@telora/daemon 0.19.3 → 0.19.6

package/build-info.json

@@ -1,6 +1,6 @@
 {
-  "commitSha": "99cad9d2c",
-  "builtAt": "2026-06-28T10:43:22.563Z",
+  "commitSha": "4523841b3",
+  "builtAt": "2026-06-28T15:29:31.449Z",
   "expectedMigrations": [
     "20250829113330_create_org_nodes_table.sql",
     "20250829113402_fix_function_security_search_path.sql",
@@ -687,6 +687,7 @@
     "20260626201457_seed_builtin_stage_models_opus.sql",
     "20260626204927_local_model_sizing_metadata.sql",
     "20260627124000_local_model_sizing_metadata_writes.sql",
-    "20260627231555_normalize_focus_coding_mcp_tools.sql"
+    "20260627231555_normalize_focus_coding_mcp_tools.sql",
+    "20260628140456_loop_review_watermark_and_proposals.sql"
   ]
 }

package/dist/backends/codex/codex-mcp-proxy.d.ts

@@ -0,0 +1,128 @@
+/**
+ * Localhost translating proxy for local-model (OSS) Codex Responses traffic.
+ *
+ * Codex serializes each MCP server as one `type:"namespace"` Responses tool;
+ * OSS inference servers (llama-server) drop that tool type, so the model never
+ * sees Telora MCP tools (see namespace-bridge.ts + the runbook). This proxy is
+ * the localhost shim that bridges the gap for registered local-model passes
+ * ONLY -- hosted/cloud and Claude passes never route through it.
+ *
+ * Request path (model-bound, CERTAIN): the proxy buffers each `/responses`
+ * request, flattens `mcp__*` namespace tools into ordinary `function` tools via
+ * flattenNamespaceTools(), and forwards the rewritten body upstream so a
+ * namespace-incompatible server receives the Telora tool schemas.
+ *
+ * Response path (Codex-bound, CAPTURE-GATED): the upstream SSE stream is parsed
+ * and any flat `mcp__`-named function call is rewritten toward Codex's canonical
+ * namespace identity via normalizeToolCall(). The EXACT envelope Codex accepts
+ * is confirmed against a live OSS capture before routing is flipped on by
+ * default (runbook step 3); until then this stays opt-in and the rewrite is the
+ * single isolated place to pin once the capture lands.
+ *
+ * Reception guard: the proxy records whether any tools-bearing request it
+ * forwarded actually carried the required Telora control tools (after
+ * flattening). The spawn path reads getReceptionState() to fail a tool-less
+ * pass loud (durable session) instead of letting it silently loop.
+ *
+ * Binds 127.0.0.1 on an ephemeral port. Logs are redacted (no prompt content).
+ */
+/** Tools a local-model coding pass must be able to call to sync Telora state. */
+export declare const PROXY_REQUIRED_TOOLS: readonly ["telora_product_issue", "telora_product_delivery"];
+/**
+ * Env flag that opts a daemon into routing local-model passes through this
+ * proxy. OPT-IN (default off) until the response envelope is confirmed against a
+ * live OSS capture (runbook step 3) -- unlike the opt-OUT loop flags.
+ */
+export declare const LOCAL_MODEL_MCP_PROXY_FLAG = "TELORA_LOCAL_MODEL_MCP_PROXY";
+/**
+ * Pure decision: should this pass route through the translating proxy? True only
+ * for a registered local-model pass when the opt-in flag is truthy. A non-local
+ * pass (hosted/cloud/Claude) NEVER routes -- regardless of the flag -- so the
+ * hosted path is provably untouched.
+ *
+ * Opt-in semantics (inverse of shouldRunLoop): undefined/''/'0'/'false' -> off;
+ * any other value -> on.
