@tickernelz/paperclip-pro-adapter-utils 2026.925.0

package/dist/execution-target.d.ts

@@ -0,0 +1,537 @@
+import type { SshRemoteExecutionSpec } from "./ssh.js";
+import { type CommandManagedDuplexChannel, type CommandManagedRuntimeAsset, type CommandManagedRuntimeRunner } from "./command-managed-runtime.js";
+import type { AdditionalSourceStagingFailure, SandboxAdditionalSource, WorkspaceDurableSeedPaths, WorkspaceInboundMode } from "./sandbox-managed-runtime.js";
+import type { GitWorkspaceSnapshot } from "./git-workspace-sync.js";
+import type { DirectorySnapshot } from "./workspace-restore-merge.js";
+export { resolveReferencedSourceIgnore } from "./sandbox-managed-runtime.js";
+export type { AdditionalSourceStagingFailure, ReferencedSourceIgnoreResolution, SandboxAdditionalSource, } from "./sandbox-managed-runtime.js";
+import { type SandboxRunLogTailFactory } from "./sandbox-run-log-stream.js";
+import { type DuplexBrokerRunDisposition } from "./bridge-transport-contract.js";
+import { type DuplexLossReason, type DuplexObservabilityRecorder } from "./duplex-observability.js";
+import { type RunProcessResult, type TerminalResultCleanupOptions } from "./server-utils.js";
+import { type RuntimeSpanRunner, type StartupSpanContext } from "./acpx-engine/startup-timing.js";
+import type { RuntimeProgressSink, RuntimeStatusSink } from "./runtime-progress.js";
+import type { LocalProcessSandboxOptions } from "./local-process-sandbox.js";
+import type { RunnerIngressEndpoint } from "./runner-connectivity.js";
+export type { RuntimeProgressSink } from "./runtime-progress.js";
+export declare function postedIssueCommentLogMarker(method: string, requestPath: string, status: number, body: Buffer | string): string | null;
+export type AdapterWorkspaceRealizationMode = "copy" | "in_place";
+export interface AdapterWorkspacePathAlias {
+    path: string;
+    target: string;
+}
+export interface AdapterWorkspaceRealization {
+    mode: AdapterWorkspaceRealizationMode;
+    authoritativeRoot: string;
+    pathAliases: AdapterWorkspacePathAlias[];
+    outboundRestorePaths: string[];
+}
+interface AdapterExecutionTargetWorkspaceMetadata {
+    workspaceRealization?: AdapterWorkspaceRealization | null;
+}
+export interface AdapterLocalExecutionTarget extends AdapterExecutionTargetWorkspaceMetadata {
+    kind: "local";
+    environmentId?: string | null;
+    leaseId?: string | null;
+}
+export interface AdapterSshExecutionTarget extends AdapterExecutionTargetWorkspaceMetadata {
+    kind: "remote";
+    transport: "ssh";
+    environmentId?: string | null;
+    leaseId?: string | null;
+    remoteCwd: string;
+    spec: SshRemoteExecutionSpec;
+}
+/**
+ * Read-only snapshot of the effective execution capabilities for one
+ * execution target — local, ssh, sandbox, or plugin. Each flag is the
+ * resolved result of the provider's declaration, the live worker's verified
+ * methods, and any narrowing from the config or lease. The host computes it
+ * once and attaches it to the target; a consumer reads it but never changes
+ * it, so every field is `readonly`.
+ */
+export interface EffectiveExecutionCapabilities {
+    readonly reusableLeases: boolean;
+    readonly nativeSyncIn: boolean;
+    readonly nativeSyncOut: boolean;
+    readonly persistentProcessSessions: boolean;
+    readonly independentControlCommands: boolean;
+    readonly incrementalSessionOutput: boolean;
+    readonly concurrentSyncOperations: boolean;
+    readonly duplexCommandStream: boolean;
+    /** Provider can expose a private authenticated WebSocket endpoint for runnerd. */
+    readonly runnerWebSocketIngress: boolean;
+}
+/**
+ * @deprecated Renamed to `EffectiveExecutionCapabilities`. This alias will
+ * be removed in a later major release.
+ */
+export interface EffectiveSandboxCapabilities extends EffectiveExecutionCapabilities {
+}
+export interface SandboxLeaseAcquisition {
+    outcome: "created" | "resumed" | "replacement";
+    providerLeaseId: string;
+    previousProviderLeaseId?: string;
+    reason?: "not_found" | "expired" | "identity_mismatch" | "resume_failed";
+}
+export interface AdapterSandboxExecutionTarget extends AdapterExecutionTargetWorkspaceMetadata {
+    kind: "remote";
+    transport: "sandbox";
+    providerKey?: string | null;
+    /**
+     * Read-only effective capability snapshot for this sandbox target. The host
+     * resolves it from the provider declaration ∩ the verified worker methods ∩
+     * narrowing, then attaches it here. Absent when no snapshot was resolved.
+     */
+    readonly effectiveCapabilities?: EffectiveExecutionCapabilities | null;
+    /**
+     * Per-run duplex bridge kill switch. The host stamps it on the same seam as
+     * `effectiveCapabilities`. `true` selects the duplex transport only when the
+     * capability `duplexCommandStream` is also `true`; any other value keeps the
+     * file bridge. The value stays on the host and never enters the sandbox
+     * environment. Absent means no grant.
