@te-river/opencode-team-mode 1.6.0 → 1.6.1

package/dist/host/v2-session-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-session-client.js","sourceRoot":"","sources":["../../src/host/v2-session-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AA6BH;;gEAEgE;AAChE,MAAM,MAAM,GAA6C;IACvD,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;CAC3B,CAAA;AAED,SAAS,IAAI,CAAC,IAAa;IACzB,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA6F,CAAA;IAClH,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;AACvE,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACzD,MAAM,GAAG,GAAG,KAAgC,CAAA;IAC5C,sFAAsF;IACtF,4FAA4F;IAC5F,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC;YAC1G,OAAO,IAA+B,CAAA;QACxC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;yCAMyC;AACzC,MAAM,UAAU,wBAAwB,CAAC,IAAa;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACrC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACvB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QAClD,MAAM,GAAG,GAAG,IAA+B,CAAA;QAC3C,IAAI,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAA;QACnF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;QACrB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAA;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;QACnC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAA;QACxD,MAAM,OAAO,GAAI,GAAG,CAAC,IAA0C,EAAE,OAAO,CAAA;QACxE,OAAO;YACL,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAC7E,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SAChC,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAAsB,MAAM,MAAM,GAA0B;QAC1G,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE;KAC5F,CAAA;IACD,MAAM,MAAM,GAAI,GAAsD,EAAE,OAAO,CAAA;IAE/E,MAAM,IAAI,GAAG,KAAK,EAAE,MAAyB,EAAE,GAAY,EAAoB,EAAE;QAC/E,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAA;QAC3B,IAAI,OAAO,EAAE,KAAK,UAAU;YAAE,OAAO,SAAS,CAAA;QAC9C,oFAAoF;QACpF,wEAAwE;QACxE,OAAO,MAAO,EAA+B,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjE,CAAC,CAAA;IAED,MAAM,MAAM,GAAG;QACb,OAAO,EAAE;YACP,GAAG,EAAE,KAAK,EAAE,IAAa,EAAE,EAAE;gBAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;gBACrB,MAAM,CAAC,SAAS,EAAE,CAAA;gBAClB,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;gBAC5D,MAAM,KAAK,GAAa,EAAE,CAAA;gBAC1B,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;oBACpC,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;wBACxC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;wBACvB,IAAI,GAAG,EAAE,CAAC;4BACR,MAAM,CAAC,QAAQ,EAAE,CAAA;4BACjB,MAAM,CAAC,SAAS,GAAG,KAAK,CAAA;4BACxB,MAAM,CAAC,YAAY,GAAG,EAAE,CAAA;4BACxB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAA;4BAC5C,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAA;wBAC9F,CAAC;wBACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;oBACnB,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;wBACjB,MAAM,CAAC,SAAS,GAAG,MAAM,CAAE,GAA6B,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;oBACzF,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,YAAY,GAAG,KAAK,CAAA;gBAC3B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;YAC5B,CAAC;YAED;;;;;;;;;iDASqC;YACrC,QAAQ,EAAE,KAAK,EAAE,IAAa,EAAE,EAAE;gBAChC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;gBACrB,IAAI,CAAC,EAAE,IAAI,OAAO,MAAM,EAAE,OAAO,KAAK,UAAU;oBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;gBAC5E,MAAM,CAAC,YAAY,EAAE,CAAA;gBACrB,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAA;oBACpD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;oBACvB,IAAI,CAAC,GAAG;wBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;oBACpC,MAAM,CAAC,SAAS,EAAE,CAAA;oBAClB,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;oBACnF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAA;oBACzE,OAAO,EAAE,IAAI,EAAE,wBAAwB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,qBAAqB,EAAE,CAAA;gBAC7E,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,YAAY,GAAG,MAAM,CAAE,GAA6B,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;oBAC1F,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;gBAC5B,CAAC;YACH,CAAC;SACF;KACF,CAAA;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AAC3B,CAAC"}

package/dist/host/v2-session.d.ts

@@ -0,0 +1,85 @@
+/**
+ * The v2 session-request layer (goal #4 and #6 of the product).