+ */
+export declare function shouldRouteLocalModelThroughProxy(flagValue: string | undefined, isLocalModelPass: boolean): boolean;
+export interface ProxyReceptionState {
+    /** A request carrying a non-empty tools array was forwarded at least once. */
+    sawToolsRequest: boolean;
+    /** Every required Telora tool was present (after flattening) in such a request. */
+    requiredToolsDelivered: boolean;
+    /** Required tools observed missing from a tools-bearing request. */
+    missingTools: string[];
+}
+export interface CodexMcpProxyHandle {
+    /** Base URL to advertise to Codex as the provider base_url (mirrors upstream path). */
+    url: string;
+    port: number;
+    getReceptionState(): ProxyReceptionState;
+    close(): Promise<void>;
+}
+export interface StartProxyOptions {
+    /** The real OSS inference server base URL, e.g. http://10.1.1.x:8888/v1. */
+    upstreamBaseUrl: string;
+    requiredTools?: readonly string[];
+    /** Injected fetch (tests); defaults to global fetch. */
+    fetchImpl?: typeof fetch;
+    /** Injected logger (tests); defaults to console. */
+    logger?: {
+        log: (msg: string) => void;
+        warn: (msg: string) => void;
+    };
+}
+/**
+ * Decode the set of MCP sub-tools present in a (already-flattened) tools array.
+ * Plain built-in functions (non-mcp__ names) are ignored.
+ */
+export declare function decodeDeliveredTools(tools: unknown): Set<string>;
+/** Exit category for a pass whose required Telora tools never reached the model. */
+export declare const MCP_TOOLS_UNDELIVERED_EXIT_CATEGORY = "mcp_tools_undelivered";
+/**
+ * Durable terminal-session payload for a pass that ran without its Telora
+ * control surface. Same shape as the other session-update builders; kept in this
+ * neutral module so the close handler (spawner/helpers) can use it without a
+ * circular import on focus-executor.
+ */
+export declare function mcpToolsUndeliveredSessionUpdate(missingTools: readonly string[]): {
+    status: string;
+    exit_reason: string;
+    exit_category: string;
+};
+/**
+ * Pure decision: given a proxy's final reception state, should this pass be
+ * failed closed (durable) because the model never received its required Telora
+ * control tools? True only when a tools-bearing request was seen AND a required
+ * tool was missing -- a pass that simply never sent tools (no model turn) is not
+ * penalized. Drives mcpToolsUndeliveredSessionUpdate at team close.
+ */
+export declare function shouldFailClosedForUndeliveredTools(reception: ProxyReceptionState): {
+    fail: boolean;
+    missing: string[];
+};
+/**
+ * Update a reception state given the tools array of a freshly-flattened request.
+ * Only requests that actually carry tools count toward delivery (the first model
+ * turn carries the tool list; later turns may omit it). Pure; returned as a new
+ * object.
+ */
+export declare function updateReceptionState(prev: ProxyReceptionState, flattenedTools: unknown, requiredTools: readonly string[]): ProxyReceptionState;
+/**
+ * Rewrite a single decoded SSE event object: if it carries a flat `mcp__`
+ * function call, normalize it toward Codex's canonical namespace/tool identity.
+ * Returns the (possibly) rewritten object. CAPTURE-GATED shape -- see module
+ * header; pin here once the live envelope is confirmed.
+ */
+export declare function rewriteResponseEvent(event: unknown): unknown;
+/**
+ * Transform an SSE response chunk stream. Stateful over `data:` lines: each
+ * complete `data: {json}` line is parsed, run through rewriteResponseEvent, and
+ * re-serialized. Non-data lines and unparseable payloads pass through verbatim.
+ * Returns a function that consumes raw text chunks and returns transformed text.
+ */
+export declare function createSseTransformer(): (chunk: string) => string;
+/**
+ * Start the localhost translating proxy. Resolves once it is listening.