+     */
+    readonly enableSandboxDuplexBridge?: boolean;
+    /** Host-owned lifecycle override for paperclip_runner in this environment. */
+    readonly runnerLifecyclePolicy?: {
+        mode: "per_turn";
+        idleTimeoutMs: null;
+    } | {
+        mode: "warm";
+        idleTimeoutMs: number;
+    } | null;
+    /** Whether this environment is configured to reuse its provider lease. */
+    readonly reusableLeaseConfigured?: boolean;
+    /** Host-observed provenance for this exact sandbox acquisition. */
+    readonly sandboxLeaseAcquisition?: SandboxLeaseAcquisition | null;
+    shellCommand?: "bash" | "sh" | null;
+    environmentId?: string | null;
+    leaseId?: string | null;
+    remoteCwd: string;
+    timeoutMs?: number | null;
+    runner?: CommandManagedRuntimeRunner;
+    /** Host-only provider operation. It is never serialized into the sandbox. */
+    getRunnerIngressEndpoint?: (input: {
+        leaseId: string;
+        port: number;
+        path: string;
+    }) => Promise<RunnerIngressEndpoint>;
+    /**
+     * Sandbox-backed adapter runs stream the agent CLI's stdout/stderr
+     * incrementally via a log-tail loop beside the callback bridge instead of
+     * waiting for the batched provider result. Streaming is ON by default;
+     * set to `false` to explicitly opt out back to batch-at-end delivery.
+     */
+    streamRunLogs?: boolean | null;
+    /**
+     * The injected duplex observability recorder for this run. The host attaches
+     * it on the same seam as `runner`, so this live object stays on the host and
+     * never enters the sandbox environment. The bridge binds it to the fixed
+     * duplex observability surface. Absent means the safe no-op default.
+     */
+    duplexObservabilityRecorder?: DuplexObservabilityRecorder | null;
+}
+export type AdapterExecutionTarget = AdapterLocalExecutionTarget | AdapterSshExecutionTarget | AdapterSandboxExecutionTarget;
+export type AdapterRemoteExecutionSpec = SshRemoteExecutionSpec;
+export type AdapterManagedRuntimeAsset = CommandManagedRuntimeAsset;
+export interface PreparedAdapterExecutionTargetRuntime {
+    target: AdapterExecutionTarget;
+    workspaceRemoteDir: string | null;
+    runtimeRootDir: string | null;
+    assetDirs: Record<string, string>;
+    /**
+     * Remote directory of each additional (referenced) project that staged
+     * successfully, keyed by `projectId`. Empty for a local target or when no
+     * additional sources were requested.
+     */
+    additionalSourceDirs: Record<string, string>;
+    /**
+     * Each additional (referenced) project whose staging failed, paired with the
+     * failure message. Empty for a local target, for a transport that does not
+     * stage referenced projects, or when every requested project staged.
+     */
+    additionalSourceFailures: AdditionalSourceStagingFailure[];
+    workspaceSyncSnapshot: {
+        baseline: DirectorySnapshot;
+        gitSnapshot: GitWorkspaceSnapshot | null;
+    } | null;
+    restoreWorkspace(onProgress?: RuntimeProgressSink): Promise<void>;
+}
+export interface AdapterExecutionTargetProcessOptions {
+    cwd: string;
+    env: Record<string, string>;
+    stdin?: string;
+    timeoutSec: number;
+    graceSec: number;
+    onLog: (stream: "stdout" | "stderr", chunk: string) => Promise<void>;
+    onRuntimeProgress?: RuntimeStatusSink;
+    onSpawn?: (meta: {
+        pid: number;
+        processGroupId: number | null;
+        startedAt: string;
+    }) => Promise<void>;
+    terminalResultCleanup?: TerminalResultCleanupOptions;
+    /**
+     * Sandbox-only: factory from the Paperclip bridge handle that streams the
+     * CLI's stdout/stderr during the run. When provided, the batched provider
+     * onLog is suppressed and incremental chunks flow through `onLog` instead.
+     */
+    runLogTail?: SandboxRunLogTailFactory | null;
+    /**
+     * Sandbox-only: the atomic run-disposition settle from the Paperclip bridge
+     * handle. When provided, `runAdapterExecutionTargetProcess` calls it once at
+     * the clean-completion boundary of the process, synchronously and before the
+     * run-log tail finishes. The call reads the disposition and marks the
+     * host-observed orderly completion in one broker step, so a gateway exit
+     * after the clean process completion cannot latch a false mid-run loss. A
+     * control channel that died before the clean completion still fails the run
+     * closed with the typed `duplex_channel_lost` code. The file bridge path
+     * never sets it.
+     */
+    settleRunDisposition?: (() => DuplexBrokerRunDisposition) | null;
+    localProcessSandbox?: LocalProcessSandboxOptions | null;
+}
+export interface AdapterExecutionTargetShellOptions {
+    cwd: string;
+    env: Record<string, string>;
+    timeoutSec?: number;
+    graceSec?: number;
+    onLog?: (stream: "stdout" | "stderr", chunk: string) => Promise<void>;
+}
+export interface AdapterExecutionTargetPaperclipBridgeHandle {
+    env: Record<string, string>;
+    /**
+     * Present when the sandbox target opted into run-log streaming
+     * (`streamRunLogs`). Create one handle per CLI attempt and pass it to
+     * `runAdapterExecutionTargetProcess` via `options.runLogTail`.