+ *
+ * Three things that v1 could only approximate, because 1.18.x gave a plugin one
+ * mutable slot before execution and no way to touch an assembled request:
+ *
+ *  1. the tool surface.  v1's whitelist was enforced by permission DENY, which
+ *     stops a call but leaves the tool's description and schema in EVERY request
+ *     — the model pays ~9.5K tokens for thirteen governed tools plus the native
+ *     catalog it is forbidden to use.  `session.hook("context")` can `delete
+ *     event.tools.<name>`, so the whitelist finally decides what the model sees.
+ *  2. `temperature`.  It is a documented legacy agent field on v2 (and the
+ *     runner "preserves these values but does not yet send them"), so the
+ *     all-agents-0.2 invariant has to be set on the outgoing request instead.
+ *  3. the blackboard root.  v1 appended the resolved path to the team prompt at
+ *     config time; a v2 agent is a config FILE, which cannot carry a
+ *     per-workspace path, so it goes on the request.
+ *
+ * Everything here is additive and reversible: each hook returns a disposable
+ * registration, and nothing is claimed that the host did not hand us.
+ */
+import type { V2Registration, V2Context } from "./v2-types.js";
+/** Sentinel for "this role may not browse at all" — it removes the host's whole
+ *  browser catalog (45 `browser_*` tools on 2.0.16), not just our own door.
+ *  Leaving them in would hand back, at the request layer, exactly the surface the
+ *  whitelist exists to withhold. */
+export declare const BROWSER_CATALOG = "browser_*";
+/**
+ * The tools one agent must never be offered.  Only a literal `deny` removes:
+ * the `{ "*": "ask" }` object form means "callable, gated", and deleting such a
+ * tool would silently drop a capability the matrix grants with a dialog.
+ *
+ * `read`/`grep`/`glob` are exempted by name (`V2_LADDER_ACTIONS`), which is the
+ * other half of the `tm_read`/`tm_grep`/`tm_bash` retirement: v1 denied the
+ * native file tools because the governed aliases existed, and on v2 those
+ * aliases are not registered, so honouring the deny here would leave a role with
+ * no way to open a file at all.  Nothing is lost by letting them ride — the path
+ * scope P2 enforced in code is the host's own `external_directory` action, which
+ * was observed live answering `effect:"ask"` with a real `permission.asked`
+ * behind it, i.e. a dialog instead of a hard throw.
+ */
+export declare function toolsToRemove(permission: Record<string, unknown> | undefined | null): string[];
+/** Built once per agent id so the hook body stays a set lookup on a hot path. */
+export declare function removalPlan(agents: Record<string, {
+    permission?: Record<string, unknown>;
+}>): Map<string, Set<string>>;
+export interface SessionLayerInput {
+    /** 0 disables the temperature write entirely (the host's model default wins). */
+    temperature: number | false;
+    /** The resolved blackboard addendum, or "" when there is nothing to say. */
+    note: string;
+    /** Which agent ids receive the note — v1 gave it to the lead only. */
+    noteAgents: string[];
+    plan: Map<string, Set<string>>;
+    /** Team-scope isolation (#22).  `session.context` fires for EVERY agent on the
+     *  host, so temperature, the board note and the compaction survival list are
+     *  writes to somebody else's request unless the agent is one of ours.  The tool
+     *  trim is already keyed by agent (a foreign role is not in the plan, so nothing
+     *  is deleted); this closes the other three. */
+    scope?: import("./v2-scope.js").TeamScope;
+}
+export interface SessionLayerReport {
+    temperature: number | false;
+    removed: Record<string, number>;
+    notePushed: boolean;
+    compactionLines: number;
+    /** Did a `tm_*` name ever appear in an assembled request's own tool surface?
