@xenosystem/agent-interface-client 0.1.0

package/dist/local/attach.js

@@ -0,0 +1,187 @@
+/**
+ * Attaching to a per-user Agent host — the SURFACE side of ADE §2.7.
+ *
+ * 🔴 `attachToLocalAgentHost` attaches or refuses; it can never become the host. There is no
+ * `createHostTransport` parameter, so there is nothing it could construct even if asked — the
+ * dangerous shape (a CLI started while no app is running WINS the lease and is then expected to
+ * *be* the host) is unrepresentable rather than merely forbidden.
+ *
+ * That property is why this file can live in a publishable package at all: everything here is
+ * what a thin client legitimately needs, and nothing here can take ownership. Acquisition and the
+ * host authority stay in the private `packages/host`.
+ */
+import { XENO_AGENT_HOST_PROTOCOL_VERSION, } from '@xenosystem/agent-interface-contract';
+import { inspectLocalAgentHostLease, isLeaseOwnerGone, readLocalAgentHostLeaseConnection, } from './lease.js';
+import { LocalAgentHostRpcClientTransport, positiveInteger, resolveLocalAgentHostEndpoint, } from './transport.js';
+export class LocalAgentHostAuthoritySession {
+    role;
+    descriptor;
+    transport;
+    server;
+    lease;
+    onAuthorityLost;
+    heartbeatTimer;
+    heartbeatPending = false;
+    closed = false;
+    constructor(options) {
+        this.role = options.role;
+        this.descriptor = { ...options.descriptor };
+        this.transport = options.transport;
+        this.server = options.server;
+        this.lease = options.lease;
+        this.onAuthorityLost = options.onAuthorityLost;
+        if (this.lease && options.heartbeatIntervalMs) {
+            this.heartbeatTimer = setInterval(() => { void this.heartbeat(); }, options.heartbeatIntervalMs);
+            this.heartbeatTimer.unref?.();
+        }
+    }
+    async close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        if (this.heartbeatTimer) {
+            clearInterval(this.heartbeatTimer);
+            this.heartbeatTimer = undefined;
+        }
+        this.transport.close();
+        await this.server?.close();
+        await this.lease?.release();
+    }
+    async heartbeat() {
+        if (this.closed || this.heartbeatPending || !this.lease)
+            return;
+        this.heartbeatPending = true;
+        try {
+            await this.lease.heartbeat();
+        }
+        catch (error) {
+            const failure = asError(error);
+            await this.close().catch(() => undefined);
+            this.onAuthorityLost?.(failure);
+        }
+        finally {
+            this.heartbeatPending = false;
+        }
+    }
+}
+/**
+ * Attach to a host someone else owns — and NEVER become one.
+ *
+ * 🔴 This exists because `startLocalAgentHostAuthority` is acquire-or-attach,
+ * and for a surface that is the wrong shape in the most dangerous way: a CLI
+ * started while no app is running would WIN the lease and then be asked to
+ * build a host, which a thin client has no business owning. ADE §2.7 is
+ * explicit that `xeno-agent-cli` "becomes a client of the same per-user host";
+ * a client that can silently become the server is not that.
+ *
+ * 🔴 The defect is made UNREPRESENTABLE rather than documented: there is no
+ * `createHostTransport` parameter here, so there is nothing this function could
+ * construct even if it wanted to. It inspects, it connects, or it refuses with
+ * a reason.
+ */
+export async function attachToLocalAgentHost(options) {
+    const protocolVersion = positiveInteger(options.protocolVersion) || XENO_AGENT_HOST_PROTOCOL_VERSION;
+    const connectTimeoutMs = positiveInteger(options.connectTimeoutMs) || 5_000;
+    const requestTimeoutMs = positiveInteger(options.requestTimeoutMs) || 30_000;
+    const descriptor = await inspectLocalAgentHostLease(options.rootDirectory);
+    if (!descriptor) {
+        return {
+            attached: false,
+            reason: 'no-host',
+            detail: 'No XENO Agent host is running for this user. Start the Agent app, or run the host detached.',
+        };
+    }
+    // 🔴 The SAME staleness rule the acquire path uses — imported, not restated.
+    // A crashed owner leaves its lock file behind, and connecting to it would
+    // hang until the transport timed out with "unreachable", which reads as a
+    // network fault rather than a host that is simply gone.
+    if (isLeaseOwnerGone({
+        heartbeatAt: descriptor.heartbeatAt,
+        pid: descriptor.pid,
+        at: (options.now || Date.now)(),
+        ...(options.staleAfterMs === undefined ? {} : { staleAfterMs: options.staleAfterMs }),
+        ...(options.isProcessAlive ? { isProcessAlive: options.isProcessAlive } : {}),
+    })) {
+        return {
+            attached: false,
+            reason: 'host-gone',
+            detail: `The recorded Agent host (pid ${descriptor.pid}) is no longer running. Start the Agent app again.`,
+        };
+    }
+    if (descriptor.protocolVersion !== protocolVersion) {
+        return {
+            attached: false,
+            reason: 'protocol-mismatch',
+            hostProtocol: descriptor.protocolVersion,
+            clientProtocol: protocolVersion,
+            detail: `The running Agent host speaks protocol ${descriptor.protocolVersion} and this client speaks ${protocolVersion}. Update whichever is older.`,
+        };
+    }
+    const connection = await readLocalAgentHostLeaseConnection(options.rootDirectory);
+    if (!connection || connection.descriptor.instanceId !== descriptor.instanceId) {
+        // The host restarted between the inspection and the read. Refusing beats
+        // connecting to a different instance than the one just vetted.
+        return {
+            attached: false,
+            reason: 'unreachable',
+            detail: 'The Agent host changed while connecting. Retry.',
+        };
+    }
+    const transport = new LocalAgentHostRpcClientTransport({
+        endpoint: connection.descriptor.endpoint,
+        transportToken: connection.transportToken,
+        protocolVersion,
+        requestTimeoutMs,
+    });
+    try {
+        await connectBeforeDeadline(transport, connectTimeoutMs);
+    }
+    catch (error) {
+        transport.close();
+        return {
+            attached: false,
+            reason: 'unreachable',
+            detail: error instanceof Error ? error.message : String(error),
+        };
+    }
+    return {
+        attached: true,
+        session: new LocalAgentHostAuthoritySession({
+            // Always a client. There is no branch here that produces an owner, which
+            // is the property this function exists to guarantee.
+            role: 'attached-client',
+            descriptor: connection.descriptor,
+            transport,
+        }),
+    };
+}
+export async function connectBeforeDeadline(transport, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    let lastError;
+    do {
+        try {
+            await transport.connect();
+            return;
+        }
+        catch (error) {
+            lastError = asError(error);
+            if (!isRetryableConnectionError(lastError) || Date.now() >= deadline)
+                break;
+            await delay(Math.min(50, Math.max(1, deadline - Date.now())));
+        }
+    } while (Date.now() < deadline);
+    throw lastError || new Error('Unable to connect to the local Agent host authority.');
+}
+function isRetryableConnectionError(error) {
+    if (!('code' in error))
+        return false;
+    const code = error.code;
+    return code === 'ENOENT' || code === 'ECONNREFUSED' || code === 'EPIPE';
+}
+function delay(milliseconds) {
+    return new Promise((resolveDelay) => setTimeout(resolveDelay, milliseconds));
+}
+function asError(error) {
+    return error instanceof Error ? error : new Error(String(error));
+}
+//# sourceMappingURL=attach.js.map