+     */
+    runLogTail?: SandboxRunLogTailFactory | null;
+    /**
+     * Read the terminal run disposition of the duplex control channel. It reports a
+     * failure when the channel was lost before an orderly completion, and names the
+     * typed loss reason. It reports a success for a healthy channel or a
+     * normal-teardown loss. The file bridge path never sets it, so the method is
+     * absent there. The caller reads it at the run-disposition seam to fail a run
+     * whose control channel died mid-turn.
+     */
+    readRunDisposition?(): DuplexBrokerRunDisposition;
+    /**
+     * Atomically read the run disposition and mark the host-observed orderly
+     * completion in one broker step. The ACP lane calls it at the terminal
+     * finalization boundary for a success-eligible completion, so no `await` can
+     * separate the read from the mark and a teardown loss cannot slip in between.
+     * A loss that already latched keeps the failure, because the broker no-ops the
+     * mark after a latched loss. The file bridge path never sets it.
+     */
+    settleRunDisposition?(): DuplexBrokerRunDisposition;
+    /**
+     * Mark the host-observed orderly completion of the agent turn on the broker's
+     * ordered lifecycle. The caller marks it at the ACP terminal-finalization
+     * boundary for a still-success-eligible completion, so a later teardown loss
+     * cannot flip the run to a failure. A loss that already latched keeps the
+     * failure, because the broker no-ops the mark after a latched loss. The file
+     * bridge path never sets it, so the method is absent there.
+     */
+    markOrderlyCompletion?(): void;
+    /**
+     * Register a listener for a newly latched terminal loss. The listener
+     * fires at most once, and only for a loss that flips the disposition to
+     * failed — never for a clean channel end that orders after a
+     * host-observed orderly completion. Returns a function that unregisters
+     * the listener.
+     *
+     * The caller uses this to abort an in-flight Agent Client Protocol turn
+     * the moment the channel dies, instead of waiting for the turn to return
+     * a terminal result on its own (a dead channel can leave a turn with
+     * nothing to return). The file bridge path never sets it, so the method
+     * is absent there.
+     */
+    onLoss?(listener: (reason: DuplexLossReason) => void): () => void;
+    stop(): Promise<void>;
+}
+export interface AdapterExecutionTargetProcessSessionBridgeHandle {
+    agentCommand: string;
+    stop(): Promise<void>;
+}
+export { sanitizeRemoteExecutionEnv } from "./remote-execution-env.js";
+export declare const DEFAULT_REMOTE_SANDBOX_ADAPTER_TIMEOUT_SEC = 14400;
+export declare function adapterExecutionTargetToRemoteSpec(target: AdapterExecutionTarget | null | undefined): AdapterRemoteExecutionSpec | null;
+export declare function adapterExecutionTargetIsRemote(target: AdapterExecutionTarget | null | undefined): boolean;
+export declare function adapterExecutionTargetUsesManagedHome(target: AdapterExecutionTarget | null | undefined): boolean;
+/**
+ * Read the per-run duplex bridge kill switch off a target. Only a sandbox
+ * target with `enableSandboxDuplexBridge` set to `true` returns `true`. Every
+ * other target and every other value returns `false`, so the caller fails
+ * closed to the file bridge.
+ */
+export declare function adapterExecutionTargetEnablesSandboxDuplexBridge(target: AdapterExecutionTarget | null | undefined): boolean;
+/**
+ * Read the injected duplex observability recorder off a target. Only a
+ * sandbox target with a recorder attached returns it. Every other target
+ * returns null, so the bridge falls back to the safe no-op recorder.
+ */
+export declare function adapterExecutionTargetDuplexObservabilityRecorder(target: AdapterExecutionTarget | null | undefined): DuplexObservabilityRecorder | null;
+export declare function adapterExecutionTargetRemoteCwd(target: AdapterExecutionTarget | null | undefined, localCwd: string): string;
+export declare function overrideAdapterExecutionTargetRemoteCwd(target: AdapterExecutionTarget | null | undefined, remoteCwd: string | null | undefined): AdapterExecutionTarget | null | undefined;
+export declare function resolveAdapterExecutionTargetCwd(target: AdapterExecutionTarget | null | undefined, configuredCwd: string | null | undefined, localFallbackCwd: string): string;
+export declare function adapterExecutionTargetUsesPaperclipBridge(target: AdapterExecutionTarget | null | undefined): boolean;
+export declare function describeAdapterExecutionTarget(target: AdapterExecutionTarget | null | undefined): string;
+export type AdapterExecutionTargetTimeoutSource = "configured" | "sandbox_default" | "unlimited";
+export interface AdapterExecutionTargetTimeoutResolution {
+    /** Resolved wall-clock timeout in seconds; 0 means no adapter timeout. */
+    timeoutSec: number;
+    /** Which knob produced the resolved value, for logs and error messages. */
+    source: AdapterExecutionTargetTimeoutSource;
+}
+export declare function resolveAdapterExecutionTargetTimeout(target: AdapterExecutionTarget | null | undefined, configuredTimeoutSec: number | null | undefined): AdapterExecutionTargetTimeoutResolution;
+export declare function resolveAdapterExecutionTargetTimeoutSec(target: AdapterExecutionTarget | null | undefined, configuredTimeoutSec: number | null | undefined): number;
+/**
+ * Self-describing error message for when the adapter wall-clock execution
+ * timeout kills a run. Names the timer that fired and the knob that controls
+ * it so run failures never surface as a bare "Timed out".