+     *  This is the only evidence that direct delivery happened: `options.codemode:false`
+     *  is what WE send, and a live 2.0.16 session proved the host still put every
+     *  `tm_*` in the Code Mode catalog ("They cannot be called directly…") while the
+     *  model's own callable list was nine native tools. Reporting the sent flag as if it
+     *  were the outcome is the overstated claim this product exists to refuse. */
+    tmInRequestSurface: boolean;
+}
+/**
+ * Register the request-layer hooks.  Returns the registrations (so the caller
+ * can dispose them) and a live report object — the counts are read off what the
+ * hooks actually did, not off what the matrix intends, because "we trimmed the
+ * surface" is a claim the user can only check against the request.
+ */
+export declare function applyV2SessionLayer(ctx: V2Context, input: SessionLayerInput): Promise<{
+    registrations: V2Registration[];
+    report: SessionLayerReport;
+}>;
+//# sourceMappingURL=v2-session.d.ts.map

package/dist/host/v2-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-session.d.ts","sourceRoot":"","sources":["../../src/host/v2-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAoB,SAAS,EAAE,MAAM,eAAe,CAAA;AAUhF;;;oCAGoC;AACpC,eAAO,MAAM,eAAe,cAAc,CAAA;AAI1C;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,EAAE,CAyB9F;AAED,iFAAiF;AACjF,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,GAC/D,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAI1B;AAKD,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,WAAW,EAAE,MAAM,GAAG,KAAK,CAAA;IAC3B,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9B;;;;oDAIgD;IAChD,KAAK,CAAC,EAAE,OAAO,eAAe,EAAE,SAAS,CAAA;CAC1C;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,GAAG,KAAK,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,UAAU,EAAE,OAAO,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB;;;;;kFAK8E;IAC9E,kBAAkB,EAAE,OAAO,CAAA;CAC5B;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC;IAAE,aAAa,EAAE,cAAc,EAAE,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC,CAgF1E"}

package/dist/host/v2-session.js

@@ -0,0 +1,171 @@
+/**
+ * The v2 session-request layer (goal #4 and #6 of the product).
+ *
+ * Three things that v1 could only approximate, because 1.18.x gave a plugin one
+ * mutable slot before execution and no way to touch an assembled request:
+ *
+ *  1. the tool surface.  v1's whitelist was enforced by permission DENY, which
+ *     stops a call but leaves the tool's description and schema in EVERY request
+ *     — the model pays ~9.5K tokens for thirteen governed tools plus the native
+ *     catalog it is forbidden to use.  `session.hook("context")` can `delete
+ *     event.tools.<name>`, so the whitelist finally decides what the model sees.
+ *  2. `temperature`.  It is a documented legacy agent field on v2 (and the
+ *     runner "preserves these values but does not yet send them"), so the
+ *     all-agents-0.2 invariant has to be set on the outgoing request instead.
+ *  3. the blackboard root.  v1 appended the resolved path to the team prompt at
+ *     config time; a v2 agent is a config FILE, which cannot carry a
+ *     per-workspace path, so it goes on the request.
+ *
+ * Everything here is additive and reversible: each hook returns a disposable
+ * registration, and nothing is claimed that the host did not hand us.
+ */
+import { COMPACTION_CONTEXT } from "../host-hooks.js";
+import { V2_LADDER_ACTIONS } from "./v2-permissions.js";
+/** v1 named three built-in tools differently from v2's tool ids.  Anything not
+ *  listed is already spelled the same on both sides. */
+const TOOL_RENAMES = {
+    bash: "shell",
+    task: "subagent",
+    apply_patch: "patch",
+};
+/** Sentinel for "this role may not browse at all" — it removes the host's whole
+ *  browser catalog (45 `browser_*` tools on 2.0.16), not just our own door.