package/dist/local/attach.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attach.js","sourceRoot":"","sources":["../../src/local/attach.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,gCAAgC,GAEjC,MAAM,sCAAsC,CAAA;AAC7C,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,iCAAiC,GAElC,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,gCAAgC,EAChC,eAAe,EACf,6BAA6B,GAC9B,MAAM,gBAAgB,CAAA;AA0BvB,MAAM,OAAO,8BAA8B;IAChC,IAAI,CAA6B;IACjC,UAAU,CAA+B;IACzC,SAAS,CAAkC;IACnC,MAAM,CAAqC;IAC3C,KAAK,CAAqC;IAC1C,eAAe,CAAsC;IAC9D,cAAc,CAA4C;IAC1D,gBAAgB,GAAG,KAAK,CAAA;IACxB,MAAM,GAAG,KAAK,CAAA;IAEtB,YAAY,OAQX;QACC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;QACxB,IAAI,CAAC,UAAU,GAAG,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAA;QAC3C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;QAClC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC5B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;QAC1B,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAA;QAC9C,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAC9C,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,SAAS,EAAE,CAAA,CAAC,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAA;YAC/F,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,CAAA;QAC/B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAM;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YAClC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAA;QACjC,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;QACtB,MAAM,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAA;QAC1B,MAAM,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAA;IAC7B,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAM;QAC/D,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAA;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAA;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;YAC9B,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACzC,IAAI,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAAA;QACjC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAA;QAC/B,CAAC;IACH,CAAC;CACF;AAqCD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAsC;IAEtC,MAAM,eAAe,GAAG,eAAe,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,gCAAgC,CAAA;IACpG,MAAM,gBAAgB,GAAG,eAAe,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAA;IAC3E,MAAM,gBAAgB,GAAG,eAAe,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAA;IAE5E,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAC1E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,6FAA6F;SACtG,CAAA;IACH,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,wDAAwD;IACxD,IAAI,gBAAgB,CAAC;QACnB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,GAAG,EAAE,UAAU,CAAC,GAAG;QACnB,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;QAC/B,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;QACrF,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC,EAAE,CAAC;QACH,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,gCAAgC,UAAU,CAAC,GAAG,oDAAoD;SAC3G,CAAA;IACH,CAAC;IAED,IAAI,UAAU,CAAC,eAAe,KAAK,eAAe,EAAE,CAAC;QACnD,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,mBAAmB;YAC3B,YAAY,EAAE,UAAU,CAAC,eAAe;YACxC,cAAc,EAAE,eAAe;YAC/B,MAAM,EAAE,0CAA0C,UAAU,CAAC,eAAe,2BAA2B,eAAe,8BAA8B;SACrJ,CAAA;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,iCAAiC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IACjF,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;QAC9E,yEAAyE;QACzE,+DAA+D;QAC/D,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,iDAAiD;SAC1D,CAAA;IACH,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,gCAAgC,CAAC;QACrD,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,QAAQ;QACxC,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,eAAe;QACf,gBAAgB;KACjB,CAAC,CAAA;IACF,IAAI,CAAC;QACH,MAAM,qBAAqB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAA;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,SAAS,CAAC,KAAK,EAAE,CAAA;QACjB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/D,CAAA;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,IAAI,8BAA8B,CAAC;YAC1C,yEAAyE;YACzE,qDAAqD;YACrD,IAAI,EAAE,iBAAiB;YACvB,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,SAAS;SACV,CAAC;KACH,CAAA;AACH,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAA2C,EAC3C,SAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;IACvC,IAAI,SAA4B,CAAA;IAChC,GAAG,CAAC;QACF,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,OAAO,EAAE,CAAA;YACzB,OAAM;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;YAC1B,IAAI,CAAC,0BAA0B,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAK;YAC3E,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;QAC/D,CAAC;IACH,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAC;IAC/B,MAAM,SAAS,IAAI,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;AACtF,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAY;IAC9C,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACpC,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAA;IAClD,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,OAAO,CAAA;AACzE,CAAC;AAED,SAAS,KAAK,CAAC,YAAoB;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAA;AAC9E,CAAC;AAGD,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AAClE,CAAC"}