+ */
+export declare function formatAdapterExecutionTimeoutErrorMessage(resolution: AdapterExecutionTargetTimeoutResolution): string;
+/**
+ * One-line start-of-run statement of the effective wall-clock timeout and its
+ * source. Callers prefix with `[paperclip] ` and append a newline.
+ */
+export declare function formatAdapterExecutionTimeoutStartLogLine(resolution: AdapterExecutionTargetTimeoutResolution): string;
+export declare function ensureAdapterExecutionTargetCommandResolvable(command: string, target: AdapterExecutionTarget | null | undefined, cwd: string, env: NodeJS.ProcessEnv, options?: {
+    installCommand?: string | null;
+    timeoutSec?: number | null;
+}): Promise<void>;
+export declare function resolveAdapterExecutionTargetCommandForLogs(command: string, target: AdapterExecutionTarget | null | undefined, cwd: string, env: NodeJS.ProcessEnv): Promise<string>;
+export declare function runAdapterExecutionTargetProcess(runId: string, target: AdapterExecutionTarget | null | undefined, command: string, args: string[], options: AdapterExecutionTargetProcessOptions): Promise<RunProcessResult>;
+export declare function runAdapterExecutionTargetShellCommand(runId: string, target: AdapterExecutionTarget | null | undefined, command: string, options: AdapterExecutionTargetShellOptions): Promise<RunProcessResult>;
+export interface AdapterSandboxInstallCommandCheck {
+    code: string;
+    level: "info" | "warn" | "error";
+    message: string;
+    detail?: string;
+    hint?: string;
+}
+export declare function maybeRunSandboxInstallCommand(input: {
+    runId: string;
+    target: AdapterExecutionTarget | null | undefined;
+    adapterKey: string;
+    installCommand: string;
+    /** When provided, skip the install if `command -v <detectCommand>` succeeds. */
+    detectCommand?: string | null;
+    env?: Record<string, string>;
+    timeoutSec?: number;
+}): Promise<AdapterSandboxInstallCommandCheck | null>;
+export declare function readAdapterExecutionTargetHomeDir(runId: string, target: AdapterExecutionTarget | null | undefined, options: AdapterExecutionTargetShellOptions): Promise<string | null>;
+export declare function ensureAdapterExecutionTargetRuntimeCommandInstalled(input: {
+    runId: string;
+    target: AdapterExecutionTarget | null | undefined;
+    installCommand?: string | null;
+    detectCommand?: string | null;
+    cwd: string;
+    env: Record<string, string>;
+    timeoutSec?: number;
+    graceSec?: number;
+    onLog?: AdapterExecutionTargetShellOptions["onLog"];
+}): Promise<void>;
+export declare function ensureAdapterExecutionTargetFile(runId: string, target: AdapterExecutionTarget | null | undefined, filePath: string, options: AdapterExecutionTargetShellOptions): Promise<void>;
+/**
+ * Ensure a working directory exists (and is a directory) on the execution target.
+ *
+ * For local targets this delegates to the local `ensureAbsoluteDirectory` helper
+ * (Node fs). For remote (SSH/sandbox) targets it shells out and runs
+ * `mkdir -p` (when allowed) followed by a `[ -d ]` check so the result reflects
+ * the directory state inside the environment, not on the Paperclip host.
+ *
+ * Throws an Error with a human-readable message on failure.