+ *  Leaving them in would hand back, at the request layer, exactly the surface the
+ *  whitelist exists to withhold. */
+export const BROWSER_CATALOG = "browser_*";
+const isDeny = (value) => value === "deny";
+/**
+ * The tools one agent must never be offered.  Only a literal `deny` removes:
+ * the `{ "*": "ask" }` object form means "callable, gated", and deleting such a
+ * tool would silently drop a capability the matrix grants with a dialog.
+ *
+ * `read`/`grep`/`glob` are exempted by name (`V2_LADDER_ACTIONS`), which is the
+ * other half of the `tm_read`/`tm_grep`/`tm_bash` retirement: v1 denied the
+ * native file tools because the governed aliases existed, and on v2 those
+ * aliases are not registered, so honouring the deny here would leave a role with
+ * no way to open a file at all.  Nothing is lost by letting them ride — the path
+ * scope P2 enforced in code is the host's own `external_directory` action, which
+ * was observed live answering `effect:"ask"` with a real `permission.asked`
+ * behind it, i.e. a dialog instead of a hard throw.
+ */
+export function toolsToRemove(permission) {
+    const names = [];
+    for (const [key, value] of Object.entries(permission ?? {})) {
+        if (!isDeny(value))
+            continue;
+        if (key === "tm_browser") {
+            // Both doors go: our own tool AND the host's catalog. Removing only
+            // tm_browser would leave 45 native browser tools in the request, which is
+            // the exact surface the whitelist withholds.
+            names.push(BROWSER_CATALOG);
+        }
+        // A `tm_*` key IS a tool name, so a DENY on one has to remove it too —
+        // leaving the denied doors in the request would keep charging the model for
+        // tools this role may not touch, which is the whole tax this layer exists
+        // to stop.  The `tm_*` wildcard itself is an allow; if it ever read "deny",
+        // deleting a tool literally named `tm_*` is a no-op.
+        const action = TOOL_RENAMES[key] ?? key;
+        if (V2_LADDER_ACTIONS.has(action))
+            continue;
+        names.push(action);
+        // tm_ledger is v2-only and the frozen v1 matrix cannot name it, so the lead
+        // marker carries the denial: a role that may not `tm_join` is a role that does
+        // not own the list.  Leaving it offered would charge every specialist for a
+        // tool that refuses them at execute — the tax this layer exists to remove.
+        if (key === "tm_join")
+            names.push("tm_ledger");
+    }
+    return [...new Set(names)];
+}
+/** Built once per agent id so the hook body stays a set lookup on a hot path. */
+export function removalPlan(agents) {
+    const plan = new Map();
+    for (const [id, cfg] of Object.entries(agents))
+        plan.set(id, new Set(toolsToRemove(cfg?.permission)));
+    return plan;
+}
+const removable = (name, denied) => denied.has(name) || (denied.has(BROWSER_CATALOG) && name.startsWith("browser_"));
+/**
+ * Register the request-layer hooks.  Returns the registrations (so the caller
+ * can dispose them) and a live report object — the counts are read off what the
+ * hooks actually did, not off what the matrix intends, because "we trimmed the
+ * surface" is a claim the user can only check against the request.
+ */
+export async function applyV2SessionLayer(ctx, input) {
+    const registrations = [];
+    const report = {
+        temperature: input.temperature,
+        removed: {},
+        notePushed: false,
+        compactionLines: 0,
+        tmInRequestSurface: false,
+    };
+    const session = ctx.session;
+    if (!session || typeof session.hook !== "function") {
+        return { registrations, report };
+    }
+    // Property-access calls, never a captured reference — a detached `hook` loses
+    // its receiver and the host's client throws (see the §10 rule in dispatch.ts).
+    registrations.push(await session.hook("context", (event) => {
+        const agent = String(event?.agent ?? "");
+        // Anything below this line MUTATES the outgoing request.  On a host where
+        // one plugin serves every agent, an unguarded write here would set a build
+        // session's temperature, push our board note into a plan session's system
+        // prompt, and delete tools the user's own config granted (#22).
