@xopcai/xopc 0.0.124 → 0.0.126

package/dist/src/agent/orchestration/agent-orchestrator.js

@@ -1,7 +1,8 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import "../memory/dreaming/constants.js";
-import { resolveDreamingConfig } from "../memory/dreaming/config.js";
+import { resolveDreamingAgentScope } from "../memory/dreaming/scope.js";
 import { persistInboundAttachments } from "../../channels/attachments/inbound-persist.js";
 import { buildTranscriptUserMessage, clearPendingTranscriptUserMessage, hydrateUserTurnForLlm, setPendingTranscriptUserMessage } from "../inbound/attachment-pipeline.js";
 import { extractAgentUserPlainText } from "../memory/user-message-text.js";
@@ -52,15 +53,20 @@ var AgentOrchestrator = class {
 		if (typeof msg.content === "string" && (sessionKey.startsWith("cron:") || sessionKey.includes(":cron:") || sessionKey.includes(":automation:") || context.channel === "cron" || context.channel === "automation")) {
 			const content = msg.content;
 			if (content.includes("__xopc_memory_dreaming_sweep__") || content.includes("__xopc_memory_dreaming_light_sweep__") || content.includes("__xopc_memory_dreaming_rem_sweep__")) {
-				const workspaceDir = this.agentManager.getResolvedWorkspaceForSession(sessionKey);
-				const resolved = resolveDreamingConfig(this.getConfig?.());
+				const cfg = this.getConfig?.();
+				if (!cfg) {
+					log.warn({ sessionKey }, "Dreaming sweep skipped: config unavailable");
+					return;
+				}
+				const scope = resolveDreamingAgentScope(cfg, resolveEffectiveAgentProfileForSession(cfg, sessionKey).agentId);
+				const resolved = scope.config;
 				const t0 = Date.now();
 				if (content.includes("__xopc_memory_dreaming_light_sweep__")) {
 					const result = await runLightSweep({
-						workspaceDir,
+						dreamingRoot: scope.memoriesDir,
 						config: resolved.phases.light
 					});
-					await appendDreamingEvent(workspaceDir, {
+					const event = {
 						timestamp: (/* @__PURE__ */ new Date()).toISOString(),
 						phase: "light",
 						ok: result.ok,
@@ -69,13 +75,14 @@ var AgentOrchestrator = class {
 						scannedEntries: result.scannedEntries,
 						newSignals: result.newSignals,
 						deduped: result.deduped
-					});
+					};
+					await appendDreamingEvent(scope.memoriesDir, event);
 				} else if (content.includes("__xopc_memory_dreaming_rem_sweep__")) {
 					const result = await runRemPatterns({
-						workspaceDir,
+						dreamingRoot: scope.memoriesDir,
 						config: resolved.phases.rem
 					});
-					await appendDreamingEvent(workspaceDir, {
+					const event = {
 						timestamp: (/* @__PURE__ */ new Date()).toISOString(),
 						phase: "rem",
 						ok: result.ok,
@@ -83,14 +90,16 @@ var AgentOrchestrator = class {
 						durationMs: Date.now() - t0,
 						patternsDiscovered: result.patternsDiscovered,
 						entriesAnalyzed: result.entriesAnalyzed
-					});
+					};
+					await appendDreamingEvent(scope.memoriesDir, event);
 				} else {
 					const result = await runDreamingDeepPromotion({
-						workspaceDir,
+						workspaceDir: scope.workspaceDir,
+						dreamingRoot: scope.memoriesDir,
 						config: resolved.phases.deep,
 						memoryManager: this.agentManager.getMemoryManagerForSession(sessionKey)
 					});
-					await appendDreamingEvent(workspaceDir, {
+					const event = {
 						timestamp: (/* @__PURE__ */ new Date()).toISOString(),
 						phase: "deep",
 						ok: result.ok,
@@ -98,7 +107,8 @@ var AgentOrchestrator = class {
 						durationMs: Date.now() - t0,
 						candidates: result.candidates,
 						applied: result.applied
-					});
+					};
+					await appendDreamingEvent(scope.memoriesDir, event);
 				}
 				return;
 			}

package/dist/src/agent/orchestration/agent-orchestrator.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-orchestrator.js","names":[],"sources":["../../../../src/agent/orchestration/agent-orchestrator.ts"],"sourcesContent":["/**\n * Agent Orchestrator - Coordinates Agent execution flow\n *\n * Manages the complete agent execution pipeline from message processing\n * to response generation.\n */\n\nimport type { Config } from '../../config/schema.js';\nimport type { InboundMessage } from '../../infra/bus/index.js';\nimport type { SessionConfigStore, SessionStore } from '../../session/index.js';\nimport type { SessionHydrator } from '../session/index.js';\nimport { resolveEffectiveThinkingLevel } from '../../session/thinking-resolve.js';\nimport type { ThinkLevel } from '../transcript/thinking-types.js';\nimport type { ModelManager } from '../models/index.js';\nimport type { SessionContext } from '../session/session-context.js';\nimport type { AgentEventHandler } from './agent-event-handler.js';\nimport type { FeedbackCoordinator } from '../feedback/feedback-coordinator.js';\nimport type { AgentManager } from '../agent-manager.js';\nimport { createLogger } from '../../utils/logger.js';\nimport { extractAgentUserPlainText } from '../memory/user-message-text.js';\nimport { abortEmbeddedRun } from '../embedded/runs.js';\nimport { runEmbeddedTurnForSession } from '../embedded/run-for-session.js';\nimport type { EmbeddedStreamEvent } from '../embedded/types.js';\nimport { persistInboundAttachments } from '../../channels/attachments/inbound-persist.js';\nimport {\n  buildTranscriptUserMessage,\n  clearPendingTranscriptUserMessage,\n  hydrateUserTurnForLlm,\n  setPendingTranscriptUserMessage,\n} from '../inbound/attachment-pipeline.js';\nimport {\n  DREAMING_SWEEP_TOKEN,\n  DREAMING_LIGHT_SWEEP_TOKEN,\n  DREAMING_REM_SWEEP_TOKEN,\n} from '../memory/dreaming/constants.js';\nimport { resolveDreamingConfig } from '../memory/dreaming/config.js';\nimport { runDreamingDeepPromotion } from '../memory/dreaming/deep-promotion.js';\nimport { appendDreamingEvent, type DreamingEvent } from '../memory/dreaming/events.js';\nimport { runLightSweep } from '../memory/dreaming/light-sweep.js';\nimport { runRemPatterns } from '../memory/dreaming/rem-patterns.js';\n\nconst log = createLogger('AgentOrchestrator');\n\nexport interface AgentOrchestratorConfig {\n  agentManager: AgentManager;\n  sessionStore: SessionStore;\n  modelManager: ModelManager;\n  eventHandler: AgentEventHandler;\n  feedbackCoordinator: FeedbackCoordinator;\n  sessionConfigStore: SessionConfigStore;\n  /** Per-session hydration (workspace override + model override) before the agent runs. */\n  sessionHydrator: SessionHydrator;\n  getThinkingDefault: () => ThinkLevel | undefined;\n  /** Per-session default from merged `agents.list` / defaults (optional). */\n  getThinkingDefaultForSession?: (sessionKey: string) => ThinkLevel | undefined;\n  /** Default workspace root when no per-session resolver is set. */\n  workspaceRoot: string;\n  /** Per-agent workspace root for attachments (optional; defaults to `workspaceRoot`). */\n  getWorkspaceRootForSession?: (sessionKey: string) => string;\n  /** Agent home (`…/agents/<id>/`) for inbound/TTS files — keeps internal state out of the markdown workspace. */\n  getAgentInternalStorageRootForSession?: (sessionKey: string) => string;\n  /** Fire-and-forget after full session persist (e.g. LLM session title); not called from mid-turn snapshots. */\n  enqueueAutoTitle?: (sessionKey: string) => void;\n  /** For per-turn timeout. */\n  getConfig?: () => Config | undefined;\n  /** Channel streaming: token/tool events from pi embedded session. */\n  onEmbeddedStreamEvent?: (sessionKey: string, event: EmbeddedStreamEvent) => void;\n  /** Called after a successful embedded turn with assistant plain text. */\n  onEmbeddedTurnComplete?: (sessionKey: string, lastAssistantText?: string) => void;\n}\n\nexport class AgentOrchestrator {\n  private agentManager: AgentManager;\n  private sessionStore: SessionStore;\n  private modelManager: ModelManager;\n  private feedbackCoordinator: FeedbackCoordinator;\n  private sessionConfigStore: SessionConfigStore;\n  private sessionHydrator: SessionHydrator;\n  private getThinkingDefault: () => ThinkLevel | undefined;\n  private getThinkingDefaultForSession?: (sessionKey: string) => ThinkLevel | undefined;\n  private enqueueAutoTitle?: (sessionKey: string) => void;\n  private getConfig?: () => Config | undefined;\n  private onEmbeddedStreamEvent?: (sessionKey: string, event: EmbeddedStreamEvent) => void;\n  private onEmbeddedTurnComplete?: (sessionKey: string, lastAssistantText?: string) => void;\n\n  constructor(config: AgentOrchestratorConfig) {\n    this.agentManager = config.agentManager;\n    this.sessionStore = config.sessionStore;\n    this.modelManager = config.modelManager;\n    this.feedbackCoordinator = config.feedbackCoordinator;\n    this.sessionConfigStore = config.sessionConfigStore;\n    this.sessionHydrator = config.sessionHydrator;\n    this.getThinkingDefault = config.getThinkingDefault;\n    this.getThinkingDefaultForSession = config.getThinkingDefaultForSession;\n    this.enqueueAutoTitle = config.enqueueAutoTitle;\n    this.getConfig = config.getConfig;\n    this.onEmbeddedStreamEvent = config.onEmbeddedStreamEvent;\n    this.onEmbeddedTurnComplete = config.onEmbeddedTurnComplete;\n  }\n\n  /**\n   * Process a message through the agent orchestration pipeline\n   */\n  async process(msg: InboundMessage, context: SessionContext): Promise<void> {\n    const { sessionKey } = context;\n\n    log.debug({ sessionKey }, 'Processing message through agent orchestrator');\n\n    await this.sessionHydrator.workspace(sessionKey);\n\n    // Dreaming: short-circuit scheduled maintenance tokens into local runs.\n    // This avoids spending LLM tokens for scheduled memory consolidation.\n    if (\n      typeof msg.content === 'string' &&\n      (\n        sessionKey.startsWith('cron:') ||\n        sessionKey.includes(':cron:') ||\n        sessionKey.includes(':automation:') ||\n        context.channel === 'cron' ||\n        context.channel === 'automation'\n      )\n    ) {\n      const content = msg.content;\n      const isDreamingSweep =\n        content.includes(DREAMING_SWEEP_TOKEN) ||\n        content.includes(DREAMING_LIGHT_SWEEP_TOKEN) ||\n        content.includes(DREAMING_REM_SWEEP_TOKEN);\n\n      if (isDreamingSweep) {\n        const workspaceDir = this.agentManager.getResolvedWorkspaceForSession(sessionKey);\n        const resolved = resolveDreamingConfig(this.getConfig?.());\n        const t0 = Date.now();\n\n        if (content.includes(DREAMING_LIGHT_SWEEP_TOKEN)) {\n          const result = await runLightSweep({ workspaceDir, config: resolved.phases.light });\n          const event: DreamingEvent = {\n            timestamp: new Date().toISOString(), phase: 'light',\n            ok: result.ok, reason: result.reason, durationMs: Date.now() - t0,\n            scannedEntries: result.scannedEntries, newSignals: result.newSignals, deduped: result.deduped,\n          };\n          await appendDreamingEvent(workspaceDir, event);\n        } else if (content.includes(DREAMING_REM_SWEEP_TOKEN)) {\n          const result = await runRemPatterns({ workspaceDir, config: resolved.phases.rem });\n          const event: DreamingEvent = {\n            timestamp: new Date().toISOString(), phase: 'rem',\n            ok: result.ok, reason: result.reason, durationMs: Date.now() - t0,\n            patternsDiscovered: result.patternsDiscovered, entriesAnalyzed: result.entriesAnalyzed,\n          };\n          await appendDreamingEvent(workspaceDir, event);\n        } else {\n          const result = await runDreamingDeepPromotion({\n            workspaceDir,\n            config: resolved.phases.deep,\n            memoryManager: this.agentManager.getMemoryManagerForSession(sessionKey),\n          });\n          const event: DreamingEvent = {\n            timestamp: new Date().toISOString(), phase: 'deep',\n            ok: result.ok, reason: result.reason, durationMs: Date.now() - t0,\n            candidates: result.candidates, applied: result.applied,\n          };\n          await appendDreamingEvent(workspaceDir, event);\n        }\n        return;\n      }\n    }\n\n    try {\n      await this.sessionHydrator.model(sessionKey);\n\n      const channelSystemPrompt =\n        typeof context.metadata?.channelSystemPrompt === 'string'\n          ? context.metadata.channelSystemPrompt.trim()\n          : '';\n      if (channelSystemPrompt) {\n        this.agentManager.getOrCreateAgent(sessionKey);\n        this.agentManager.applyTurnChannelSystemPrompt(sessionKey, channelSystemPrompt);\n      }\n\n      const thinkingDefault =\n        this.getThinkingDefaultForSession?.(sessionKey) ?? this.getThinkingDefault();\n      const thinkingLevel = await resolveEffectiveThinkingLevel(\n        this.sessionConfigStore,\n        sessionKey,\n        null,\n        thinkingDefault,\n      );\n      this.agentManager.setThinkingLevel(sessionKey, thinkingLevel);\n\n      const persistedAttachments = await persistInboundAttachments(msg.attachments);\n      const modelRef = this.modelManager.getModelForSession(sessionKey);\n      const userMessage = await buildTranscriptUserMessage({\n        text: msg.content,\n        prepared: persistedAttachments,\n        sessionKey,\n        modelRef,\n        config: this.getConfig?.(),\n        agentManager: this.agentManager,\n      });\n      setPendingTranscriptUserMessage(sessionKey, userMessage);\n\n      const userPlainForMemory = extractAgentUserPlainText(userMessage);\n      const userMessageForModel = await this.agentManager.applyMemoryPrefetchToUserMessage(\n        userMessage,\n        sessionKey,\n      );\n\n      const llmTurn = await hydrateUserTurnForLlm({\n        message: userMessage,\n        modelRef,\n      });\n\n      this.feedbackCoordinator.startTask();\n\n      const turnResult = await (async () => {\n        try {\n          return await runEmbeddedTurnForSession({\n            sessionKey,\n            userMessage: userMessageForModel,\n            llmImages: llmTurn.images,\n            sessionStore: this.sessionStore,\n            agentManager: this.agentManager,\n            modelManager: this.modelManager,\n            thinkingOverride: thinkingLevel,\n            getConfig: this.getConfig,\n            beforeTurn: () => this.agentManager.beginBackgroundReviewUserTurn(sessionKey),\n            onEvent: (event) => this.onEmbeddedStreamEvent?.(sessionKey, event),\n          });\n        } finally {\n          clearPendingTranscriptUserMessage(sessionKey, userMessage);\n        }\n      })();\n\n      this.agentManager.afterAgentTurn(sessionKey, userPlainForMemory);\n      this.agentManager.scheduleBackgroundReviewAfterUserTurn(sessionKey);\n\n      if (turnResult.ok) {\n        this.onEmbeddedTurnComplete?.(sessionKey, turnResult.lastAssistantText);\n        this.enqueueAutoTitle?.(sessionKey);\n      } else if (turnResult.errorMessage) {\n        log.warn({ sessionKey, errorMessage: turnResult.errorMessage }, 'Embedded inbound turn failed');\n      }\n\n      this.feedbackCoordinator.endTask();\n\n    } catch (error) {\n      log.error({ err: error, sessionKey }, 'Error in agent orchestration');\n      this.feedbackCoordinator.endTask();\n      throw error;\n    }\n  }\n\n  /**\n   * Get the current agent model ID\n   */\n  getCurrentModel(): string {\n    return this.modelManager.getCurrentModel();\n  }\n\n  /**\n   * Check if agent is currently processing for a session\n   */\n  isProcessing(sessionKey: string): boolean {\n    const agent = this.agentManager.getAgent(sessionKey);\n    if (!agent) {\n      return false;\n    }\n    return agent.state.messages.length > 0;\n  }\n\n  /**\n   * Abort current agent execution for a session\n   */\n  abort(sessionKey: string): void {\n    void abortEmbeddedRun(sessionKey);\n    const agent = this.agentManager.getAgent(sessionKey);\n    agent?.abort();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;aAkBqD;AAuBrD,MAAM,MAAM,aAAa,oBAAoB;AA8B7C,IAAa,oBAAb,MAA+B;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAAiC;AAC3C,OAAK,eAAe,OAAO;AAC3B,OAAK,eAAe,OAAO;AAC3B,OAAK,eAAe,OAAO;AAC3B,OAAK,sBAAsB,OAAO;AAClC,OAAK,qBAAqB,OAAO;AACjC,OAAK,kBAAkB,OAAO;AAC9B,OAAK,qBAAqB,OAAO;AACjC,OAAK,+BAA+B,OAAO;AAC3C,OAAK,mBAAmB,OAAO;AAC/B,OAAK,YAAY,OAAO;AACxB,OAAK,wBAAwB,OAAO;AACpC,OAAK,yBAAyB,OAAO;;;;;CAMvC,MAAM,QAAQ,KAAqB,SAAwC;EACzE,MAAM,EAAE,eAAe;AAEvB,MAAI,MAAM,EAAE,YAAY,EAAE,gDAAgD;AAE1E,QAAM,KAAK,gBAAgB,UAAU,WAAW;AAIhD,MACE,OAAO,IAAI,YAAY,aAErB,WAAW,WAAW,QAAQ,IAC9B,WAAW,SAAS,SAAS,IAC7B,WAAW,SAAS,eAAe,IACnC,QAAQ,YAAY,UACpB,QAAQ,YAAY,eAEtB;GACA,MAAM,UAAU,IAAI;AAMpB,OAJE,QAAQ,SAAA,iCAA8B,IACtC,QAAQ,SAAA,uCAAoC,IAC5C,QAAQ,SAAA,qCAAkC,EAEvB;IACnB,MAAM,eAAe,KAAK,aAAa,+BAA+B,WAAW;IACjF,MAAM,WAAW,sBAAsB,KAAK,aAAa,CAAC;IAC1D,MAAM,KAAK,KAAK,KAAK;AAErB,QAAI,QAAQ,SAAA,uCAAoC,EAAE;KAChD,MAAM,SAAS,MAAM,cAAc;MAAE;MAAc,QAAQ,SAAS,OAAO;MAAO,CAAC;AAMnF,WAAM,oBAAoB,cAAc;MAJtC,4BAAW,IAAI,MAAM,EAAC,aAAa;MAAE,OAAO;MAC5C,IAAI,OAAO;MAAI,QAAQ,OAAO;MAAQ,YAAY,KAAK,KAAK,GAAG;MAC/D,gBAAgB,OAAO;MAAgB,YAAY,OAAO;MAAY,SAAS,OAAO;MAE3C,CAAC;eACrC,QAAQ,SAAA,qCAAkC,EAAE;KACrD,MAAM,SAAS,MAAM,eAAe;MAAE;MAAc,QAAQ,SAAS,OAAO;MAAK,CAAC;AAMlF,WAAM,oBAAoB,cAAc;MAJtC,4BAAW,IAAI,MAAM,EAAC,aAAa;MAAE,OAAO;MAC5C,IAAI,OAAO;MAAI,QAAQ,OAAO;MAAQ,YAAY,KAAK,KAAK,GAAG;MAC/D,oBAAoB,OAAO;MAAoB,iBAAiB,OAAO;MAE5B,CAAC;WACzC;KACL,MAAM,SAAS,MAAM,yBAAyB;MAC5C;MACA,QAAQ,SAAS,OAAO;MACxB,eAAe,KAAK,aAAa,2BAA2B,WAAW;MACxE,CAAC;AAMF,WAAM,oBAAoB,cAAc;MAJtC,4BAAW,IAAI,MAAM,EAAC,aAAa;MAAE,OAAO;MAC5C,IAAI,OAAO;MAAI,QAAQ,OAAO;MAAQ,YAAY,KAAK,KAAK,GAAG;MAC/D,YAAY,OAAO;MAAY,SAAS,OAAO;MAEJ,CAAC;;AAEhD;;;AAIJ,MAAI;AACF,SAAM,KAAK,gBAAgB,MAAM,WAAW;GAE5C,MAAM,sBACJ,OAAO,QAAQ,UAAU,wBAAwB,WAC7C,QAAQ,SAAS,oBAAoB,MAAM,GAC3C;AACN,OAAI,qBAAqB;AACvB,SAAK,aAAa,iBAAiB,WAAW;AAC9C,SAAK,aAAa,6BAA6B,YAAY,oBAAoB;;GAGjF,MAAM,kBACJ,KAAK,+BAA+B,WAAW,IAAI,KAAK,oBAAoB;GAC9E,MAAM,gBAAgB,MAAM,8BAC1B,KAAK,oBACL,YACA,MACA,gBACD;AACD,QAAK,aAAa,iBAAiB,YAAY,cAAc;GAE7D,MAAM,uBAAuB,MAAM,0BAA0B,IAAI,YAAY;GAC7E,MAAM,WAAW,KAAK,aAAa,mBAAmB,WAAW;GACjE,MAAM,cAAc,MAAM,2BAA2B;IACnD,MAAM,IAAI;IACV,UAAU;IACV;IACA;IACA,QAAQ,KAAK,aAAa;IAC1B,cAAc,KAAK;IACpB,CAAC;AACF,mCAAgC,YAAY,YAAY;GAExD,MAAM,qBAAqB,0BAA0B,YAAY;GACjE,MAAM,sBAAsB,MAAM,KAAK,aAAa,iCAClD,aACA,WACD;GAED,MAAM,UAAU,MAAM,sBAAsB;IAC1C,SAAS;IACT;IACD,CAAC;AAEF,QAAK,oBAAoB,WAAW;GAEpC,MAAM,aAAa,OAAO,YAAY;AACpC,QAAI;AACF,YAAO,MAAM,0BAA0B;MACrC;MACA,aAAa;MACb,WAAW,QAAQ;MACnB,cAAc,KAAK;MACnB,cAAc,KAAK;MACnB,cAAc,KAAK;MACnB,kBAAkB;MAClB,WAAW,KAAK;MAChB,kBAAkB,KAAK,aAAa,8BAA8B,WAAW;MAC7E,UAAU,UAAU,KAAK,wBAAwB,YAAY,MAAM;MACpE,CAAC;cACM;AACR,uCAAkC,YAAY,YAAY;;OAE1D;AAEJ,QAAK,aAAa,eAAe,YAAY,mBAAmB;AAChE,QAAK,aAAa,sCAAsC,WAAW;AAEnE,OAAI,WAAW,IAAI;AACjB,SAAK,yBAAyB,YAAY,WAAW,kBAAkB;AACvE,SAAK,mBAAmB,WAAW;cAC1B,WAAW,aACpB,KAAI,KAAK;IAAE;IAAY,cAAc,WAAW;IAAc,EAAE,+BAA+B;AAGjG,QAAK,oBAAoB,SAAS;WAE3B,OAAO;AACd,OAAI,MAAM;IAAE,KAAK;IAAO;IAAY,EAAE,+BAA+B;AACrE,QAAK,oBAAoB,SAAS;AAClC,SAAM;;;;;;CAOV,kBAA0B;AACxB,SAAO,KAAK,aAAa,iBAAiB;;;;;CAM5C,aAAa,YAA6B;EACxC,MAAM,QAAQ,KAAK,aAAa,SAAS,WAAW;AACpD,MAAI,CAAC,MACH,QAAO;AAET,SAAO,MAAM,MAAM,SAAS,SAAS;;;;;CAMvC,MAAM,YAA0B;AACzB,mBAAiB,WAAW;AACnB,OAAK,aAAa,SAAS,WACpC,EAAE,OAAO"}