+ */
+export declare function ensureAdapterExecutionTargetDirectory(runId: string, target: AdapterExecutionTarget | null | undefined, cwd: string, options: AdapterExecutionTargetShellOptions & {
+    createIfMissing?: boolean;
+}): Promise<void>;
+export declare function adapterExecutionTargetSessionIdentity(target: AdapterExecutionTarget | null | undefined): Record<string, unknown> | null;
+export declare function adapterExecutionTargetSessionMatches(saved: unknown, target: AdapterExecutionTarget | null | undefined): boolean;
+export declare function parseAdapterExecutionTarget(value: unknown): AdapterExecutionTarget | null;
+export declare function adapterExecutionTargetFromRemoteExecution(remoteExecution: unknown, metadata?: Pick<AdapterLocalExecutionTarget, "environmentId" | "leaseId">): AdapterExecutionTarget | null;
+export declare function readAdapterExecutionTarget(input: {
+    executionTarget?: unknown;
+    legacyRemoteExecution?: unknown;
+}): AdapterExecutionTarget | null;
+export declare function prepareAdapterExecutionTargetRuntime(input: {
+    runId: string;
+    target: AdapterExecutionTarget | null | undefined;
+    adapterKey: string;
+    workspaceLocalDir: string;
+    timeoutSec?: number;
+    workspaceRemoteDir?: string;
+    syncWorkspace?: boolean;
+    workspaceInboundMode?: WorkspaceInboundMode;
+    workspaceDurableSeed?: WorkspaceDurableSeedPaths;
+    workspaceBaseline?: DirectorySnapshot;
+    workspaceGitSnapshot?: GitWorkspaceSnapshot | null;
+    workspaceExclude?: string[];
+    preserveAbsentOnRestore?: string[];
+    assets?: AdapterManagedRuntimeAsset[];
+    /** Referenced (additional) projects to stage into the sandbox as plain, read-only trees. */
+    additionalSources?: SandboxAdditionalSource[];
+    installCommand?: string | null;
+    /** When provided alongside `installCommand`, skip the install if the binary is already on PATH. */
+    detectCommand?: string | null;
+    onProgress?: RuntimeProgressSink;
+    onRuntimeProgress?: RuntimeStatusSink;
+    runtimeSpan?: RuntimeSpanRunner;
+}): Promise<PreparedAdapterExecutionTargetRuntime>;
+export declare function runtimeAssetDir(prepared: Pick<PreparedAdapterExecutionTargetRuntime, "assetDirs">, key: string, fallbackRemoteCwd: string): string;
+type GitHubLauncherLocation = {
+    runId: string;
+    target: AdapterExecutionTarget | null | undefined;
+};
+/** Call only after execution settles, before releasing its remote environment lease. */
+export declare function cleanupGitHubOperationLaunchers(input: GitHubLauncherLocation): Promise<void>;
+/** Read only execution-target Git context; never import the controller's credentials into SSH. */
+export declare function prepareGitHubExecutionEnvironment(input: {
+    target: AdapterExecutionTarget | null | undefined;
+    cwd: string;
+    env: Record<string, string>;
+    hostCredentials: boolean;
+    networkAccess: boolean;
+}): Promise<Record<string, string>>;
+/** Stage token-free launchers next to the execution, not in shared global Git config. */
+export declare function prepareGitHubOperationLaunchers(input: {
+    runId: string;
+    target: AdapterExecutionTarget | null | undefined;
+    cwd: string;
+    env: Record<string, string>;
+}): Promise<Record<string, string>>;
+export declare function startAdapterExecutionTargetProcessSessionBridge(input: {
+    runId: string;
+    target: AdapterExecutionTarget | null | undefined;
+    runtimeRootDir: string | null | undefined;
+    adapterKey: string;
+    command: string;
+    args: string[];
+    cwd: string;
+    env: Record<string, string> | (() => Promise<Record<string, string>>);
+    timeoutSec?: number | null;
+    onLog?: (stream: "stdout" | "stderr", chunk: string) => Promise<void>;
+    getRuntimeParentContext?: () => StartupSpanContext | undefined;
+    runtimeSpan?: RuntimeSpanRunner;
+    streamOutputViaSession?: boolean;
+}): Promise<AdapterExecutionTargetProcessSessionBridgeHandle | null>;
+export declare function getProcessSessionRemoteSource(input?: {
+    outputToStdout?: boolean;
+}): string;
+/**
+ * Build the argument vector that launches the duplex gateway in the sandbox. The
+ * host passes the assigned port and the per-open nonce only through the launch
+ * environment, so the argument vector sets them as environment assignments in
+ * front of the node command. No addressing data comes from the channel.
+ *
+ * The script uses `exec env NAME=value ... command`. A POSIX shell accepts an
+ * environment-assignment prefix only on a plain command, never on `exec`. The
+ * form `exec NAME=value command` exits with status 127. The `env` utility carries
+ * the assignments, and `exec` still replaces the shell with the gateway process,
+ * so the gateway keeps the process slot and the assigned environment.
+ */
+export declare function buildDuplexGatewayLaunchArgv(input: {
+    shellCommand: "bash" | "sh";
+    remoteEntrypoint: string;
+    nodeCommand?: string | null;
+    env: Record<string, string>;
+}): string[];
+/** The reason the duplex readiness handshake did not pass. */
+type DuplexReadinessFailure = "protocol_contamination" | "nonce_mismatch" | "channel_exit" | "timeout";
+/** The outcome of the duplex readiness handshake. */
+type DuplexReadinessResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: DuplexReadinessFailure;
+};
+/** The terminal outcome of the preface scan: either the client preface
+ * appeared inside the bounded readiness buffer, or it did not. */
+type Http2PrefaceScanResult = "found" | "missing";
+/**
+ * Test-only surface for {@link scanForHttp2ClientPreface}. A test drives the
+ * post-preface replay cap across every terminal path without the whole
+ * bridge. Production code never reads this export.
+ */
+export declare const __http2PrefaceScanTesting: {
+    scanForHttp2ClientPreface: (channel: CommandManagedDuplexChannel, options: {
+        capBytes: number;
+        timeoutMs: number;
+    }) => {
+        scanned: CommandManagedDuplexChannel;
+        settled: Promise<Http2PrefaceScanResult>;
+        replayOverflowed: () => boolean;
+    };
+    readScanSearchUnits: () => number;
+    resetScanSearchUnits: () => void;
+    readScanBufferGrowthCopyUnits: () => number;
+    resetScanBufferGrowthCopyUnits: () => void;
+    readReplayBufferGrowthCopyUnits: () => number;
+    resetReplayBufferGrowthCopyUnits: () => void;
+};
+/**
+ * Test-only surface for the pre-READY readiness gate. A test reads the scan
+ * count to prove the newline search work stays linear in the bytes received.