package/dist/local/index.d.ts

@@ -0,0 +1,4 @@
+export * from './transport.js';
+export * from './lease.js';
+export * from './attach.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/local/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/local/index.ts"],"names":[],"mappings":"AAiBA,cAAc,gBAAgB,CAAA;AAI9B,cAAc,YAAY,CAAA;AAG1B,cAAc,aAAa,CAAA"}

package/dist/local/index.js

@@ -0,0 +1,23 @@
+// The Node-only local-IPC surface of the Agent host client.
+//
+// 🔴 This is a SEPARATE ENTRY POINT on purpose. `packages/client` is on the architecture
+// guard's renderer-safe list, and `packages/ui` value-imports the main entry — so anything
+// re-exported from `../index.ts` lands in the ELECTRON RENDERER BUNDLE. These modules import
+// `node:net`, `node:fs/promises` and `node:crypto`, which would break the secure renderer
+// boundary that `AGENTS.md` makes an invariant.
+//
+// It mirrors the precedent already set by `@xenosystem/agent-interface-host/node`: Node-only
+// capability lives behind a subpath the renderer never resolves, and the guard forbids
+// renderer-safe code from importing it.
+//
+// A SURFACE (the CLI, ADE §2.7) imports this. The renderer imports the package root.
+// The local-IPC wire protocol and client transport — what a surface needs to attach to a
+// per-user Agent host. Node-only by necessity; see transport.ts for why it is here rather
+// than in `contract`.
+export * from './transport.js';
+// Lease READING — finding a running host. Acquisition deliberately stays in the host package,
+// so a surface structurally cannot take ownership.
+export * from './lease.js';
+// Attaching to a per-user host. Attaches or refuses; never becomes the host.
+export * from './attach.js';
+//# sourceMappingURL=index.js.map