+ */
+export declare function startCodexMcpProxy(opts: StartProxyOptions): Promise<CodexMcpProxyHandle>;
+//# sourceMappingURL=codex-mcp-proxy.d.ts.map

package/dist/backends/codex/codex-mcp-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-mcp-proxy.d.ts","sourceRoot":"","sources":["../../../src/backends/codex/codex-mcp-proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAWH,iFAAiF;AACjF,eAAO,MAAM,oBAAoB,8DAA+D,CAAC;AAEjG;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,iCAAiC,CAAC;AAEzE;;;;;;;;GAQG;AACH,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,gBAAgB,EAAE,OAAO,GACxB,OAAO,CAIT;AAED,MAAM,WAAW,mBAAmB;IAClC,8EAA8E;IAC9E,eAAe,EAAE,OAAO,CAAC;IACzB,mFAAmF;IACnF,sBAAsB,EAAE,OAAO,CAAC;IAChC,oEAAoE;IACpE,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,uFAAuF;IACvF,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,IAAI,mBAAmB,CAAC;IACzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,4EAA4E;IAC5E,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,wDAAwD;IACxD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,oDAAoD;IACpD,MAAM,CAAC,EAAE;QAAE,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAAC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;CACtE;AAKD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAUhE;AAED,oFAAoF;AACpF,eAAO,MAAM,mCAAmC,0BAA0B,CAAC;AAE3E;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG;IACjF,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB,CASA;AAED;;;;;;GAMG;AACH,wBAAgB,mCAAmC,CACjD,SAAS,EAAE,mBAAmB,GAC7B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAGtC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,mBAAmB,EACzB,cAAc,EAAE,OAAO,EACvB,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B,mBAAmB,CASrB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CA4B5D;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAahE;AA0BD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA8FxF"}

package/dist/backends/codex/codex-mcp-proxy.js

@@ -0,0 +1,297 @@
+/**
+ * Localhost translating proxy for local-model (OSS) Codex Responses traffic.
+ *
+ * Codex serializes each MCP server as one `type:"namespace"` Responses tool;
+ * OSS inference servers (llama-server) drop that tool type, so the model never
+ * sees Telora MCP tools (see namespace-bridge.ts + the runbook). This proxy is
+ * the localhost shim that bridges the gap for registered local-model passes
+ * ONLY -- hosted/cloud and Claude passes never route through it.
+ *
+ * Request path (model-bound, CERTAIN): the proxy buffers each `/responses`
+ * request, flattens `mcp__*` namespace tools into ordinary `function` tools via
+ * flattenNamespaceTools(), and forwards the rewritten body upstream so a
+ * namespace-incompatible server receives the Telora tool schemas.
+ *
+ * Response path (Codex-bound, CAPTURE-GATED): the upstream SSE stream is parsed
+ * and any flat `mcp__`-named function call is rewritten toward Codex's canonical
+ * namespace identity via normalizeToolCall(). The EXACT envelope Codex accepts
+ * is confirmed against a live OSS capture before routing is flipped on by
+ * default (runbook step 3); until then this stays opt-in and the rewrite is the
+ * single isolated place to pin once the capture lands.
+ *
+ * Reception guard: the proxy records whether any tools-bearing request it
+ * forwarded actually carried the required Telora control tools (after
+ * flattening). The spawn path reads getReceptionState() to fail a tool-less
+ * pass loud (durable session) instead of letting it silently loop.
+ *
+ * Binds 127.0.0.1 on an ephemeral port. Logs are redacted (no prompt content).
+ */
+import { createServer } from 'node:http';
+import { flattenNamespaceTools, normalizeToolCall, decodeFlatToolName, redactRequestForLog, } from './namespace-bridge.js';
+/** Tools a local-model coding pass must be able to call to sync Telora state. */
+export const PROXY_REQUIRED_TOOLS = ['telora_product_issue', 'telora_product_delivery'];
+/**
+ * Env flag that opts a daemon into routing local-model passes through this
+ * proxy. OPT-IN (default off) until the response envelope is confirmed against a
+ * live OSS capture (runbook step 3) -- unlike the opt-OUT loop flags.