+{"version":3,"file":"agent-orchestrator.js","names":[],"sources":["../../../../src/agent/orchestration/agent-orchestrator.ts"],"sourcesContent":["/**\n * Agent Orchestrator - Coordinates Agent execution flow\n *\n * Manages the complete agent execution pipeline from message processing\n * to response generation.\n */\n\nimport type { Config } from '../../config/schema.js';\nimport { resolveEffectiveAgentProfileForSession } from '../../config/agent-profile.js';\nimport type { InboundMessage } from '../../infra/bus/index.js';\nimport type { SessionConfigStore, SessionStore } from '../../session/index.js';\nimport type { SessionHydrator } from '../session/index.js';\nimport { resolveEffectiveThinkingLevel } from '../../session/thinking-resolve.js';\nimport type { ThinkLevel } from '../transcript/thinking-types.js';\nimport type { ModelManager } from '../models/index.js';\nimport type { SessionContext } from '../session/session-context.js';\nimport type { AgentEventHandler } from './agent-event-handler.js';\nimport type { FeedbackCoordinator } from '../feedback/feedback-coordinator.js';\nimport type { AgentManager } from '../agent-manager.js';\nimport { createLogger } from '../../utils/logger.js';\nimport { extractAgentUserPlainText } from '../memory/user-message-text.js';\nimport { abortEmbeddedRun } from '../embedded/runs.js';\nimport { runEmbeddedTurnForSession } from '../embedded/run-for-session.js';\nimport type { EmbeddedStreamEvent } from '../embedded/types.js';\nimport { persistInboundAttachments } from '../../channels/attachments/inbound-persist.js';\nimport {\n  buildTranscriptUserMessage,\n  clearPendingTranscriptUserMessage,\n  hydrateUserTurnForLlm,\n  setPendingTranscriptUserMessage,\n} from '../inbound/attachment-pipeline.js';\nimport {\n  DREAMING_SWEEP_TOKEN,\n  DREAMING_LIGHT_SWEEP_TOKEN,\n  DREAMING_REM_SWEEP_TOKEN,\n} from '../memory/dreaming/constants.js';\nimport { runDreamingDeepPromotion } from '../memory/dreaming/deep-promotion.js';\nimport { appendDreamingEvent, type DreamingEvent } from '../memory/dreaming/events.js';\nimport { runLightSweep } from '../memory/dreaming/light-sweep.js';\nimport { runRemPatterns } from '../memory/dreaming/rem-patterns.js';\nimport { resolveDreamingAgentScope } from '../memory/dreaming/scope.js';\n\nconst log = createLogger('AgentOrchestrator');\n\nexport interface AgentOrchestratorConfig {\n  agentManager: AgentManager;\n  sessionStore: SessionStore;\n  modelManager: ModelManager;\n  eventHandler: AgentEventHandler;\n  feedbackCoordinator: FeedbackCoordinator;\n  sessionConfigStore: SessionConfigStore;\n  /** Per-session hydration (workspace override + model override) before the agent runs. */\n  sessionHydrator: SessionHydrator;\n  getThinkingDefault: () => ThinkLevel | undefined;\n  /** Per-session default from merged `agents.list` / defaults (optional). */\n  getThinkingDefaultForSession?: (sessionKey: string) => ThinkLevel | undefined;\n  /** Default workspace root when no per-session resolver is set. */\n  workspaceRoot: string;\n  /** Per-agent workspace root for attachments (optional; defaults to `workspaceRoot`). */\n  getWorkspaceRootForSession?: (sessionKey: string) => string;\n  /** Agent home (`…/agents/<id>/`) for inbound/TTS files — keeps internal state out of the markdown workspace. */\n  getAgentInternalStorageRootForSession?: (sessionKey: string) => string;\n  /** Fire-and-forget after full session persist (e.g. LLM session title); not called from mid-turn snapshots. */\n  enqueueAutoTitle?: (sessionKey: string) => void;\n  /** For per-turn timeout. */\n  getConfig?: () => Config | undefined;\n  /** Channel streaming: token/tool events from pi embedded session. */\n  onEmbeddedStreamEvent?: (sessionKey: string, event: EmbeddedStreamEvent) => void;\n  /** Called after a successful embedded turn with assistant plain text. */\n  onEmbeddedTurnComplete?: (sessionKey: string, lastAssistantText?: string) => void;\n}\n\nexport class AgentOrchestrator {\n  private agentManager: AgentManager;\n  private sessionStore: SessionStore;\n  private modelManager: ModelManager;\n  private feedbackCoordinator: FeedbackCoordinator;\n  private sessionConfigStore: SessionConfigStore;\n  private sessionHydrator: SessionHydrator;\n  private getThinkingDefault: () => ThinkLevel | undefined;\n  private getThinkingDefaultForSession?: (sessionKey: string) => ThinkLevel | undefined;\n  private enqueueAutoTitle?: (sessionKey: string) => void;\n  private getConfig?: () => Config | undefined;\n  private onEmbeddedStreamEvent?: (sessionKey: string, event: EmbeddedStreamEvent) => void;\n  private onEmbeddedTurnComplete?: (sessionKey: string, lastAssistantText?: string) => void;\n\n  constructor(config: AgentOrchestratorConfig) {\n    this.agentManager = config.agentManager;\n    this.sessionStore = config.sessionStore;\n    this.modelManager = config.modelManager;\n    this.feedbackCoordinator = config.feedbackCoordinator;\n    this.sessionConfigStore = config.sessionConfigStore;\n    this.sessionHydrator = config.sessionHydrator;\n    this.getThinkingDefault = config.getThinkingDefault;\n    this.getThinkingDefaultForSession = config.getThinkingDefaultForSession;\n    this.enqueueAutoTitle = config.enqueueAutoTitle;\n    this.getConfig = config.getConfig;\n    this.onEmbeddedStreamEvent = config.onEmbeddedStreamEvent;\n    this.onEmbeddedTurnComplete = config.onEmbeddedTurnComplete;\n  }\n\n  /**\n   * Process a message through the agent orchestration pipeline\n   */\n  async process(msg: InboundMessage, context: SessionContext): Promise<void> {\n    const { sessionKey } = context;\n\n    log.debug({ sessionKey }, 'Processing message through agent orchestrator');\n\n    await this.sessionHydrator.workspace(sessionKey);\n\n    // Dreaming: short-circuit scheduled maintenance tokens into local runs.\n    // This avoids spending LLM tokens for scheduled memory consolidation.\n    if (\n      typeof msg.content === 'string' &&\n      (\n        sessionKey.startsWith('cron:') ||\n        sessionKey.includes(':cron:') ||\n        sessionKey.includes(':automation:') ||\n        context.channel === 'cron' ||\n        context.channel === 'automation'\n      )\n    ) {\n      const content = msg.content;\n      const isDreamingSweep =\n        content.includes(DREAMING_SWEEP_TOKEN) ||\n        content.includes(DREAMING_LIGHT_SWEEP_TOKEN) ||\n        content.includes(DREAMING_REM_SWEEP_TOKEN);\n\n      if (isDreamingSweep) {\n        const cfg = this.getConfig?.();\n        if (!cfg) {\n          log.warn({ sessionKey }, 'Dreaming sweep skipped: config unavailable');\n          return;\n        }\n        const profile = resolveEffectiveAgentProfileForSession(cfg, sessionKey);\n        const scope = resolveDreamingAgentScope(cfg, profile.agentId);\n        const resolved = scope.config;\n        const t0 = Date.now();\n\n        if (content.includes(DREAMING_LIGHT_SWEEP_TOKEN)) {\n          const result = await runLightSweep({ dreamingRoot: scope.memoriesDir, config: resolved.phases.light });\n          const event: DreamingEvent = {\n            timestamp: new Date().toISOString(), phase: 'light',\n            ok: result.ok, reason: result.reason, durationMs: Date.now() - t0,\n            scannedEntries: result.scannedEntries, newSignals: result.newSignals, deduped: result.deduped,\n          };\n          await appendDreamingEvent(scope.memoriesDir, event);\n        } else if (content.includes(DREAMING_REM_SWEEP_TOKEN)) {\n          const result = await runRemPatterns({ dreamingRoot: scope.memoriesDir, config: resolved.phases.rem });\n          const event: DreamingEvent = {\n            timestamp: new Date().toISOString(), phase: 'rem',\n            ok: result.ok, reason: result.reason, durationMs: Date.now() - t0,\n            patternsDiscovered: result.patternsDiscovered, entriesAnalyzed: result.entriesAnalyzed,\n          };\n          await appendDreamingEvent(scope.memoriesDir, event);\n        } else {\n          const result = await runDreamingDeepPromotion({\n            workspaceDir: scope.workspaceDir,\n            dreamingRoot: scope.memoriesDir,\n            config: resolved.phases.deep,\n            memoryManager: this.agentManager.getMemoryManagerForSession(sessionKey),\n          });\n          const event: DreamingEvent = {\n            timestamp: new Date().toISOString(), phase: 'deep',\n            ok: result.ok, reason: result.reason, durationMs: Date.now() - t0,\n            candidates: result.candidates, applied: result.applied,\n          };\n          await appendDreamingEvent(scope.memoriesDir, event);\n        }\n        return;\n      }\n    }\n\n    try {\n      await this.sessionHydrator.model(sessionKey);\n\n      const channelSystemPrompt =\n        typeof context.metadata?.channelSystemPrompt === 'string'\n          ? context.metadata.channelSystemPrompt.trim()\n          : '';\n      if (channelSystemPrompt) {\n        this.agentManager.getOrCreateAgent(sessionKey);\n        this.agentManager.applyTurnChannelSystemPrompt(sessionKey, channelSystemPrompt);\n      }\n\n      const thinkingDefault =\n        this.getThinkingDefaultForSession?.(sessionKey) ?? this.getThinkingDefault();\n      const thinkingLevel = await resolveEffectiveThinkingLevel(\n        this.sessionConfigStore,\n        sessionKey,\n        null,\n        thinkingDefault,\n      );\n      this.agentManager.setThinkingLevel(sessionKey, thinkingLevel);\n\n      const persistedAttachments = await persistInboundAttachments(msg.attachments);\n      const modelRef = this.modelManager.getModelForSession(sessionKey);\n      const userMessage = await buildTranscriptUserMessage({\n        text: msg.content,\n        prepared: persistedAttachments,\n        sessionKey,\n        modelRef,\n        config: this.getConfig?.(),\n        agentManager: this.agentManager,\n      });\n      setPendingTranscriptUserMessage(sessionKey, userMessage);\n\n      const userPlainForMemory = extractAgentUserPlainText(userMessage);\n      const userMessageForModel = await this.agentManager.applyMemoryPrefetchToUserMessage(\n        userMessage,\n        sessionKey,\n      );\n\n      const llmTurn = await hydrateUserTurnForLlm({\n        message: userMessage,\n        modelRef,\n      });\n\n      this.feedbackCoordinator.startTask();\n\n      const turnResult = await (async () => {\n        try {\n          return await runEmbeddedTurnForSession({\n            sessionKey,\n            userMessage: userMessageForModel,\n            llmImages: llmTurn.images,\n            sessionStore: this.sessionStore,\n            agentManager: this.agentManager,\n            modelManager: this.modelManager,\n            thinkingOverride: thinkingLevel,\n            getConfig: this.getConfig,\n            beforeTurn: () => this.agentManager.beginBackgroundReviewUserTurn(sessionKey),\n            onEvent: (event) => this.onEmbeddedStreamEvent?.(sessionKey, event),\n          });\n        } finally {\n          clearPendingTranscriptUserMessage(sessionKey, userMessage);\n        }\n      })();\n\n      this.agentManager.afterAgentTurn(sessionKey, userPlainForMemory);\n      this.agentManager.scheduleBackgroundReviewAfterUserTurn(sessionKey);\n\n      if (turnResult.ok) {\n        this.onEmbeddedTurnComplete?.(sessionKey, turnResult.lastAssistantText);\n        this.enqueueAutoTitle?.(sessionKey);\n      } else if (turnResult.errorMessage) {\n        log.warn({ sessionKey, errorMessage: turnResult.errorMessage }, 'Embedded inbound turn failed');\n      }\n\n      this.feedbackCoordinator.endTask();\n\n    } catch (error) {\n      log.error({ err: error, sessionKey }, 'Error in agent orchestration');\n      this.feedbackCoordinator.endTask();\n      throw error;\n    }\n  }\n\n  /**\n   * Get the current agent model ID\n   */\n  getCurrentModel(): string {\n    return this.modelManager.getCurrentModel();\n  }\n\n  /**\n   * Check if agent is currently processing for a session\n   */\n  isProcessing(sessionKey: string): boolean {\n    const agent = this.agentManager.getAgent(sessionKey);\n    if (!agent) {\n      return false;\n    }\n    return agent.state.messages.length > 0;\n  }\n\n  /**\n   * Abort current agent execution for a session\n   */\n  abort(sessionKey: string): void {\n    void abortEmbeddedRun(sessionKey);\n    const agent = this.agentManager.getAgent(sessionKey);\n    agent?.abort();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;aAmBqD;AAuBrD,MAAM,MAAM,aAAa,oBAAoB;AA8B7C,IAAa,oBAAb,MAA+B;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAAiC;AAC3C,OAAK,eAAe,OAAO;AAC3B,OAAK,eAAe,OAAO;AAC3B,OAAK,eAAe,OAAO;AAC3B,OAAK,sBAAsB,OAAO;AAClC,OAAK,qBAAqB,OAAO;AACjC,OAAK,kBAAkB,OAAO;AAC9B,OAAK,qBAAqB,OAAO;AACjC,OAAK,+BAA+B,OAAO;AAC3C,OAAK,mBAAmB,OAAO;AAC/B,OAAK,YAAY,OAAO;AACxB,OAAK,wBAAwB,OAAO;AACpC,OAAK,yBAAyB,OAAO;;;;;CAMvC,MAAM,QAAQ,KAAqB,SAAwC;EACzE,MAAM,EAAE,eAAe;AAEvB,MAAI,MAAM,EAAE,YAAY,EAAE,gDAAgD;AAE1E,QAAM,KAAK,gBAAgB,UAAU,WAAW;AAIhD,MACE,OAAO,IAAI,YAAY,aAErB,WAAW,WAAW,QAAQ,IAC9B,WAAW,SAAS,SAAS,IAC7B,WAAW,SAAS,eAAe,IACnC,QAAQ,YAAY,UACpB,QAAQ,YAAY,eAEtB;GACA,MAAM,UAAU,IAAI;AAMpB,OAJE,QAAQ,SAAA,iCAA8B,IACtC,QAAQ,SAAA,uCAAoC,IAC5C,QAAQ,SAAA,qCAAkC,EAEvB;IACnB,MAAM,MAAM,KAAK,aAAa;AAC9B,QAAI,CAAC,KAAK;AACR,SAAI,KAAK,EAAE,YAAY,EAAE,6CAA6C;AACtE;;IAGF,MAAM,QAAQ,0BAA0B,KADxB,uCAAuC,KAAK,WACR,CAAC,QAAQ;IAC7D,MAAM,WAAW,MAAM;IACvB,MAAM,KAAK,KAAK,KAAK;AAErB,QAAI,QAAQ,SAAA,uCAAoC,EAAE;KAChD,MAAM,SAAS,MAAM,cAAc;MAAE,cAAc,MAAM;MAAa,QAAQ,SAAS,OAAO;MAAO,CAAC;KACtG,MAAM,QAAuB;MAC3B,4BAAW,IAAI,MAAM,EAAC,aAAa;MAAE,OAAO;MAC5C,IAAI,OAAO;MAAI,QAAQ,OAAO;MAAQ,YAAY,KAAK,KAAK,GAAG;MAC/D,gBAAgB,OAAO;MAAgB,YAAY,OAAO;MAAY,SAAS,OAAO;MACvF;AACD,WAAM,oBAAoB,MAAM,aAAa,MAAM;eAC1C,QAAQ,SAAA,qCAAkC,EAAE;KACrD,MAAM,SAAS,MAAM,eAAe;MAAE,cAAc,MAAM;MAAa,QAAQ,SAAS,OAAO;MAAK,CAAC;KACrG,MAAM,QAAuB;MAC3B,4BAAW,IAAI,MAAM,EAAC,aAAa;MAAE,OAAO;MAC5C,IAAI,OAAO;MAAI,QAAQ,OAAO;MAAQ,YAAY,KAAK,KAAK,GAAG;MAC/D,oBAAoB,OAAO;MAAoB,iBAAiB,OAAO;MACxE;AACD,WAAM,oBAAoB,MAAM,aAAa,MAAM;WAC9C;KACL,MAAM,SAAS,MAAM,yBAAyB;MAC5C,cAAc,MAAM;MACpB,cAAc,MAAM;MACpB,QAAQ,SAAS,OAAO;MACxB,eAAe,KAAK,aAAa,2BAA2B,WAAW;MACxE,CAAC;KACF,MAAM,QAAuB;MAC3B,4BAAW,IAAI,MAAM,EAAC,aAAa;MAAE,OAAO;MAC5C,IAAI,OAAO;MAAI,QAAQ,OAAO;MAAQ,YAAY,KAAK,KAAK,GAAG;MAC/D,YAAY,OAAO;MAAY,SAAS,OAAO;MAChD;AACD,WAAM,oBAAoB,MAAM,aAAa,MAAM;;AAErD;;;AAIJ,MAAI;AACF,SAAM,KAAK,gBAAgB,MAAM,WAAW;GAE5C,MAAM,sBACJ,OAAO,QAAQ,UAAU,wBAAwB,WAC7C,QAAQ,SAAS,oBAAoB,MAAM,GAC3C;AACN,OAAI,qBAAqB;AACvB,SAAK,aAAa,iBAAiB,WAAW;AAC9C,SAAK,aAAa,6BAA6B,YAAY,oBAAoB;;GAGjF,MAAM,kBACJ,KAAK,+BAA+B,WAAW,IAAI,KAAK,oBAAoB;GAC9E,MAAM,gBAAgB,MAAM,8BAC1B,KAAK,oBACL,YACA,MACA,gBACD;AACD,QAAK,aAAa,iBAAiB,YAAY,cAAc;GAE7D,MAAM,uBAAuB,MAAM,0BAA0B,IAAI,YAAY;GAC7E,MAAM,WAAW,KAAK,aAAa,mBAAmB,WAAW;GACjE,MAAM,cAAc,MAAM,2BAA2B;IACnD,MAAM,IAAI;IACV,UAAU;IACV;IACA;IACA,QAAQ,KAAK,aAAa;IAC1B,cAAc,KAAK;IACpB,CAAC;AACF,mCAAgC,YAAY,YAAY;GAExD,MAAM,qBAAqB,0BAA0B,YAAY;GACjE,MAAM,sBAAsB,MAAM,KAAK,aAAa,iCAClD,aACA,WACD;GAED,MAAM,UAAU,MAAM,sBAAsB;IAC1C,SAAS;IACT;IACD,CAAC;AAEF,QAAK,oBAAoB,WAAW;GAEpC,MAAM,aAAa,OAAO,YAAY;AACpC,QAAI;AACF,YAAO,MAAM,0BAA0B;MACrC;MACA,aAAa;MACb,WAAW,QAAQ;MACnB,cAAc,KAAK;MACnB,cAAc,KAAK;MACnB,cAAc,KAAK;MACnB,kBAAkB;MAClB,WAAW,KAAK;MAChB,kBAAkB,KAAK,aAAa,8BAA8B,WAAW;MAC7E,UAAU,UAAU,KAAK,wBAAwB,YAAY,MAAM;MACpE,CAAC;cACM;AACR,uCAAkC,YAAY,YAAY;;OAE1D;AAEJ,QAAK,aAAa,eAAe,YAAY,mBAAmB;AAChE,QAAK,aAAa,sCAAsC,WAAW;AAEnE,OAAI,WAAW,IAAI;AACjB,SAAK,yBAAyB,YAAY,WAAW,kBAAkB;AACvE,SAAK,mBAAmB,WAAW;cAC1B,WAAW,aACpB,KAAI,KAAK;IAAE;IAAY,cAAc,WAAW;IAAc,EAAE,+BAA+B;AAGjG,QAAK,oBAAoB,SAAS;WAE3B,OAAO;AACd,OAAI,MAAM;IAAE,KAAK;IAAO;IAAY,EAAE,+BAA+B;AACrE,QAAK,oBAAoB,SAAS;AAClC,SAAM;;;;;;CAOV,kBAA0B;AACxB,SAAO,KAAK,aAAa,iBAAiB;;;;;CAM5C,aAAa,YAA6B;EACxC,MAAM,QAAQ,KAAK,aAAa,SAAS,WAAW;AACpD,MAAI,CAAC,MACH,QAAO;AAET,SAAO,MAAM,MAAM,SAAS,SAAS;;;;;CAMvC,MAAM,YAA0B;AACzB,mBAAiB,WAAW;AACnB,OAAK,aAAa,SAAS,WACpC,EAAE,OAAO"}

package/dist/src/agent/sandbox/command-validator.js

@@ -122,6 +122,18 @@ const HIGH_PATTERNS = [
 		pattern: /\blaunchctl\s+(load|unload|start|stop)\b/,
 		reason: "macOS launchctl manipulation"
 	},
+	{
+		pattern: /\bgit\s+(?:-[^\s]+\s+)*(?!push\s+--force\b)(commit|push|checkout|switch|restore|reset|rebase|merge|cherry-pick|clean|apply|am|stash)\b/,
+		reason: "Git command may mutate repository state or publish changes"
+	},
+	{
+		pattern: /\bgit\s+(?:-[^\s]+\s+)*branch\s+(-[dD]|--delete|--move|-m|-M|--set-upstream-to)\b/,
+		reason: "Git branch mutation"
+	},
+	{
+		pattern: /\bgit\s+(?:-[^\s]+\s+)*tag\s+(-[adfs]|--delete|--annotate|--force|--sign)\b/,
+		reason: "Git tag mutation"
+	},
 	{
 		pattern: /\bsudo\s+/,
 		reason: "Sudo command execution"

package/dist/src/agent/sandbox/command-validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"command-validator.js","names":[],"sources":["../../../../src/agent/sandbox/command-validator.ts"],"sourcesContent":["/**\n * Command injection detection and dangerous command blocking.\n *\n * Enhances the basic checkShellSafety in prompt/safety.ts with deeper analysis:\n * - Shell metacharacter injection in arguments\n * - Dangerous command prefixes (destructive ops, credential exfiltration)\n * - Pipe-to-interpreter patterns (curl|bash, wget|sh, etc.)\n * - Credential / secret harvesting attempts\n */\n\nimport type { CommandValidationResult } from './types.js';\n\n// ---------------------------------------------------------------------------\n// Critical — always block, no override\n// ---------------------------------------------------------------------------\n\nconst CRITICAL_PATTERNS: { pattern: RegExp; reason: string }[] = [\n  // Destructive filesystem ops\n  { pattern: /\\brm\\s+(-[a-zA-Z]*[rR][a-zA-Z]*\\s+|--recursive\\s+)\\/(\\s|$)/, reason: 'Recursive delete from root' },\n  { pattern: /\\brm\\s+(-[a-zA-Z]*[rR][a-zA-Z]*\\s+|--recursive\\s+)~\\//, reason: 'Recursive delete from home directory' },\n  { pattern: /\\bmkfs\\b/, reason: 'Filesystem format command' },\n  { pattern: /\\bdd\\s+.*\\bof=\\/dev\\//, reason: 'Raw device write via dd' },\n  { pattern: />\\s*\\/dev\\/[hs]d/, reason: 'Redirect to block device' },\n\n  // Pipe to interpreter — remote code execution\n  { pattern: /\\bcurl\\b[^|]*\\|\\s*(ba)?sh\\b/, reason: 'Pipe curl output to shell' },\n  { pattern: /\\bwget\\b[^|]*\\|\\s*(ba)?sh\\b/, reason: 'Pipe wget output to shell' },\n  { pattern: /\\bcurl\\b[^|]*\\|\\s*python/, reason: 'Pipe curl output to python' },\n  { pattern: /\\bwget\\b[^|]*\\|\\s*python/, reason: 'Pipe wget output to python' },\n  { pattern: /\\bcurl\\b[^|]*\\|\\s*node\\b/, reason: 'Pipe curl output to node' },\n  { pattern: /\\bcurl\\b[^|]*\\|\\s*perl\\b/, reason: 'Pipe curl output to perl' },\n\n  // Credential harvesting\n  { pattern: /\\bcat\\s+.*\\/\\.ssh\\/id_/, reason: 'Read SSH private key' },\n  { pattern: /\\bcat\\s+.*\\/\\.aws\\/credentials/, reason: 'Read AWS credentials' },\n  { pattern: /\\bcat\\s+.*\\/\\.gnupg\\//, reason: 'Read GPG keyring' },\n  { pattern: /\\bcat\\s+.*\\/\\.netrc/, reason: 'Read netrc credentials' },\n  { pattern: /\\bcat\\s+.*\\/etc\\/shadow/, reason: 'Read shadow password file' },\n\n  // Docker socket access\n  { pattern: /\\/var\\/run\\/docker\\.sock/, reason: 'Docker socket access' },\n  { pattern: /\\bdocker\\s+run\\b.*--privileged/, reason: 'Privileged Docker container' },\n];\n\n// ---------------------------------------------------------------------------\n// High — block by default, can be overridden in advanced mode\n// ---------------------------------------------------------------------------\n\nconst HIGH_PATTERNS: { pattern: RegExp; reason: string }[] = [\n  // Dangerous flags\n  { pattern: /\\bchmod\\s+[0-7]*7[0-7]{2}\\b/, reason: 'World-writable chmod' },\n  { pattern: /\\bchmod\\s+.*[+]s\\b/, reason: 'Set SUID/SGID bit' },\n  { pattern: /\\bchown\\s+root\\b/, reason: 'Change ownership to root' },\n\n  // Network exfiltration patterns\n  { pattern: /\\bcurl\\b.*--upload-file/, reason: 'File upload via curl' },\n  { pattern: /\\bcurl\\b.*-T\\s/, reason: 'File upload via curl -T' },\n  { pattern: /\\bnc\\s+-[a-zA-Z]*l/, reason: 'Netcat listener (reverse shell)' },\n  { pattern: /\\bsocat\\b.*\\bexec\\b/i, reason: 'Socat exec (reverse shell)' },\n\n  // Process manipulation\n  { pattern: /\\bkill\\s+-9\\s+1\\b/, reason: 'Kill init process' },\n  { pattern: /\\bkillall\\b/, reason: 'Kill all processes by name' },\n\n  // Crontab modification\n  { pattern: /\\bcrontab\\s+-[erl]/, reason: 'Crontab modification' },\n\n  // System service manipulation\n  { pattern: /\\bsystemctl\\s+(start|stop|restart|enable|disable)\\b/, reason: 'Systemd service manipulation' },\n  { pattern: /\\blaunchctl\\s+(load|unload|start|stop)\\b/, reason: 'macOS launchctl manipulation' },\n\n  // Package manager with elevated privileges\n  { pattern: /\\bsudo\\s+/, reason: 'Sudo command execution' },\n  { pattern: /\\bsu\\s+-\\s/, reason: 'Switch to root user' },\n  { pattern: /\\bdoas\\s+/, reason: 'Doas command execution' },\n];\n\n// ---------------------------------------------------------------------------\n// Medium — warn but allow\n// ---------------------------------------------------------------------------\n\nconst MEDIUM_PATTERNS: { pattern: RegExp; reason: string }[] = [\n  { pattern: /\\brm\\s+-[a-zA-Z]*[rR]/, reason: 'Recursive delete (non-root)' },\n  { pattern: /\\bmv\\s+.*\\s+\\//, reason: 'Move file to root directory' },\n  // Exclude common safe patterns like `chmod +x`, only warn on octal or broad ops\n  { pattern: /\\bchmod\\s+(?!\\+x\\b)[0-7]{3,4}\\b/, reason: 'Octal permission change' },\n  { pattern: /\\bgit\\s+push\\s+--force/, reason: 'Force push to git remote' },\n  { pattern: /\\bgit\\s+reset\\s+--hard/, reason: 'Hard git reset' },\n];\n\n// ---------------------------------------------------------------------------\n// Shell metacharacter injection in command arguments\n// ---------------------------------------------------------------------------\n\n/**\n * Detect obvious shell injection patterns that might be embedded in\n * model-generated arguments (e.g. a filename containing \"; rm -rf /\").\n *\n * This is intentionally conservative — we only flag patterns that are\n * extremely unlikely in legitimate commands.\n */\nconst INJECTION_PATTERNS: { pattern: RegExp; reason: string }[] = [\n  // Backtick containing dangerous commands (not benign subshells like `date` or `mktemp`)\n  { pattern: /`[^`]*(curl|wget|nc|rm\\s+-rf|dd\\s+|mkfs)[^`]*`/, reason: 'Dangerous command inside backtick substitution' },\n  // $() containing dangerous commands (allow benign like $(date), $(pwd), $(nproc))\n  { pattern: /\\$\\([^)]*(curl|wget|nc|rm\\s+-rf|dd\\s+|mkfs)[^)]*\\)/, reason: 'Dangerous command inside $() substitution' },\n  // Semicolon-separated second command that is destructive\n  { pattern: /;\\s*(rm|dd|mkfs|curl|wget|nc)\\b/, reason: 'Injected destructive command after semicolon' },\n  // Newline injection\n  { pattern: /\\n\\s*(rm|dd|mkfs|curl|wget|nc)\\b/, reason: 'Newline-injected destructive command' },\n];\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Validate a shell command against injection and dangerous-command patterns.