+        if (input.scope && input.scope.count(input.scope.decide(event)) !== "ours")
+            return;
+        input.scope?.learn(agent, event.sessionID);
+        const denied = input.plan.get(agent);
+        if (denied?.size && event.tools && typeof event.tools === "object") {
+            let cut = 0;
+            for (const name of Object.keys(event.tools)) {
+                if (!removable(name, denied))
+                    continue;
+                delete event.tools[name];
+                cut++;
+            }
+            if (cut)
+                report.removed[agent] = (report.removed[agent] ?? 0) + cut;
+        }
+        // The observation that settles the delivery question: whatever is left in the
+        // request's own tool map is what the model can call directly. A `tm_*` name
+        // appearing here means direct delivery worked; never appearing means the host
+        // kept our tools in the Code Mode catalog regardless of `options.codemode`.
+        if (event.tools && typeof event.tools === "object") {
+            for (const name of Object.keys(event.tools)) {
+                if (name.startsWith("tm_")) {
+                    report.tmInRequestSurface = true;
+                    break;
+                }
+            }
+        }
+        if (input.temperature !== false && event.options && typeof event.options === "object") { // Only fill it when the request carries none: a per-session model variant
+            // the user chose outranks our invariant.
+            if (event.options.temperature === undefined)
+                event.options.temperature = input.temperature;
+        }
+        if (input.note && input.noteAgents.includes(agent) && Array.isArray(event.system)) {
+            // The hook runs before EVERY model call; if the host reuses the array,
+            // an unguarded push would repeat the note until it crowds out the work.
+            const already = event.system.some((p) => typeof p?.text === "string" && p.text.includes("## Team Blackboard"));
+            if (!already) {
+                event.system.push({ type: "text", text: input.note });
+                report.notePushed = true;
+            }
+        }
+    }));
+    registrations.push(await session.hook("compaction", (event) => {
+        if (input.scope && input.scope.count(input.scope.decide(event)) !== "ours")
+            return;
+        if (!Array.isArray(event?.system))
+            return;
+        for (const line of COMPACTION_CONTEXT) {
+            if (event.system.some((p) => p?.text === line))
+                continue;
+            event.system.push({ type: "text", text: line });
+            report.compactionLines++;
+        }
+    }));
+    return { registrations, report };
+}
+//# sourceMappingURL=v2-session.js.map

package/dist/host/v2-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-session.js","sourceRoot":"","sources":["../../src/host/v2-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAGvD;wDACwD;AACxD,MAAM,YAAY,GAAqC;IACrD,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,OAAO;CACrB,CAAA;AAED;;;oCAGoC;AACpC,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAA;AAE1C,MAAM,MAAM,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,KAAK,KAAK,MAAM,CAAA;AAE5D;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAAC,UAAsD;IAClF,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,SAAQ;QAC5B,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;YACzB,oEAAoE;YACpE,0EAA0E;YAC1E,6CAA6C;YAC7C,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAC7B,CAAC;QACD,uEAAuE;QACvE,4EAA4E;QAC5E,0EAA0E;QAC1E,4EAA4E;QAC5E,qDAAqD;QACrD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,CAAA;QACvC,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAQ;QAC3C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAClB,4EAA4E;QAC5E,+EAA+E;QAC/E,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAI,GAAG,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5B,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,WAAW,CACzB,MAAgE;IAEhE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAA;IAC3C,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IACrG,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,MAAmB,EAAW,EAAE,CAC/D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAA;AAgClF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAc,EACd,KAAwB;IAExB,MAAM,aAAa,GAAqB,EAAE,CAAA;IAC1C,MAAM,MAAM,GAAuB;QACjC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,EAAE;QACX,UAAU,EAAE,KAAK;QACjB,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,KAAK;KAC1B,CAAA;