+ */
+export const LOCAL_MODEL_MCP_PROXY_FLAG = 'TELORA_LOCAL_MODEL_MCP_PROXY';
+/**
+ * Pure decision: should this pass route through the translating proxy? True only
+ * for a registered local-model pass when the opt-in flag is truthy. A non-local
+ * pass (hosted/cloud/Claude) NEVER routes -- regardless of the flag -- so the
+ * hosted path is provably untouched.
+ *
+ * Opt-in semantics (inverse of shouldRunLoop): undefined/''/'0'/'false' -> off;
+ * any other value -> on.
+ */
+export function shouldRouteLocalModelThroughProxy(flagValue, isLocalModelPass) {
+    if (!isLocalModelPass)
+        return false;
+    const v = (flagValue ?? '').trim().toLowerCase();
+    return v !== '' && v !== '0' && v !== 'false' && v !== 'off' && v !== 'no';
+}
+/**
+ * Decode the set of MCP sub-tools present in a (already-flattened) tools array.
+ * Plain built-in functions (non-mcp__ names) are ignored.
+ */
+export function decodeDeliveredTools(tools) {
+    const out = new Set();
+    if (!Array.isArray(tools))
+        return out;
+    for (const t of tools) {
+        if (t?.type === 'function' && typeof t.name === 'string') {
+            const decoded = decodeFlatToolName(t.name);
+            if (decoded)
+                out.add(decoded.tool);
+        }
+    }
+    return out;
+}
+/** Exit category for a pass whose required Telora tools never reached the model. */
+export const MCP_TOOLS_UNDELIVERED_EXIT_CATEGORY = 'mcp_tools_undelivered';
+/**
+ * Durable terminal-session payload for a pass that ran without its Telora
+ * control surface. Same shape as the other session-update builders; kept in this
+ * neutral module so the close handler (spawner/helpers) can use it without a
+ * circular import on focus-executor.
+ */
+export function mcpToolsUndeliveredSessionUpdate(missingTools) {
+    const missing = missingTools.length > 0 ? missingTools.join(', ') : '(unknown)';
+    return {
+        status: 'failed',
+        exit_reason: `Local-model pass ran without its Telora control surface: required tool(s) not delivered to the model: ${missing}. ` +
+            `Failing the pass durably instead of re-spawning into the same tool-less loop.`,
+        exit_category: MCP_TOOLS_UNDELIVERED_EXIT_CATEGORY,
+    };
+}
+/**
+ * Pure decision: given a proxy's final reception state, should this pass be
+ * failed closed (durable) because the model never received its required Telora
+ * control tools? True only when a tools-bearing request was seen AND a required
+ * tool was missing -- a pass that simply never sent tools (no model turn) is not
+ * penalized. Drives mcpToolsUndeliveredSessionUpdate at team close.
+ */
+export function shouldFailClosedForUndeliveredTools(reception) {
+    const fail = reception.sawToolsRequest && !reception.requiredToolsDelivered;
+    return { fail, missing: fail ? reception.missingTools : [] };
+}
+/**
+ * Update a reception state given the tools array of a freshly-flattened request.
+ * Only requests that actually carry tools count toward delivery (the first model
+ * turn carries the tool list; later turns may omit it). Pure; returned as a new
+ * object.
+ */
+export function updateReceptionState(prev, flattenedTools, requiredTools) {
+    if (!Array.isArray(flattenedTools) || flattenedTools.length === 0)
+        return prev;
+    const delivered = decodeDeliveredTools(flattenedTools);
+    const missing = requiredTools.filter(t => !delivered.has(t));
+    return {
+        sawToolsRequest: true,
+        requiredToolsDelivered: prev.requiredToolsDelivered || missing.length === 0,
+        missingTools: missing,
+    };
+}
+/**
+ * Rewrite a single decoded SSE event object: if it carries a flat `mcp__`
+ * function call, normalize it toward Codex's canonical namespace/tool identity.
+ * Returns the (possibly) rewritten object. CAPTURE-GATED shape -- see module
+ * header; pin here once the live envelope is confirmed.