package/dist/local/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/local/index.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,EAAE;AACF,yFAAyF;AACzF,2FAA2F;AAC3F,6FAA6F;AAC7F,0FAA0F;AAC1F,gDAAgD;AAChD,EAAE;AACF,6FAA6F;AAC7F,uFAAuF;AACvF,wCAAwC;AACxC,EAAE;AACF,qFAAqF;AAErF,yFAAyF;AACzF,0FAA0F;AAC1F,sBAAsB;AACtB,cAAc,gBAAgB,CAAA;AAE9B,8FAA8F;AAC9F,mDAAmD;AACnD,cAAc,YAAY,CAAA;AAE1B,6EAA6E;AAC7E,cAAc,aAAa,CAAA"}

package/dist/local/lease.d.ts

@@ -0,0 +1,50 @@
+export interface LocalAgentHostLeaseDescriptor {
+    schemaVersion: 1;
+    instanceId: string;
+    pid: number;
+    endpoint: string;
+    protocolVersion: number;
+    acquiredAt: number;
+    heartbeatAt: number;
+}
+export interface LocalAgentHostLeaseConnectionInfo {
+    descriptor: LocalAgentHostLeaseDescriptor;
+    /** Sensitive same-user bearer credential. Never expose this to a renderer or diagnostic export. */
+    transportToken: string;
+}
+export interface LocalAgentHostLeaseRecord extends LocalAgentHostLeaseDescriptor {
+    transportToken: string;
+}
+export declare const DEFAULT_LEASE_STALE_AFTER_MS = 15000;
+/**
+ * Is the recorded owner gone?
+ *
+ * 🔴 TWO conditions, and the second is the one that matters. A missed
+ * heartbeat alone does not mean a dead host — a process paused by a debugger,
+ * a laptop resumed from sleep, or a machine under load all produce one. Taking
+ * the lease from a LIVE owner is the split-brain the lease exists to prevent,
+ * so the pid must also be gone.
+ *
+ * Exported and shared because a second caller now needs the same question
+ * answered without acquiring anything: a surface deciding whether a host is
+ * actually there. Two spellings of "is the owner dead" would eventually
+ * disagree, and the two answers are "take over" and "connect".
+ */
+export declare function isLeaseOwnerGone(input: {
+    heartbeatAt: number;
+    pid: number;
+    at: number;
+    staleAfterMs?: number;
+    isProcessAlive?: (pid: number) => boolean;
+}): boolean;
+export declare function inspectLocalAgentHostLease(rootDirectory: string): Promise<LocalAgentHostLeaseDescriptor | null>;
+/**
+ * Reads connection material for another trusted main/host process owned by the
+ * same OS user. Callers must keep the token outside renderers, logs, and IPC.
+ */
+export declare function readLocalAgentHostLeaseConnection(rootDirectory: string): Promise<LocalAgentHostLeaseConnectionInfo | null>;
+export declare function readLeaseRecord(path: string): Promise<LocalAgentHostLeaseRecord>;
+export declare function parseLeaseRecord(value: string): LocalAgentHostLeaseRecord;
+export declare function publicDescriptor(record: LocalAgentHostLeaseRecord): LocalAgentHostLeaseDescriptor;
+export declare function defaultProcessAlive(pid: number): boolean;
+//# sourceMappingURL=lease.d.ts.map