\n *\n * Returns `{ allowed: false }` for critical/high severity issues.\n * Returns `{ allowed: true }` with a reason for medium severity (warning).\n */\nexport function validateCommand(command: string): CommandValidationResult {\n  const trimmed = command.trim();\n\n  if (!trimmed) {\n    return { allowed: false, reason: 'Empty command', severity: 'medium' };\n  }\n\n  // --- Critical checks ---\n  for (const { pattern, reason } of CRITICAL_PATTERNS) {\n    if (pattern.test(trimmed)) {\n      return { allowed: false, reason: `Critical: ${reason}`, severity: 'critical' };\n    }\n  }\n\n  // --- Injection checks ---\n  for (const { pattern, reason } of INJECTION_PATTERNS) {\n    if (pattern.test(trimmed)) {\n      return { allowed: false, reason: `Injection: ${reason}`, severity: 'critical' };\n    }\n  }\n\n  // --- High severity checks ---\n  for (const { pattern, reason } of HIGH_PATTERNS) {\n    if (pattern.test(trimmed)) {\n      return { allowed: false, reason: `Blocked: ${reason}`, severity: 'high' };\n    }\n  }\n\n  // --- Medium severity checks (allow but flag) ---\n  for (const { pattern, reason } of MEDIUM_PATTERNS) {\n    if (pattern.test(trimmed)) {\n      return { allowed: true, reason: `Warning: ${reason}`, severity: 'medium' };\n    }\n  }\n\n  return { allowed: true };\n}\n\n/**\n * Extract a list of all matched warning/block reasons for audit logging.\n * Unlike `validateCommand`, this does not short-circuit on the first match.\n */\nexport function auditCommand(command: string): { severity: 'critical' | 'high' | 'medium'; reason: string }[] {\n  const trimmed = command.trim();\n  const findings: { severity: 'critical' | 'high' | 'medium'; reason: string }[] = [];\n\n  for (const { pattern, reason } of CRITICAL_PATTERNS) {\n    if (pattern.test(trimmed)) findings.push({ severity: 'critical', reason });\n  }\n  for (const { pattern, reason } of INJECTION_PATTERNS) {\n    if (pattern.test(trimmed)) findings.push({ severity: 'critical', reason });\n  }\n  for (const { pattern, reason } of HIGH_PATTERNS) {\n    if (pattern.test(trimmed)) findings.push({ severity: 'high', reason });\n  }\n  for (const { pattern, reason } of MEDIUM_PATTERNS) {\n    if (pattern.test(trimmed)) findings.push({ severity: 'medium', reason });\n  }\n\n  return findings;\n}\n"],"mappings":";AAgBA,MAAM,oBAA2D;CAE/D;EAAE,SAAS;EAA8D,QAAQ;EAA8B;CAC/G;EAAE,SAAS;EAAyD,QAAQ;EAAwC;CACpH;EAAE,SAAS;EAAY,QAAQ;EAA6B;CAC5D;EAAE,SAAS;EAAyB,QAAQ;EAA2B;CACvE;EAAE,SAAS;EAAoB,QAAQ;EAA4B;CAGnE;EAAE,SAAS;EAA+B,QAAQ;EAA6B;CAC/E;EAAE,SAAS;EAA+B,QAAQ;EAA6B;CAC/E;EAAE,SAAS;EAA4B,QAAQ;EAA8B;CAC7E;EAAE,SAAS;EAA4B,QAAQ;EAA8B;CAC7E;EAAE,SAAS;EAA4B,QAAQ;EAA4B;CAC3E;EAAE,SAAS;EAA4B,QAAQ;EAA4B;CAG3E;EAAE,SAAS;EAA0B,QAAQ;EAAwB;CACrE;EAAE,SAAS;EAAkC,QAAQ;EAAwB;CAC7E;EAAE,SAAS;EAAyB,QAAQ;EAAoB;CAChE;EAAE,SAAS;EAAuB,QAAQ;EAA0B;CACpE;EAAE,SAAS;EAA2B,QAAQ;EAA6B;CAG3E;EAAE,SAAS;EAA4B,QAAQ;EAAwB;CACvE;EAAE,SAAS;EAAkC,QAAQ;EAA+B;CACrF;AAMD,MAAM,gBAAuD;CAE3D;EAAE,SAAS;EAA+B,QAAQ;EAAwB;CAC1E;EAAE,SAAS;EAAsB,QAAQ;EAAqB;CAC9D;EAAE,SAAS;EAAoB,QAAQ;EAA4B;CAGnE;EAAE,SAAS;EAA2B,QAAQ;EAAwB;CACtE;EAAE,SAAS;EAAkB,QAAQ;EAA2B;CAChE;EAAE,SAAS;EAAsB,QAAQ;EAAmC;CAC5E;EAAE,SAAS;EAAwB,QAAQ;EAA8B;CAGzE;EAAE,SAAS;EAAqB,QAAQ;EAAqB;CAC7D;EAAE,SAAS;EAAe,QAAQ;EAA8B;CAGhE;EAAE,SAAS;EAAsB,QAAQ;EAAwB;CAGjE;EAAE,SAAS;EAAuD,QAAQ;EAAgC;CAC1G;EAAE,SAAS;EAA4C,QAAQ;EAAgC;CAG/F;EAAE,SAAS;EAAa,QAAQ;EAA0B;CAC1D;EAAE,SAAS;EAAc,QAAQ;EAAuB;CACxD;EAAE,SAAS;EAAa,QAAQ;EAA0B;CAC3D;AAMD,MAAM,kBAAyD;CAC7D;EAAE,SAAS;EAAyB,QAAQ;EAA+B;CAC3E;EAAE,SAAS;EAAkB,QAAQ;EAA+B;CAEpE;EAAE,SAAS;EAAmC,QAAQ;EAA2B;CACjF;EAAE,SAAS;EAA0B,QAAQ;EAA4B;CACzE;EAAE,SAAS;EAA0B,QAAQ;EAAkB;CAChE;;;;;;;;AAaD,MAAM,qBAA4D;CAEhE;EAAE,SAAS;EAAkD,QAAQ;EAAkD;CAEvH;EAAE,SAAS;EAAsD,QAAQ;EAA6C;CAEtH;EAAE,SAAS;EAAmC,QAAQ;EAAgD;CAEtG;EAAE,SAAS;EAAoC,QAAQ;EAAwC;CAChG;;;;;;;AAYD,SAAgB,gBAAgB,SAA0C;CACxE,MAAM,UAAU,QAAQ,MAAM;AAE9B,KAAI,CAAC,QACH,QAAO;EAAE,SAAS;EAAO,QAAQ;EAAiB,UAAU;EAAU;AAIxE,MAAK,MAAM,EAAE,SAAS,YAAY,kBAChC,KAAI,QAAQ,KAAK,QAAQ,CACvB,QAAO;EAAE,SAAS;EAAO,QAAQ,aAAa;EAAU,UAAU;EAAY;AAKlF,MAAK,MAAM,EAAE,SAAS,YAAY,mBAChC,KAAI,QAAQ,KAAK,QAAQ,CACvB,QAAO;EAAE,SAAS;EAAO,QAAQ,cAAc;EAAU,UAAU;EAAY;AAKnF,MAAK,MAAM,EAAE,SAAS,YAAY,cAChC,KAAI,QAAQ,KAAK,QAAQ,CACvB,QAAO;EAAE,SAAS;EAAO,QAAQ,YAAY;EAAU,UAAU;EAAQ;AAK7E,MAAK,MAAM,EAAE,SAAS,YAAY,gBAChC,KAAI,QAAQ,KAAK,QAAQ,CACvB,QAAO;EAAE,SAAS;EAAM,QAAQ,YAAY;EAAU,UAAU;EAAU;AAI9E,QAAO,EAAE,SAAS,MAAM;;;;;;AAO1B,SAAgB,aAAa,SAAiF;CAC5G,MAAM,UAAU,QAAQ,MAAM;CAC9B,MAAM,WAA2E,EAAE;AAEnF,MAAK,MAAM,EAAE,SAAS,YAAY,kBAChC,KAAI,QAAQ,KAAK,QAAQ,CAAE,UAAS,KAAK;EAAE,UAAU;EAAY;EAAQ,CAAC;AAE5E,MAAK,MAAM,EAAE,SAAS,YAAY,mBAChC,KAAI,QAAQ,KAAK,QAAQ,CAAE,UAAS,KAAK;EAAE,UAAU;EAAY;EAAQ,CAAC;AAE5E,MAAK,MAAM,EAAE,SAAS,YAAY,cAChC,KAAI,QAAQ,KAAK,QAAQ,CAAE,UAAS,KAAK;EAAE,UAAU;EAAQ;EAAQ,CAAC;AAExE,MAAK,MAAM,EAAE,SAAS,YAAY,gBAChC,KAAI,QAAQ,KAAK,QAAQ,CAAE,UAAS,KAAK;EAAE,UAAU;EAAU;EAAQ,CAAC;AAG1E,QAAO"}
+{"version":3,"file":"command-validator.js","names":[],"sources":["../../../../src/agent/sandbox/command-validator.ts"],"sourcesContent":["/**\n * Command injection detection and dangerous command blocking.\n *\n * Enhances the basic checkShellSafety in prompt/safety.ts with deeper analysis:\n * - Shell metacharacter injection in arguments\n * - Dangerous command prefixes (destructive ops, credential exfiltration)\n * - Pipe-to-interpreter patterns (curl|bash, wget|sh, etc.)\n * - Credential / secret harvesting attempts\n */\n\nimport type { CommandValidationResult } from './types.js';\n\n// ---------------------------------------------------------------------------\n// Critical — always block, no override\n// ---------------------------------------------------------------------------\n\nconst CRITICAL_PATTERNS: { pattern: RegExp; reason: string }[] = [\n  // Destructive filesystem ops\n  { pattern: /\\brm\\s+(-[a-zA-Z]*[rR][a-zA-Z]*\\s+|--recursive\\s+)\\/(\\s|$)/, reason: 'Recursive delete from root' },\n  { pattern: /\\brm\\s+(-[a-zA-Z]*[rR][a-zA-Z]*\\s+|--recursive\\s+)~\\//, reason: 'Recursive delete from home directory' },\n  { pattern: /\\bmkfs\\b/, reason: 'Filesystem format command' },\n  { pattern: /\\bdd\\s+.*\\bof=\\/dev\\//, reason: 'Raw device write via dd' },\n  { pattern: />\\s*\\/dev\\/[hs]d/, reason: 'Redirect to block device' },\n\n  // Pipe to interpreter — remote code execution\n  { pattern: /\\bcurl\\b[^|]*\\|\\s*(ba)?sh\\b/, reason: 'Pipe curl output to shell' },\n  { pattern: /\\bwget\\b[^|]*\\|\\s*(ba)?sh\\b/, reason: 'Pipe wget output to shell' },\n  { pattern: /\\bcurl\\b[^|]*\\|\\s*python/, reason: 'Pipe curl output to python' },\n  { pattern: /\\bwget\\b[^|]*\\|\\s*python/, reason: 'Pipe wget output to python' },\n  { pattern: /\\bcurl\\b[^|]*\\|\\s*node\\b/, reason: 'Pipe curl output to node' },\n  { pattern: /\\bcurl\\b[^|]*\\|\\s*perl\\b/, reason: 'Pipe curl output to perl' },\n\n  // Credential harvesting\n  { pattern: /\\bcat\\s+.*\\/\\.ssh\\/id_/, reason: 'Read SSH private key' },\n  { pattern: /\\bcat\\s+.*\\/\\.aws\\/credentials/, reason: 'Read AWS credentials' },\n  { pattern: /\\bcat\\s+.*\\/\\.gnupg\\//, reason: 'Read GPG keyring' },\n  { pattern: /\\bcat\\s+.*\\/\\.netrc/, reason: 'Read netrc credentials' },\n  { pattern: /\\bcat\\s+.*\\/etc\\/shadow/, reason: 'Read shadow password file' },\n\n  // Docker socket access\n  { pattern: /\\/var\\/run\\/docker\\.sock/, reason: 'Docker socket access' },\n  { pattern: /\\bdocker\\s+run\\b.*--privileged/, reason: 'Privileged Docker container' },\n];\n\n// ---------------------------------------------------------------------------\n// High — block by default, can be overridden in advanced mode\n// ---------------------------------------------------------------------------\n\nconst HIGH_PATTERNS: { pattern: RegExp; reason: string }[] = [\n  // Dangerous flags\n  { pattern: /\\bchmod\\s+[0-7]*7[0-7]{2}\\b/, reason: 'World-writable chmod' },\n  { pattern: /\\bchmod\\s+.*[+]s\\b/, reason: 'Set SUID/SGID bit' },\n  { pattern: /\\bchown\\s+root\\b/, reason: 'Change ownership to root' },\n\n  // Network exfiltration patterns\n  { pattern: /\\bcurl\\b.*--upload-file/, reason: 'File upload via curl' },\n  { pattern: /\\bcurl\\b.*-T\\s/, reason: 'File upload via curl -T' },\n  { pattern: /\\bnc\\s+-[a-zA-Z]*l/, reason: 'Netcat listener (reverse shell)' },\n  { pattern: /\\bsocat\\b.*\\bexec\\b/i, reason: 'Socat exec (reverse shell)' },\n\n  // Process manipulation\n  { pattern: /\\bkill\\s+-9\\s+1\\b/, reason: 'Kill init process' },\n  { pattern: /\\bkillall\\b/, reason: 'Kill all processes by name' },\n\n  // Crontab modification\n  { pattern: /\\bcrontab\\s+-[erl]/, reason: 'Crontab modification' },\n\n  // System service manipulation\n  { pattern: /\\bsystemctl\\s+(start|stop|restart|enable|disable)\\b/, reason: 'Systemd service manipulation' },\n  { pattern: /\\blaunchctl\\s+(load|unload|start|stop)\\b/, reason: 'macOS launchctl manipulation' },\n\n  // Git operations that mutate repository state or publish externally. Read-only\n  // inspection such as status/log/diff/show remains allowed through exec_command.\n  { pattern: /\\bgit\\s+(?:-[^\\s]+\\s+)*(?!push\\s+--force\\b)(commit|push|checkout|switch|restore|reset|rebase|merge|cherry-pick|clean|apply|am|stash)\\b/, reason: 'Git command may mutate repository state or publish changes' },\n  { pattern: /\\bgit\\s+(?:-[^\\s]+\\s+)*branch\\s+(-[dD]|--delete|--move|-m|-M|--set-upstream-to)\\b/, reason: 'Git branch mutation' },\n  { pattern: /\\bgit\\s+(?:-[^\\s]+\\s+)*tag\\s+(-[adfs]|--delete|--annotate|--force|--sign)\\b/, reason: 'Git tag mutation' },\n\n  // Package manager with elevated privileges\n  { pattern: /\\bsudo\\s+/, reason: 'Sudo command execution' },\n  { pattern: /\\bsu\\s+-\\s/, reason: 'Switch to root user' },\n  { pattern: /\\bdoas\\s+/, reason: 'Doas command execution' },\n];\n\n// ---------------------------------------------------------------------------\n// Medium — warn but allow\n// ---------------------------------------------------------------------------\n\nconst MEDIUM_PATTERNS: { pattern: RegExp; reason: string }[] = [\n  { pattern: /\\brm\\s+-[a-zA-Z]*[rR]/, reason: 'Recursive delete (non-root)' },\n  { pattern: /\\bmv\\s+.*\\s+\\//, reason: 'Move file to root directory' },\n  // Exclude common safe patterns like `chmod +x`, only warn on octal or broad ops\n  { pattern: /\\bchmod\\s+(?!\\+x\\b)[0-7]{3,4}\\b/, reason: 'Octal permission change' },\n  { pattern: /\\bgit\\s+push\\s+--force/, reason: 'Force push to git remote' },\n  { pattern: /\\bgit\\s+reset\\s+--hard/, reason: 'Hard git reset' },\n];\n\n// ---------------------------------------------------------------------------\n// Shell metacharacter injection in command arguments\n// ---------------------------------------------------------------------------\n\n/**\n * Detect obvious shell injection patterns that might be embedded in\n * model-generated arguments (e.g. a filename containing \"; rm -rf /\").\n *\n * This is intentionally conservative — we only flag patterns that are\n * extremely unlikely in legitimate commands.\n */\nconst INJECTION_PATTERNS: { pattern: RegExp; reason: string }[] = [\n  // Backtick containing dangerous commands (not benign subshells like `date` or `mktemp`)\n  { pattern: /`[^`]*(curl|wget|nc|rm\\s+-rf|dd\\s+|mkfs)[^`]*`/, reason: 'Dangerous command inside backtick substitution' },\n  // $() containing dangerous commands (allow benign like $(date), $(pwd), $(nproc))\n  { pattern: /\\$\\([^)]*(curl|wget|nc|rm\\s+-rf|dd\\s+|mkfs)[^)]*\\)/, reason: 'Dangerous command inside $() substitution' },\n  // Semicolon-separated second command that is destructive\n  { pattern: /;\\s*(rm|dd|mkfs|curl|wget|nc)\\b/, reason: 'Injected destructive command after semicolon' },\n  // Newline injection\n  { pattern: /\\n\\s*(rm|dd|mkfs|curl|wget|nc)\\b/, reason: 'Newline-injected destructive command' },\n];\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Validate a shell command against injection and dangerous-command patterns.\n *\n * Returns `{ allowed: false }` for critical/high severity issues.\n * Returns `{ allowed: true }` with a reason for medium severity (warning).\n */\nexport function validateCommand(command: string): CommandValidationResult {\n  const trimmed = command.trim();\n\n  if (!trimmed) {\n    return { allowed: false, reason: 'Empty command', severity: 'medium' };\n  }\n\n  // --- Critical checks ---\n  for (const { pattern, reason } of CRITICAL_PATTERNS) {\n    if (pattern.test(trimmed)) {\n      return { allowed: false, reason: `Critical: ${reason}`, severity: 'critical' };\n    }\n  }\n\n  // --- Injection checks ---\n  for (const { pattern, reason } of INJECTION_PATTERNS) {\n    if (pattern.test(trimmed)) {\n      return { allowed: false, reason: `Injection: ${reason}`, severity: 'critical' };\n    }\n  }\n\n  // --- High severity checks ---\n  for (const { pattern, reason } of HIGH_PATTERNS) {\n    if (pattern.test(trimmed)) {\n      return { allowed: false, reason: `Blocked: ${reason}`, severity: 'high' };\n    }\n  }\n\n  // --- Medium severity checks (allow but flag) ---\n  for (const { pattern, reason } of MEDIUM_PATTERNS) {\n    if (pattern.test(trimmed)) {\n      return { allowed: true, reason: `Warning: ${reason}`, severity: 'medium' };\n    }\n  }\n\n  return { allowed: true };\n}\n\n/**\n * Extract a list of all matched warning/block reasons for audit logging.\n * Unlike `validateCommand`, this does not short-circuit on the first match.\n */\nexport function auditCommand(command: string): { severity: 'critical' | 'high' | 'medium'; reason: string }[] {\n  const trimmed = command.trim();\n  const findings: { severity: 'critical' | 'high' | 'medium'; reason: string }[] = [];\n\n  for (const { pattern, reason } of CRITICAL_PATTERNS) {\n    if (pattern.test(trimmed)) findings.push({ severity: 'critical', reason });\n  }\n  for (const { pattern, reason } of INJECTION_PATTERNS) {\n    if (pattern.test(trimmed)) findings.push({ severity: 'critical', reason });\n  }\n  for (const { pattern, reason } of HIGH_PATTERNS) {\n    if (pattern.test(trimmed)) findings.push({ severity: 'high', reason });\n  }\n  for (const { pattern, reason } of MEDIUM_PATTERNS) {\n    if (pattern.test(trimmed)) findings.push({ severity: 'medium', reason });\n  }\n\n  return findings;\n}\n"],"mappings":";AAgBA,MAAM,oBAA2D;CAE/D;EAAE,SAAS;EAA8D,QAAQ;EAA8B;CAC/G;EAAE,SAAS;EAAyD,QAAQ;EAAwC;CACpH;EAAE,SAAS;EAAY,QAAQ;EAA6B;CAC5D;EAAE,SAAS;EAAyB,QAAQ;EAA2B;CACvE;EAAE,SAAS;EAAoB,QAAQ;EAA4B;CAGnE;EAAE,SAAS;EAA+B,QAAQ;EAA6B;CAC/E;EAAE,SAAS;EAA+B,QAAQ;EAA6B;CAC/E;EAAE,SAAS;EAA4B,QAAQ;EAA8B;CAC7E;EAAE,SAAS;EAA4B,QAAQ;EAA8B;CAC7E;EAAE,SAAS;EAA4B,QAAQ;EAA4B;CAC3E;EAAE,SAAS;EAA4B,QAAQ;EAA4B;CAG3E;EAAE,SAAS;EAA0B,QAAQ;EAAwB;CACrE;EAAE,SAAS;EAAkC,QAAQ;EAAwB;CAC7E;EAAE,SAAS;EAAyB,QAAQ;EAAoB;CAChE;EAAE,SAAS;EAAuB,QAAQ;EAA0B;CACpE;EAAE,SAAS;EAA2B,QAAQ;EAA6B;CAG3E;EAAE,SAAS;EAA4B,QAAQ;EAAwB;CACvE;EAAE,SAAS;EAAkC,QAAQ;EAA+B;CACrF;AAMD,MAAM,gBAAuD;CAE3D;EAAE,SAAS;EAA+B,QAAQ;EAAwB;CAC1E;EAAE,SAAS;EAAsB,QAAQ;EAAqB;CAC9D;EAAE,SAAS;EAAoB,QAAQ;EAA4B;CAGnE;EAAE,SAAS;EAA2B,QAAQ;EAAwB;CACtE;EAAE,SAAS;EAAkB,QAAQ;EAA2B;CAChE;EAAE,SAAS;EAAsB,QAAQ;EAAmC;CAC5E;EAAE,SAAS;EAAwB,QAAQ;EAA8B;CAGzE;EAAE,SAAS;EAAqB,QAAQ;EAAqB;CAC7D;EAAE,SAAS;EAAe,QAAQ;EAA8B;CAGhE;EAAE,SAAS;EAAsB,QAAQ;EAAwB;CAGjE;EAAE,SAAS;EAAuD,QAAQ;EAAgC;CAC1G;EAAE,SAAS;EAA4C,QAAQ;EAAgC;CAI/F;EAAE,SAAS;EAA0I,QAAQ;EAA8D;CAC3N;EAAE,SAAS;EAAqF,QAAQ;EAAuB;CAC/H;EAAE,SAAS;EAA+E,QAAQ;EAAoB;CAGtH;EAAE,SAAS;EAAa,QAAQ;EAA0B;CAC1D;EAAE,SAAS;EAAc,QAAQ;EAAuB;CACxD;EAAE,SAAS;EAAa,QAAQ;EAA0B;CAC3D;AAMD,MAAM,kBAAyD;CAC7D;EAAE,SAAS;EAAyB,QAAQ;EAA+B;CAC3E;EAAE,SAAS;EAAkB,QAAQ;EAA+B;CAEpE;EAAE,SAAS;EAAmC,QAAQ;EAA2B;CACjF;EAAE,SAAS;EAA0B,QAAQ;EAA4B;CACzE;EAAE,SAAS;EAA0B,QAAQ;EAAkB;CAChE;;;;;;;;AAaD,MAAM,qBAA4D;CAEhE;EAAE,SAAS;EAAkD,QAAQ;EAAkD;CAEvH;EAAE,SAAS;EAAsD,QAAQ;EAA6C;CAEtH;EAAE,SAAS;EAAmC,QAAQ;EAAgD;CAEtG;EAAE,SAAS;EAAoC,QAAQ;EAAwC;CAChG;;;;;;;AAYD,SAAgB,gBAAgB,SAA0C;CACxE,MAAM,UAAU,QAAQ,MAAM;AAE9B,KAAI,CAAC,QACH,QAAO;EAAE,SAAS;EAAO,QAAQ;EAAiB,UAAU;EAAU;AAIxE,MAAK,MAAM,EAAE,SAAS,YAAY,kBAChC,KAAI,QAAQ,KAAK,QAAQ,CACvB,QAAO;EAAE,SAAS;EAAO,QAAQ,aAAa;EAAU,UAAU;EAAY;AAKlF,MAAK,MAAM,EAAE,SAAS,YAAY,mBAChC,KAAI,QAAQ,KAAK,QAAQ,CACvB,QAAO;EAAE,SAAS;EAAO,QAAQ,cAAc;EAAU,UAAU;EAAY;AAKnF,MAAK,MAAM,EAAE,SAAS,YAAY,cAChC,KAAI,QAAQ,KAAK,QAAQ,CACvB,QAAO;EAAE,SAAS;EAAO,QAAQ,YAAY;EAAU,UAAU;EAAQ;AAK7E,MAAK,MAAM,EAAE,SAAS,YAAY,gBAChC,KAAI,QAAQ,KAAK,QAAQ,CACvB,QAAO;EAAE,SAAS;EAAM,QAAQ,YAAY;EAAU,UAAU;EAAU;AAI9E,QAAO,EAAE,SAAS,MAAM;;;;;;AAO1B,SAAgB,aAAa,SAAiF;CAC5G,MAAM,UAAU,QAAQ,MAAM;CAC9B,MAAM,WAA2E,EAAE;AAEnF,MAAK,MAAM,EAAE,SAAS,YAAY,kBAChC,KAAI,QAAQ,KAAK,QAAQ,CAAE,UAAS,KAAK;EAAE,UAAU;EAAY;EAAQ,CAAC;AAE5E,MAAK,MAAM,EAAE,SAAS,YAAY,mBAChC,KAAI,QAAQ,KAAK,QAAQ,CAAE,UAAS,KAAK;EAAE,UAAU;EAAY;EAAQ,CAAC;AAE5E,MAAK,MAAM,EAAE,SAAS,YAAY,cAChC,KAAI,QAAQ,KAAK,QAAQ,CAAE,UAAS,KAAK;EAAE,UAAU;EAAQ;EAAQ,CAAC;AAExE,MAAK,MAAM,EAAE,SAAS,YAAY,gBAChC,KAAI,QAAQ,KAAK,QAAQ,CAAE,UAAS,KAAK;EAAE,UAAU;EAAU;EAAQ,CAAC;AAG1E,QAAO"}

package/dist/src/agent/service.d.ts

@@ -35,6 +35,7 @@ export declare class AgentService {
     private toolChainTracker;
     private errorPatternMatcher;
     private selfVerifyMiddleware;
+    private turnDiffTracker;
     private contextMiddleware;
     private messageRouter;
     private commandHandler;
@@ -185,6 +186,6 @@ export declare class AgentService {
      */
     private handleSessionEvent;
     private checkAndCompact;
-    private getContextWindow;
+    private getContextWindowForSession;
     private dispose;
 }

package/dist/src/agent/service.js

@@ -1,12 +1,12 @@
+import { createLogger } from "../utils/logger/index.js";
+import { init_logger } from "../utils/logger.js";
+import { parseNoteAttachmentTarget } from "../notes/attachment-ref.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { applyConfigOverrides } from "../config/runtime-overrides.js";
 import { init_agent_scope, resolveAgentHomeDir, resolveDefaultAgentId } from "./agent-scope.js";
 import { extractProfileAgentId } from "../config/agent-profile.js";
-import { createLogger } from "../utils/logger/index.js";
-import { init_logger } from "../utils/logger.js";
 import { init_paths, resolveUserProfilePath } from "../config/paths.js";
 import { extractTextContent } from "./context/workspace.js";
-import { parseNoteAttachmentTarget } from "../notes/attachment-ref.js";
 import { effectiveWorkspacePathForSession } from "../session/session-workspace.js";
 import { getProjectForSession } from "../projects/workspace.js";
 import { getWorkflowProgressBroker } from "./workflow/progress-broker.js";
@@ -35,6 +35,7 @@ import { ErrorPatternMatcher } from "./tools/error-pattern-matcher.js";
 import { SelfVerifyMiddleware } from "./middleware/self-verify.js";
 import { ContextMiddleware } from "./middleware/context.js";
 import "./middleware/index.js";
+import { TurnDiffTracker } from "./coding/turn-diff-tracker.js";
 import { LifecycleManager } from "./lifecycle/manager.js";
 import "./lifecycle/index.js";
 import { CompactionLifecycleHandler } from "./lifecycle/handlers/compaction.js";
@@ -100,6 +101,7 @@ var AgentService = class {
 	toolChainTracker;
 	errorPatternMatcher;
 	selfVerifyMiddleware;
+	turnDiffTracker;
 	contextMiddleware;
 	messageRouter;
 	commandHandler;
@@ -223,10 +225,13 @@ var AgentService = class {
 			verboseLevel: config.verboseLevel,
 			gatewayClarify: config.gatewayClarify,
 			getAutomationService: config.getAutomationService,
+			getNotesService: config.getNotesService,
+			getProjectService: config.getProjectService,
+			getWorkItemService: config.getWorkItemService,
 			getWorkflowRunService: config.getWorkflowRunService,
 			onSkillsUpdated: config.onSkillsUpdated,
 			isWorkspaceTrusted: config.isWorkspaceTrusted,
-			getSelfVerifyPromptContext: (sessionKey, agentId) => this.selfVerifyMiddleware.getPendingVerificationContext(sessionKey, agentId)
+			getSelfVerifyPromptContext: (sessionKey, agentId) => [this.selfVerifyMiddleware.getPendingVerificationContext(sessionKey, agentId), this.turnDiffTracker.buildFinalGuardContext(sessionKey)].filter(Boolean).join("\n\n")
 		});
 		this.agentEventHandler = new AgentEventHandler({
 			progressManager: this.progressManager,
@@ -237,7 +242,8 @@ var AgentService = class {
 			selfVerifyMiddleware: this.selfVerifyMiddleware,
 			systemReminder: this.systemReminder,
 			toolUsageAnalyzer: this.toolUsageAnalyzer,
-			errorPatternMatcher: this.errorPatternMatcher
+			errorPatternMatcher: this.errorPatternMatcher,
+			turnDiffTracker: this.turnDiffTracker
 		});
 		this.workflowProgressBrokerHandle = getWorkflowProgressBroker().attachTo(this.agentEventHandler);
 		this.sessionHydrator = new SessionHydrator({
@@ -326,7 +332,7 @@ var AgentService = class {
 			agentManager: this.agentManager,
 			sessionHydrator: this.sessionHydrator,
 			getConfig: () => this.effectiveAppConfig(),
-			getContextWindow: () => this.getContextWindow()
+			getContextWindow: (sessionKey) => this.getContextWindowForSession(sessionKey)
 		});
 		this.outboundCoordinator = new OutboundCoordinator({
 			bus,