+ */
+export function rewriteResponseEvent(event) {
+    if (!event || typeof event !== 'object')
+        return event;
+    const ev = event;
+    // Codex emits function calls as output items; rewrite any item whose name is
+    // a flat mcp__ name. Handle both a bare function_call item and a response that
+    // nests output items.
+    const rewriteItem = (item) => {
+        if (item.type === 'function_call' && typeof item.name === 'string') {
+            const canonical = normalizeToolCall({
+                name: item.name,
+                arguments: item.arguments,
+                call_id: typeof item.call_id === 'string' ? item.call_id : undefined,
+            });
+            if (canonical) {
+                item.name = canonical.name;
+                item.namespace = canonical.namespace;
+            }
+        }
+    };
+    if (ev.type === 'function_call')
+        rewriteItem(ev);
+    if (ev.item && typeof ev.item === 'object')
+        rewriteItem(ev.item);
+    const response = ev.response;
+    if (response && Array.isArray(response.output)) {
+        for (const item of response.output) {
+            if (item && typeof item === 'object')
+                rewriteItem(item);
+        }
+    }
+    return ev;
+}
+/**
+ * Transform an SSE response chunk stream. Stateful over `data:` lines: each
+ * complete `data: {json}` line is parsed, run through rewriteResponseEvent, and
+ * re-serialized. Non-data lines and unparseable payloads pass through verbatim.
+ * Returns a function that consumes raw text chunks and returns transformed text.
+ */
+export function createSseTransformer() {
+    let buffer = '';
+    return (chunk) => {
+        buffer += chunk;
+        let out = '';
+        let idx;
+        while ((idx = buffer.indexOf('\n')) !== -1) {
+            const line = buffer.slice(0, idx);
+            buffer = buffer.slice(idx + 1);
+            out += transformSseLine(line) + '\n';
+        }
+        return out;
+    };
+}
+function transformSseLine(line) {
+    const prefix = 'data:';
+    if (!line.startsWith(prefix))
+        return line;
+    const payload = line.slice(prefix.length).trimStart();
+    if (!payload || payload === '[DONE]')
+        return line;
+    let parsed;
+    try {
+        parsed = JSON.parse(payload);
+    }
+    catch {
+        return line; // not JSON we understand -- leave untouched
+    }
+    const rewritten = rewriteResponseEvent(parsed);
+    return `data: ${JSON.stringify(rewritten)}`;
+}
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        req.on('data', (c) => chunks.push(c));
+        req.on('end', () => resolve(Buffer.concat(chunks)));
+        req.on('error', reject);
+    });
+}
+/**
+ * Start the localhost translating proxy. Resolves once it is listening.
+ */
+export function startCodexMcpProxy(opts) {
+    const requiredTools = opts.requiredTools ?? PROXY_REQUIRED_TOOLS;
+    const doFetch = opts.fetchImpl ?? fetch;
+    const logger = opts.logger ?? { log: (m) => console.log(m), warn: (m) => console.warn(m) };
+    const upstream = new URL(opts.upstreamBaseUrl);
+    let reception = {
+        sawToolsRequest: false,
+        requiredToolsDelivered: false,
+        missingTools: [],
+    };
+    const server = createServer((req, res) => {
+        void handleRequest(req, res);
+    });
+    async function handleRequest(req, res) {
+        try {
+            const raw = await readBody(req);
+            const isResponses = (req.url ?? '').includes('/responses') && (req.method ?? 'GET').toUpperCase() === 'POST';
+            let forwardBody = raw;
+            if (isResponses && raw.length > 0) {
+                try {
+                    const parsed = JSON.parse(raw.toString('utf8'));
+                    const flattened = flattenNamespaceTools(parsed);
+                    reception = updateReceptionState(reception, flattened.tools, requiredTools);
+                    forwardBody = JSON.stringify(flattened);
+                    logger.log(`[codex-mcp-proxy] forwarded responses request ${JSON.stringify(redactRequestForLog(flattened))}`);
+                }
+                catch {
+                    // Non-JSON body -- forward verbatim.
+                    forwardBody = raw;
+                }
+            }
+            // Forward to upstream origin + the original request path.