package/dist/local/lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.d.ts","sourceRoot":"","sources":["../../src/local/lease.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,6BAA6B;IAC5C,aAAa,EAAE,CAAC,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,MAAM,CAAA;IAChB,eAAe,EAAE,MAAM,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,iCAAiC;IAChD,UAAU,EAAE,6BAA6B,CAAA;IACzC,mGAAmG;IACnG,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,yBAA0B,SAAQ,6BAA6B;IAC9E,cAAc,EAAE,MAAM,CAAA;CACvB;AAID,eAAO,MAAM,4BAA4B,QAAS,CAAA;AAElD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,WAAW,EAAE,MAAM,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,EAAE,EAAE,MAAM,CAAA;IACV,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAA;CAC1C,GAAG,OAAO,CAIV;AAID,wBAAsB,0BAA0B,CAC9C,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAQ/C;AAED;;;GAGG;AACH,wBAAsB,iCAAiC,CACrD,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,iCAAiC,GAAG,IAAI,CAAC,CAYnD;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAEtF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,yBAAyB,CAqBzE;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,yBAAyB,GAAG,6BAA6B,CAUjG;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAQxD"}

package/dist/local/lease.js

@@ -0,0 +1,120 @@
+import { isNodeError } from './transport.js';
+/**
+ * Local Agent host lease — the READ half.
+ *
+ * A surface needs to find and validate a running host: read the lease, decide whether its owner
+ * is gone, and pull the connection info. It must never be able to ACQUIRE one — a thin client
+ * that can win the lease would then be asked to *be* the host, which ADE §2.7 explicitly rules
+ * out. Acquisition stays in `packages/host`, so the client cannot take ownership because the code
+ * to do it is not here.
+ *
+ * `isNodeError` and the parse/record helpers are exported for the host's acquire half; they are
+ * internal to the lease protocol and not part of the supported surface.
+ */
+import { randomBytes } from 'node:crypto';
+import { mkdir, open, readFile, unlink } from 'node:fs/promises';
+import { join } from 'node:path';
+export const DEFAULT_LEASE_STALE_AFTER_MS = 15_000;
+/**
+ * Is the recorded owner gone?
+ *
+ * 🔴 TWO conditions, and the second is the one that matters. A missed
+ * heartbeat alone does not mean a dead host — a process paused by a debugger,
+ * a laptop resumed from sleep, or a machine under load all produce one. Taking
+ * the lease from a LIVE owner is the split-brain the lease exists to prevent,
+ * so the pid must also be gone.
+ *
+ * Exported and shared because a second caller now needs the same question
+ * answered without acquiring anything: a surface deciding whether a host is
+ * actually there. Two spellings of "is the owner dead" would eventually
+ * disagree, and the two answers are "take over" and "connect".
+ */
+export function isLeaseOwnerGone(input) {
+    const staleAfterMs = positiveInteger(input.staleAfterMs) || DEFAULT_LEASE_STALE_AFTER_MS;
+    const alive = input.isProcessAlive || defaultProcessAlive;
+    return input.at - input.heartbeatAt > staleAfterMs && !alive(input.pid);
+}
+export async function inspectLocalAgentHostLease(rootDirectory) {
+    const path = join(rootDirectory, 'agent-host.lock');
+    try {
+        return publicDescriptor(await readLeaseRecord(path));
+    }
+    catch (error) {
+        if (isNodeError(error, 'ENOENT'))
+            return null;
+        throw error;
+    }
+}
+/**
+ * Reads connection material for another trusted main/host process owned by the
+ * same OS user. Callers must keep the token outside renderers, logs, and IPC.
+ */
+export async function readLocalAgentHostLeaseConnection(rootDirectory) {
+    const path = join(rootDirectory, 'agent-host.lock');
+    try {
+        const record = await readLeaseRecord(path);
+        return {
+            descriptor: publicDescriptor(record),
+            transportToken: record.transportToken,
+        };
+    }
+    catch (error) {
+        if (isNodeError(error, 'ENOENT'))
+            return null;
+        throw error;
+    }
+}
+export async function readLeaseRecord(path) {
+    return parseLeaseRecord(await readFile(path, 'utf8'));
+}
+export function parseLeaseRecord(value) {
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch {
+        throw new Error('Agent host authority lease is malformed.');
+    }
+    if (!isRecord(parsed)
+        || parsed.schemaVersion !== 1
+        || typeof parsed.instanceId !== 'string'
+        || typeof parsed.pid !== 'number'
+        || typeof parsed.endpoint !== 'string'
+        || typeof parsed.protocolVersion !== 'number'
+        || typeof parsed.acquiredAt !== 'number'
+        || typeof parsed.heartbeatAt !== 'number'
+        || typeof parsed.transportToken !== 'string'
+        || parsed.transportToken.length < 32) {
+        throw new Error('Agent host authority lease is invalid.');
+    }
+    return parsed;
+}
+export function publicDescriptor(record) {
+    return {
+        schemaVersion: 1,
+        instanceId: record.instanceId,
+        pid: record.pid,
+        endpoint: record.endpoint,
+        protocolVersion: record.protocolVersion,
+        acquiredAt: record.acquiredAt,
+        heartbeatAt: record.heartbeatAt,
+    };
+}
+export function defaultProcessAlive(pid) {
+    if (!Number.isInteger(pid) || pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return isNodeError(error, 'EPERM');
+    }
+}
+function positiveInteger(value) {
+    return typeof value === 'number' && Number.isInteger(value) && value > 0 ? value : undefined;
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=lease.js.map