@@ -446,6 +452,7 @@ var AgentService = class {
 			minTurnsForVerification: 4,
 			resetOnVerification: true
 		});
+		this.turnDiffTracker = new TurnDiffTracker();
 		this.requestLimiter = new RequestLimiter({
 			maxRequestsPerTurn: 50,
 			warnThreshold: .8,
@@ -763,7 +770,7 @@ var AgentService = class {
 		this.agentEventHandler.handle(event, currentContext);
 	}
 	async checkAndCompact(sessionKey, messages) {
-		const contextWindow = this.getContextWindow();
+		const contextWindow = this.getContextWindowForSession(sessionKey);
 		const prep = this.sessionStore.prepareCompaction(sessionKey, messages, contextWindow);
 		if (!prep.needsCompaction) return;
 		log.info({
@@ -783,8 +790,16 @@ var AgentService = class {
 			tokensAfter: result.tokensAfter
 		}, "Session compacted");
 	}
-	getContextWindow() {
-		return 128e3;
+	getContextWindowForSession(sessionKey) {
+		try {
+			return this.modelManager.getResolvedModelForSession(sessionKey).contextWindow ?? 128e3;
+		} catch (err) {
+			log.warn({
+				err,
+				sessionKey
+			}, "Failed to resolve session context window; using default");
+			return 128e3;
+		}
 	}
 	dispose() {
 		this.sessionTracker.dispose();

package/dist/src/agent/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","names":[],"sources":["../../../src/agent/service.ts"],"sourcesContent":["import type { AgentEvent, AgentMessage, ThinkingLevel } from '@earendil-works/pi-agent-core';\nimport type { MessageBus } from '../infra/bus/index.js';\nimport { type Config, getAgentDefaultModelRef } from '../config/schema.js';\nimport {\n  maybeRefineSessionTitleWithLlm,\n  maybeSetProvisionalSessionTitle,\n} from '../session/session-title.js';\nimport type { ChannelManager } from '../channels/manager.js';\nimport { existsSync, readFileSync } from 'node:fs';\nimport { readFile } from 'node:fs/promises';\n\nimport {\n  SessionStore,\n  SessionConfigStore,\n  onSessionTranscriptUpdate,\n  effectiveWorkspacePathForSession,\n  type CompactionConfig,\n  type WindowConfig,\n} from '../session/index.js';\nimport { type ThinkLevel } from './transcript/thinking-types.js';\nimport { createLogger } from '../utils/logger.js';\nimport { ExtensionHookRunner } from '../extensions/index.js';\nimport { extractTextContent } from './context/workspace.js';\nimport { SessionTracker } from './session/tracker.js';\nimport { ModelManager } from './models/index.js';\nimport { initializeCommands } from '../chat-commands/index.js';\nimport { ProgressFeedbackManager } from './lifecycle/progress.js';\nimport { HookHandler } from './lifecycle/hook-handler.js';\nimport { ToolErrorTracker } from './tools/error-tracker.js';\nimport { RequestLimiter } from './models/request-limiter.js';\nimport { SystemReminder } from './prompt/system-reminder.js';\nimport { ToolUsageAnalyzer } from './tools/usage-analyzer.js';\nimport { ToolChainTracker } from './tools/chain-tracker.js';\nimport { ErrorPatternMatcher } from './tools/error-pattern-matcher.js';\nimport { ContextMiddleware, SelfVerifyMiddleware } from './middleware/index.js';\nimport { LifecycleManager } from './lifecycle/index.js';\nimport { CompactionLifecycleHandler } from './lifecycle/handlers/compaction.js';\n\nimport {\n  MessageRouter,\n  CommandHandler,\n  StreamManager,\n  OutboundCoordinator,\n} from './messaging/index.js';\nimport { InboundLoop } from './inbound/inbound-loop.js';\nimport { TurnDispatcher } from './inbound/turn-dispatcher.js';\nimport {\n  SessionContextManager,\n  SessionLifecycleManager,\n  SessionStateBag,\n  SessionConfigService,\n  SessionHydrator,\n  SessionInspector,\n  type SessionContext,\n} from './session/index.js';\nimport { AgentOrchestrator, AgentEventHandler } from './orchestration/index.js';\nimport {\n  getWorkflowProgressBroker,\n  type BrokerListenerHandle,\n} from './workflow/index.js';\nimport { FeedbackCoordinator } from './feedback/index.js';\nimport {\n  AgentManager,\n  type AgentSkillAvailabilityPayload,\n  type SkillCatalogEntry,\n  type SkillCatalogSnapshot,\n} from './agent-manager.js';\nimport type { SkillMarkdownPreviewPayload } from './skills/types.js';\nimport type { AgentServiceConfig, StreamHandle } from './service.types.js';\nimport { PersistentGoalService } from './goals/persistent-goal-service.js';\nimport { parseNoteAttachmentTarget } from '../notes/attachment-ref.js';\n\nimport {\n  resolveAgentHomeDir,\n  resolveDefaultAgentId,\n} from './agent-scope.js';\nimport {\n  extractProfileAgentId,\n} from '../config/agent-profile.js';\nimport { resolveUserProfilePath } from '../config/paths.js';\nimport { getProjectForSession } from '../projects/workspace.js';\nimport {\n  persistInboundAttachments,\n  type InboundAttachmentInput,\n  type MediaRef,\n} from '../channels/attachments/inbound-persist.js';\nimport { applyConfigOverrides } from '../config/runtime-overrides.js';\n\nexport type { AgentServiceConfig, AgentContext, StreamHandle } from './service.types.js';\n\nconst log = createLogger('AgentService');\n\nfunction assistantMessageText(message: AgentMessage): string {\n  const content = (message as { content?: unknown }).content;\n  if (typeof content === 'string') return content;\n  if (!Array.isArray(content)) return '';\n  return content\n    .map((block) => {\n      if (!block || typeof block !== 'object') return '';\n      const rec = block as { type?: unknown; text?: unknown };\n      return rec.type === 'text' && typeof rec.text === 'string' ? rec.text : '';\n    })\n    .join('');\n}\n\nexport class AgentService {\n  /**\n   * Persistent transcript + session-metadata store. Public so the gateway/TUI\n   * can read sessions, delete them, etc. without forcing every CRUD-style\n   * operation through a delegation method on `AgentService`.\n   */\n  readonly sessionStore: SessionStore;\n  private sessionConfigStore: SessionConfigStore;\n  private hookRunner?: ExtensionHookRunner;\n  private agentId: string;\n  private workspaceDir: string;\n  private config: AgentServiceConfig;\n  private sessionTracker: SessionTracker;\n  private modelManager: ModelManager;\n  private progressManager: ProgressFeedbackManager;\n  private hookHandler: HookHandler;\n  private lifecycleManager: LifecycleManager;\n  private errorTracker: ToolErrorTracker;\n  private requestLimiter: RequestLimiter;\n  private systemReminder: SystemReminder;\n  private toolUsageAnalyzer: ToolUsageAnalyzer;\n  private toolChainTracker: ToolChainTracker;\n  private errorPatternMatcher: ErrorPatternMatcher;\n  private selfVerifyMiddleware: SelfVerifyMiddleware;\n  private contextMiddleware: ContextMiddleware;\n\n  private messageRouter: MessageRouter;\n  private commandHandler: CommandHandler;\n  private streamManager: StreamManager;\n  /**\n   * Outbound pipeline: typing controller, silence guard, final response publish,\n   * extension `message_sending`/`message_sent` hooks, post-turn `webchat_turn_complete`\n   * event. Public so the gateway / channels can drive it directly.\n   */\n  readonly outboundCoordinator: OutboundCoordinator;\n  private inboundLoop: InboundLoop;\n  /**\n   * Direct-turn entry points: `processDirect` (one-shot), `processDirectStreaming`\n   * (SSE generator), webchat steering and SSE injection. Public so the gateway,\n   * TUI, CLI, and automations do not need to thread every call through `AgentService`.\n   */\n  readonly turnDispatcher: TurnDispatcher;\n  /**\n   * `/goal` runtime: continuation scheduling, persistent-goal API factory,\n   * stream-outcome state, post-turn verdict. Public so the gateway can wire\n   * the webchat continuation scheduler and read stream outcomes directly.\n   */\n  readonly persistentGoals: PersistentGoalService;\n  /**\n   * Per-session config writes (model / thinking / reasoning / working directory).\n   * Public so REST endpoints and CLI flows can hit it without going through a\n   * monolithic patch entrypoint on `AgentService`.\n   */\n  readonly sessionConfig: SessionConfigService;\n  /**\n   * Hydration — read persisted per-session config and apply it to the runtime\n   * (AgentManager / ModelManager). The mirror image of `sessionConfig`: writes\n   * go through `sessionConfig`, reads-into-runtime go through `sessionHydrator`.\n   */\n  readonly sessionHydrator: SessionHydrator;\n  /**\n   * Read-only introspection (compaction, /context report, /btw, contextUsage,\n   * agentConfig view). Public so REST endpoints and CLI flows can query a\n   * session's view without going through delegating methods on `AgentService`.\n   */\n  readonly sessionInspector: SessionInspector;\n  private sessionContextManager: SessionContextManager;\n  private sessionLifecycleManager: SessionLifecycleManager;\n  private agentOrchestrator: AgentOrchestrator;\n  private agentEventHandler: AgentEventHandler;\n  private workflowProgressBrokerHandle: BrokerListenerHandle | null = null;\n  private feedbackCoordinator: FeedbackCoordinator;\n  private agentManager: AgentManager;\n\n  /**\n   * Unified per-session state container (replaces six ad-hoc Maps). Owns webchat\n   * publishers, last assistant text, embedded stream buffer, persistent-goal stream\n   * outcomes, concurrent-turn depth, and event-listener unsubscribers; runs a TTL\n   * sweep for slots that have no explicit owner.\n   */\n  private sessionState = new SessionStateBag();\n\n  /** Gateway: notify UI after direct `SessionStore.updateMetadata` (no SessionManager emit). */\n  private onSessionMetadataUpdated?: (sessionKey: string, patch?: { name?: string }) => void;\n  private onSessionTranscriptUpdated?: (sessionKey: string) => void;\n\n  private effectiveAppConfig(): Config | undefined {\n    const base = this.config.config;\n    return base ? applyConfigOverrides(base) : undefined;\n  }\n\n  constructor(bus: MessageBus, config: AgentServiceConfig) {\n    this.config = config;\n    this.onSessionMetadataUpdated = config.onSessionMetadataUpdated;\n    this.onSessionTranscriptUpdated = config.onSessionTranscriptUpdated;\n    this.agentId = `agent-${Date.now()}`;\n    this.workspaceDir = config.workspace;\n\n    this.sessionTracker = new SessionTracker();\n    this.modelManager = new ModelManager({\n      defaultModel: config.model,\n      config: config.config,\n    });\n\n    initializeCommands();\n    log.debug('Command system initialized');\n\n    this.sessionStore = config.sessionStore ?? this.createSessionStore();\n    onSessionTranscriptUpdate((update) => {\n      void this.sessionStore.syncEmbeddedTranscriptUpdate(update).catch((err) => {\n        log.warn(\n          { err, sessionKey: update.sessionKey },\n          'Transcript index sync failed',\n        );\n      });\n      const sk = update.sessionKey?.trim();\n      if (sk) {\n        this.onSessionTranscriptUpdated?.(sk);\n      }\n    });\n    const appCfgForPaths = this.config.config;\n    if (!appCfgForPaths) {\n      throw new Error('AgentService requires config.config for session paths');\n    }\n    const defaultAid = resolveDefaultAgentId(appCfgForPaths);\n    const defaultAgentHome = resolveAgentHomeDir(appCfgForPaths, defaultAid);\n    this.sessionConfigStore = new SessionConfigStore(defaultAgentHome);\n\n    this.hookRunner = this.createHookRunner();\n    this.hookHandler = new HookHandler({\n      hookRunner: this.hookRunner,\n      agentId: this.agentId,\n      get sessionKey() { return this.currentContext?.sessionKey; },\n    });\n\n    this.progressManager = this.createProgressManager();\n    this.initializeReliabilityModules();\n\n    this.lifecycleManager = new LifecycleManager();\n    this.initializeLifecycleHandlers();\n\n    this.streamManager = new StreamManager();\n    this.sessionContextManager = new SessionContextManager();\n    this.feedbackCoordinator = new FeedbackCoordinator({\n      progressManager: this.progressManager,\n      bus,\n    });\n\n    this.agentManager = new AgentManager({\n      workspace: config.workspace,\n      model: config.model,\n      config: config.config,\n      extensionRegistry: config.extensionRegistry,\n      hookRunner: this.hookRunner,\n      bus,\n      getCurrentContext: () => this.sessionContextManager.getContext(),\n      getSessionStore: () => this.sessionStore,\n      getModelManager: () => this.modelManager,\n      thinkingLevel: config.thinkingLevel,\n      reasoningLevel: config.reasoningLevel,\n      verboseLevel: config.verboseLevel,\n      gatewayClarify: config.gatewayClarify,\n      getAutomationService: config.getAutomationService,\n      getWorkflowRunService: config.getWorkflowRunService,\n      onSkillsUpdated: config.onSkillsUpdated,\n      isWorkspaceTrusted: config.isWorkspaceTrusted,\n      getSelfVerifyPromptContext: (sessionKey, agentId) =>\n        this.selfVerifyMiddleware.getPendingVerificationContext(sessionKey, agentId),\n    });\n\n    this.agentEventHandler = new AgentEventHandler({\n      progressManager: this.progressManager,\n      errorTracker: this.errorTracker,\n      requestLimiter: this.requestLimiter,\n      lifecycleManager: this.lifecycleManager,\n      toolChainTracker: this.toolChainTracker,\n      selfVerifyMiddleware: this.selfVerifyMiddleware,\n      systemReminder: this.systemReminder,\n      toolUsageAnalyzer: this.toolUsageAnalyzer,\n      errorPatternMatcher: this.errorPatternMatcher,\n    });\n\n    // Wire the workflow progress broker into the session event bus. Channel\n    // extensions self-register their capability against the singleton at\n    // boot; the broker only forwards updates to whatever has registered, so\n    // this is safe even when no channel is configured.\n    this.workflowProgressBrokerHandle = getWorkflowProgressBroker().attachTo(\n      this.agentEventHandler,\n    );\n\n    // sessionHydrator is constructed early because AgentOrchestrator + InboundLoop +\n    // TurnDispatcher all need it; the SessionConfigService instance below also\n    // shares the same constructor parameters.\n    this.sessionHydrator = new SessionHydrator({\n      sessionConfigStore: this.sessionConfigStore,\n      agentManager: this.agentManager,\n      modelManager: this.modelManager,\n      getConfig: () => this.effectiveAppConfig(),\n    });\n\n    this.agentOrchestrator = new AgentOrchestrator({\n      agentManager: this.agentManager,\n      sessionStore: this.sessionStore,\n      modelManager: this.modelManager,\n      eventHandler: this.agentEventHandler,\n      feedbackCoordinator: this.feedbackCoordinator,\n      sessionConfigStore: this.sessionConfigStore,\n      sessionHydrator: this.sessionHydrator,\n      getConfig: () => this.effectiveAppConfig(),\n      getThinkingDefault: () => undefined,\n      getThinkingDefaultForSession: (sessionKey: string) =>\n        this.agentManager.getThinkingDefaultForSession(sessionKey),\n      workspaceRoot: this.workspaceDir,\n      getWorkspaceRootForSession: (sessionKey: string) =>\n        this.agentManager.getResolvedWorkspaceForSession(sessionKey),\n      getAgentInternalStorageRootForSession: (sessionKey: string) =>\n        resolveAgentHomeDir(this.config.config!, extractProfileAgentId(sessionKey, this.config.config!)),\n      enqueueAutoTitle: (sessionKey: string) => this.enqueueMaybeAutoTitleAfterPersist(sessionKey),\n      onEmbeddedStreamEvent: (sessionKey, event) => {\n        const ctx = this.sessionContextManager.getContext();\n        if (!ctx || ctx.sessionKey !== sessionKey) {\n          return;\n        }\n        if (event.type === 'message_update' && event.message.role === 'assistant') {\n          const next = assistantMessageText(event.message);\n          this.streamManager.update(next);\n        }\n      },\n      onEmbeddedTurnComplete: (sessionKey, text) => {\n        if (text) {\n          this.sessionState.setLastAssistantText(sessionKey, text);\n        }\n        this.sessionState.clearEmbeddedStreamText(sessionKey);\n      },\n    });\n\n    this.messageRouter = new MessageRouter();\n    this.commandHandler = new CommandHandler({\n      config: config.config!,\n      bus,\n      sessionStore: this.sessionStore,\n      sessionConfigStore: this.sessionConfigStore,\n      getPersistentGoalApisForCommand: (routing) => this.persistentGoals.buildApisForRouting(routing),\n      getWorkflowRunService: config.getWorkflowRunService,\n      applySessionThinkingLevel: (sessionKey: string, level: ThinkLevel) => {\n        this.agentManager.setThinkingLevel(sessionKey, level as ThinkingLevel);\n      },\n      getCurrentModel: () => this.agentOrchestrator.getCurrentModel(),\n      switchModelForSession: (sessionKey: string, modelId: string) =>\n        this.switchModelForSession(sessionKey, modelId),\n      invalidateAgentSession: (sessionKey: string) => {\n        this.agentManager.removeAgent(sessionKey);\n      },\n      resetSession: (sessionKey: string) => this.resetSession(sessionKey),\n      abortSessionTurn: async (sessionKey: string) => {\n        await this.streamManager.abort();\n        this.agentOrchestrator.abort(sessionKey);\n      },\n      reloadSkills: () => this.refreshSkillsAfterDiskChange(),\n      compactSession: (sessionKey, options) => this.sessionInspector.compact(sessionKey, options),\n      btwQuery: (sessionKey, question) => this.sessionInspector.btwQuery(sessionKey, question),\n      getSessionContextReport: (sessionKey, mode) => this.sessionInspector.report(sessionKey, mode),\n    });\n\n    this.sessionLifecycleManager = new SessionLifecycleManager(\n      this.sessionStore,\n      this.sessionTracker,\n      this.lifecycleManager\n    );\n\n    this.persistentGoals = new PersistentGoalService({\n      bus,\n      sessionStore: this.sessionStore,\n      modelManager: this.modelManager,\n      sessionState: this.sessionState,\n      getConfig: () => this.effectiveAppConfig(),\n      getResolvedWorkspaceForSession: (sk) => this.agentManager.getResolvedWorkspaceForSession(sk),\n      onSessionMetadataUpdated: this.onSessionMetadataUpdated,\n      onGoalStatusUpdated: config.onGoalStatusUpdated,\n      notifyWebchatTranscriptAppend: (sk, text) => this.turnDispatcher.notifyWebchatTranscriptAppend(sk, text),\n    });\n\n    this.sessionConfig = new SessionConfigService({\n      sessionStore: this.sessionStore,\n      sessionConfigStore: this.sessionConfigStore,\n      modelManager: this.modelManager,\n      agentManager: this.agentManager,\n      getConfig: () => this.effectiveAppConfig(),\n    });\n\n    this.sessionInspector = new SessionInspector({\n      sessionStore: this.sessionStore,\n      sessionConfigStore: this.sessionConfigStore,\n      modelManager: this.modelManager,\n      agentManager: this.agentManager,\n      sessionHydrator: this.sessionHydrator,\n      getConfig: () => this.effectiveAppConfig(),\n      getContextWindow: () => this.getContextWindow(),\n    });\n\n    this.outboundCoordinator = new OutboundCoordinator({\n      bus,\n      hookHandler: this.hookHandler,\n      streamManager: this.streamManager,\n      getConfig: () => this.effectiveAppConfig(),\n      getLastAssistantPlainText: (sk) => this.getLastAssistantPlainText(sk),\n      runPersistentGoalPostTurn: (payload) => this.persistentGoals.runPostTurn(payload),\n    });\n\n    this.turnDispatcher = new TurnDispatcher({\n      log,\n      agentManager: this.agentManager,\n      sessionStore: this.sessionStore,\n      modelManager: this.modelManager,\n      sessionConfigStore: this.sessionConfigStore,\n      sessionState: this.sessionState,\n      commandHandler: this.commandHandler,\n      getConfig: () => this.effectiveAppConfig(),\n      requireConfig: () => {\n        const c = this.config.config;\n        if (!c) throw new Error('AgentService requires config.config');\n        return c;\n      },\n      resolveSessionEndpoint: (sk) => this.resolveSessionEndpoint(sk),\n      initSessionContext: (sk, channel, chatId) => this.initSessionContext(sk, channel, chatId),\n      sessionHydrator: this.sessionHydrator,\n      prepareInboundAttachments: (sk, att) => this.prepareInboundAttachments(sk, att),\n      enqueueMaybeAutoTitleAfterPersist: (sk) => this.enqueueMaybeAutoTitleAfterPersist(sk),\n      enqueueProvisionalSessionTitle: (sk, text) => this.enqueueProvisionalSessionTitle(sk, text),\n      endDirectRequestContext: () => this.endDirectRequestContext(),\n      onSessionTranscriptUpdated: this.onSessionTranscriptUpdated,\n      resetSession: (sk) => this.resetSession(sk),\n      sourceContextResolver: config.sourceContextResolver,\n    });\n\n    this.inboundLoop = new InboundLoop({\n      log,\n      agentId: this.agentId,\n      bus,\n      hookHandler: this.hookHandler,\n      messageRouter: this.messageRouter,\n      commandHandler: this.commandHandler,\n      sessionContextManager: this.sessionContextManager,\n      feedbackCoordinator: this.feedbackCoordinator,\n      agentManager: this.agentManager,\n      sessionLifecycleManager: this.sessionLifecycleManager,\n      agentOrchestrator: this.agentOrchestrator,\n      outboundCoordinator: this.outboundCoordinator,\n      streamManager: this.streamManager,\n      sessionState: this.sessionState,\n      sessionStore: this.sessionStore,\n      modelManager: this.modelManager,\n      setupSessionEventHandling: (sk) => this.setupSessionEventHandling(sk),\n      sessionHydrator: this.sessionHydrator,\n      getLastAssistantPlainText: (sk) => this.getLastAssistantPlainText(sk),\n      checkAndCompact: (sk, msgs) => this.checkAndCompact(sk, msgs),\n      enqueueMaybeAutoTitleAfterPersist: (sk) => this.enqueueMaybeAutoTitleAfterPersist(sk),\n      getConfig: () => this.effectiveAppConfig(),\n      resetSession: (sk) => this.resetSession(sk),\n      setStreamHandle: (handle) => this.setStreamHandle(handle),\n    });\n\n    // Register signal handlers only if not running as an Electron subprocess.