+            const target = `${upstream.origin}${req.url ?? ''}`;
+            const headers = {};
+            for (const [k, v] of Object.entries(req.headers)) {
+                if (v === undefined)
+                    continue;
+                if (k.toLowerCase() === 'host' || k.toLowerCase() === 'content-length')
+                    continue;
+                headers[k] = Array.isArray(v) ? v.join(',') : v;
+            }
+            const upstreamResp = await doFetch(target, {
+                method: req.method,
+                headers,
+                body: req.method === 'GET' || req.method === 'HEAD' ? undefined : forwardBody,
+            });
+            const respHeaders = {};
+            upstreamResp.headers.forEach((value, key) => {
+                if (key.toLowerCase() === 'content-length')
+                    return; // transformed length differs
+                respHeaders[key] = value;
+            });
+            res.writeHead(upstreamResp.status, respHeaders);
+            const contentType = upstreamResp.headers.get('content-type') ?? '';
+            if (contentType.includes('text/event-stream') && upstreamResp.body) {
+                const transform = createSseTransformer();
+                const reader = upstreamResp.body.getReader();
+                const decoder = new TextDecoder();
+                for (;;) {
+                    const { done, value } = await reader.read();
+                    if (done)
+                        break;
+                    res.write(transform(decoder.decode(value, { stream: true })));
+                }
+                res.end();
+            }
+            else {
+                const buf = Buffer.from(await upstreamResp.arrayBuffer());
+                res.end(buf);
+            }
+        }
+        catch (err) {
+            logger.warn(`[codex-mcp-proxy] upstream error: ${err.message}`);
+            if (!res.headersSent)
+                res.writeHead(502, { 'content-type': 'text/plain' });
+            res.end('proxy upstream error');
+        }
+    }
+    return new Promise((resolve, reject) => {
+        server.on('error', reject);
+        server.listen(0, '127.0.0.1', () => {
+            const port = server.address().port;
+            // Advertise the proxy with the SAME path as upstream so Codex's
+            // base_url + "/responses" reconstructs the upstream path on forward.
+            const url = `http://127.0.0.1:${port}${upstream.pathname.replace(/\/$/, '')}`;
+            resolve({
+                url,
+                port,
+                getReceptionState: () => reception,
+                close: () => new Promise((res) => server.close(() => res())),
+            });
+        });
+    });
+}
+//# sourceMappingURL=codex-mcp-proxy.js.map

package/dist/backends/codex/codex-mcp-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-mcp-proxy.js","sourceRoot":"","sources":["../../../src/backends/codex/codex-mcp-proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AAEjG,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,sBAAsB,EAAE,yBAAyB,CAAU,CAAC;AAEjG;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,8BAA8B,CAAC;AAEzE;;;;;;;;GAQG;AACH,MAAM,UAAU,iCAAiC,CAC/C,SAA6B,EAC7B,gBAAyB;IAEzB,IAAI,CAAC,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC;AAC7E,CAAC;AAgCD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,KAAmB,EAAE,CAAC;QACpC,IAAI,CAAC,EAAE,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzD,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,OAAO;gBAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,mCAAmC,GAAG,uBAAuB,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,UAAU,gCAAgC,CAAC,YAA+B;IAK9E,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IAChF,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,WAAW,EACT,yGAAyG,OAAO,IAAI;YACpH,+EAA+E;QACjF,aAAa,EAAE,mCAAmC;KACnD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mCAAmC,CACjD,SAA8B;IAE9B,MAAM,IAAI,GAAG,SAAS,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC;IAC5E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAyB,EACzB,cAAuB,EACvB,aAAgC;IAEhC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,MAAM,SAAS,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO;QACL,eAAe,EAAE,IAAI;QACrB,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAC3E,YAAY,EAAE,OAAO;KACtB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,EAAE,GAAG,KAAgC,CAAC;IAC5C,6EAA6E;IAC7E,+EAA+E;IAC/E,sBAAsB;IACtB,MAAM,WAAW,GAAG,CAAC,IAA6B,EAAQ,EAAE;QAC1D,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnE,MAAM,SAAS,GAAG,iBAAiB,CAAC;gBAClC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