package/dist/local/lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.js","sourceRoot":"","sources":["../../src/local/lease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAE5C;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAwBhC,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAA;AAElD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAMhC;IACC,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,4BAA4B,CAAA;IACxF,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,IAAI,mBAAmB,CAAA;IACzD,OAAO,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,WAAW,GAAG,YAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;AACzE,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,aAAqB;IAErB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAA;IACnD,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC,CAAA;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QAC7C,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,aAAqB;IAErB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAA;IACnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAA;QAC1C,OAAO;YACL,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC;YACpC,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QAC7C,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,OAAO,gBAAgB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;AACvD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;WAChB,MAAM,CAAC,aAAa,KAAK,CAAC;WAC1B,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;WACrC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;WAC9B,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;WACnC,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;WAC1C,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;WACrC,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;WACtC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;WACzC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,EAAE,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO,MAA8C,CAAA;AACvD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAiC;IAChE,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACpD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QACpB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IACpC,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC9F,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC"}

package/dist/local/transport.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Local Agent host wire protocol — framing plus the CLIENT transport.
+ *
+ * 🔴 This lives in the CLIENT package, not in `contract`, and the reason is load-bearing:
+ * `contract` is Node-free and must stay that way. A renderer reaches `contract/index.js`, and
+ * Vite fails a browser build on any `node:` builtin ("stat" is not exported by
+ * "__vite-browser-external") — `browserBarrelPurity.test.ts` pins that. This module needs
+ * `node:net`, `node:crypto` and `node:fs/promises`, so it cannot go there.
+ *
+ * It is also why the split is client-package-and-below rather than contract-and-below: a surface
+ * that wants to ATTACH to a local host needs Node anyway.
+ *
+ * @packageDocumentation
+ */
+import { type Socket } from 'node:net';
+import { type AgentHostEvent, type AgentHostEventListener, type AgentHostInput, type AgentHostMethod, type AgentHostOutput, type AgentHostProtocolErrorCode, type AgentHostTransport, type AgentHostUnsubscribe } from '@xenosystem/agent-interface-contract';
+export declare const LOCAL_AGENT_HOST_DEFAULT_MAX_FRAME_BYTES: number;
+export declare const LOCAL_AGENT_HOST_ABSOLUTE_MAX_FRAME_BYTES: number;
+export interface LocalRpcRequest {
+    kind: 'request';
+    id: string;
+    protocolVersion: number;
+    token: string;
+    method: AgentHostMethod;
+    input: unknown;
+}
+export type LocalRpcResponse = {
+    kind: 'response';
+    id: string;
+    ok: true;
+    output: unknown;
+} | {
+    kind: 'response';
+    id: string;
+    ok: false;
+    error: {
+        code: AgentHostProtocolErrorCode;
+        message: string;
+    };
+};
+interface LocalRpcEvent {
+    kind: 'event';
+    event: AgentHostEvent;
+}
+export type LocalRpcServerMessage = LocalRpcResponse | LocalRpcEvent;
+export interface LocalAgentHostRpcServerOptions {
+    transport: AgentHostTransport;
+    endpoint: string;
+    transportToken: string;
+    protocolVersion?: number;
+    maxFrameBytes?: number;
+    removeStaleEndpoint?: boolean;
+}
+export interface LocalAgentHostRpcClientOptions {
+    endpoint: string;
+    transportToken: string;
+    protocolVersion?: number;
+    maxFrameBytes?: number;
+    requestTimeoutMs?: number;
+}
+/** Node-side AgentHostTransport implementation for a local host authority. */
+export declare class LocalAgentHostRpcClientTransport implements AgentHostTransport {
+    private readonly endpoint;
+    private readonly transportToken;
+    private readonly protocolVersion;
+    private readonly maxFrameBytes;
+    private readonly requestTimeoutMs;
+    private readonly listeners;
+    private readonly pending;
+    private readonly requestPrefix;
+    private requestSequence;
+    private socket;
+    private connectPromise;
+    constructor(options: LocalAgentHostRpcClientOptions);
+    get connected(): boolean;
+    connect(): Promise<void>;
+    request<M extends AgentHostMethod>(method: M, input: AgentHostInput<M>): Promise<AgentHostOutput<M>>;
+    subscribe(listener: AgentHostEventListener): AgentHostUnsubscribe;
+    close(): void;
+    private receive;
+    private disconnect;
+}
+export declare function resolveLocalAgentHostEndpoint(rootDirectory: string, scope?: string): string;
+export declare class JsonLineDecoder {
+    private readonly maxFrameBytes;
+    private readonly onFrame;
+    private buffer;
+    constructor(maxFrameBytes: number, onFrame: (frame: string) => void);
+    push(chunk: Buffer): void;
+}
+export declare function writeFrame(socket: Socket, value: unknown, maxFrameBytes: number): void;
+export declare function safeTokenEquals(left: string, right: string): boolean;
+export declare function assertLocalRpcOptions(endpoint: string, transportToken: string): void;
+export declare function positiveInteger(value: number | undefined): number | undefined;
+export declare function resolveMaxFrameBytes(value: number | undefined): number;
+export declare function asError(error: unknown): Error;
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+export declare function isNodeError(error: unknown, code: string): error is NodeJS.ErrnoException;
+export {};
+//# sourceMappingURL=transport.d.ts.map