\n    // In Electron, the parent process manages the lifecycle and signals should not trigger disposal.\n    const isElectronSubprocess = !!process.env.ELECTRON_RUN_AS_NODE;\n    if (!isElectronSubprocess) {\n      process.on('SIGINT', () => this.dispose());\n      process.on('SIGTERM', () => this.dispose());\n    }\n\n    log.info('AgentService initialized');\n  }\n\n  private createSessionStore(): SessionStore {\n    const windowConfig: Partial<WindowConfig> = {\n      maxMessages: 100,\n      keepRecentMessages: 20,\n      preserveSystemMessages: true,\n    };\n    const compactionConfig: Partial<CompactionConfig> = {\n      enabled: true,\n      mode: 'abstractive',\n      reserveTokens: 8000,\n      triggerThreshold: 0.8,\n      minMessagesBeforeCompact: 10,\n      keepRecentMessages: 10,\n      evictionWindow: 0.2,\n      retentionWindow: 6,\n    };\n    const appCfg = this.config.config;\n    if (!appCfg) {\n      throw new Error('AgentService requires config.config for session store paths');\n    }\n    return new SessionStore(\n      {\n        config: appCfg,\n      },\n      windowConfig,\n      compactionConfig,\n    );\n  }\n\n  private createHookRunner(): ExtensionHookRunner | undefined {\n    if (!this.config.extensionRegistry) return undefined;\n\n    return new ExtensionHookRunner(this.config.extensionRegistry, {\n      catchErrors: true,\n      logger: {\n        info: (msg: string) => log.info({ hook: true }, msg),\n        warn: (msg: string) => log.warn({ hook: true }, msg),\n        error: (msg: string) => log.error({ hook: true }, msg),\n      },\n    });\n  }\n\n  private createProgressManager(): ProgressFeedbackManager {\n    return new ProgressFeedbackManager({\n      level: 'normal',\n      showThinking: true,\n      streamToolProgress: true,\n      heartbeatEnabled: true,\n      heartbeatIntervalMs: 20000,\n      longTaskThresholdMs: 30000,\n    });\n  }\n\n  private initializeReliabilityModules(): void {\n    this.errorTracker = new ToolErrorTracker({\n      maxFailuresPerTool: 3,\n      maxTotalFailures: 5,\n      resetOnTurnEnd: true,\n    });\n\n    this.selfVerifyMiddleware = new SelfVerifyMiddleware({\n      maxEditsPerFile: 5,\n      enablePreCompletionCheck: true,\n      minTurnsForVerification: 4,\n      resetOnVerification: true,\n    });\n\n    this.requestLimiter = new RequestLimiter({\n      maxRequestsPerTurn: 50,\n      warnThreshold: 0.8,\n      softLimit: false,\n    });\n\n    this.systemReminder = new SystemReminder({\n      enabled: true,\n      appendToToolResults: true,\n      maxRemindersPerTurn: 3,\n    });\n\n    this.toolUsageAnalyzer = new ToolUsageAnalyzer({\n      enabled: true,\n      lowUsageThreshold: 5,\n      veryLowUsageThreshold: 1,\n      minCallsForAnalysis: 100,\n      reportIntervalMs: 60 * 60 * 1000,\n    });\n\n    this.toolChainTracker = new ToolChainTracker({\n      enabled: true,\n      maxChainsPerSession: 10,\n      maxNodesPerChain: 100,\n      trackParams: true,\n      trackResults: true,\n      autoPrune: true,\n    });\n\n    this.errorPatternMatcher = new ErrorPatternMatcher({\n      enabled: true,\n      defaultMaxRetries: 1,\n      logMatches: true,\n    });\n\n    // Initialize context middleware for automatic request tracking\n    this.contextMiddleware = new ContextMiddleware();\n  }\n\n  private initializeLifecycleHandlers(): void {\n    this.lifecycleManager.on('llm_response', new CompactionLifecycleHandler({\n      minMessages: 20,\n      maxTokens: 8000,\n      preserveReasoning: true,\n      accumulateUsage: true,\n    }));\n\n    log.debug(\n      { handlers: this.lifecycleManager.getRegisteredHandlers() },\n      'Lifecycle handlers initialized'\n    );\n  }\n\n  setChannelManager(channelManager: ChannelManager): void {\n    this.inboundLoop.setChannelManager(channelManager);\n  }\n\n  /**\n   * Apply config after save or hot reload so the default model updates without restarting the gateway.\n   */\n  applyAgentDefaultsFromConfig(config: Config): void {\n    this.config.config = config;\n    const ref = getAgentDefaultModelRef(config);\n    this.config.model = ref;\n    this.modelManager.updateFromConfig(config);\n    this.agentManager.updateAgentDefaults(config);\n    this.commandHandler.updateAgentConfig(config);\n  }\n\n  getSkillCatalog(): SkillCatalogEntry[] {\n    return this.agentManager.getSkillCatalog();\n  }\n\n  getSkillCatalogSnapshot(): SkillCatalogSnapshot {\n    return this.agentManager.getSkillCatalogSnapshot();\n  }\n\n  getAgentSkillAvailability(agentId: string): AgentSkillAvailabilityPayload {\n    return this.agentManager.getAgentSkillAvailability(agentId);\n  }\n\n  getSkillMarkdownSource(skillName: string): SkillMarkdownPreviewPayload | null {\n    return this.agentManager.getSkillMarkdownSource(skillName);\n  }\n\n  refreshSkillsAfterDiskChange(): void {\n    this.agentManager.refreshSkillsAfterDiskChange();\n  }\n\n  refreshSkillsAfterSkillConfigChange(): void {\n    this.agentManager.refreshSkillsAfterSkillConfigChange();\n  }\n\n  getModelForSession(sessionKey: string): string {\n    return this.modelManager.getModelForSession(sessionKey);\n  }\n\n  async switchModelForSession(sessionKey: string, modelId: string): Promise<boolean> {\n    const ok = await this.modelManager.switchModelForSession(sessionKey, modelId);\n    if (!ok) return false;\n    await this.sessionConfigStore.update(sessionKey, { modelOverride: modelId });\n    const result = this.agentManager.setModelForSession(sessionKey, modelId);\n    if (result) {\n      this.sessionTracker.touchSession(sessionKey);\n    }\n    return true;\n  }\n\n  /**\n   * Clears per-session model override so the next turn uses the configured agent default\n   * (e.g. cron isolated job with no explicit model).\n   */\n  async resetSessionModelToAgentDefault(sessionKey: string): Promise<void> {\n    await this.sessionConfig.clearModelOverride(sessionKey);\n  }\n\n  setStreamHandle(handle: StreamHandle): void {\n    this.streamManager.setHandle(handle);\n    this.feedbackCoordinator.setStreamHandle(handle);\n  }\n\n  clearStreamHandle(): void {\n    this.streamManager.clearHandle();\n    this.feedbackCoordinator.endTask();\n  }\n\n  /** Last assistant visible plain text for a session (e.g. after a webchat stream). */\n  getLastAssistantPlainText(sessionKey: string): string {\n    return (\n      this.sessionState.getLastAssistantText(sessionKey) ??\n      this.agentManager.getLastAssistantContent(sessionKey) ??\n      ''\n    );\n  }\n\n  beginInboundTurn(sessionKey: string): void {\n    this.sessionState.beginInboundTurn(sessionKey);\n  }\n\n  endInboundTurn(sessionKey: string): void {\n    this.sessionState.endInboundTurn(sessionKey);\n  }\n\n  getInboundTurnDepth(sessionKey: string): number {\n    return this.sessionState.getInboundTurnDepth(sessionKey);\n  }\n\n  async start(): Promise<void> {\n    await this.sessionConfigStore.initialize();\n    await this.hookHandler.trigger('gateway_start', { port: 0, host: 'cli' });\n    log.debug('Agent service started');\n    void this.inboundLoop.start().catch((err) => {\n      const em = err instanceof Error ? err.message : String(err);\n      log.error({ err, errorMessage: em }, `Inbound loop failed: ${em}`);\n    });\n  }\n\n  stop(): Promise<void> {\n    this.inboundLoop.stop();\n    this.agentManager.dispose();\n    this.dispose();\n\n    this.hookHandler.trigger('gateway_stop', { reason: 'stopped' });\n    log.debug('Agent service stopped');\n    return Promise.resolve();\n  }\n\n  async reconcileDreamingNow(): Promise<void> {\n    return Promise.resolve();\n  }\n\n  /**\n   * Persist agent messages with the same sanitizer + transcript hygiene as AgentOrchestrator.\n   * Uses persistence hygiene so `thinking` blocks remain on disk for the web UI (LLM load path still drops them).\n   */\n  private notifySessionTitleUpdated(sessionKey: string, name: string): void {\n    this.onSessionMetadataUpdated?.(sessionKey, { name });\n  }\n\n  /** Fire-and-forget provisional title from first user text (webchat sidebar). */\n  enqueueProvisionalSessionTitle(sessionKey: string, userText: string): void {\n    void (async () => {\n      try {\n        await maybeSetProvisionalSessionTitle(\n          this.sessionStore,\n          sessionKey,\n          userText,\n          (sk, name) => this.notifySessionTitleUpdated(sk, name),\n        );\n      } catch (err) {\n        log.warn({ err, sessionKey }, 'Provisional session title failed');\n      }\n    })();\n  }\n\n  /**\n   * Fire-and-forget LLM refine after turn persist; skips user-locked and finalized LLM titles.\n   */\n  private enqueueMaybeAutoTitleAfterPersist(sessionKey: string): void {\n    void (async () => {\n      try {\n        let modelRef =\n          getAgentDefaultModelRef(this.config.config ?? ({} as Config)) ?? this.config.model;\n        if (!modelRef?.trim()) {\n          try {\n            modelRef = this.modelManager.getModelForSession(sessionKey);\n          } catch {\n            modelRef = undefined;\n          }\n        }\n        await maybeRefineSessionTitleWithLlm(\n          this.sessionStore,\n          sessionKey,\n          modelRef?.trim() || undefined,\n          (sk, name) => this.notifySessionTitleUpdated(sk, name),\n        );\n      } catch (err) {\n        log.warn({ err, sessionKey }, 'Auto session title failed');\n      }\n    })();\n  }\n\n  private async resolveSessionEndpoint(sessionKey: string): Promise<{ channel: string; chatId: string }> {\n    const metadata = await this.sessionStore.getMetadata(sessionKey).catch(() => null);\n    const channel = metadata?.routing?.source?.trim() || metadata?.sourceChannel?.trim() || 'cli';\n    const chatId = metadata?.routing?.peerId?.trim() || metadata?.sourceChatId?.trim() || 'main';\n    return { channel, chatId };\n  }\n\n  private initSessionContext(\n    sessionKey: string,\n    channel: string,\n    chatId: string,\n    senderId = '',\n  ): SessionContext {\n    const context: SessionContext = {\n      sessionKey,\n      channel,\n      chatId,\n      senderId,\n      isGroup: false,\n    };\n\n    this.contextMiddleware.onRequest({\n      sessionKey,\n      userId: context.senderId,\n      channel,\n      chatId,\n    });\n\n    // Direct turn entry points (one-shot + streaming generator) cannot wrap their\n    // body in `sessionContextManager.runWith(ctx, fn)` cleanly — the streaming\n    // path is an async generator, and both flows already use a try/finally for\n    // side-effect cleanup. We use `enter` so the context is visible via ALS for\n    // every async resource launched after this call returns. The context is\n    // overwritten or cleared by the next direct turn (each direct turn calls\n    // `initSessionContext` first), so there is no cross-session leak in practice.\n    this.sessionContextManager.enter(context);\n    this.feedbackCoordinator.setContext(context);\n    this.agentManager.getOrCreateAgent(sessionKey);\n    this.setupSessionEventHandling(sessionKey);\n\n    return context;\n  }\n\n  /**\n   * Persist inbound file attachments to the global media store.\n   */\n  async prepareInboundAttachments(\n    _sessionKey: string,\n    attachments?: InboundAttachmentInput[],\n  ): Promise<MediaRef[] | undefined> {\n    return persistInboundAttachments(attachments, {\n      resolveUri: async (uri) => {\n        const target = parseNoteAttachmentTarget(uri);\n        if (!target) return null;\n        const notesService = (this as unknown as {\n          notesServiceInstance?: {\n            getAttachmentPath(noteId: string, attachmentId: string): Promise<{\n              filePath: string;\n              mimeType?: string;\n              fileName?: string;\n            } | null>;\n          };\n        }).notesServiceInstance;\n        if (!notesService) return null;\n        const located = await notesService.getAttachmentPath(target.noteId, target.attachmentId);\n        if (!located) return null;\n        const buffer = await readFile(located.filePath);\n        return {\n          buffer,\n          path: located.filePath,\n          mimeType: located.mimeType,\n          name: located.fileName,\n          size: buffer.byteLength,\n        };\n      },\n    });\n  }\n\n  private endDirectRequestContext(): void {\n    // `sessionContextManager` is ALS-backed: the context for the current async\n    // chain drops automatically when the chain unwinds. The feedback\n    // coordinator + context middleware still use singleton state, so clear\n    // them explicitly here.\n    this.feedbackCoordinator.clearContext();\n    this.contextMiddleware.onResponse();\n  }\n\n  /**\n   * Reset a session's transcript and drop the in-memory agent so the next turn\n   * reloads from disk. Combines two collaborators (sessionStore + agentManager)\n   * so it stays on `AgentService`; pure sessionStore reads should use\n   * `agentService.sessionStore.*` directly.\n   */\n  async clearSessionMessages(key: string): Promise<void> {\n    await this.sessionStore.saveMessages(key, []);\n    this.agentManager.removeAgent(key);\n  }\n\n  /**\n   * Reset session transcript (archive + new session id) and evict in-memory agent state.\n   * Preserves the session key and persisted per-session overrides.\n   */\n  async resetSession(\n    key: string,\n  ): Promise<{ sessionId: string; previousSessionId: string } | null> {\n    const { abortEmbeddedRun } = await import('./embedded/runs.js');\n    const { retireSessionMcpRuntimeForSessionKey } = await import('./mcp/bundle-mcp-tools.js');\n    await abortEmbeddedRun(key);\n    const outcome = await this.sessionStore.reset(key);\n    if (!outcome) {\n      return null;\n    }\n    this.agentManager.removeAgent(key);\n    await retireSessionMcpRuntimeForSessionKey({ sessionKey: key, reason: 'session-reset' });\n    return outcome;\n  }\n\n  /**\n   * Drop in-memory agent so the next turn reloads transcript from disk (e.g. after checkpoint restore).\n   */\n  evictSessionAgent(sessionKey: string): void {\n    this.agentManager.removeAgent(sessionKey);\n  }\n\n  /**\n   * Load session working directory override into AgentManager, ensure directory exists.\n   * Call before AgentManager.getOrCreateAgent for this session.\n   */\n  /** Workspace root for UI file tree / editor (same as agent tools after hydration). */\n  async getEffectiveWorkspacePathForSession(sessionKey: string): Promise<string> {\n    await this.sessionHydrator.workspace(sessionKey);\n    const cfg = this.config.config!;\n    const sc = await this.sessionConfigStore.get(sessionKey);\n    return effectiveWorkspacePathForSession(cfg, sessionKey, sc, getProjectForSession(sessionKey));\n  }\n\n   /**\n   * Best-effort timezone resolution for webchat envelope timestamps.\n   * Reads the global user profile and extracts a `Timezone:` line.\n   */\n  resolveUserTimezoneForSession(sessionKey: string): string | undefined {\n    void sessionKey;\n    try {\n      const cfg = this.effectiveAppConfig();\n      if (!cfg) return undefined;\n      const userPath = resolveUserProfilePath();\n      if (!existsSync(userPath)) return undefined;\n      const raw = readFileSync(userPath, 'utf-8');\n      const match = raw.match(/Timezone:\\s*(.+)/i);\n      const tz = match?.[1]?.trim();\n      return tz || undefined;\n    } catch {\n      return undefined;\n    }\n  }\n\n  /**\n   * Setup event handling for a specific session\n   */\n  private setupSessionEventHandling(sessionKey: string): void {\n    if (this.sessionState.hasSessionEventUnsubscriber(sessionKey)) {\n      return;\n    }\n\n    const unsubscribe = this.agentManager.subscribeToSession(sessionKey, (event) => {\n      this.handleSessionEvent(sessionKey, event);\n    });\n\n    if (unsubscribe) {\n      this.sessionState.setSessionEventUnsubscriber(sessionKey, unsubscribe);\n    }\n  }\n\n  /**\n   * Handle events from a specific session's agent\n   */\n  private handleSessionEvent(sessionKey: string, event: AgentEvent): void {\n    const currentContext = this.sessionContextManager.getContext();\n    if (!currentContext) {\n      // Inbound `finally` clears context before trailing agent `message_update` events finish — ignore (not a bug).\n      return;\n    }\n\n    if (currentContext.sessionKey !== sessionKey) {\n      // Event from a different session — still process with current context where applicable\n      this.agentEventHandler.handle(event, currentContext);\n      return;\n    }\n\n    // Handle streaming updates for the current session\n    if (event.type === 'message_update') {\n      const msgEvent = event as Extract<AgentEvent, { type: 'message_update' }>;\n      if (msgEvent.message?.role === 'assistant') {\n        const content = msgEvent.message.content;\n        const text = Array.isArray(content)\n          ? extractTextContent(content as Array<{ type: string; text?: string }>)\n          : String(content);\n\n        this.streamManager.update(text);\n      }\n    }\n\n    this.agentEventHandler.handle(event, currentContext);\n  }\n\n  private async checkAndCompact(sessionKey: string, messages: AgentMessage[]): Promise<void> {\n    const contextWindow = this.getContextWindow();\n    const prep = this.sessionStore.prepareCompaction(sessionKey, messages, contextWindow);\n    if (!prep.needsCompaction) return;\n\n    log.info({ sessionKey, reason: prep.stats?.reason, usagePercent: prep.stats?.usagePercent }, 'Session needs compaction');\n\n    const result = await this.sessionStore.compact(sessionKey, messages, contextWindow, undefined, false);\n    await this.hookHandler.trigger('after_compaction', {\n      messageCount: messages.length,\n      tokenCount: result.tokensBefore,\n      compactedCount: messages.length - result.firstKeptIndex,\n    });\n    log.info({ sessionKey, tokensBefore: result.tokensBefore, tokensAfter: result.tokensAfter }, 'Session compacted');\n  }\n\n  private getContextWindow(): number {\n    return 128000;\n  }\n\n  private dispose(): void {\n    this.sessionTracker.dispose();\n    this.sessionState.disposeAll();\n    this.agentManager.dispose();\n    this.workflowProgressBrokerHandle?.dispose();\n    this.workflowProgressBrokerHandle = null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAE2E;aAkBzB;kBAuDxB;YAIkC;AAW5D,MAAM,MAAM,aAAa,eAAe;AAExC,SAAS,qBAAqB,SAA+B;CAC3D,MAAM,UAAW,QAAkC;AACnD,KAAI,OAAO,YAAY,SAAU,QAAO;AACxC,KAAI,CAAC,MAAM,QAAQ,QAAQ,CAAE,QAAO;AACpC,QAAO,QACJ,KAAK,UAAU;AACd,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;EAChD,MAAM,MAAM;AACZ,SAAO,IAAI,SAAS,UAAU,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;GACxE,CACD,KAAK,GAAG;;AAGb,IAAa,eAAb,MAA0B;;;;;;CAMxB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;;;;;;CAMA;CACA;;;;;;CAMA;;;;;;CAMA;;;;;;CAMA;;;;;;CAMA;;;;;;CAMA;CACA;CACA;CACA;CACA;CACA,+BAAoE;CACpE;CACA;;;;;;;CAQA,eAAuB,IAAI,iBAAiB;;CAG5C;CACA;CAEA,qBAAiD;EAC/C,MAAM,OAAO,KAAK,OAAO;AACzB,SAAO,OAAO,qBAAqB,KAAK,GAAG,KAAA;;CAG7C,YAAY,KAAiB,QAA4B;AACvD,OAAK,SAAS;AACd,OAAK,2BAA2B,OAAO;AACvC,OAAK,6BAA6B,OAAO;AACzC,OAAK,UAAU,SAAS,KAAK,KAAK;AAClC,OAAK,eAAe,OAAO;AAE3B,OAAK,iBAAiB,IAAI,gBAAgB;AAC1C,OAAK,eAAe,IAAI,aAAa;GACnC,cAAc,OAAO;GACrB,QAAQ,OAAO;GAChB,CAAC;AAEF,sBAAoB;AACpB,MAAI,MAAM,6BAA6B;AAEvC,OAAK,eAAe,OAAO,gBAAgB,KAAK,oBAAoB;AACpE,6BAA2B,WAAW;AAC/B,QAAK,aAAa,6BAA6B,OAAO,CAAC,OAAO,QAAQ;AACzE,QAAI,KACF;KAAE;KAAK,YAAY,OAAO;KAAY,EACtC,+BACD;KACD;GACF,MAAM,KAAK,OAAO,YAAY,MAAM;AACpC,OAAI,GACF,MAAK,6BAA6B,GAAG;IAEvC;EACF,MAAM,iBAAiB,KAAK,OAAO;AACnC,MAAI,CAAC,eACH,OAAM,IAAI,MAAM,wDAAwD;EAG1E,MAAM,mBAAmB,oBAAoB,gBAD1B,sBAAsB,eAC8B,CAAC;AACxE,OAAK,qBAAqB,IAAI,mBAAmB,iBAAiB;AAElE,OAAK,aAAa,KAAK,kBAAkB;AACzC,OAAK,cAAc,IAAI,YAAY;GACjC,YAAY,KAAK;GACjB,SAAS,KAAK;GACd,IAAI,aAAa;AAAE,WAAO,KAAK,gBAAgB;;GAChD,CAAC;AAEF,OAAK,kBAAkB,KAAK,uBAAuB;AACnD,OAAK,8BAA8B;AAEnC,OAAK,mBAAmB,IAAI,kBAAkB;AAC9C,OAAK,6BAA6B;AAElC,OAAK,gBAAgB,IAAI,eAAe;AACxC,OAAK,wBAAwB,IAAI,uBAAuB;AACxD,OAAK,sBAAsB,IAAI,oBAAoB;GACjD,iBAAiB,KAAK;GACtB;GACD,CAAC;AAEF,OAAK,eAAe,IAAI,aAAa;GACnC,WAAW,OAAO;GAClB,OAAO,OAAO;GACd,QAAQ,OAAO;GACf,mBAAmB,OAAO;GAC1B,YAAY,KAAK;GACjB;GACA,yBAAyB,KAAK,sBAAsB,YAAY;GAChE,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,eAAe,OAAO;GACtB,gBAAgB,OAAO;GACvB,cAAc,OAAO;GACrB,gBAAgB,OAAO;GACvB,sBAAsB,OAAO;GAC7B,uBAAuB,OAAO;GAC9B,iBAAiB,OAAO;GACxB,oBAAoB,OAAO;GAC3B,6BAA6B,YAAY,YACvC,KAAK,qBAAqB,8BAA8B,YAAY,QAAQ;GAC/E,CAAC;AAEF,OAAK,oBAAoB,IAAI,kBAAkB;GAC7C,iBAAiB,KAAK;GACtB,cAAc,KAAK;GACnB,gBAAgB,KAAK;GACrB,kBAAkB,KAAK;GACvB,kBAAkB,KAAK;GACvB,sBAAsB,KAAK;GAC3B,gBAAgB,KAAK;GACrB,mBAAmB,KAAK;GACxB,qBAAqB,KAAK;GAC3B,CAAC;AAMF,OAAK,+BAA+B,2BAA2B,CAAC,SAC9D,KAAK,kBACN;AAKD,OAAK,kBAAkB,IAAI,gBAAgB;GACzC,oBAAoB,KAAK;GACzB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,iBAAiB,KAAK,oBAAoB;GAC3C,CAAC;AAEF,OAAK,oBAAoB,IAAI,kBAAkB;GAC7C,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,qBAAqB,KAAK;GAC1B,oBAAoB,KAAK;GACzB,iBAAiB,KAAK;GACtB,iBAAiB,KAAK,oBAAoB;GAC1C,0BAA0B,KAAA;GAC1B,+BAA+B,eAC7B,KAAK,aAAa,6BAA6B,WAAW;GAC5D,eAAe,KAAK;GACpB,6BAA6B,eAC3B,KAAK,aAAa,+BAA+B,WAAW;GAC9D,wCAAwC,eACtC,oBAAoB,KAAK,OAAO,QAAS,sBAAsB,YAAY,KAAK,OAAO,OAAQ,CAAC;GAClG,mBAAmB,eAAuB,KAAK,kCAAkC,WAAW;GAC5F,wBAAwB,YAAY,UAAU;IAC5C,MAAM,MAAM,KAAK,sBAAsB,YAAY;AACnD,QAAI,CAAC,OAAO,IAAI,eAAe,WAC7B;AAEF,QAAI,MAAM,SAAS,oBAAoB,MAAM,QAAQ,SAAS,aAAa;KACzE,MAAM,OAAO,qBAAqB,MAAM,QAAQ;AAChD,UAAK,cAAc,OAAO,KAAK;;;GAGnC,yBAAyB,YAAY,SAAS;AAC5C,QAAI,KACF,MAAK,aAAa,qBAAqB,YAAY,KAAK;AAE1D,SAAK,aAAa,wBAAwB,WAAW;;GAExD,CAAC;AAEF,OAAK,gBAAgB,IAAI,eAAe;AACxC,OAAK,iBAAiB,IAAI,eAAe;GACvC,QAAQ,OAAO;GACf;GACA,cAAc,KAAK;GACnB,oBAAoB,KAAK;GACzB,kCAAkC,YAAY,KAAK,gBAAgB,oBAAoB,QAAQ;GAC/F,uBAAuB,OAAO;GAC9B,4BAA4B,YAAoB,UAAsB;AACpE,SAAK,aAAa,iBAAiB,YAAY,MAAuB;;GAExE,uBAAuB,KAAK,kBAAkB,iBAAiB;GAC/D,wBAAwB,YAAoB,YAC1C,KAAK,sBAAsB,YAAY,QAAQ;GACjD,yBAAyB,eAAuB;AAC9C,SAAK,aAAa,YAAY,WAAW;;GAE3C,eAAe,eAAuB,KAAK,aAAa,WAAW;GACnE,kBAAkB,OAAO,eAAuB;AAC9C,UAAM,KAAK,cAAc,OAAO;AAChC,SAAK,kBAAkB,MAAM,WAAW;;GAE1C,oBAAoB,KAAK,8BAA8B;GACvD,iBAAiB,YAAY,YAAY,KAAK,iBAAiB,QAAQ,YAAY,QAAQ;GAC3F,WAAW,YAAY,aAAa,KAAK,iBAAiB,SAAS,YAAY,SAAS;GACxF,0BAA0B,YAAY,SAAS,KAAK,iBAAiB,OAAO,YAAY,KAAK;GAC9F,CAAC;AAEF,OAAK,0BAA0B,IAAI,wBACjC,KAAK,cACL,KAAK,gBACL,KAAK,iBACN;AAED,OAAK,kBAAkB,IAAI,sBAAsB;GAC/C;GACA,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,iBAAiB,KAAK,oBAAoB;GAC1C,iCAAiC,OAAO,KAAK,aAAa,+BAA+B,GAAG;GAC5F,0BAA0B,KAAK;GAC/B,qBAAqB,OAAO;GAC5B,gCAAgC,IAAI,SAAS,KAAK,eAAe,8BAA8B,IAAI,KAAK;GACzG,CAAC;AAEF,OAAK,gBAAgB,IAAI,qBAAqB;GAC5C,cAAc,KAAK;GACnB,oBAAoB,KAAK;GACzB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,iBAAiB,KAAK,oBAAoB;GAC3C,CAAC;AAEF,OAAK,mBAAmB,IAAI,iBAAiB;GAC3C,cAAc,KAAK;GACnB,oBAAoB,KAAK;GACzB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,iBAAiB,KAAK;GACtB,iBAAiB,KAAK,oBAAoB;GAC1C,wBAAwB,KAAK,kBAAkB;GAChD,CAAC;AAEF,OAAK,sBAAsB,IAAI,oBAAoB;GACjD;GACA,aAAa,KAAK;GAClB,eAAe,KAAK;GACpB,iBAAiB,KAAK,oBAAoB;GAC1C,4BAA4B,OAAO,KAAK,0BAA0B,GAAG;GACrE,4BAA4B,YAAY,KAAK,gBAAgB,YAAY,QAAQ;GAClF,CAAC;AAEF,OAAK,iBAAiB,IAAI,eAAe;GACvC;GACA,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,oBAAoB,KAAK;GACzB,cAAc,KAAK;GACnB,gBAAgB,KAAK;GACrB,iBAAiB,KAAK,oBAAoB;GAC1C,qBAAqB;IACnB,MAAM,IAAI,KAAK,OAAO;AACtB,QAAI,CAAC,EAAG,OAAM,IAAI,MAAM,sCAAsC;AAC9D,WAAO;;GAET,yBAAyB,OAAO,KAAK,uBAAuB,GAAG;GAC/D,qBAAqB,IAAI,SAAS,WAAW,KAAK,mBAAmB,IAAI,SAAS,OAAO;GACzF,iBAAiB,KAAK;GACtB,4BAA4B,IAAI,QAAQ,KAAK,0BAA0B,IAAI,IAAI;GAC/E,oCAAoC,OAAO,KAAK,kCAAkC,GAAG;GACrF,iCAAiC,IAAI,SAAS,KAAK,+BAA+B,IAAI,KAAK;GAC3F,+BAA+B,KAAK,yBAAyB;GAC7D,4BAA4B,KAAK;GACjC,eAAe,OAAO,KAAK,aAAa,GAAG;GAC3C,uBAAuB,OAAO;GAC/B,CAAC;AAEF,OAAK,cAAc,IAAI,YAAY;GACjC;GACA,SAAS,KAAK;GACd;GACA,aAAa,KAAK;GAClB,eAAe,KAAK;GACpB,gBAAgB,KAAK;GACrB,uBAAuB,KAAK;GAC5B,qBAAqB,KAAK;GAC1B,cAAc,KAAK;GACnB,yBAAyB,KAAK;GAC9B,mBAAmB,KAAK;GACxB,qBAAqB,KAAK;GAC1B,eAAe,KAAK;GACpB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,4BAA4B,OAAO,KAAK,0BAA0B,GAAG;GACrE,iBAAiB,KAAK;GACtB,4BAA4B,OAAO,KAAK,0BAA0B,GAAG;GACrE,kBAAkB,IAAI,SAAS,KAAK,gBAAgB,IAAI,KAAK;GAC7D,oCAAoC,OAAO,KAAK,kCAAkC,GAAG;GACrF,iBAAiB,KAAK,oBAAoB;GAC1C,eAAe,OAAO,KAAK,aAAa,GAAG;GAC3C,kBAAkB,WAAW,KAAK,gBAAgB,OAAO;GAC1D,CAAC;AAKF,MAAI,CAAC,CADyB,CAAC,QAAQ,IAAI,sBAChB;AACzB,WAAQ,GAAG,gBAAgB,KAAK,SAAS,CAAC;AAC1C,WAAQ,GAAG,iBAAiB,KAAK,SAAS,CAAC;;AAG7C,MAAI,KAAK,2BAA2B;;CAGtC,qBAA2C;EACzC,MAAM,eAAsC;GAC1C,aAAa;GACb,oBAAoB;GACpB,wBAAwB;GACzB;EACD,MAAM,mBAA8C;GAClD,SAAS;GACT,MAAM;GACN,eAAe;GACf,kBAAkB;GAClB,0BAA0B;GAC1B,oBAAoB;GACpB,gBAAgB;GAChB,iBAAiB;GAClB;EACD,MAAM,SAAS,KAAK,OAAO;AAC3B,MAAI,CAAC,OACH,OAAM,IAAI,MAAM,8DAA8D;AAEhF,SAAO,IAAI,aACT,EACE,QAAQ,QACT,EACD,cACA,iBACD;;CAGH,mBAA4D;AAC1D,MAAI,CAAC,KAAK,OAAO,kBAAmB,QAAO,KAAA;AAE3C,SAAO,IAAI,oBAAoB,KAAK,OAAO,mBAAmB;GAC5D,aAAa;GACb,QAAQ;IACN,OAAO,QAAgB,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE,IAAI;IACpD,OAAO,QAAgB,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE,IAAI;IACpD,QAAQ,QAAgB,IAAI,MAAM,EAAE,MAAM,MAAM,EAAE,IAAI;IACvD;GACF,CAAC;;CAGJ,wBAAyD;AACvD,SAAO,IAAI,wBAAwB;GACjC,OAAO;GACP,cAAc;GACd,oBAAoB;GACpB,kBAAkB;GAClB,qBAAqB;GACrB,qBAAqB;GACtB,CAAC;;CAGJ,+BAA6C;AAC3C,OAAK,eAAe,IAAI,iBAAiB;GACvC,oBAAoB;GACpB,kBAAkB;GAClB,gBAAgB;GACjB,CAAC;AAEF,OAAK,uBAAuB,IAAI,qBAAqB;GACnD,iBAAiB;GACjB,0BAA0B;GAC1B,yBAAyB;GACzB,qBAAqB;GACtB,CAAC;AAEF,OAAK,iBAAiB,IAAI,eAAe;GACvC,oBAAoB;GACpB,eAAe;GACf,WAAW;GACZ,CAAC;AAEF,OAAK,iBAAiB,IAAI,eAAe;GACvC,SAAS;GACT,qBAAqB;GACrB,qBAAqB;GACtB,CAAC;AAEF,OAAK,oBAAoB,IAAI,kBAAkB;GAC7C,SAAS;GACT,mBAAmB;GACnB,uBAAuB;GACvB,qBAAqB;GACrB,kBAAkB,OAAU;GAC7B,CAAC;AAEF,OAAK,mBAAmB,IAAI,iBAAiB;GAC3C,SAAS;GACT,qBAAqB;GACrB,kBAAkB;GAClB,aAAa;GACb,cAAc;GACd,WAAW;GACZ,CAAC;AAEF,OAAK,sBAAsB,IAAI,oBAAoB;GACjD,SAAS;GACT,mBAAmB;GACnB,YAAY;GACb,CAAC;AAGF,OAAK,oBAAoB,IAAI,mBAAmB;;CAGlD,8BAA4C;AAC1C,OAAK,iBAAiB,GAAG,gBAAgB,IAAI,2BAA2B;GACtE,aAAa;GACb,WAAW;GACX,mBAAmB;GACnB,iBAAiB;GAClB,CAAC,CAAC;AAEH,MAAI,MACF,EAAE,UAAU,KAAK,iBAAiB,uBAAuB,EAAE,EAC3D,iCACD;;CAGH,kBAAkB,gBAAsC;AACtD,OAAK,YAAY,kBAAkB,eAAe;;;;;CAMpD,6BAA6B,QAAsB;AACjD,OAAK,OAAO,SAAS;EACrB,MAAM,MAAM,wBAAwB,OAAO;AAC3C,OAAK,OAAO,QAAQ;AACpB,OAAK,aAAa,iBAAiB,OAAO;AAC1C,OAAK,aAAa,oBAAoB,OAAO;AAC7C,OAAK,eAAe,kBAAkB,OAAO;;CAG/C,kBAAuC;AACrC,SAAO,KAAK,aAAa,iBAAiB;;CAG5C,0BAAgD;AAC9C,SAAO,KAAK,aAAa,yBAAyB;;CAGpD,0BAA0B,SAAgD;AACxE,SAAO,KAAK,aAAa,0BAA0B,QAAQ;;CAG7D,uBAAuB,WAAuD;AAC5E,SAAO,KAAK,aAAa,uBAAuB,UAAU;;CAG5D,+BAAqC;AACnC,OAAK,aAAa,8BAA8B;;CAGlD,sCAA4C;AAC1C,OAAK,aAAa,qCAAqC;;CAGzD,mBAAmB,YAA4B;AAC7C,SAAO,KAAK,aAAa,mBAAmB,WAAW;;CAGzD,MAAM,sBAAsB,YAAoB,SAAmC;AAEjF,MAAI,CAAC,MADY,KAAK,aAAa,sBAAsB,YAAY,QAAQ,CACpE,QAAO;AAChB,QAAM,KAAK,mBAAmB,OAAO,YAAY,EAAE,eAAe,SAAS,CAAC;AAE5E,MADe,KAAK,aAAa,mBAAmB,YAAY,QACtD,CACR,MAAK,eAAe,aAAa,WAAW;AAE9C,SAAO;;;;;;CAOT,MAAM,gCAAgC,YAAmC;AACvE,QAAM,KAAK,cAAc,mBAAmB,WAAW;;CAGzD,gBAAgB,QAA4B;AAC1C,OAAK,cAAc,UAAU,OAAO;AACpC,OAAK,oBAAoB,gBAAgB,OAAO;;CAGlD,oBAA0B;AACxB,OAAK,cAAc,aAAa;AAChC,OAAK,oBAAoB,SAAS;;;CAIpC,0BAA0B,YAA4B;AACpD,SACE,KAAK,aAAa,qBAAqB,WAAW,IAClD,KAAK,aAAa,wBAAwB,WAAW,IACrD;;CAIJ,iBAAiB,YAA0B;AACzC,OAAK,aAAa,iBAAiB,WAAW;;CAGhD,eAAe,YAA0B;AACvC,OAAK,aAAa,eAAe,WAAW;;CAG9C,oBAAoB,YAA4B;AAC9C,SAAO,KAAK,aAAa,oBAAoB,WAAW;;CAG1D,MAAM,QAAuB;AAC3B,QAAM,KAAK,mBAAmB,YAAY;AAC1C,QAAM,KAAK,YAAY,QAAQ,iBAAiB;GAAE,MAAM;GAAG,MAAM;GAAO,CAAC;AACzE,MAAI,MAAM,wBAAwB;AAC7B,OAAK,YAAY,OAAO,CAAC,OAAO,QAAQ;GAC3C,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAI,MAAM;IAAE;IAAK,cAAc;IAAI,EAAE,wBAAwB,KAAK;IAClE;;CAGJ,OAAsB;AACpB,OAAK,YAAY,MAAM;AACvB,OAAK,aAAa,SAAS;AAC3B,OAAK,SAAS;AAEd,OAAK,YAAY,QAAQ,gBAAgB,EAAE,QAAQ,WAAW,CAAC;AAC/D,MAAI,MAAM,wBAAwB;AAClC,SAAO,QAAQ,SAAS;;CAG1B,MAAM,uBAAsC;AAC1C,SAAO,QAAQ,SAAS;;;;;;CAO1B,0BAAkC,YAAoB,MAAoB;AACxE,OAAK,2BAA2B,YAAY,EAAE,MAAM,CAAC;;;CAIvD,+BAA+B,YAAoB,UAAwB;AACzE,GAAM,YAAY;AAChB,OAAI;AACF,UAAM,gCACJ,KAAK,cACL,YACA,WACC,IAAI,SAAS,KAAK,0BAA0B,IAAI,KAAK,CACvD;YACM,KAAK;AACZ,QAAI,KAAK;KAAE;KAAK;KAAY,EAAE,mCAAmC;;MAEjE;;;;;CAMN,kCAA0C,YAA0B;AAClE,GAAM,YAAY;AAChB,OAAI;IACF,IAAI,WACF,wBAAwB,KAAK,OAAO,UAAW,EAAE,CAAY,IAAI,KAAK,OAAO;AAC/E,QAAI,CAAC,UAAU,MAAM,CACnB,KAAI;AACF,gBAAW,KAAK,aAAa,mBAAmB,WAAW;YACrD;AACN,gBAAW,KAAA;;AAGf,UAAM,+BACJ,KAAK,cACL,YACA,UAAU,MAAM,IAAI,KAAA,IACnB,IAAI,SAAS,KAAK,0BAA0B,IAAI,KAAK,CACvD;YACM,KAAK;AACZ,QAAI,KAAK;KAAE;KAAK;KAAY,EAAE,4BAA4B;;MAE1D;;CAGN,MAAc,uBAAuB,YAAkE;EACrG,MAAM,WAAW,MAAM,KAAK,aAAa,YAAY,WAAW,CAAC,YAAY,KAAK;AAGlF,SAAO;GAAE,SAFO,UAAU,SAAS,QAAQ,MAAM,IAAI,UAAU,eAAe,MAAM,IAAI;GAEtE,QADH,UAAU,SAAS,QAAQ,MAAM,IAAI,UAAU,cAAc,MAAM,IAAI;GAC5D;;CAG5B,mBACE,YACA,SACA,QACA,WAAW,IACK;EAChB,MAAM,UAA0B;GAC9B;GACA;GACA;GACA;GACA,SAAS;GACV;AAED,OAAK,kBAAkB,UAAU;GAC/B;GACA,QAAQ,QAAQ;GAChB;GACA;GACD,CAAC;AASF,OAAK,sBAAsB,MAAM,QAAQ;AACzC,OAAK,oBAAoB,WAAW,QAAQ;AAC5C,OAAK,aAAa,iBAAiB,WAAW;AAC9C,OAAK,0BAA0B,WAAW;AAE1C,SAAO;;;;;CAMT,MAAM,0BACJ,aACA,aACiC;AACjC,SAAO,0BAA0B,aAAa,EAC5C,YAAY,OAAO,QAAQ;GACzB,MAAM,SAAS,0BAA0B,IAAI;AAC7C,OAAI,CAAC,OAAQ,QAAO;GACpB,MAAM,eAAgB,KAQnB;AACH,OAAI,CAAC,aAAc,QAAO;GAC1B,MAAM,UAAU,MAAM,aAAa,kBAAkB,OAAO,QAAQ,OAAO,aAAa;AACxF,OAAI,CAAC,QAAS,QAAO;GACrB,MAAM,SAAS,MAAM,SAAS,QAAQ,SAAS;AAC/C,UAAO;IACL;IACA,MAAM,QAAQ;IACd,UAAU,QAAQ;IAClB,MAAM,QAAQ;IACd,MAAM,OAAO;IACd;KAEJ,CAAC;;CAGJ,0BAAwC;AAKtC,OAAK,oBAAoB,cAAc;AACvC,OAAK,kBAAkB,YAAY;;;;;;;;CASrC,MAAM,qBAAqB,KAA4B;AACrD,QAAM,KAAK,aAAa,aAAa,KAAK,EAAE,CAAC;AAC7C,OAAK,aAAa,YAAY,IAAI;;;;;;CAOpC,MAAM,aACJ,KACkE;EAClE,MAAM,EAAE,qBAAqB,MAAM,OAAO;EAC1C,MAAM,EAAE,yCAAyC,MAAM,OAAO;AAC9D,QAAM,iBAAiB,IAAI;EAC3B,MAAM,UAAU,MAAM,KAAK,aAAa,MAAM,IAAI;AAClD,MAAI,CAAC,QACH,QAAO;AAET,OAAK,aAAa,YAAY,IAAI;AAClC,QAAM,qCAAqC;GAAE,YAAY;GAAK,QAAQ;GAAiB,CAAC;AACxF,SAAO;;;;;CAMT,kBAAkB,YAA0B;AAC1C,OAAK,aAAa,YAAY,WAAW;;;;;;;CAQ3C,MAAM,oCAAoC,YAAqC;AAC7E,QAAM,KAAK,gBAAgB,UAAU,WAAW;EAChD,MAAM,MAAM,KAAK,OAAO;AAExB,SAAO,iCAAiC,KAAK,YAAY,MADxC,KAAK,mBAAmB,IAAI,WAAW,EACK,qBAAqB,WAAW,CAAC;;;;;;CAOhG,8BAA8B,YAAwC;AAEpE,MAAI;AAEF,OAAI,CADQ,KAAK,oBACT,CAAE,QAAO,KAAA;GACjB,MAAM,WAAW,wBAAwB;AACzC,OAAI,CAAC,WAAW,SAAS,CAAE,QAAO,KAAA;AAIlC,UAHY,aAAa,UAAU,QAClB,CAAC,MAAM,oBACR,GAAG,IAAI,MAAM,IAChB,KAAA;UACP;AACN;;;;;;CAOJ,0BAAkC,YAA0B;AAC1D,MAAI,KAAK,aAAa,4BAA4B,WAAW,CAC3D;EAGF,MAAM,cAAc,KAAK,aAAa,mBAAmB,aAAa,UAAU;AAC9E,QAAK,mBAAmB,YAAY,MAAM;IAC1C;AAEF,MAAI,YACF,MAAK,aAAa,4BAA4B,YAAY,YAAY;;;;;CAO1E,mBAA2B,YAAoB,OAAyB;EACtE,MAAM,iBAAiB,KAAK,sBAAsB,YAAY;AAC9D,MAAI,CAAC,eAEH;AAGF,MAAI,eAAe,eAAe,YAAY;AAE5C,QAAK,kBAAkB,OAAO,OAAO,eAAe;AACpD;;AAIF,MAAI,MAAM,SAAS,kBAAkB;GACnC,MAAM,WAAW;AACjB,OAAI,SAAS,SAAS,SAAS,aAAa;IAC1C,MAAM,UAAU,SAAS,QAAQ;IACjC,MAAM,OAAO,MAAM,QAAQ,QAAQ,GAC/B,mBAAmB,QAAkD,GACrE,OAAO,QAAQ;AAEnB,SAAK,cAAc,OAAO,KAAK;;;AAInC,OAAK,kBAAkB,OAAO,OAAO,eAAe;;CAGtD,MAAc,gBAAgB,YAAoB,UAAyC;EACzF,MAAM,gBAAgB,KAAK,kBAAkB;EAC7C,MAAM,OAAO,KAAK,aAAa,kBAAkB,YAAY,UAAU,cAAc;AACrF,MAAI,CAAC,KAAK,gBAAiB;AAE3B,MAAI,KAAK;GAAE;GAAY,QAAQ,KAAK,OAAO;GAAQ,cAAc,KAAK,OAAO;GAAc,EAAE,2BAA2B;EAExH,MAAM,SAAS,MAAM,KAAK,aAAa,QAAQ,YAAY,UAAU,eAAe,KAAA,GAAW,MAAM;AACrG,QAAM,KAAK,YAAY,QAAQ,oBAAoB;GACjD,cAAc,SAAS;GACvB,YAAY,OAAO;GACnB,gBAAgB,SAAS,SAAS,OAAO;GAC1C,CAAC;AACF,MAAI,KAAK;GAAE;GAAY,cAAc,OAAO;GAAc,aAAa,OAAO;GAAa,EAAE,oBAAoB;;CAGnH,mBAAmC;AACjC,SAAO;;CAGT,UAAwB;AACtB,OAAK,eAAe,SAAS;AAC7B,OAAK,aAAa,YAAY;AAC9B,OAAK,aAAa,SAAS;AAC3B,OAAK,8BAA8B,SAAS;AAC5C,OAAK,+BAA+B"}
+{"version":3,"file":"service.js","names":[],"sources":["../../../src/agent/service.ts"],"sourcesContent":["import type { AgentEvent, AgentMessage, ThinkingLevel } from '@earendil-works/pi-agent-core';\nimport type { MessageBus } from '../infra/bus/index.js';\nimport { type Config, getAgentDefaultModelRef } from '../config/schema.js';\nimport {\n  maybeRefineSessionTitleWithLlm,\n  maybeSetProvisionalSessionTitle,\n} from '../session/session-title.js';\nimport type { ChannelManager } from '../channels/manager.js';\nimport { existsSync, readFileSync } from 'node:fs';\nimport { readFile } from 'node:fs/promises';\n\nimport {\n  SessionStore,\n  SessionConfigStore,\n  onSessionTranscriptUpdate,\n  effectiveWorkspacePathForSession,\n  type CompactionConfig,\n  type WindowConfig,\n} from '../session/index.js';\nimport { type ThinkLevel } from './transcript/thinking-types.js';\nimport { createLogger } from '../utils/logger.js';\nimport { ExtensionHookRunner } from '../extensions/index.js';\nimport { extractTextContent } from './context/workspace.js';\nimport { SessionTracker } from './session/tracker.js';\nimport { ModelManager } from './models/index.js';\nimport { initializeCommands } from '../chat-commands/index.js';\nimport { ProgressFeedbackManager } from './lifecycle/progress.js';\nimport { HookHandler } from './lifecycle/hook-handler.js';\nimport { ToolErrorTracker } from './tools/error-tracker.js';\nimport { RequestLimiter } from './models/request-limiter.js';\nimport { SystemReminder } from './prompt/system-reminder.js';\nimport { ToolUsageAnalyzer } from './tools/usage-analyzer.js';\nimport { ToolChainTracker } from './tools/chain-tracker.js';\nimport { ErrorPatternMatcher } from './tools/error-pattern-matcher.js';\nimport { ContextMiddleware, SelfVerifyMiddleware } from './middleware/index.js';\nimport { TurnDiffTracker } from './coding/index.js';\nimport { LifecycleManager } from './lifecycle/index.js';\nimport { CompactionLifecycleHandler } from './lifecycle/handlers/compaction.js';\n\nimport {\n  MessageRouter,\n  CommandHandler,\n  StreamManager,\n  OutboundCoordinator,\n} from './messaging/index.js';\nimport { InboundLoop } from './inbound/inbound-loop.js';\nimport { TurnDispatcher } from './inbound/turn-dispatcher.js';\nimport {\n  SessionContextManager,\n  SessionLifecycleManager,\n  SessionStateBag,\n  SessionConfigService,\n  SessionHydrator,\n  SessionInspector,\n  type SessionContext,\n} from './session/index.js';\nimport { AgentOrchestrator, AgentEventHandler } from './orchestration/index.js';\nimport {\n  getWorkflowProgressBroker,\n  type BrokerListenerHandle,\n} from './workflow/index.js';\nimport { FeedbackCoordinator } from './feedback/index.js';\nimport {\n  AgentManager,\n  type AgentSkillAvailabilityPayload,\n  type SkillCatalogEntry,\n  type SkillCatalogSnapshot,\n} from './agent-manager.js';\nimport type { SkillMarkdownPreviewPayload } from './skills/types.js';\nimport type { AgentServiceConfig, StreamHandle } from './service.types.js';\nimport { PersistentGoalService } from './goals/persistent-goal-service.js';\nimport { parseNoteAttachmentTarget } from '../notes/attachment-ref.js';\n\nimport {\n  resolveAgentHomeDir,\n  resolveDefaultAgentId,\n} from './agent-scope.js';\nimport {\n  extractProfileAgentId,\n} from '../config/agent-profile.js';\nimport { resolveUserProfilePath } from '../config/paths.js';\nimport { getProjectForSession } from '../projects/workspace.js';\nimport {\n  persistInboundAttachments,\n  type InboundAttachmentInput,\n  type MediaRef,\n} from '../channels/attachments/inbound-persist.js';\nimport { applyConfigOverrides } from '../config/runtime-overrides.js';\n\nexport type { AgentServiceConfig, AgentContext, StreamHandle } from './service.types.js';\n\nconst log = createLogger('AgentService');\n\nfunction assistantMessageText(message: AgentMessage): string {\n  const content = (message as { content?: unknown }).content;\n  if (typeof content === 'string') return content;\n  if (!Array.isArray(content)) return '';\n  return content\n    .map((block) => {\n      if (!block || typeof block !== 'object') return '';\n      const rec = block as { type?: unknown; text?: unknown };\n      return rec.type === 'text' && typeof rec.text === 'string' ? rec.text : '';\n    })\n    .join('');\n}\n\nexport class AgentService {\n  /**\n   * Persistent transcript + session-metadata store. Public so the gateway/TUI\n   * can read sessions, delete them, etc. without forcing every CRUD-style\n   * operation through a delegation method on `AgentService`.\n   */\n  readonly sessionStore: SessionStore;\n  private sessionConfigStore: SessionConfigStore;\n  private hookRunner?: ExtensionHookRunner;\n  private agentId: string;\n  private workspaceDir: string;\n  private config: AgentServiceConfig;\n  private sessionTracker: SessionTracker;\n  private modelManager: ModelManager;\n  private progressManager: ProgressFeedbackManager;\n  private hookHandler: HookHandler;\n  private lifecycleManager: LifecycleManager;\n  private errorTracker: ToolErrorTracker;\n  private requestLimiter: RequestLimiter;\n  private systemReminder: SystemReminder;\n  private toolUsageAnalyzer: ToolUsageAnalyzer;\n  private toolChainTracker: ToolChainTracker;\n  private errorPatternMatcher: ErrorPatternMatcher;\n  private selfVerifyMiddleware: SelfVerifyMiddleware;\n  private turnDiffTracker: TurnDiffTracker;\n  private contextMiddleware: ContextMiddleware;\n\n  private messageRouter: MessageRouter;\n  private commandHandler: CommandHandler;\n  private streamManager: StreamManager;\n  /**\n   * Outbound pipeline: typing controller, silence guard, final response publish,\n   * extension `message_sending`/`message_sent` hooks, post-turn `webchat_turn_complete`\n   * event. Public so the gateway / channels can drive it directly.\n   */\n  readonly outboundCoordinator: OutboundCoordinator;\n  private inboundLoop: InboundLoop;\n  /**\n   * Direct-turn entry points: `processDirect` (one-shot), `processDirectStreaming`\n   * (SSE generator), webchat steering and SSE injection. Public so the gateway,\n   * TUI, CLI, and automations do not need to thread every call through `AgentService`.\n   */\n  readonly turnDispatcher: TurnDispatcher;\n  /**\n   * `/goal` runtime: continuation scheduling, persistent-goal API factory,\n   * stream-outcome state, post-turn verdict. Public so the gateway can wire\n   * the webchat continuation scheduler and read stream outcomes directly.\n   */\n  readonly persistentGoals: PersistentGoalService;\n  /**\n   * Per-session config writes (model / thinking / reasoning / working directory).\n   * Public so REST endpoints and CLI flows can hit it without going through a\n   * monolithic patch entrypoint on `AgentService`.\n   */\n  readonly sessionConfig: SessionConfigService;\n  /**\n   * Hydration — read persisted per-session config and apply it to the runtime\n   * (AgentManager / ModelManager). The mirror image of `sessionConfig`: writes\n   * go through `sessionConfig`, reads-into-runtime go through `sessionHydrator`.\n   */\n  readonly sessionHydrator: SessionHydrator;\n  /**\n   * Read-only introspection (compaction, /context report, /btw, contextUsage,\n   * agentConfig view). Public so REST endpoints and CLI flows can query a\n   * session's view without going through delegating methods on `AgentService`.\n   */\n  readonly sessionInspector: SessionInspector;\n  private sessionContextManager: SessionContextManager;\n  private sessionLifecycleManager: SessionLifecycleManager;\n  private agentOrchestrator: AgentOrchestrator;\n  private agentEventHandler: AgentEventHandler;\n  private workflowProgressBrokerHandle: BrokerListenerHandle | null = null;\n  private feedbackCoordinator: FeedbackCoordinator;\n  private agentManager: AgentManager;\n\n  /**\n   * Unified per-session state container (replaces six ad-hoc Maps). Owns webchat\n   * publishers, last assistant text, embedded stream buffer, persistent-goal stream\n   * outcomes, concurrent-turn depth, and event-listener unsubscribers; runs a TTL\n   * sweep for slots that have no explicit owner.\n   */\n  private sessionState = new SessionStateBag();\n\n  /** Gateway: notify UI after direct `SessionStore.updateMetadata` (no SessionManager emit). */\n  private onSessionMetadataUpdated?: (sessionKey: string, patch?: { name?: string }) => void;\n  private onSessionTranscriptUpdated?: (sessionKey: string) => void;\n\n  private effectiveAppConfig(): Config | undefined {\n    const base = this.config.config;\n    return base ? applyConfigOverrides(base) : undefined;\n  }\n\n  constructor(bus: MessageBus, config: AgentServiceConfig) {\n    this.config = config;\n    this.onSessionMetadataUpdated = config.onSessionMetadataUpdated;\n    this.onSessionTranscriptUpdated = config.onSessionTranscriptUpdated;\n    this.agentId = `agent-${Date.now()}`;\n    this.workspaceDir = config.workspace;\n\n    this.sessionTracker = new SessionTracker();\n    this.modelManager = new ModelManager({\n      defaultModel: config.model,\n      config: config.config,\n    });\n\n    initializeCommands();\n    log.debug('Command system initialized');\n\n    this.sessionStore = config.sessionStore ?? this.createSessionStore();\n    onSessionTranscriptUpdate((update) => {\n      void this.sessionStore.syncEmbeddedTranscriptUpdate(update).catch((err) => {\n        log.warn(\n          { err, sessionKey: update.sessionKey },\n          'Transcript index sync failed',\n        );\n      });\n      const sk = update.sessionKey?.trim();\n      if (sk) {\n        this.onSessionTranscriptUpdated?.