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;IAC3B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACnD,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAA;IAClC,CAAC;IAED,8EAA8E;IAC9E,+EAA+E;IAC/E,aAAa,CAAC,IAAI,CAChB,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,KAAuB,EAAE,EAAE;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAA;QACxC,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,gEAAgE;QAChE,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,MAAM;YAAE,OAAM;QAClF,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAG,KAAiC,CAAC,SAAS,CAAC,CAAA;QACvE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,MAAM,EAAE,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnE,IAAI,GAAG,GAAG,CAAC,CAAA;YACX,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC;oBAAE,SAAQ;gBACtC,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBACxB,GAAG,EAAE,CAAA;YACP,CAAC;YACD,IAAI,GAAG;gBAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAA;QACrE,CAAC;QACD,8EAA8E;QAC9E,4EAA4E;QAC5E,8EAA8E;QAC9E,4EAA4E;QAC5E,IAAI,KAAK,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC3B,MAAM,CAAC,kBAAkB,GAAG,IAAI,CAAA;oBAChC,MAAK;gBACP,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC,CAAQ,0EAA0E;YACxK,yCAAyC;YACzC,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS;gBAAE,KAAK,CAAC,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAA;QAC5F,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAClF,uEAAuE;YACvE,wEAAwE;YACxE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,OAAQ,CAAwB,EAAE,IAAI,KAAK,QAAQ,IAAK,CAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAC1H,CAAA;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;gBACrD,MAAM,CAAC,UAAU,GAAG,IAAI,CAAA;YAC1B,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CACH,CAAA;IAED,aAAa,CAAC,IAAI,CAChB,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,KAAuB,EAAE,EAAE;QAC3D,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,MAAM;YAAE,OAAM;QAClF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;YAAE,OAAM;QACzC,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAwB,EAAE,IAAI,KAAK,IAAI,CAAC;gBAAE,SAAQ;YAChF,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/C,MAAM,CAAC,eAAe,EAAE,CAAA;QAC1B,CAAC;IACH,CAAC,CAAC,CACH,CAAA;IAED,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAA;AAClC,CAAC"}

package/dist/host/v2-subagent.d.ts

@@ -0,0 +1,157 @@
+/**
+ * The v2 host's own sub-agents, made collectable by `tm_join` (decision 4, 2026-09-26).
+ *
+ * What was broken: on v2 every dispatch goes through the host's `subagent` tool (v1's
+ * `tm_dispatch` is gone and the plugin forces `background:true`), so the child session
+ * was never entered into `tm_join`'s registry.  `tm_join` then answered 没有待收集的派发
+ * about work that was running on screen, a wait could never end, and the lead had to
+ * re-read the round from the injected message like a person paging through mail.  The
+ * event feed added in 1.7.x made this worse in the specific way goal #6 refuses: the
+ * dispatcher ignores a session id it has no record of, so a settled child produced
+ * silence that read as "nothing to report".
+ *
+ * Why these two hooks and not a session query: the v2 plugin ctx has no
+ * `session.children` and our `ctx.session.get` bridge has never resolved a shape on a
+ * live host, so a tree walk is not available.  What IS available is measured, from the
+ * user's own desktop session (`docs/research/host-subagent-injection.md`):
+ *
+ *   execute.before  subagent {agent, background, description, prompt}
+ *   execute.after   result.metadata = {sessionID:"ses_…", status:"running", truncated:false}
+ *                   result text     "The subagent is working in the background
+ *                                    (sessionID: ses_…). You will be notified…"
+ *   later, as a message the plugin never sees as a tool result:
+ *                   metadata {source:"subagent", childID:"ses_…", agent, state}
+ *                   text     <subagent sessionID="ses_…" state="completed" …>body</subagent>
+ *
+ * So the before hook supplies who and what-for, the after hook supplies the child's id,
+ * and the pairing is per CALLER session — a lead that fires three dispatches in one round
+ * gets three pending rows and pairs them oldest-first as the acks come back.
+ *
+ * The reply BODY is deliberately not promised: it reaches the parent as an injected
+ * message, not through this seam, so a registered child reports where its answer comes
+ * from instead of pretending we can fetch it.  Claiming to hold a report we never read
+ * is the defect this product exists to refuse.
