC1B,IAAI,CAAC,OAAO,cAAc,MAAM,KAAK,SAAS,OAAO,SAAS,KAC5D,MAAM,IAAI,gBACR,GAAG,QAAQ,uEACb;EAEF,IAAI,KAAK,IAAI,MAAM,GACjB,MAAM,IAAI,gBAAgB,GAAG,QAAQ,2CAA2C;EAElF,KAAK,IAAI,MAAM;EACf,SAAS,KAAK,MAAM;CACtB;CACA,OAAO,OAAO,OAAO,QAAQ;AAC/B;AAEA,SAASA,kBAAgB,OAAgB,UAAkB,SAAyB;CAClF,MAAM,SAAS,SAAS;CACxB,IAAI,OAAO,WAAW,YAAY,CAAC,OAAO,cAAc,MAAM,KAAK,SAAS,GAC1E,MAAM,IAAI,gBAAgB,GAAG,QAAQ,iCAAiC;CAExE,OAAO;AACT;AAEA,SAAS,aAAa,OAAgB,UAAkB,SAAyB;CAC/E,MAAM,SAAS,SAAS;CACxB,IACE,OAAO,WAAW,YAClB,CAAC,OAAO,cAAc,MAAM,KAC5B,SAAS,KACT,SAAS,gBAET,MAAM,IAAI,gBACR,GAAG,QAAQ,sDAAsD,gBACnE;CAEF,OAAO;AACT;;;;;;;;;;;;;;;;ACrGA,SAAgB,gBAAgB,OAA+C;CAC7E,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,MAAM,KAAK,MAAM,KAAK;CACtB,OAAO,GAAG,SAAS,KAAK,CAAC,qBAAqB,EAAE,IAAI,KAAK,KAAA;AAC3D;;AAGA,SAAgB,qBAAqB,OAAoC;CACvE,OAAO,OAAO,KAAK,MAAM;AAC3B;;AAGA,SAAgB,qBAAqB,SAA0D;CAC7F,OAAO,gBAAgB,QAAQ,OAAO,OAAO;AAC/C;;;AAIA,SAAgB,qBAAqB,SAA0D;CAC7F,OAAO,qBAAqB,OAAO;AACrC;;AAGA,SAAgB,uBACd,SACoB;CACpB,MAAM,QAAQ,qBAAqB,OAAO;CAC1C,MAAM,WAAW,QAAQ,OAAO;CAChC,MAAM,UAAU,aAAa,QAAQ,OAAO;CAC5C,MAAM,sBACJ,SAAS,WAAW,MAAM,WAAW,GAAG,QAAQ,EAAE,IAAI,MAAM,MAAM,QAAQ,SAAS,CAAC,IAAI;CAC1F,MAAM,gBAAgB,sBAClB,YAAY,CAAC,oBAAoB,WAAW,GAAG,SAAS,EAAE,IACxD,GAAG,SAAS,GAAG,wBACf,sBACF,KAAA;CACJ,IAAI,CAAC,SAAS,OAAO;CACrB,IAAI,CAAC,eAAe,OAAO;CAC3B,OAAO,cAAc,WAAW,GAAG,QAAQ,EAAE,IAAI,gBAAgB,GAAG,QAAQ,GAAG;AACjF;;;;;;;AAQA,SAAgB,6BAA6B,SAAuB,SAAuB;CACzF,IAAI,QAAQ,YAAY,KAAA,GACtB,MAAM,IAAI,YAAY,GAAG,QAAQ,yDAAyD;CAE5F,MAAM,WAAW,QAAQ,OAAO;CAEhC,IAAI,CADU,gBAAgB,QACrB,GAEP,MAAM,IAAI,YACR,GAAG,QAAQ,kCAFE,qBAAqB,QAAQ,IAAI,qBAAqB,UAEf,sCACtD;CAEF,IAAI,CAAC,QAAQ,OAAO,UAAU,KAAK,GACjC,MAAM,IAAI,YACR,GAAG,QAAQ,gEACb;AAEJ;AAeA,MAAM,8CAA8B,IAAI,IAAI;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;AAMD,SAAgB,8BACd,SACA,SAC+B;CAC/B,MAAM,WAAW,QAAQ,OAAO,YAAY,CAAC;CAC7C,MAAM,UAAU,OAAO,KAAK,QAAQ,CAAC,CAAC,QAAQ,QAAQ,CAAC,4BAA4B,IAAI,GAAG,CAAC;CAC3F,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,YACR,GAAG,QAAQ,oDAAoD,QAAQ,KAAK,IAAI,GAClF;CAEF,MAAM,cAAc,aAAa,SAAS,aAAa,GAAG,QAAQ,cAAc;CAChF,MAAM,YAAY,gBAAgB,SAAS,WAAW,GAAG,QAAQ,YAAY;CAC7E,MAAM,aAAa,SAAS;CAC5B,MAAM,QACJ,eAAe,KAAA,IACX,KAAA,IACA,yBAAyB,YAAY,GAAG,QAAQ,oCAAoC;CAC1F,MAAM,OAAO,YAAY,SAAS,MAAM,GAAG,QAAQ,OAAO;CAC1D,MAAM,WAAW,mBAAmB,SAAS,UAAU,GAAG,QAAQ,WAAW;CAC7E,MAAM,SAAS,gBAAgB,SAAS,QAAQ,GAAG,QAAQ,SAAS;CACpE,MAAM,aAAa,SAAS;CAC5B,IACE,eAAe,KAAA,KACf,eAAe,UACf,eAAe,cACf,eAAe,QAEf,MAAM,IAAI,YAAY,GAAG,QAAQ,6CAA6C;CAEhF,MAAM,YAAY,SAAS;CAC3B,IACE,cAAc,KAAA,MACb,OAAO,cAAc,YAAY,cAAc,QAAQ,MAAM,QAAQ,SAAS,IAE/E,MAAM,IAAI,YAAY,GAAG,QAAQ,8BAA8B;CAEjE,OAAO;EACL,GAAI,gBAAgB,KAAA,IAAY,EAAE,YAAY,IAAI,CAAC;EACnD,GAAI,cAAc,KAAA,IAAY,EAAE,UAAU,IAAI,CAAC;EAC/C,GAAI,UAAU,KAAA,IAAY,EAAE,MAAM,IAAI,CAAC;EACvC,GAAI,SAAS,KAAA,IAAY,EAAE,KAAK,IAAI,CAAC;EACrC,GAAI,eAAe,KAAA,IAAY,EAAE,WAAW,IAAI,CAAC;EACjD,GAAI,cAAc,KAAA,IACd,EAAE,WAAW,OAAO,OAAO,EAAE,GAAI,UAAsC,CAAC,EAAE,IAC1E,CAAC;EACL,GAAI,aAAa,KAAA,IAAY,EAAE,SAAS,IAAI,CAAC;EAC7C,GAAI,WAAW,KAAA,IAAY,EAAE,OAAO,IAAI,CAAC;CAC3C;AACF;AAEA,SAAS,aAAa,OAAgB,SAAqC;CACzE,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GACrD,MAAM,IAAI,YAAY,GAAG,QAAQ,yBAAyB;CAE5D,OAAO;AACT;AAEA,SAAS,YAAY,OAAgB,SAAqC;CACxE,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,OAAO,cAAc,KAAK,GAAG,MAAM,IAAI,YAAY,GAAG,QAAQ,wBAAwB;CAC3F,OAAO;AACT;AAEA,SAAS,gBAAgB,OAAgB,SAAqC;CAC5E,MAAM,SAAS,YAAY,OAAO,OAAO;CACzC,IAAI,WAAW,KAAA,KAAa,SAAS,GACnC,MAAM,IAAI,YAAY,GAAG,QAAQ,kBAAkB;CAErD,OAAO;AACT;AAEA,SAAS,mBAAmB,OAAgB,SAAqC;CAC/E,MAAM,SAAS,YAAY,OAAO,OAAO;CACzC,IAAI,WAAW,KAAA,KAAa,SAAS,GACnC,MAAM,IAAI,YAAY,GAAG,QAAQ,qBAAqB;CAExD,OAAO;AACT;AAEA,SAAS,gBAAgB,OAAgB,SAAsC;CAC7E,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,OAAO,UAAU,WAAW,MAAM,IAAI,YAAY,GAAG,QAAQ,iBAAiB;CAClF,OAAO;AACT;;;;;;AAOA,SAAgB,mBACd,OACA,SACM;CACN,IAAI,CAAC,WAAW,UAAU,KAAA,GAAW;CACrC,IAAI,CAAC,QAAQ,SAAS,KAAK,GACzB,MAAM,IAAI,YACR,SAAS,KAAK,UAAU,KAAK,EAAE,6BAA6B,KAAK,UAAU,CAAC,GAAG,OAAO,CAAC,GACzF;AAEJ;;;AAIA,SAAgB,2BACd,SACA,SACM;CACN,mBAAmB,QAAQ,OAAO,SAAS,OAAO;CAClD,mBAAmB,QAAQ,OAAO,OAAO,OAAO;CAChD,KAAK,MAAM,YAAY,OAAO,OAAO,QAAQ,aAAa,CAAC,CAAC,GAC1D,mBAAmB,SAAS,OAAO,OAAO;CAE5C,KAAK,MAAM,QAAQ,OAAO,OAAO,QAAQ,SAAS,CAAC,CAAC,GAClD,mBAAmB,KAAK,OAAO,OAAO;AAE1C"}