(sk);\n      }\n    });\n    const appCfgForPaths = this.config.config;\n    if (!appCfgForPaths) {\n      throw new Error('AgentService requires config.config for session paths');\n    }\n    const defaultAid = resolveDefaultAgentId(appCfgForPaths);\n    const defaultAgentHome = resolveAgentHomeDir(appCfgForPaths, defaultAid);\n    this.sessionConfigStore = new SessionConfigStore(defaultAgentHome);\n\n    this.hookRunner = this.createHookRunner();\n    this.hookHandler = new HookHandler({\n      hookRunner: this.hookRunner,\n      agentId: this.agentId,\n      get sessionKey() { return this.currentContext?.sessionKey; },\n    });\n\n    this.progressManager = this.createProgressManager();\n    this.initializeReliabilityModules();\n\n    this.lifecycleManager = new LifecycleManager();\n    this.initializeLifecycleHandlers();\n\n    this.streamManager = new StreamManager();\n    this.sessionContextManager = new SessionContextManager();\n    this.feedbackCoordinator = new FeedbackCoordinator({\n      progressManager: this.progressManager,\n      bus,\n    });\n\n    this.agentManager = new AgentManager({\n      workspace: config.workspace,\n      model: config.model,\n      config: config.config,\n      extensionRegistry: config.extensionRegistry,\n      hookRunner: this.hookRunner,\n      bus,\n      getCurrentContext: () => this.sessionContextManager.getContext(),\n      getSessionStore: () => this.sessionStore,\n      getModelManager: () => this.modelManager,\n      thinkingLevel: config.thinkingLevel,\n      reasoningLevel: config.reasoningLevel,\n      verboseLevel: config.verboseLevel,\n      gatewayClarify: config.gatewayClarify,\n      getAutomationService: config.getAutomationService,\n      getNotesService: config.getNotesService,\n      getProjectService: config.getProjectService,\n      getWorkItemService: config.getWorkItemService,\n      getWorkflowRunService: config.getWorkflowRunService,\n      onSkillsUpdated: config.onSkillsUpdated,\n      isWorkspaceTrusted: config.isWorkspaceTrusted,\n      getSelfVerifyPromptContext: (sessionKey, agentId) => [\n        this.selfVerifyMiddleware.getPendingVerificationContext(sessionKey, agentId),\n        this.turnDiffTracker.buildFinalGuardContext(sessionKey),\n      ].filter(Boolean).join('\\n\\n'),\n    });\n\n    this.agentEventHandler = new AgentEventHandler({\n      progressManager: this.progressManager,\n      errorTracker: this.errorTracker,\n      requestLimiter: this.requestLimiter,\n      lifecycleManager: this.lifecycleManager,\n      toolChainTracker: this.toolChainTracker,\n      selfVerifyMiddleware: this.selfVerifyMiddleware,\n      systemReminder: this.systemReminder,\n      toolUsageAnalyzer: this.toolUsageAnalyzer,\n      errorPatternMatcher: this.errorPatternMatcher,\n      turnDiffTracker: this.turnDiffTracker,\n    });\n\n    // Wire the workflow progress broker into the session event bus. Channel\n    // extensions self-register their capability against the singleton at\n    // boot; the broker only forwards updates to whatever has registered, so\n    // this is safe even when no channel is configured.\n    this.workflowProgressBrokerHandle = getWorkflowProgressBroker().attachTo(\n      this.agentEventHandler,\n    );\n\n    // sessionHydrator is constructed early because AgentOrchestrator + InboundLoop +\n    // TurnDispatcher all need it; the SessionConfigService instance below also\n    // shares the same constructor parameters.\n    this.sessionHydrator = new SessionHydrator({\n      sessionConfigStore: this.sessionConfigStore,\n      agentManager: this.agentManager,\n      modelManager: this.modelManager,\n      getConfig: () => this.effectiveAppConfig(),\n    });\n\n    this.agentOrchestrator = new AgentOrchestrator({\n      agentManager: this.agentManager,\n      sessionStore: this.sessionStore,\n      modelManager: this.modelManager,\n      eventHandler: this.agentEventHandler,\n      feedbackCoordinator: this.feedbackCoordinator,\n      sessionConfigStore: this.sessionConfigStore,\n      sessionHydrator: this.sessionHydrator,\n      getConfig: () => this.effectiveAppConfig(),\n      getThinkingDefault: () => undefined,\n      getThinkingDefaultForSession: (sessionKey: string) =>\n        this.agentManager.getThinkingDefaultForSession(sessionKey),\n      workspaceRoot: this.workspaceDir,\n      getWorkspaceRootForSession: (sessionKey: string) =>\n        this.agentManager.getResolvedWorkspaceForSession(sessionKey),\n      getAgentInternalStorageRootForSession: (sessionKey: string) =>\n        resolveAgentHomeDir(this.config.config!, extractProfileAgentId(sessionKey, this.config.config!)),\n      enqueueAutoTitle: (sessionKey: string) => this.enqueueMaybeAutoTitleAfterPersist(sessionKey),\n      onEmbeddedStreamEvent: (sessionKey, event) => {\n        const ctx = this.sessionContextManager.getContext();\n        if (!ctx || ctx.sessionKey !== sessionKey) {\n          return;\n        }\n        if (event.type === 'message_update' && event.message.role === 'assistant') {\n          const next = assistantMessageText(event.message);\n          this.streamManager.update(next);\n        }\n      },\n      onEmbeddedTurnComplete: (sessionKey, text) => {\n        if (text) {\n          this.sessionState.setLastAssistantText(sessionKey, text);\n        }\n        this.sessionState.clearEmbeddedStreamText(sessionKey);\n      },\n    });\n\n    this.messageRouter = new MessageRouter();\n    this.commandHandler = new CommandHandler({\n      config: config.config!,\n      bus,\n      sessionStore: this.sessionStore,\n      sessionConfigStore: this.sessionConfigStore,\n      getPersistentGoalApisForCommand: (routing) => this.persistentGoals.buildApisForRouting(routing),\n      getWorkflowRunService: config.getWorkflowRunService,\n      applySessionThinkingLevel: (sessionKey: string, level: ThinkLevel) => {\n        this.agentManager.setThinkingLevel(sessionKey, level as ThinkingLevel);\n      },\n      getCurrentModel: () => this.agentOrchestrator.getCurrentModel(),\n      switchModelForSession: (sessionKey: string, modelId: string) =>\n        this.switchModelForSession(sessionKey, modelId),\n      invalidateAgentSession: (sessionKey: string) => {\n        this.agentManager.removeAgent(sessionKey);\n      },\n      resetSession: (sessionKey: string) => this.resetSession(sessionKey),\n      abortSessionTurn: async (sessionKey: string) => {\n        await this.streamManager.abort();\n        this.agentOrchestrator.abort(sessionKey);\n      },\n      reloadSkills: () => this.refreshSkillsAfterDiskChange(),\n      compactSession: (sessionKey, options) => this.sessionInspector.compact(sessionKey, options),\n      btwQuery: (sessionKey, question) => this.sessionInspector.btwQuery(sessionKey, question),\n      getSessionContextReport: (sessionKey, mode) => this.sessionInspector.report(sessionKey, mode),\n    });\n\n    this.sessionLifecycleManager = new SessionLifecycleManager(\n      this.sessionStore,\n      this.sessionTracker,\n      this.lifecycleManager\n    );\n\n    this.persistentGoals = new PersistentGoalService({\n      bus,\n      sessionStore: this.sessionStore,\n      modelManager: this.modelManager,\n      sessionState: this.sessionState,\n      getConfig: () => this.effectiveAppConfig(),\n      getResolvedWorkspaceForSession: (sk) => this.agentManager.getResolvedWorkspaceForSession(sk),\n      onSessionMetadataUpdated: this.onSessionMetadataUpdated,\n      onGoalStatusUpdated: config.onGoalStatusUpdated,\n      notifyWebchatTranscriptAppend: (sk, text) => this.turnDispatcher.notifyWebchatTranscriptAppend(sk, text),\n    });\n\n    this.sessionConfig = new SessionConfigService({\n      sessionStore: this.sessionStore,\n      sessionConfigStore: this.sessionConfigStore,\n      modelManager: this.modelManager,\n      agentManager: this.agentManager,\n      getConfig: () => this.effectiveAppConfig(),\n    });\n\n    this.sessionInspector = new SessionInspector({\n      sessionStore: this.sessionStore,\n      sessionConfigStore: this.sessionConfigStore,\n      modelManager: this.modelManager,\n      agentManager: this.agentManager,\n      sessionHydrator: this.sessionHydrator,\n      getConfig: () => this.effectiveAppConfig(),\n      getContextWindow: (sessionKey) => this.getContextWindowForSession(sessionKey),\n    });\n\n    this.outboundCoordinator = new OutboundCoordinator({\n      bus,\n      hookHandler: this.hookHandler,\n      streamManager: this.streamManager,\n      getConfig: () => this.effectiveAppConfig(),\n      getLastAssistantPlainText: (sk) => this.getLastAssistantPlainText(sk),\n      runPersistentGoalPostTurn: (payload) => this.persistentGoals.runPostTurn(payload),\n    });\n\n    this.turnDispatcher = new TurnDispatcher({\n      log,\n      agentManager: this.agentManager,\n      sessionStore: this.sessionStore,\n      modelManager: this.modelManager,\n      sessionConfigStore: this.sessionConfigStore,\n      sessionState: this.sessionState,\n      commandHandler: this.commandHandler,\n      getConfig: () => this.effectiveAppConfig(),\n      requireConfig: () => {\n        const c = this.config.config;\n        if (!c) throw new Error('AgentService requires config.config');\n        return c;\n      },\n      resolveSessionEndpoint: (sk) => this.resolveSessionEndpoint(sk),\n      initSessionContext: (sk, channel, chatId) => this.initSessionContext(sk, channel, chatId),\n      sessionHydrator: this.sessionHydrator,\n      prepareInboundAttachments: (sk, att) => this.prepareInboundAttachments(sk, att),\n      enqueueMaybeAutoTitleAfterPersist: (sk) => this.enqueueMaybeAutoTitleAfterPersist(sk),\n      enqueueProvisionalSessionTitle: (sk, text) => this.enqueueProvisionalSessionTitle(sk, text),\n      endDirectRequestContext: () => this.endDirectRequestContext(),\n      onSessionTranscriptUpdated: this.onSessionTranscriptUpdated,\n      resetSession: (sk) => this.resetSession(sk),\n      sourceContextResolver: config.sourceContextResolver,\n    });\n\n    this.inboundLoop = new InboundLoop({\n      log,\n      agentId: this.agentId,\n      bus,\n      hookHandler: this.hookHandler,\n      messageRouter: this.messageRouter,\n      commandHandler: this.commandHandler,\n      sessionContextManager: this.sessionContextManager,\n      feedbackCoordinator: this.feedbackCoordinator,\n      agentManager: this.agentManager,\n      sessionLifecycleManager: this.sessionLifecycleManager,\n      agentOrchestrator: this.agentOrchestrator,\n      outboundCoordinator: this.outboundCoordinator,\n      streamManager: this.streamManager,\n      sessionState: this.sessionState,\n      sessionStore: this.sessionStore,\n      modelManager: this.modelManager,\n      setupSessionEventHandling: (sk) => this.setupSessionEventHandling(sk),\n      sessionHydrator: this.sessionHydrator,\n      getLastAssistantPlainText: (sk) => this.getLastAssistantPlainText(sk),\n      checkAndCompact: (sk, msgs) => this.checkAndCompact(sk, msgs),\n      enqueueMaybeAutoTitleAfterPersist: (sk) => this.enqueueMaybeAutoTitleAfterPersist(sk),\n      getConfig: () => this.effectiveAppConfig(),\n      resetSession: (sk) => this.resetSession(sk),\n      setStreamHandle: (handle) => this.setStreamHandle(handle),\n    });\n\n    // Register signal handlers only if not running as an Electron subprocess.\n    // In Electron, the parent process manages the lifecycle and signals should not trigger disposal.\n    const isElectronSubprocess = !!process.env.ELECTRON_RUN_AS_NODE;\n    if (!isElectronSubprocess) {\n      process.on('SIGINT', () => this.dispose());\n      process.on('SIGTERM', () => this.dispose());\n    }\n\n    log.info('AgentService initialized');\n  }\n\n  private createSessionStore(): SessionStore {\n    const windowConfig: Partial<WindowConfig> = {\n      maxMessages: 100,\n      keepRecentMessages: 20,\n      preserveSystemMessages: true,\n    };\n    const compactionConfig: Partial<CompactionConfig> = {\n      enabled: true,\n      mode: 'abstractive',\n      reserveTokens: 8000,\n      triggerThreshold: 0.8,\n      minMessagesBeforeCompact: 10,\n      keepRecentMessages: 10,\n      evictionWindow: 0.2,\n      retentionWindow: 6,\n    };\n    const appCfg = this.config.config;\n    if (!appCfg) {\n      throw new Error('AgentService requires config.config for session store paths');\n    }\n    return new SessionStore(\n      {\n        config: appCfg,\n      },\n      windowConfig,\n      compactionConfig,\n    );\n  }\n\n  private createHookRunner(): ExtensionHookRunner | undefined {\n    if (!this.config.extensionRegistry) return undefined;\n\n    return new ExtensionHookRunner(this.config.extensionRegistry, {\n      catchErrors: true,\n      logger: {\n        info: (msg: string) => log.info({ hook: true }, msg),\n        warn: (msg: string) => log.warn({ hook: true }, msg),\n        error: (msg: string) => log.error({ hook: true }, msg),\n      },\n    });\n  }\n\n  private createProgressManager(): ProgressFeedbackManager {\n    return new ProgressFeedbackManager({\n      level: 'normal',\n      showThinking: true,\n      streamToolProgress: true,\n      heartbeatEnabled: true,\n      heartbeatIntervalMs: 20000,\n      longTaskThresholdMs: 30000,\n    });\n  }\n\n  private initializeReliabilityModules(): void {\n    this.errorTracker = new ToolErrorTracker({\n      maxFailuresPerTool: 3,\n      maxTotalFailures: 5,\n      resetOnTurnEnd: true,\n    });\n\n    this.selfVerifyMiddleware = new SelfVerifyMiddleware({\n      maxEditsPerFile: 5,\n      enablePreCompletionCheck: true,\n      minTurnsForVerification: 4,\n      resetOnVerification: true,\n    });\n    this.turnDiffTracker = new TurnDiffTracker();\n\n    this.requestLimiter = new RequestLimiter({\n      maxRequestsPerTurn: 50,\n      warnThreshold: 0.8,\n      softLimit: false,\n    });\n\n    this.systemReminder = new SystemReminder({\n      enabled: true,\n      appendToToolResults: true,\n      maxRemindersPerTurn: 3,\n    });\n\n    this.toolUsageAnalyzer = new ToolUsageAnalyzer({\n      enabled: true,\n      lowUsageThreshold: 5,\n      veryLowUsageThreshold: 1,\n      minCallsForAnalysis: 100,\n      reportIntervalMs: 60 * 60 * 1000,\n    });\n\n    this.toolChainTracker = new ToolChainTracker({\n      enabled: true,\n      maxChainsPerSession: 10,\n      maxNodesPerChain: 100,\n      trackParams: true,\n      trackResults: true,\n      autoPrune: true,\n    });\n\n    this.errorPatternMatcher = new ErrorPatternMatcher({\n      enabled: true,\n      defaultMaxRetries: 1,\n      logMatches: true,\n    });\n\n    // Initialize context middleware for automatic request tracking\n    this.contextMiddleware = new ContextMiddleware();\n  }\n\n  private initializeLifecycleHandlers(): void {\n    this.lifecycleManager.on('llm_response', new CompactionLifecycleHandler({\n      minMessages: 20,\n      maxTokens: 8000,\n      preserveReasoning: true,\n      accumulateUsage: true,\n    }));\n\n    log.debug(\n      { handlers: this.lifecycleManager.getRegisteredHandlers() },\n      'Lifecycle handlers initialized'\n    );\n  }\n\n  setChannelManager(channelManager: ChannelManager): void {\n    this.inboundLoop.setChannelManager(channelManager);\n  }\n\n  /**\n   * Apply config after save or hot reload so the default model updates without restarting the gateway.\n   */\n  applyAgentDefaultsFromConfig(config: Config): void {\n    this.config.config = config;\n    const ref = getAgentDefaultModelRef(config);\n    this.config.model = ref;\n    this.modelManager.updateFromConfig(config);\n    this.agentManager.updateAgentDefaults(config);\n    this.commandHandler.updateAgentConfig(config);\n  }\n\n  getSkillCatalog(): SkillCatalogEntry[] {\n    return this.agentManager.getSkillCatalog();\n  }\n\n  getSkillCatalogSnapshot(): SkillCatalogSnapshot {\n    return this.agentManager.getSkillCatalogSnapshot();\n  }\n\n  getAgentSkillAvailability(agentId: string): AgentSkillAvailabilityPayload {\n    return this.agentManager.getAgentSkillAvailability(agentId);\n  }\n\n  getSkillMarkdownSource(skillName: string): SkillMarkdownPreviewPayload | null {\n    return this.agentManager.getSkillMarkdownSource(skillName);\n  }\n\n  refreshSkillsAfterDiskChange(): void {\n    this.agentManager.refreshSkillsAfterDiskChange();\n  }\n\n  refreshSkillsAfterSkillConfigChange(): void {\n    this.agentManager.refreshSkillsAfterSkillConfigChange();\n  }\n\n  getModelForSession(sessionKey: string): string {\n    return this.modelManager.getModelForSession(sessionKey);\n  }\n\n  async switchModelForSession(sessionKey: string, modelId: string): Promise<boolean> {\n    const ok = await this.modelManager.switchModelForSession(sessionKey, modelId);\n    if (!ok) return false;\n    await this.sessionConfigStore.update(sessionKey, { modelOverride: modelId });\n    const result = this.agentManager.setModelForSession(sessionKey, modelId);\n    if (result) {\n      this.sessionTracker.touchSession(sessionKey);\n    }\n    return true;\n  }\n\n  /**\n   * Clears per-session model override so the next turn uses the configured agent default\n   * (e.g. cron isolated job with no explicit model).\n   */\n  async resetSessionModelToAgentDefault(sessionKey: string): Promise<void> {\n    await this.sessionConfig.clearModelOverride(sessionKey);\n  }\n\n  setStreamHandle(handle: StreamHandle): void {\n    this.streamManager.setHandle(handle);\n    this.feedbackCoordinator.setStreamHandle(handle);\n  }\n\n  clearStreamHandle(): void {\n    this.streamManager.clearHandle();\n    this.feedbackCoordinator.endTask();\n  }\n\n  /** Last assistant visible plain text for a session (e.g. after a webchat stream). */\n  getLastAssistantPlainText(sessionKey: string): string {\n    return (\n      this.sessionState.getLastAssistantText(sessionKey) ??\n      this.agentManager.getLastAssistantContent(sessionKey) ??\n      ''\n    );\n  }\n\n  beginInboundTurn(sessionKey: string): void {\n    this.sessionState.beginInboundTurn(sessionKey);\n  }\n\n  endInboundTurn(sessionKey: string): void {\n    this.sessionState.endInboundTurn(sessionKey);\n  }\n\n  getInboundTurnDepth(sessionKey: string): number {\n    return this.sessionState.getInboundTurnDepth(sessionKey);\n  }\n\n  async start(): Promise<void> {\n    await this.sessionConfigStore.initialize();\n    await this.hookHandler.trigger('gateway_start', { port: 0, host: 'cli' });\n    log.debug('Agent service started');\n    void this.inboundLoop.start().catch((err) => {\n      const em = err instanceof Error ? err.message : String(err);\n      log.error({ err, errorMessage: em }, `Inbound loop failed: ${em}`);\n    });\n  }\n\n  stop(): Promise<void> {\n    this.inboundLoop.stop();\n    this.agentManager.dispose();\n    this.dispose();\n\n    this.hookHandler.trigger('gateway_stop', { reason: 'stopped' });\n    log.debug('Agent service stopped');\n    return Promise.resolve();\n  }\n\n  async reconcileDreamingNow(): Promise<void> {\n    return Promise.resolve();\n  }\n\n  /**\n   * Persist agent messages with the same sanitizer + transcript hygiene as AgentOrchestrator.\n   * Uses persistence hygiene so `thinking` blocks remain on disk for the web UI (LLM load path still drops them).\n   */\n  private notifySessionTitleUpdated(sessionKey: string, name: string): void {\n    this.onSessionMetadataUpdated?.(sessionKey, { name });\n  }\n\n  /** Fire-and-forget provisional title from first user text (webchat sidebar). */\n  enqueueProvisionalSessionTitle(sessionKey: string, userText: string): void {\n    void (async () => {\n      try {\n        await maybeSetProvisionalSessionTitle(\n          this.sessionStore,\n          sessionKey,\n          userText,\n          (sk, name) => this.notifySessionTitleUpdated(sk, name),\n        );\n      } catch (err) {\n        log.warn({ err, sessionKey }, 'Provisional session title failed');\n      }\n    })();\n  }\n\n  /**\n   * Fire-and-forget LLM refine after turn persist; skips user-locked and finalized LLM titles.\n   */\n  private enqueueMaybeAutoTitleAfterPersist(sessionKey: string): void {\n    void (async () => {\n      try {\n        let modelRef =\n          getAgentDefaultModelRef(this.config.config ?? ({} as Config)) ?? this.config.model;\n        if (!modelRef?.trim()) {\n          try {\n            modelRef = this.modelManager.getModelForSession(sessionKey);\n          } catch {\n            modelRef = undefined;\n          }\n        }\n        await maybeRefineSessionTitleWithLlm(\n          this.sessionStore,\n          sessionKey,\n          modelRef?.trim() || undefined,\n          (sk, name) => this.notifySessionTitleUpdated(sk, name),\n        );\n      } catch (err) {\n        log.warn({ err, sessionKey }, 'Auto session title failed');\n      }\n    })();\n  }\n\n  private async resolveSessionEndpoint(sessionKey: string): Promise<{ channel: string; chatId: string }> {\n    const metadata = await this.sessionStore.getMetadata(sessionKey).catch(() => null);\n    const channel = metadata?.routing?.source?.trim() || metadata?.sourceChannel?.trim() || 'cli';\n    const chatId = metadata?.routing?.peerId?.trim() || metadata?.sourceChatId?.trim() || 'main';\n    return { channel, chatId };\n  }\n\n  private initSessionContext(\n    sessionKey: string,\n    channel: string,\n    chatId: string,\n    senderId = '',\n  ): SessionContext {\n    const context: SessionContext = {\n      sessionKey,\n      channel,\n      chatId,\n      senderId,\n      isGroup: false,\n    };\n\n    this.contextMiddleware.onRequest({\n      sessionKey,\n      userId: context.senderId,\n      channel,\n      chatId,\n    });\n\n    // Direct turn entry points (one-shot + streaming generator) cannot wrap their\n    // body in `sessionContextManager.runWith(ctx, fn)` cleanly — the streaming\n    // path is an async generator, and both flows already use a try/finally for\n    // side-effect cleanup. We use `enter` so the context is visible via ALS for\n    // every async resource launched after this call returns. The context is\n    // overwritten or cleared by the next direct turn (each direct turn calls\n    // `initSessionContext` first), so there is no cross-session leak in practice.