+ * Production code does not use this object.
+ */
+export declare const __duplexReadinessTesting: {
+    readNewlineScanUnits: () => number;
+    resetNewlineScanUnits: () => void;
+    readBufferGrowthCopyUnits: () => number;
+    resetBufferGrowthCopyUnits: () => void;
+    createReadinessGate: (channel: CommandManagedDuplexChannel, options: {
+        nonce: string;
+        timeoutMs: number;
+    }) => DuplexReadinessGate;
+};
+interface DuplexReadinessGate {
+    /** Resolves with the handshake outcome. It never rejects. */
+    readonly ready: Promise<DuplexReadinessResult>;
+    /**
+     * The channel view the broker consumes after readiness passes. It replays the
+     * bytes that followed the READY frame, then forwards each later chunk and the
+     * exit. The gate keeps one real data listener, so the broker never double-binds
+     * the channel.
+     */
+    readonly brokerChannel: CommandManagedDuplexChannel;
+    /**
+     * Report whether a post-READY pre-bind chunk tipped the pending replay buffer
+     * past {@link DUPLEX_READINESS_BUFFER_CAP_BYTES}. On such an overflow the gate
+     * drops the pending replay buffer and stops the channel. The caller reads this
+     * after `ready` resolves `ok`, and before it binds the broker.
+     */
+    replayOverflowed(): boolean;
+    /**
+     * Drop the pending replay buffer. The caller runs this on a terminal path that
+     * abandons the pending replay without a broker handoff: a readiness failure, a
+     * replay overflow, or a broker-construction failure. The normal handoff already
+     * drops the buffer inside `brokerChannel.onData`, so a later call here is a
+     * no-op.
+     */
+    disposePendingReplay(): void;
+    /**
+     * Test-only. Report the length of the retained pre-READY buffer, in bytes. A
+     * test reads this to prove the gate drops the pre-READY buffer on READY
+     * acceptance, so the process does not retain the sandbox-controlled prefix.
+     * Production code does not read this.
+     */
+    retainedReadinessBufferLength(): number;
+}
+export declare function startAdapterExecutionTargetPaperclipBridge(input: {
+    runId: string;
+    target: AdapterExecutionTarget | null | undefined;
+    runtimeRootDir: string | null | undefined;
+    adapterKey: string;
+    timeoutSec?: number | null;
+    hostApiToken: string | null | undefined;
+    hostApiUrl?: string | null;
+    onLog?: (stream: "stdout" | "stderr", chunk: string) => Promise<void>;
+    maxBodyBytes?: number | null;
+    forwardTimeoutMs?: number | null;
+    enableSandboxDuplexBridge?: boolean | null;
+    duplexReadinessTimeoutMs?: number | null;
+    getRuntimeParentContext?: () => StartupSpanContext | undefined;
+    runtimeSpan?: RuntimeSpanRunner;
+    duplexObservabilityRecorder?: DuplexObservabilityRecorder | null;
+}): Promise<AdapterExecutionTargetPaperclipBridgeHandle | null>;
+//# sourceMappingURL=execution-target.d.ts.map

package/dist/execution-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-target.d.ts","sourceRoot":"","sources":["../src/execution-target.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EAEL,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EACjC,MAAM,8BAA8B,CAAC;AAMtC,OAAO,KAAK,EACV,8BAA8B,EAC9B,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACrB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,YAAY,EACV,8BAA8B,EAC9B,gCAAgC,EAChC,uBAAuB,GACxB,MAAM,8BAA8B,CAAC;AAqBtC,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAIL,KAAK,0BAA0B,EAChC,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,2BAA2B,EAEjC,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EAClC,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEtE,YAAY,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GAAG,MAAM,iBAYtB;AAED,MAAM,MAAM,+BAA+B,GAAG,MAAM,GAAG,UAAU,CAAC;AAElE,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,+BAA+B,CAAC;IACtC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,yBAAyB,EAAE,CAAC;IACzC,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,UAAU,uCAAuC;IAC/C,oBAAoB,CAAC,EAAE,2BAA2B,GAAG,IAAI,CAAC;CAC3D;AAED,MAAM,WAAW,2BAA4B,SAAQ,uCAAuC;IAC1F,IAAI,EAAE,OAAO,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,yBAA0B,SAAQ,uCAAuC;IACxF,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,KAAK,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,sBAAsB,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,yBAAyB,EAAE,OAAO,CAAC;IAC5C,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,kFAAkF;IAClF,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;CAC1C;AAED;;;GAGG;AACH,MAAM,WAAW,4BAA6B,SAAQ,8BAA8B;CAAG;AAEvF,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;IAC/C,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,GAAG,mBAAmB,GAAG,eAAe,CAAC;CAC1E;AAED,MAAM,WAAW,6BAA8B,SAAQ,uCAAuC;IAC5F,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,8BAA8B,GAAG,IAAI,CAAC;IACvE;;;;;;OAMG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IAC7C,8EAA8E;IAC9E,QAAQ,CAAC,qBAAqB,CAAC,EAC3B;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,aAAa,EAAE,IAAI,CAAA;KAAE,GACzC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GACvC,IAAI,CAAC;IACT,0EAA0E;IAC1E,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAC3C,mEAAmE;IACnE,QAAQ,CAAC,uBAAuB,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAClE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE,2BAA2B,CAAC;IACrC,6EAA6E;IAC7E,wBAAwB,CAAC,EAAE,CAAC,KAAK,EAAE;QACjC,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACrC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B;;;;;OAKG;IACH,2BAA2B,CAAC,EAAE,2BAA2B,GAAG,IAAI,CAAC;CAClE;AAED,MAAM,MAAM,sBAAsB,GAC9B,2BAA2B,GAC3B,yBAAyB,GACzB,6BAA6B,CAAC;AAElC,MAAM,MAAM,0BAA0B,GAAG,sBAAsB,CAAC;AAOhE,MAAM,MAAM,0BAA0B,GAAG,0BAA0B,CAAC;AAEpE,MAAM,WAAW,qCAAqC;IACpD,MAAM,EAAE,sBAAsB,CAAC;IAC/B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC;;;;OAIG;IACH,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C;;;;OAIG;IACH,wBAAwB,EAAE,8BAA8B,EAAE,CAAC;IAC3D,qBAAqB,EAAE;QACrB,QAAQ,EAAE,iBAAiB,CAAC;QAC5B,WAAW,EAAE,oBAAoB,GAAG,IAAI,CAAC;KAC1C,GAAG,IAAI,CAAC;IACT,gBAAgB,CAAC,UAAU,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,oCAAoC;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrG,qBAAqB,CAAC,EAAE,4BAA4B,CAAC;IACrD;;;;OAIG;IACH,UAAU,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC7C;;;;;;;;;;OAUG;IACH,oBAAoB,CAAC,EAAE,CAAC,MAAM,0BAA0B,CAAC,GAAG,IAAI,CAAC;IACjE,mBAAmB,CAAC,EAAE,0BAA0B,GAAG,IAAI,CAAC;CACzD;AAED,MAAM,WAAW,kCAAkC;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,2CAA2C;IAC1D,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B;;;;OAIG;IACH,UAAU,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC7C;;;;;;;OAOG;IACH,kBAAkB,CAAC,IAAI,0BAA0B,CAAC;IAClD;;;;;;;OAOG;IACH,oBAAoB,CAAC,IAAI,0BAA0B,CAAC;IACpD;;;;;;;OAOG;IACH,qBAAqB,CAAC,IAAI,IAAI,CAAC;IAC/B;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAClE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,gDAAgD;IAC/D,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AASvE,eAAO,MAAM,0CAA0C,QAAS,CAAC;AAuEjE,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,0BAA0B,GAAG,IAAI,CAEnC;AAED,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,OAAO,CAET;AAED,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,OAAO,CAET;AAED;;;;;GAKG;AACH,wBAAgB,gDAAgD,CAC9D,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,OAAO,CAMT;AAED;;;;GAIG;AACH,wBAAgB,iDAAiD,CAC/D,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,2BAA2B,GAAG,IAAI,CAIpC;AAGD,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,EACjD,QAAQ,EAAE,MAAM,GACf,MAAM,CAER;AAED,wBAAgB,uCAAuC,CACrD,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,EACjD,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACnC,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAsB3C;AAED,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,EACjD,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACxC,gBAAgB,EAAE,MAAM,GACvB,MAAM,CAKR;AAED,wBAAgB,yCAAyC,CACvD,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,OAAO,CAET;AAED,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,MAAM,CAMR;AAED,MAAM,MAAM,mCAAmC,GAC3C,YAAY,GACZ,iBAAiB,GACjB,WAAW,CAAC;AAEhB,MAAM,WAAW,uCAAuC;IACtD,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,MAAM,EAAE,mCAAmC,CAAC;CAC7C;AAED,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,EACjD,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC9C,uCAAuC,CA0BzC;AAED,wBAAgB,uCAAuC,CACrD,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,EACjD,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC9C,MAAM,CAER;AAeD;;;;GAIG;AACH,wBAAgB,yCAAyC,CACvD,UAAU,EAAE,uCAAuC,GAClD,MAAM,CAMR;AAED;;;GAGG;AACH,wBAAgB,yCAAyC,CACvD,UAAU,EAAE,uCAAuC,GAClD,MAAM,CAiBR;AA2CD,wBAAsB,6CAA6C,CACjE,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,EACjD,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,iBAiB7E;AAuFD,wBAAsB,2CAA2C,CAC/D,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,EACjD,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB,OAAO,CAAC,MAAM,CAAC,CAOjB;AA+BD,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,EACjD,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,oCAAoC,GAC5C,OAAO,CAAC,gBAAgB,CAAC,CAkE3B;AAED,wBAAsB,qCAAqC,CACzD,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,EACjD,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,gBAAgB,CAAC,CAyF3B;AAED,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAQD,wBAAsB,6BAA6B,CAAC,KAAK,EAAE;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAC;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,iCAAiC,GAAG,IAAI,CAAC,CAgFpD;AAED,wBAAsB,iCAAiC,CACrD,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,EACjD,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAED,wBAAsB,mDAAmD,CAAC,KAAK,EAAE;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAC;IAClD,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,kCAAkC,CAAC,OAAO,CAAC,CAAC;CACrD,GAAG,OAAO,CAAC,IAAI,CAAC,CAyEhB;AAED,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,EACjD,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;;;;;;;;GASG;AACH,wBAAsB,qCAAqC,CACzD,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,EACjD,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,kCAAkC,GAAG;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,GAC1E,OAAO,CAAC,IAAI,CAAC,CAyCf;AAED,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAUhC;AAED,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,OAAO,CAcT;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,GAAG,IAAI,CA8CzF;AAED,wBAAgB,yCAAyC,CACvD,eAAe,EAAE,OAAO,EACxB,QAAQ,GAAE,IAAI,CAAC,2BAA2B,EAAE,eAAe,GAAG,SAAS,CAAM,GAC5E,sBAAsB,GAAG,IAAI,CAe/B;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC,GAAG,sBAAsB,GAAG,IAAI,CAQhC;AAED,wBAAsB,oCAAoC,CAAC,KAAK,EAAE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAC;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IACjD,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACnD,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,MAAM,CAAC,EAAE,0BAA0B,EAAE,CAAC;IACtC,4FAA4F;IAC5F,iBAAiB,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAC9C,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,mGAAmG;IACnG,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK9B,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAKtC,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC,GAAG,OAAO,CAAC,qCAAqC,CAAC,CAiFjD;AAED,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,IAAI,CAAC,qCAAqC,EAAE,WAAW,CAAC,EAClE,GAAG,EAAE,MAAM,EACX,iBAAiB,EAAE,MAAM,GACxB,MAAM,CAER;AAED,KAAK,sBAAsB,GAAG;IAC5B,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAC;CAClE,CAAC;AAUF,wFAAwF;AACxF,wBAAsB,+BAA+B,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAWlG;AA2BD,kGAAkG;AAClG,wBAAsB,iCAAiC,CAAC,KAAK,EAAE;IAC7D,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAC;IAClD,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;CACxB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAyGlC;AAED,yFAAyF;AACzF,wBAAsB,+BAA+B,CAAC,KAAK,EAAE;IAC3D,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5G,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA0ClC;AA4LD,wBAAsB,+CAA+C,CAAC,KAAK,EAAE;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAC;IAClD,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IAMZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACtE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAMtE,uBAAuB,CAAC,EAAE,MAAM,kBAAkB,GAAG,SAAS,CAAC;IAM/D,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAKhC,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC,GAAG,OAAO,CAAC,gDAAgD,GAAG,IAAI,CAAC,CAykBnE;AAwDD,wBAAgB,6BAA6B,CAAC,KAAK,CAAC,EAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAI1F;AA8qBD;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B,GAAG,MAAM,EAAE,CAOX;AAED,8DAA8D;AAC9D,KAAK,sBAAsB,GAAG,wBAAwB,GAAG,gBAAgB,GAAG,cAAc,GAAG,SAAS,CAAC;AAEvG,qDAAqD;AACrD,KAAK,qBAAqB,GACtB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,sBAAsB,CAAA;CAAE,CAAC;AA8TlD;kEACkE;AAClE,KAAK,sBAAsB,GAAG,OAAO,GAAG,SAAS,CAAC;AAwDlD;;;;GAIG;AACH,eAAO,MAAM,yBAAyB;IACpC,yBAAyB,YACd,2BAA2B,WAC3B;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;iBA9CzC,2BAA2B;iBAC3B,OAAO,CAAC,sBAAsB,CAAC;0BACtB,MAAM,OAAO;;IA8C/B,mBAAmB,QAAM,MAAM;IAC/B,oBAAoB,QAAM,IAAI;IAG9B,6BAA6B,QAAM,MAAM;IACzC,8BAA8B,QAAM,IAAI;IAGxC,+BAA+B,QAAM,MAAM;IAC3C,gCAAgC,QAAM,IAAI;CAG3C,CAAC;AAqJF;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;IACnC,oBAAoB,QAAM,MAAM;IAChC,qBAAqB,QAAM,IAAI;IAG/B,yBAAyB,QAAM,MAAM;IACrC,0BAA0B,QAAM,IAAI;IAMpC,mBAAmB,YAAY,2BAA2B,WAAW;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;CAE1G,CAAC;AAEF,UAAU,mBAAmB;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC/C;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;IACpD;;;;;OAKG;IACH,gBAAgB,IAAI,OAAO,CAAC;IAC5B;;;;;;OAMG;IACH,oBAAoB,IAAI,IAAI,CAAC;IAC7B;;;;;OAKG;IACH,6BAA6B,IAAI,MAAM,CAAC;CACzC;AAuSD,wBAAsB,0CAA0C,CAAC,KAAK,EAAE;IACtE,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAC;IAClD,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK7B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAOjC,yBAAyB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAI3C,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAKzC,uBAAuB,CAAC,EAAE,MAAM,kBAAkB,GAAG,SAAS,CAAC;IAK/D,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAMhC,2BAA2B,CAAC,EAAE,2BAA2B,GAAG,IAAI,CAAC;CAClE,GAAG,OAAO,CAAC,2CAA2C,GAAG,IAAI,CAAC,CAulB9D"}