;aACrE,CAAC,CAAC;YACH,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;gBAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,EAAE,CAAC,IAAI,KAAK,eAAe;QAAE,WAAW,CAAC,EAAE,CAAC,CAAC;IACjD,IAAI,EAAE,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ;QAAE,WAAW,CAAC,EAAE,CAAC,IAA+B,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,EAAE,CAAC,QAA4C,CAAC;IACjE,IAAI,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,WAAW,CAAC,IAA+B,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,KAAa,EAAU,EAAE;QAC/B,MAAM,IAAI,KAAK,CAAC;QAChB,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,GAAW,CAAC;QAChB,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAClC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YAC/B,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACvC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC;IACvB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC;IACtD,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,4CAA4C;IAC3D,CAAC;IACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO,SAAS,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,QAAQ,CAAC,GAAoB;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAuB;IACxD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,oBAAoB,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3G,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAE/C,IAAI,SAAS,GAAwB;QACnC,eAAe,EAAE,KAAK;QACtB,sBAAsB,EAAE,KAAK;QAC7B,YAAY,EAAE,EAAE;KACjB,CAAC;IAEF,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QAChF,KAAK,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,aAAa,CAAC,GAAoB,EAAE,GAAmB;QACpE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;YAE7G,IAAI,WAAW,GAAoB,GAAG,CAAC;YACvC,IAAI,WAAW,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;oBAChD,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;oBAChD,SAAS,GAAG,oBAAoB,CAAC,SAAS,EAAG,SAAiC,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;oBACrG,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;oBACxC,MAAM,CAAC,GAAG,CAAC,iDAAiD,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;gBAChH,CAAC;gBAAC,MAAM,CAAC;oBACP,qCAAqC;oBACrC,WAAW,GAAG,GAAG,CAAC;gBACpB,CAAC;YACH,CAAC;YAED,0DAA0D;YAC1D,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;YACpD,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC,KAAK,SAAS;oBAAE,SAAS;gBAC9B,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,gBAAgB;oBAAE,SAAS;gBACjF,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE;gBACzC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO;gBACP,IAAI,EAAE,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;aAC9E,CAAC,CAAC;YAEH,MAAM,WAAW,GAA2B,EAAE,CAAC;YAC/C,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC1C,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,gBAAgB;oBAAE,OAAO,CAAC,6BAA6B;gBACjF,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC3B,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAEhD,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACnE,IAAI,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;gBACnE,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;gBACzC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC7C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;gBAClC,SAAS,CAAC;oBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC5C,IAAI,IAAI;wBAAE,MAAM;oBAChB,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChE,CAAC;gBACD,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC1D,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,qCAAsC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;YAC3E,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,OAAO,CAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1D,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;YACpD,gEAAgE;YAChE,qEAAqE;YACrE,MAAM,GAAG,GAAG,oBAAoB,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;YAC9E,OAAO,CAAC;gBACN,GAAG;gBACH,IAAI;gBACJ,iBAAiB,EAAE,GAAG,EAAE,CAAC,SAAS;gBAClC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;aACnE,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/backends/codex/mcp-preflight.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Read-only Telora MCP preflight for local-model passes.
+ *
+ * A local-model coding team is only useful if the agent can actually reach the
+ * Telora issue/delivery control surface through its MCP server. When that
+ * provisioning is broken -- the MCP package cannot be resolved, the server fails
+ * to start, or it does not expose the required tools -- a spawned team produces
+ * no useful work and no diagnostic: the focus sits "ready" and the daemon
+ * re-spawns into the same wall every poll (UDE #3, the silent spawn-loop wedge).