+ *
+ * Privacy: the trajectory records the child id and the agent name only — never the
+ * description or the prompt (R6 binds a diagnostic as much as a guard).
+ */
+import type { V2Registration } from "./v2-types.js";
+import type { TeamScope } from "./v2-scope.js";
+/** A dispatch we saw being made, waiting for its ack. */
+export interface PendingDispatch {
+    agent: string;
+    label: string;
+    at: number;
+}
+/** What `tm_join` needs to open a row for a child it did not dispatch itself. */
+export interface HostChildInput {
+    sessionID: string;
+    parentSessionID: string;
+    agent: string;
+    label: string;
+}
+/** How many unclaimed acks one caller may have in flight before we stop guessing which
+ *  `description` belongs to which child.  Past this the child is registered with a
+ *  generic label rather than a possibly-wrong one. */
+export declare const PENDING_PER_CALLER = 8;
+/** Read the dispatch out of the tool input (the host's `execute.before` field is
+ *  `input`, and it IS the argument object).  Returns null for anything that is not a
+ *  recognisable `subagent` call — a non-object input is left alone, never invented. */
+export declare function pendingDispatchOf(raw: unknown, at?: number): PendingDispatch | null;
+/** The child's session id, from the two places the host puts it (measured).  A
+ *  synchronous child DOES have a `metadata.sessionID` — the host always sets
+ *  `{sessionID, status}` — but its `status` is already `completed` and its content IS the
+ *  reply, so there is nothing to
+ *  collect and null is the correct answer, not a failure. */
+export declare function hostChildIdOf(result: unknown): string | null;
+/** True when the ack says the child is still open — i.e. worth registering.  Read from
+ *  the host's own code (2.0.18): the `subagent` result always carries
+ *  `metadata:{sessionID, status}`, and a SYNCHRONOUS child arrives with
+ *  `status:"completed"` and the body itself, so there is nothing left to collect.  A
+ *  `status` we do not recognise registers anyway, because a missed child costs the lead a
+ *  whole round while a spurious row only costs a line in a table. */
+export declare function hostChildIsOpen(result: unknown): boolean;
+export interface SubagentRegistryReport {
+    /** `subagent` calls seen on a Team session */
+    seen: number;
+    /** children actually opened in tm_join's registry */
+    registered: number;
+    /** acks that carried no child id at all */
+    noChildId: number;
+    /** acks that arrived with the child ALREADY completed — a synchronous `subagent` call,
+     *  whose result is the body itself, so there is nothing for tm_join to collect */
+    settledAtOnce: number;
+    /** acks that arrived with nothing pending to pair them with */
+    unpaired: number;
+    /** children registered with a generic label because the caller had >PENDING_PER_CALLER
+     *  in flight, so pairing would have been a guess */
+    labelGuessed: number;
+}
+export interface V2SubagentRegistry {
+    registrations: Promise<V2Registration>[];
+    report: SubagentRegistryReport;
+    active: boolean;
+}
+/** The host's own completion envelope, in either generation's spelling. Returns the child
+ *  id and the state the host asserted, or null when the text is not an injection.
+ *  `[B]` 2.0.18 builds the wrapper as `<subagent sessionID="…" state="completed" …>`; v1
+ *  used `<task id="…" state="completed">`. Both are matched because a plugin reload can
+ *  serve a session whose history contains either. */
+export declare function completionFromText(text: string): {
+    sessionID: string;
+    state: string;
+} | null;
+export interface CompletionWatchReport {
+    /** times the seam fired on a Team session */
+    contextFired: number;
+    promptFired: number;
+    /** envelopes recognised */
+    seen: number;
+    /** children actually settled through this path */
+    settled: number;
+    /** scans skipped because nothing was open (the cheap path) */
+    skipped: number;
+}
+/**
+ * The settle path for a child the plugin never created (#31, 2026-09-26).