\n    this.sessionContextManager.enter(context);\n    this.feedbackCoordinator.setContext(context);\n    this.agentManager.getOrCreateAgent(sessionKey);\n    this.setupSessionEventHandling(sessionKey);\n\n    return context;\n  }\n\n  /**\n   * Persist inbound file attachments to the global media store.\n   */\n  async prepareInboundAttachments(\n    _sessionKey: string,\n    attachments?: InboundAttachmentInput[],\n  ): Promise<MediaRef[] | undefined> {\n    return persistInboundAttachments(attachments, {\n      resolveUri: async (uri) => {\n        const target = parseNoteAttachmentTarget(uri);\n        if (!target) return null;\n        const notesService = (this as unknown as {\n          notesServiceInstance?: {\n            getAttachmentPath(noteId: string, attachmentId: string): Promise<{\n              filePath: string;\n              mimeType?: string;\n              fileName?: string;\n            } | null>;\n          };\n        }).notesServiceInstance;\n        if (!notesService) return null;\n        const located = await notesService.getAttachmentPath(target.noteId, target.attachmentId);\n        if (!located) return null;\n        const buffer = await readFile(located.filePath);\n        return {\n          buffer,\n          path: located.filePath,\n          mimeType: located.mimeType,\n          name: located.fileName,\n          size: buffer.byteLength,\n        };\n      },\n    });\n  }\n\n  private endDirectRequestContext(): void {\n    // `sessionContextManager` is ALS-backed: the context for the current async\n    // chain drops automatically when the chain unwinds. The feedback\n    // coordinator + context middleware still use singleton state, so clear\n    // them explicitly here.\n    this.feedbackCoordinator.clearContext();\n    this.contextMiddleware.onResponse();\n  }\n\n  /**\n   * Reset a session's transcript and drop the in-memory agent so the next turn\n   * reloads from disk. Combines two collaborators (sessionStore + agentManager)\n   * so it stays on `AgentService`; pure sessionStore reads should use\n   * `agentService.sessionStore.*` directly.\n   */\n  async clearSessionMessages(key: string): Promise<void> {\n    await this.sessionStore.saveMessages(key, []);\n    this.agentManager.removeAgent(key);\n  }\n\n  /**\n   * Reset session transcript (archive + new session id) and evict in-memory agent state.\n   * Preserves the session key and persisted per-session overrides.\n   */\n  async resetSession(\n    key: string,\n  ): Promise<{ sessionId: string; previousSessionId: string } | null> {\n    const { abortEmbeddedRun } = await import('./embedded/runs.js');\n    const { retireSessionMcpRuntimeForSessionKey } = await import('./mcp/bundle-mcp-tools.js');\n    await abortEmbeddedRun(key);\n    const outcome = await this.sessionStore.reset(key);\n    if (!outcome) {\n      return null;\n    }\n    this.agentManager.removeAgent(key);\n    await retireSessionMcpRuntimeForSessionKey({ sessionKey: key, reason: 'session-reset' });\n    return outcome;\n  }\n\n  /**\n   * Drop in-memory agent so the next turn reloads transcript from disk (e.g. after checkpoint restore).\n   */\n  evictSessionAgent(sessionKey: string): void {\n    this.agentManager.removeAgent(sessionKey);\n  }\n\n  /**\n   * Load session working directory override into AgentManager, ensure directory exists.\n   * Call before AgentManager.getOrCreateAgent for this session.\n   */\n  /** Workspace root for UI file tree / editor (same as agent tools after hydration). */\n  async getEffectiveWorkspacePathForSession(sessionKey: string): Promise<string> {\n    await this.sessionHydrator.workspace(sessionKey);\n    const cfg = this.config.config!;\n    const sc = await this.sessionConfigStore.get(sessionKey);\n    return effectiveWorkspacePathForSession(cfg, sessionKey, sc, getProjectForSession(sessionKey));\n  }\n\n   /**\n   * Best-effort timezone resolution for webchat envelope timestamps.\n   * Reads the global user profile and extracts a `Timezone:` line.\n   */\n  resolveUserTimezoneForSession(sessionKey: string): string | undefined {\n    void sessionKey;\n    try {\n      const cfg = this.effectiveAppConfig();\n      if (!cfg) return undefined;\n      const userPath = resolveUserProfilePath();\n      if (!existsSync(userPath)) return undefined;\n      const raw = readFileSync(userPath, 'utf-8');\n      const match = raw.match(/Timezone:\\s*(.+)/i);\n      const tz = match?.[1]?.trim();\n      return tz || undefined;\n    } catch {\n      return undefined;\n    }\n  }\n\n  /**\n   * Setup event handling for a specific session\n   */\n  private setupSessionEventHandling(sessionKey: string): void {\n    if (this.sessionState.hasSessionEventUnsubscriber(sessionKey)) {\n      return;\n    }\n\n    const unsubscribe = this.agentManager.subscribeToSession(sessionKey, (event) => {\n      this.handleSessionEvent(sessionKey, event);\n    });\n\n    if (unsubscribe) {\n      this.sessionState.setSessionEventUnsubscriber(sessionKey, unsubscribe);\n    }\n  }\n\n  /**\n   * Handle events from a specific session's agent\n   */\n  private handleSessionEvent(sessionKey: string, event: AgentEvent): void {\n    const currentContext = this.sessionContextManager.getContext();\n    if (!currentContext) {\n      // Inbound `finally` clears context before trailing agent `message_update` events finish — ignore (not a bug).\n      return;\n    }\n\n    if (currentContext.sessionKey !== sessionKey) {\n      // Event from a different session — still process with current context where applicable\n      this.agentEventHandler.handle(event, currentContext);\n      return;\n    }\n\n    // Handle streaming updates for the current session\n    if (event.type === 'message_update') {\n      const msgEvent = event as Extract<AgentEvent, { type: 'message_update' }>;\n      if (msgEvent.message?.role === 'assistant') {\n        const content = msgEvent.message.content;\n        const text = Array.isArray(content)\n          ? extractTextContent(content as Array<{ type: string; text?: string }>)\n          : String(content);\n\n        this.streamManager.update(text);\n      }\n    }\n\n    this.agentEventHandler.handle(event, currentContext);\n  }\n\n  private async checkAndCompact(sessionKey: string, messages: AgentMessage[]): Promise<void> {\n    const contextWindow = this.getContextWindowForSession(sessionKey);\n    const prep = this.sessionStore.prepareCompaction(sessionKey, messages, contextWindow);\n    if (!prep.needsCompaction) return;\n\n    log.info({ sessionKey, reason: prep.stats?.reason, usagePercent: prep.stats?.usagePercent }, 'Session needs compaction');\n\n    const result = await this.sessionStore.compact(sessionKey, messages, contextWindow, undefined, false);\n    await this.hookHandler.trigger('after_compaction', {\n      messageCount: messages.length,\n      tokenCount: result.tokensBefore,\n      compactedCount: messages.length - result.firstKeptIndex,\n    });\n    log.info({ sessionKey, tokensBefore: result.tokensBefore, tokensAfter: result.tokensAfter }, 'Session compacted');\n  }\n\n  private getContextWindowForSession(sessionKey: string): number {\n    try {\n      return this.modelManager.getResolvedModelForSession(sessionKey).contextWindow ?? 128000;\n    } catch (err) {\n      log.warn({ err, sessionKey }, 'Failed to resolve session context window; using default');\n      return 128000;\n    }\n  }\n\n  private dispose(): void {\n    this.sessionTracker.dispose();\n    this.sessionState.disposeAll();\n    this.agentManager.dispose();\n    this.workflowProgressBrokerHandle?.dispose();\n    this.workflowProgressBrokerHandle = null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAE2E;aAkBzB;kBAwDxB;YAIkC;AAW5D,MAAM,MAAM,aAAa,eAAe;AAExC,SAAS,qBAAqB,SAA+B;CAC3D,MAAM,UAAW,QAAkC;AACnD,KAAI,OAAO,YAAY,SAAU,QAAO;AACxC,KAAI,CAAC,MAAM,QAAQ,QAAQ,CAAE,QAAO;AACpC,QAAO,QACJ,KAAK,UAAU;AACd,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;EAChD,MAAM,MAAM;AACZ,SAAO,IAAI,SAAS,UAAU,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;GACxE,CACD,KAAK,GAAG;;AAGb,IAAa,eAAb,MAA0B;;;;;;CAMxB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;;;;;;CAMA;CACA;;;;;;CAMA;;;;;;CAMA;;;;;;CAMA;;;;;;CAMA;;;;;;CAMA;CACA;CACA;CACA;CACA;CACA,+BAAoE;CACpE;CACA;;;;;;;CAQA,eAAuB,IAAI,iBAAiB;;CAG5C;CACA;CAEA,qBAAiD;EAC/C,MAAM,OAAO,KAAK,OAAO;AACzB,SAAO,OAAO,qBAAqB,KAAK,GAAG,KAAA;;CAG7C,YAAY,KAAiB,QAA4B;AACvD,OAAK,SAAS;AACd,OAAK,2BAA2B,OAAO;AACvC,OAAK,6BAA6B,OAAO;AACzC,OAAK,UAAU,SAAS,KAAK,KAAK;AAClC,OAAK,eAAe,OAAO;AAE3B,OAAK,iBAAiB,IAAI,gBAAgB;AAC1C,OAAK,eAAe,IAAI,aAAa;GACnC,cAAc,OAAO;GACrB,QAAQ,OAAO;GAChB,CAAC;AAEF,sBAAoB;AACpB,MAAI,MAAM,6BAA6B;AAEvC,OAAK,eAAe,OAAO,gBAAgB,KAAK,oBAAoB;AACpE,6BAA2B,WAAW;AAC/B,QAAK,aAAa,6BAA6B,OAAO,CAAC,OAAO,QAAQ;AACzE,QAAI,KACF;KAAE;KAAK,YAAY,OAAO;KAAY,EACtC,+BACD;KACD;GACF,MAAM,KAAK,OAAO,YAAY,MAAM;AACpC,OAAI,GACF,MAAK,6BAA6B,GAAG;IAEvC;EACF,MAAM,iBAAiB,KAAK,OAAO;AACnC,MAAI,CAAC,eACH,OAAM,IAAI,MAAM,wDAAwD;EAG1E,MAAM,mBAAmB,oBAAoB,gBAD1B,sBAAsB,eAC8B,CAAC;AACxE,OAAK,qBAAqB,IAAI,mBAAmB,iBAAiB;AAElE,OAAK,aAAa,KAAK,kBAAkB;AACzC,OAAK,cAAc,IAAI,YAAY;GACjC,YAAY,KAAK;GACjB,SAAS,KAAK;GACd,IAAI,aAAa;AAAE,WAAO,KAAK,gBAAgB;;GAChD,CAAC;AAEF,OAAK,kBAAkB,KAAK,uBAAuB;AACnD,OAAK,8BAA8B;AAEnC,OAAK,mBAAmB,IAAI,kBAAkB;AAC9C,OAAK,6BAA6B;AAElC,OAAK,gBAAgB,IAAI,eAAe;AACxC,OAAK,wBAAwB,IAAI,uBAAuB;AACxD,OAAK,sBAAsB,IAAI,oBAAoB;GACjD,iBAAiB,KAAK;GACtB;GACD,CAAC;AAEF,OAAK,eAAe,IAAI,aAAa;GACnC,WAAW,OAAO;GAClB,OAAO,OAAO;GACd,QAAQ,OAAO;GACf,mBAAmB,OAAO;GAC1B,YAAY,KAAK;GACjB;GACA,yBAAyB,KAAK,sBAAsB,YAAY;GAChE,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,eAAe,OAAO;GACtB,gBAAgB,OAAO;GACvB,cAAc,OAAO;GACrB,gBAAgB,OAAO;GACvB,sBAAsB,OAAO;GAC7B,iBAAiB,OAAO;GACxB,mBAAmB,OAAO;GAC1B,oBAAoB,OAAO;GAC3B,uBAAuB,OAAO;GAC9B,iBAAiB,OAAO;GACxB,oBAAoB,OAAO;GAC3B,6BAA6B,YAAY,YAAY,CACnD,KAAK,qBAAqB,8BAA8B,YAAY,QAAQ,EAC5E,KAAK,gBAAgB,uBAAuB,WAAW,CACxD,CAAC,OAAO,QAAQ,CAAC,KAAK,OAAO;GAC/B,CAAC;AAEF,OAAK,oBAAoB,IAAI,kBAAkB;GAC7C,iBAAiB,KAAK;GACtB,cAAc,KAAK;GACnB,gBAAgB,KAAK;GACrB,kBAAkB,KAAK;GACvB,kBAAkB,KAAK;GACvB,sBAAsB,KAAK;GAC3B,gBAAgB,KAAK;GACrB,mBAAmB,KAAK;GACxB,qBAAqB,KAAK;GAC1B,iBAAiB,KAAK;GACvB,CAAC;AAMF,OAAK,+BAA+B,2BAA2B,CAAC,SAC9D,KAAK,kBACN;AAKD,OAAK,kBAAkB,IAAI,gBAAgB;GACzC,oBAAoB,KAAK;GACzB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,iBAAiB,KAAK,oBAAoB;GAC3C,CAAC;AAEF,OAAK,oBAAoB,IAAI,kBAAkB;GAC7C,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,qBAAqB,KAAK;GAC1B,oBAAoB,KAAK;GACzB,iBAAiB,KAAK;GACtB,iBAAiB,KAAK,oBAAoB;GAC1C,0BAA0B,KAAA;GAC1B,+BAA+B,eAC7B,KAAK,aAAa,6BAA6B,WAAW;GAC5D,eAAe,KAAK;GACpB,6BAA6B,eAC3B,KAAK,aAAa,+BAA+B,WAAW;GAC9D,wCAAwC,eACtC,oBAAoB,KAAK,OAAO,QAAS,sBAAsB,YAAY,KAAK,OAAO,OAAQ,CAAC;GAClG,mBAAmB,eAAuB,KAAK,kCAAkC,WAAW;GAC5F,wBAAwB,YAAY,UAAU;IAC5C,MAAM,MAAM,KAAK,sBAAsB,YAAY;AACnD,QAAI,CAAC,OAAO,IAAI,eAAe,WAC7B;AAEF,QAAI,MAAM,SAAS,oBAAoB,MAAM,QAAQ,SAAS,aAAa;KACzE,MAAM,OAAO,qBAAqB,MAAM,QAAQ;AAChD,UAAK,cAAc,OAAO,KAAK;;;GAGnC,yBAAyB,YAAY,SAAS;AAC5C,QAAI,KACF,MAAK,aAAa,qBAAqB,YAAY,KAAK;AAE1D,SAAK,aAAa,wBAAwB,WAAW;;GAExD,CAAC;AAEF,OAAK,gBAAgB,IAAI,eAAe;AACxC,OAAK,iBAAiB,IAAI,eAAe;GACvC,QAAQ,OAAO;GACf;GACA,cAAc,KAAK;GACnB,oBAAoB,KAAK;GACzB,kCAAkC,YAAY,KAAK,gBAAgB,oBAAoB,QAAQ;GAC/F,uBAAuB,OAAO;GAC9B,4BAA4B,YAAoB,UAAsB;AACpE,SAAK,aAAa,iBAAiB,YAAY,MAAuB;;GAExE,uBAAuB,KAAK,kBAAkB,iBAAiB;GAC/D,wBAAwB,YAAoB,YAC1C,KAAK,sBAAsB,YAAY,QAAQ;GACjD,yBAAyB,eAAuB;AAC9C,SAAK,aAAa,YAAY,WAAW;;GAE3C,eAAe,eAAuB,KAAK,aAAa,WAAW;GACnE,kBAAkB,OAAO,eAAuB;AAC9C,UAAM,KAAK,cAAc,OAAO;AAChC,SAAK,kBAAkB,MAAM,WAAW;;GAE1C,oBAAoB,KAAK,8BAA8B;GACvD,iBAAiB,YAAY,YAAY,KAAK,iBAAiB,QAAQ,YAAY,QAAQ;GAC3F,WAAW,YAAY,aAAa,KAAK,iBAAiB,SAAS,YAAY,SAAS;GACxF,0BAA0B,YAAY,SAAS,KAAK,iBAAiB,OAAO,YAAY,KAAK;GAC9F,CAAC;AAEF,OAAK,0BAA0B,IAAI,wBACjC,KAAK,cACL,KAAK,gBACL,KAAK,iBACN;AAED,OAAK,kBAAkB,IAAI,sBAAsB;GAC/C;GACA,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,iBAAiB,KAAK,oBAAoB;GAC1C,iCAAiC,OAAO,KAAK,aAAa,+BAA+B,GAAG;GAC5F,0BAA0B,KAAK;GAC/B,qBAAqB,OAAO;GAC5B,gCAAgC,IAAI,SAAS,KAAK,eAAe,8BAA8B,IAAI,KAAK;GACzG,CAAC;AAEF,OAAK,gBAAgB,IAAI,qBAAqB;GAC5C,cAAc,KAAK;GACnB,oBAAoB,KAAK;GACzB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,iBAAiB,KAAK,oBAAoB;GAC3C,CAAC;AAEF,OAAK,mBAAmB,IAAI,iBAAiB;GAC3C,cAAc,KAAK;GACnB,oBAAoB,KAAK;GACzB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,iBAAiB,KAAK;GACtB,iBAAiB,KAAK,oBAAoB;GAC1C,mBAAmB,eAAe,KAAK,2BAA2B,WAAW;GAC9E,CAAC;AAEF,OAAK,sBAAsB,IAAI,oBAAoB;GACjD;GACA,aAAa,KAAK;GAClB,eAAe,KAAK;GACpB,iBAAiB,KAAK,oBAAoB;GAC1C,4BAA4B,OAAO,KAAK,0BAA0B,GAAG;GACrE,4BAA4B,YAAY,KAAK,gBAAgB,YAAY,QAAQ;GAClF,CAAC;AAEF,OAAK,iBAAiB,IAAI,eAAe;GACvC;GACA,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,oBAAoB,KAAK;GACzB,cAAc,KAAK;GACnB,gBAAgB,KAAK;GACrB,iBAAiB,KAAK,oBAAoB;GAC1C,qBAAqB;IACnB,MAAM,IAAI,KAAK,OAAO;AACtB,QAAI,CAAC,EAAG,OAAM,IAAI,MAAM,sCAAsC;AAC9D,WAAO;;GAET,yBAAyB,OAAO,KAAK,uBAAuB,GAAG;GAC/D,qBAAqB,IAAI,SAAS,WAAW,KAAK,mBAAmB,IAAI,SAAS,OAAO;GACzF,iBAAiB,KAAK;GACtB,4BAA4B,IAAI,QAAQ,KAAK,0BAA0B,IAAI,IAAI;GAC/E,oCAAoC,OAAO,KAAK,kCAAkC,GAAG;GACrF,iCAAiC,IAAI,SAAS,KAAK,+BAA+B,IAAI,KAAK;GAC3F,+BAA+B,KAAK,yBAAyB;GAC7D,4BAA4B,KAAK;GACjC,eAAe,OAAO,KAAK,aAAa,GAAG;GAC3C,uBAAuB,OAAO;GAC/B,CAAC;AAEF,OAAK,cAAc,IAAI,YAAY;GACjC;GACA,SAAS,KAAK;GACd;GACA,aAAa,KAAK;GAClB,eAAe,KAAK;GACpB,gBAAgB,KAAK;GACrB,uBAAuB,KAAK;GAC5B,qBAAqB,KAAK;GAC1B,cAAc,KAAK;GACnB,yBAAyB,KAAK;GAC9B,mBAAmB,KAAK;GACxB,qBAAqB,KAAK;GAC1B,eAAe,KAAK;GACpB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,4BAA4B,OAAO,KAAK,0BAA0B,GAAG;GACrE,iBAAiB,KAAK;GACtB,4BAA4B,OAAO,KAAK,0BAA0B,GAAG;GACrE,kBAAkB,IAAI,SAAS,KAAK,gBAAgB,IAAI,KAAK;GAC7D,oCAAoC,OAAO,KAAK,kCAAkC,GAAG;GACrF,iBAAiB,KAAK,oBAAoB;GAC1C,eAAe,OAAO,KAAK,aAAa,GAAG;GAC3C,kBAAkB,WAAW,KAAK,gBAAgB,OAAO;GAC1D,CAAC;AAKF,MAAI,CAAC,CADyB,CAAC,QAAQ,IAAI,sBAChB;AACzB,WAAQ,GAAG,gBAAgB,KAAK,SAAS,CAAC;AAC1C,WAAQ,GAAG,iBAAiB,KAAK,SAAS,CAAC;;AAG7C,MAAI,KAAK,2BAA2B;;CAGtC,qBAA2C;EACzC,MAAM,eAAsC;GAC1C,aAAa;GACb,oBAAoB;GACpB,wBAAwB;GACzB;EACD,MAAM,mBAA8C;GAClD,SAAS;GACT,MAAM;GACN,eAAe;GACf,kBAAkB;GAClB,0BAA0B;GAC1B,oBAAoB;GACpB,gBAAgB;GAChB,iBAAiB;GAClB;EACD,MAAM,SAAS,KAAK,OAAO;AAC3B,MAAI,CAAC,OACH,OAAM,IAAI,MAAM,8DAA8D;AAEhF,SAAO,IAAI,aACT,EACE,QAAQ,QACT,EACD,cACA,iBACD;;CAGH,mBAA4D;AAC1D,MAAI,CAAC,KAAK,OAAO,kBAAmB,QAAO,KAAA;AAE3C,SAAO,IAAI,oBAAoB,KAAK,OAAO,mBAAmB;GAC5D,aAAa;GACb,QAAQ;IACN,OAAO,QAAgB,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE,IAAI;IACpD,OAAO,QAAgB,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE,IAAI;IACpD,QAAQ,QAAgB,IAAI,MAAM,EAAE,MAAM,MAAM,EAAE,IAAI;IACvD;GACF,CAAC;;CAGJ,wBAAyD;AACvD,SAAO,IAAI,wBAAwB;GACjC,OAAO;GACP,cAAc;GACd,oBAAoB;GACpB,kBAAkB;GAClB,qBAAqB;GACrB,qBAAqB;GACtB,CAAC;;CAGJ,+BAA6C;AAC3C,OAAK,eAAe,IAAI,iBAAiB;GACvC,oBAAoB;GACpB,kBAAkB;GAClB,gBAAgB;GACjB,CAAC;AAEF,OAAK,uBAAuB,IAAI,qBAAqB;GACnD,iBAAiB;GACjB,0BAA0B;GAC1B,yBAAyB;GACzB,qBAAqB;GACtB,CAAC;AACF,OAAK,kBAAkB,IAAI,iBAAiB;AAE5C,OAAK,iBAAiB,IAAI,eAAe;GACvC,oBAAoB;GACpB,eAAe;GACf,WAAW;GACZ,CAAC;AAEF,OAAK,iBAAiB,IAAI,eAAe;GACvC,SAAS;GACT,qBAAqB;GACrB,qBAAqB;GACtB,CAAC;AAEF,OAAK,oBAAoB,IAAI,kBAAkB;GAC7C,SAAS;GACT,mBAAmB;GACnB,uBAAuB;GACvB,qBAAqB;GACrB,kBAAkB,OAAU;GAC7B,CAAC;AAEF,OAAK,mBAAmB,IAAI,iBAAiB;GAC3C,SAAS;GACT,qBAAqB;GACrB,kBAAkB;GAClB,aAAa;GACb,cAAc;GACd,WAAW;GACZ,CAAC;AAEF,OAAK,sBAAsB,IAAI,oBAAoB;GACjD,SAAS;GACT,mBAAmB;GACnB,YAAY;GACb,CAAC;AAGF,OAAK,oBAAoB,IAAI,mBAAmB;;CAGlD,8BAA4C;AAC1C,OAAK,iBAAiB,GAAG,gBAAgB,IAAI,2BAA2B;GACtE,aAAa;GACb,WAAW;GACX,mBAAmB;GACnB,iBAAiB;GAClB,CAAC,CAAC;AAEH,MAAI,MACF,EAAE,UAAU,KAAK,iBAAiB,uBAAuB,EAAE,EAC3D,iCACD;;CAGH,kBAAkB,gBAAsC;AACtD,OAAK,YAAY,kBAAkB,eAAe;;;;;CAMpD,6BAA6B,QAAsB;AACjD,OAAK,OAAO,SAAS;EACrB,MAAM,MAAM,wBAAwB,OAAO;AAC3C,OAAK,OAAO,QAAQ;AACpB,OAAK,aAAa,iBAAiB,OAAO;AAC1C,OAAK,aAAa,oBAAoB,OAAO;AAC7C,OAAK,eAAe,kBAAkB,OAAO;;CAG/C,kBAAuC;AACrC,SAAO,KAAK,aAAa,iBAAiB;;CAG5C,0BAAgD;AAC9C,SAAO,KAAK,aAAa,yBAAyB;;CAGpD,0BAA0B,SAAgD;AACxE,SAAO,KAAK,aAAa,0BAA0B,QAAQ;;CAG7D,uBAAuB,WAAuD;AAC5E,SAAO,KAAK,aAAa,uBAAuB,UAAU;;CAG5D,+BAAqC;AACnC,OAAK,aAAa,8BAA8B;;CAGlD,sCAA4C;AAC1C,OAAK,aAAa,qCAAqC;;CAGzD,mBAAmB,YAA4B;AAC7C,SAAO,KAAK,aAAa,mBAAmB,WAAW;;CAGzD,MAAM,sBAAsB,YAAoB,SAAmC;AAEjF,MAAI,CAAC,MADY,KAAK,aAAa,sBAAsB,YAAY,QAAQ,CACpE,QAAO;AAChB,QAAM,KAAK,mBAAmB,OAAO,YAAY,EAAE,eAAe,SAAS,CAAC;AAE5E,MADe,KAAK,aAAa,mBAAmB,YAAY,QACtD,CACR,MAAK,eAAe,aAAa,WAAW;AAE9C,SAAO;;;;;;CAOT,MAAM,gCAAgC,YAAmC;AACvE,QAAM,KAAK,cAAc,mBAAmB,WAAW;;CAGzD,gBAAgB,QAA4B;AAC1C,OAAK,cAAc,UAAU,OAAO;AACpC,OAAK,oBAAoB,gBAAgB,OAAO;;CAGlD,oBAA0B;AACxB,OAAK,cAAc,aAAa;AAChC,OAAK,oBAAoB,SAAS;;;CAIpC,0BAA0B,YAA4B;AACpD,SACE,KAAK,aAAa,qBAAqB,WAAW,IAClD,KAAK,aAAa,wBAAwB,WAAW,IACrD;;CAIJ,iBAAiB,YAA0B;AACzC,OAAK,aAAa,iBAAiB,WAAW;;CAGhD,eAAe,YAA0B;AACvC,OAAK,aAAa,eAAe,WAAW;;CAG9C,oBAAoB,YAA4B;AAC9C,SAAO,KAAK,aAAa,oBAAoB,WAAW;;CAG1D,MAAM,QAAuB;AAC3B,QAAM,KAAK,mBAAmB,YAAY;AAC1C,QAAM,KAAK,YAAY,QAAQ,iBAAiB;GAAE,MAAM;GAAG,MAAM;GAAO,CAAC;AACzE,MAAI,MAAM,wBAAwB;AAC7B,OAAK,YAAY,OAAO,CAAC,OAAO,QAAQ;GAC3C,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAI,MAAM;IAAE;IAAK,cAAc;IAAI,EAAE,wBAAwB,KAAK;IAClE;;CAGJ,OAAsB;AACpB,OAAK,YAAY,MAAM;AACvB,OAAK,aAAa,SAAS;AAC3B,OAAK,SAAS;AAEd,OAAK,YAAY,QAAQ,gBAAgB,EAAE,QAAQ,WAAW,CAAC;AAC/D,MAAI,MAAM,wBAAwB;AAClC,SAAO,QAAQ,SAAS;;CAG1B,MAAM,uBAAsC;AAC1C,SAAO,QAAQ,SAAS;;;;;;CAO1B,0BAAkC,YAAoB,MAAoB;AACxE,OAAK,2BAA2B,YAAY,EAAE,MAAM,CAAC;;;CAIvD,+BAA+B,YAAoB,UAAwB;AACzE,GAAM,YAAY;AAChB,OAAI;AACF,UAAM,gCACJ,KAAK,cACL,YACA,WACC,IAAI,SAAS,KAAK,0BAA0B,IAAI,KAAK,CACvD;YACM,KAAK;AACZ,QAAI,KAAK;KAAE;KAAK;KAAY,EAAE,mCAAmC;;MAEjE;;;;;CAMN,kCAA0C,YAA0B;AAClE,GAAM,YAAY;AAChB,OAAI;IACF,IAAI,WACF,wBAAwB,KAAK,OAAO,UAAW,EAAE,CAAY,IAAI,KAAK,OAAO;AAC/E,QAAI,CAAC,UAAU,MAAM,CACnB,KAAI;AACF,gBAAW,KAAK,aAAa,mBAAmB,WAAW;YACrD;AACN,gBAAW,KAAA;;AAGf,UAAM,+BACJ,KAAK,cACL,YACA,UAAU,MAAM,IAAI,KAAA,IACnB,IAAI,SAAS,KAAK,0BAA0B,IAAI,KAAK,CACvD;YACM,KAAK;AACZ,QAAI,KAAK;KAAE;KAAK;KAAY,EAAE,4BAA4B;;MAE1D;;CAGN,MAAc,uBAAuB,YAAkE;EACrG,MAAM,WAAW,MAAM,KAAK,aAAa,YAAY,WAAW,CAAC,YAAY,KAAK;AAGlF,SAAO;GAAE,SAFO,UAAU,SAAS,QAAQ,MAAM,IAAI,UAAU,eAAe,MAAM,IAAI;GAEtE,QADH,UAAU,SAAS,QAAQ,MAAM,IAAI,UAAU,cAAc,MAAM,IAAI;GAC5D;;CAG5B,mBACE,YACA,SACA,QACA,WAAW,IACK;EAChB,MAAM,UAA0B;GAC9B;GACA;GACA;GACA;GACA,SAAS;GACV;AAED,OAAK,kBAAkB,UAAU;GAC/B;GACA,QAAQ,QAAQ;GAChB;GACA;GACD,CAAC;AASF,OAAK,sBAAsB,MAAM,QAAQ;AACzC,OAAK,oBAAoB,WAAW,QAAQ;AAC5C,OAAK,aAAa,iBAAiB,WAAW;AAC9C,OAAK,0BAA0B,WAAW;AAE1C,SAAO;;;;;CAMT,MAAM,0BACJ,aACA,aACiC;AACjC,SAAO,0BAA0B,aAAa,EAC5C,YAAY,OAAO,QAAQ;GACzB,MAAM,SAAS,0BAA0B,IAAI;AAC7C,OAAI,CAAC,OAAQ,QAAO;GACpB,MAAM,eAAgB,KAQnB;AACH,OAAI,CAAC,aAAc,QAAO;GAC1B,MAAM,UAAU,MAAM,aAAa,kBAAkB,OAAO,QAAQ,OAAO,aAAa;AACxF,OAAI,CAAC,QAAS,QAAO;GACrB,MAAM,SAAS,MAAM,SAAS,QAAQ,SAAS;AAC/C,UAAO;IACL;IACA,MAAM,QAAQ;IACd,UAAU,QAAQ;IAClB,MAAM,QAAQ;IACd,MAAM,OAAO;IACd;KAEJ,CAAC;;CAGJ,0BAAwC;AAKtC,OAAK,oBAAoB,cAAc;AACvC,OAAK,kBAAkB,YAAY;;;;;;;;CASrC,MAAM,qBAAqB,KAA4B;AACrD,QAAM,KAAK,aAAa,aAAa,KAAK,EAAE,CAAC;AAC7C,OAAK,aAAa,YAAY,IAAI;;;;;;CAOpC,MAAM,aACJ,KACkE;EAClE,MAAM,EAAE,qBAAqB,MAAM,OAAO;EAC1C,MAAM,EAAE,yCAAyC,MAAM,OAAO;AAC9D,QAAM,iBAAiB,IAAI;EAC3B,MAAM,UAAU,MAAM,KAAK,aAAa,MAAM,IAAI;AAClD,MAAI,CAAC,QACH,QAAO;AAET,OAAK,aAAa,YAAY,IAAI;AAClC,QAAM,qCAAqC;GAAE,YAAY;GAAK,QAAQ;GAAiB,CAAC;AACxF,SAAO;;;;;CAMT,kBAAkB,YAA0B;AAC1C,OAAK,aAAa,YAAY,WAAW;;;;;;;CAQ3C,MAAM,oCAAoC,YAAqC;AAC7E,QAAM,KAAK,gBAAgB,UAAU,WAAW;EAChD,MAAM,MAAM,KAAK,OAAO;AAExB,SAAO,iCAAiC,KAAK,YAAY,MADxC,KAAK,mBAAmB,IAAI,WAAW,EACK,qBAAqB,WAAW,CAAC;;;;;;CAOhG,8BAA8B,YAAwC;AAEpE,MAAI;AAEF,OAAI,CADQ,KAAK,oBACT,CAAE,QAAO,KAAA;GACjB,MAAM,WAAW,wBAAwB;AACzC,OAAI,CAAC,WAAW,SAAS,CAAE,QAAO,KAAA;AAIlC,UAHY,aAAa,UAAU,QAClB,CAAC,MAAM,oBACR,GAAG,IAAI,MAAM,IAChB,KAAA;UACP;AACN;;;;;;CAOJ,0BAAkC,YAA0B;AAC1D,MAAI,KAAK,aAAa,4BAA4B,WAAW,CAC3D;EAGF,MAAM,cAAc,KAAK,aAAa,mBAAmB,aAAa,UAAU;AAC9E,QAAK,mBAAmB,YAAY,MAAM;IAC1C;AAEF,MAAI,YACF,MAAK,aAAa,4BAA4B,YAAY,YAAY;;;;;CAO1E,mBAA2B,YAAoB,OAAyB;EACtE,MAAM,iBAAiB,KAAK,sBAAsB,YAAY;AAC9D,MAAI,CAAC,eAEH;AAGF,MAAI,eAAe,eAAe,YAAY;AAE5C,QAAK,kBAAkB,OAAO,OAAO,eAAe;AACpD;;AAIF,MAAI,MAAM,SAAS,kBAAkB;GACnC,MAAM,WAAW;AACjB,OAAI,SAAS,SAAS,SAAS,aAAa;IAC1C,MAAM,UAAU,SAAS,QAAQ;IACjC,MAAM,OAAO,MAAM,QAAQ,QAAQ,GAC/B,mBAAmB,QAAkD,GACrE,OAAO,QAAQ;AAEnB,SAAK,cAAc,OAAO,KAAK;;;AAInC,OAAK,kBAAkB,OAAO,OAAO,eAAe;;CAGtD,MAAc,gBAAgB,YAAoB,UAAyC;EACzF,MAAM,gBAAgB,KAAK,2BAA2B,WAAW;EACjE,MAAM,OAAO,KAAK,aAAa,kBAAkB,YAAY,UAAU,cAAc;AACrF,MAAI,CAAC,KAAK,gBAAiB;AAE3B,MAAI,KAAK;GAAE;GAAY,QAAQ,KAAK,OAAO;GAAQ,cAAc,KAAK,OAAO;GAAc,EAAE,2BAA2B;EAExH,MAAM,SAAS,MAAM,KAAK,aAAa,QAAQ,YAAY,UAAU,eAAe,KAAA,GAAW,MAAM;AACrG,QAAM,KAAK,YAAY,QAAQ,oBAAoB;GACjD,cAAc,SAAS;GACvB,YAAY,OAAO;GACnB,gBAAgB,SAAS,SAAS,OAAO;GAC1C,CAAC;AACF,MAAI,KAAK;GAAE;GAAY,cAAc,OAAO;GAAc,aAAa,OAAO;GAAa,EAAE,oBAAoB;;CAGnH,2BAAmC,YAA4B;AAC7D,MAAI;AACF,UAAO,KAAK,aAAa,2BAA2B,WAAW,CAAC,iBAAiB;WAC1E,KAAK;AACZ,OAAI,KAAK;IAAE;IAAK;IAAY,EAAE,0DAA0D;AACxF,UAAO;;;CAIX,UAAwB;AACtB,OAAK,eAAe,SAAS;AAC7B,OAAK,aAAa,YAAY;AAC9B,OAAK,aAAa,SAAS;AAC3B,OAAK,8BAA8B,SAAS;AAC5C,OAAK,+BAA+B"}