+ *
+ * This preflight proves, BEFORE the coding team spawns, that the required Telora
+ * tools are present and callable, by running a read-only JSON-RPC handshake
+ * (`initialize` + `tools/list`) against the provisioned Telora MCP server over
+ * stdio. On failure it returns a non-allowed gate result carrying a precise
+ * reason; the caller turns that into a durable terminal session and skips the
+ * spawn (the same fail-closed contract as gateLocalModelBackendSpawn). It NEVER
+ * mutates Telora -- the handshake reads the tool list only.
+ *
+ * The probe is an injectable seam so the gate is unit-testable without spawning
+ * a real subprocess.
+ */
+import type { DaemonConfig } from '../../types.js';
+/** Exit category stamped on the session when the MCP preflight refuses a spawn. */
+export declare const MCP_PREFLIGHT_EXIT_CATEGORY = "mcp_preflight_failed";
+/**
+ * The Telora control-surface tools a coding team must be able to call. A local
+ * pass that cannot see these cannot keep issue/delivery state synchronized, so
+ * their absence is terminal for the spawn.
+ */
+export declare const MCP_PREFLIGHT_REQUIRED_TOOLS: readonly ["telora_product_issue", "telora_product_delivery"];
+/** How long the handshake may take before the probe gives up (ms). */
+export declare const MCP_PREFLIGHT_TIMEOUT_MS = 20000;
+export interface McpPreflightResult {
+    allowed: boolean;
+    reason?: string;
+    /** Exit category for the durable terminal session when !allowed. */
+    category?: string;
+}
+/**
+ * Probe seam: resolve the tool names the provisioned Telora MCP server exposes.
+ * Production implementation spawns the server and runs the stdio handshake;
+ * tests inject a fake.
+ */
+export type McpToolProbe = (config: DaemonConfig) => Promise<string[]>;
+/**
+ * Real probe: spawn `node <telora-mcp-server>` with the execution profile env,
+ * perform the MCP `initialize` + `tools/list` handshake over stdio, and return
+ * the exposed tool names. Throws on resolution failure, spawn error, timeout,
+ * or a malformed/absent tools list. Read-only: it lists tools and never calls
+ * one.
+ *
+ * Identity (TELORA_URL / TELORA_TRACKER_ID) is intentionally NOT injected: the
+ * MCP server resolves it from the single source `~/.telora/daemon.json` via
+ * loadCredentials() (inherited process.env still propagates when present). The
+ * `config` parameter is part of the McpToolProbe seam (used by injected test
+ * fakes) but unused by this server-handshake implementation.
+ */
+export declare function probeMcpToolsViaHandshake(_config: DaemonConfig): Promise<string[]>;
+/**
+ * Gate a local-model spawn on a read-only proof that the required Telora MCP
+ * tools are callable. Returns {allowed:true} for every non-local pass (hosted /
+ * claude) without probing -- their MCP wiring is unchanged and out of scope.
+ *
+ * For a local pass: run the probe; if every required tool is present the gate
+ * allows the spawn, otherwise it refuses with a precise, actionable reason
+ * (resolution/spawn/timeout failure, or the specific missing tool names). The
+ * caller fails the spawn closed (durable terminal session, no team launched).
+ */
+export declare function preflightLocalModelMcp(config: DaemonConfig, isLocalModelPass: boolean, opts?: {
+    probe?: McpToolProbe;
+    requiredTools?: readonly string[];
+}): Promise<McpPreflightResult>;
+//# sourceMappingURL=mcp-preflight.d.ts.map

package/dist/backends/codex/mcp-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-preflight.d.ts","sourceRoot":"","sources":["../../../src/backends/codex/mcp-preflight.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,mFAAmF;AACnF,eAAO,MAAM,2BAA2B,yBAAyB,CAAC;AAElE;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,8DAG/B,CAAC;AAEX,sEAAsE;AACtE,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAE/C,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAUvE;;;;;;;;;;;;GAYG;AACH,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAgGxF;AAED;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,YAAY,EACpB,gBAAgB,EAAE,OAAO,EACzB,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,YAAY,CAAC;IAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GACrE,OAAO,CAAC,kBAAkB,CAAC,CAgC7B"}