+ *
+ * A live 2.0.18 round proved the two obvious paths do not work: the host does NOT forward a
+ * child session's `session.idle` to a plugin subscriber, and the parent-idle presumption
+ * cannot fire mid-turn because the parent is by definition busy while it works. So a
+ * background child whose full report had ALREADY been injected stayed 运行中 — goal #6's
+ * overstated claim wearing the opposite face.
+ *
+ * A second round then proved a hook can exist and still be the wrong one: `session.prompt`
+ * fired 0 times and `session.model.request` fired 6 but carried no messages at all (the
+ * message list is assembled separately from that payload). The seam that DOES carry the
+ * parent's history is `session.hook("context")` — the same one the request trim and the
+ * probe read, and the one whose `messages` the probe counted at 8 in that round.
+ *
+ * So: watch `context`, and only when something is actually open. The scan is O(messages)
+ * per request, which is a real cost on a long-lived lead session, so an idle registry skips
+ * it entirely and the skip is counted — "we did not look because there was nothing to look
+ * for" stays distinguishable from "we looked and saw nothing".
+ *
+ * `session.prompt` is kept registered and counted as well: it costs nothing, and if a future
+ * host routes the injection through it, the counter is where we would learn that.
+ */
+export declare function applyV2CompletionWatch(ctx: unknown, deps: {
+    /** Settle the named child if this process knows it. Returns false when the id is not
+     *  registered (somebody else's session, or already settled) — never an error. */
+    settle: (sessionID: string, state: string) => boolean;
+    /** Anything still open? When this says no, the scan is skipped. */
+    hasOpen?: () => boolean;
+    scope?: TeamScope;
+}): {
+    registrations: Promise<V2Registration>[];
+    report: CompletionWatchReport;
+    active: boolean;
+};
+export declare function applyV2SubagentRegistry(ctx: unknown, deps: {
+    /** Open a row in tm_join's registry.  Returns false when the child is already known
+     *  (a plugin reload replays hooks) or the id is the caller's own session. */
+    register: (child: HostChildInput) => boolean;
+    scope?: TeamScope;
+    now?: () => number;
+}): V2SubagentRegistry;
+//# sourceMappingURL=v2-subagent.d.ts.map

package/dist/host/v2-subagent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-subagent.d.ts","sourceRoot":"","sources":["../../src/host/v2-subagent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAE9C,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,EAAE,EAAE,MAAM,CAAA;CACX;AAED,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,eAAe,EAAE,MAAM,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;sDAEsD;AACtD,eAAO,MAAM,kBAAkB,IAAI,CAAA;AAEnC;;uFAEuF;AACvF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,GAAE,MAAmB,GAAG,eAAe,GAAG,IAAI,CAO/F;AAED;;;;6DAI6D;AAC7D,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAgB5D;AAED;;;;;qEAKqE;AACrE,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAGxD;AAED,MAAM,WAAW,sBAAsB;IACrC,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAA;IACZ,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAA;IAClB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAA;IACjB;sFACkF;IAClF,aAAa,EAAE,MAAM,CAAA;IACrB,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAA;IAChB;wDACoD;IACpD,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,CAAA;IACxC,MAAM,EAAE,sBAAsB,CAAA;IAC9B,MAAM,EAAE,OAAO,CAAA;CAChB;AAED;;;;qDAIqD;AACrD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAG5F;AA6BD,MAAM,WAAW,qBAAqB;IACpC,6CAA6C;IAC7C,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,kDAAkD;IAClD,OAAO,EAAE,MAAM,CAAA;IACf,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE;IACJ;qFACiF;IACjF,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAA;IACrD,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,OAAO,CAAA;IACvB,KAAK,CAAC,EAAE,SAAS,CAAA;CAClB,GACA;IAAE,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAiC9F;AAED,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE;IACJ;iFAC6E;IAC7E,QAAQ,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAA;IAC5C,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB,GACA,kBAAkB,CA8EpB"}