package/dist/local/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/local/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,EAIL,KAAK,MAAM,EACZ,MAAM,UAAU,CAAA;AACjB,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EAC1B,MAAM,sCAAsC,CAAA;AAE7C,eAAO,MAAM,wCAAwC,QAAmB,CAAA;AACxE,eAAO,MAAM,yCAAyC,QAAmB,CAAA;AAGzE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,SAAS,CAAA;IACf,EAAE,EAAE,MAAM,CAAA;IACV,eAAe,EAAE,MAAM,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,eAAe,CAAA;IACvB,KAAK,EAAE,OAAO,CAAA;CACf;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC3D;IACE,IAAI,EAAE,UAAU,CAAA;IAChB,EAAE,EAAE,MAAM,CAAA;IACV,EAAE,EAAE,KAAK,CAAA;IACT,KAAK,EAAE;QAAE,IAAI,EAAE,0BAA0B,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAC7D,CAAA;AAEL,UAAU,aAAa;IACrB,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,cAAc,CAAA;CACtB;AAED,MAAM,MAAM,qBAAqB,GAAG,gBAAgB,GAAG,aAAa,CAAA;AAEpE,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,kBAAkB,CAAA;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAGD,8EAA8E;AAC9E,qBAAa,gCAAiC,YAAW,kBAAkB;IACzE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;IACvC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAC9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAIpB;IACJ,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkC;IAChE,OAAO,CAAC,eAAe,CAAI;IAC3B,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,cAAc,CAA6B;gBAEvC,OAAO,EAAE,8BAA8B;IASnD,IAAI,SAAS,IAAI,OAAO,CAEvB;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAkCxB,OAAO,CAAC,CAAC,SAAS,eAAe,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAqC1G,SAAS,CAAC,QAAQ,EAAE,sBAAsB,GAAG,oBAAoB;IAOjE,KAAK,IAAI,IAAI;IAIb,OAAO,CAAC,OAAO;IAwBf,OAAO,CAAC,UAAU;CAUnB;AAcD,wBAAgB,6BAA6B,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,SAAY,GAAG,MAAM,CAU9F;AAED,qBAAa,eAAe;IAIxB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJ1B,OAAO,CAAC,MAAM,CAA2C;gBAGtC,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI;IAGnD,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAiB1B;AAwBD,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAMtF;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAIpE;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAGpF;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAE7E;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAQtE;AAUD,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAE7C;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,IAAI,MAAM,CAAC,cAAc,CAExF"}