agent-bober 0.17.1 → 0.19.0

package/dist/orchestrator/selfimprove/replay-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-types.d.ts","sourceRoot":"","sources":["../../../src/orchestrator/selfimprove/replay-types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;EAO3B,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAI/D,MAAM,WAAW,gBAAiB,SAAQ,eAAe;IACvD,MAAM,EAAE,MAAM,CAAC;CAChB"}

package/dist/orchestrator/selfimprove/replay-types.js

@@ -0,0 +1,15 @@
+import { z } from "zod";
+// ── Schema ────────────────────────────────────────────────────────────
+/**
+ * Zod schema for a replay case input — mirrors FactSchema in src/state/facts.ts.
+ * All timestamps are ISO 8601 strings; the store never reads the clock.
+ */
+export const ReplayCaseSchema = z.object({
+    contractId: z.string().min(1),
+    iteration: z.number().int(),
+    baselineVerdict: z.enum(["pass", "fail"]),
+    diffDigest: z.string().min(1),
+    evalDetailsJson: z.string(),
+    tCaptured: z.string().datetime(),
+});
+//# sourceMappingURL=replay-types.js.map

package/dist/orchestrator/selfimprove/replay-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-types.js","sourceRoot":"","sources":["../../../src/orchestrator/selfimprove/replay-types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,yEAAyE;AAEzE;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC3B,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC"}

package/dist/orchestrator/session-store.d.ts

@@ -0,0 +1,95 @@
+import { z } from "zod";
+import type { Message } from "../providers/types.js";
+/**
+ * Mirrors the `Message` union (providers/types.ts:135-139). Variant order
+ * matters — see the ordering note above. Keep this schema in sync if the
+ * `Message` union ever changes shape.
+ */
+export declare const MessageSchema: z.ZodType<Message>;
+export declare const SessionRecordSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    model: z.ZodString;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    turnsUsed: z.ZodNumber;
+    messages: z.ZodArray<z.ZodType<Message, z.ZodTypeDef, Message>, "many">;
+}, "strip", z.ZodTypeAny, {
+    createdAt: string;
+    model: string;
+    updatedAt: string;
+    messages: Message[];
+    turnsUsed: number;
+    sessionId: string;
+}, {
+    createdAt: string;
+    model: string;
+    updatedAt: string;
+    messages: Message[];
+    turnsUsed: number;
+    sessionId: string;
+}>;
+export type SessionRecord = z.infer<typeof SessionRecordSchema>;
+/**
+ * Input to `SessionStore.save` — `createdAt`/`updatedAt` are stamped
+ * internally from the store's injected clock, so callers never read the
+ * clock themselves (no argless `new Date()` in core).
+ */
+export type SessionSaveInput = Omit<SessionRecord, "createdAt" | "updatedAt">;
+/**
+ * Derive a deterministic fork id from a source `sessionId` + an injected
+ * timestamp. Mirrors `job-store.ts`'s `jobId()` content-hash pattern — no
+ * argless `randomUUID()`/`Date.now()`. Used by `forkSession()`
+ * (agentic-loop.ts) when the caller omits an explicit `newId`.
+ */
+export declare function sessionForkId(sessionId: string, now: string): string;
+export interface SessionStoreOptions {
+    /** Absolute project root; sessions are written under `<projectRoot>/.bober/sessions/`. */
+    projectRoot: string;
+    /** Clock injection. Defaults to `() => new Date().toISOString()`. No argless `new Date()` in core. */
+    now?: () => string;
+}
+/**
+ * Persists agentic-loop transcripts to `.bober/sessions/<sessionId>.json`.
+ * Mirrors `src/research/job-store.ts`: validates with Zod before every
+ * write; reads return `null` on both missing AND malformed JSON (never
+ * throws) — this is what lets `resumeSession` fail soft (sc-6-5).
+ */
+export declare class SessionStore {
+    private readonly projectRoot;
+    private readonly clock;
+    constructor(opts: SessionStoreOptions);
+    /** Current time from the injected clock — exposed for deterministic fork-id derivation. */
+    now(): string;
+    /** Absolute path to the session file for `sessionId`. */
+    path(sessionId: string): string;
+    /**
+     * Persist a session record. Validates with `SessionRecordSchema` before
+     * writing so an invalid record never reaches disk (mirrors job-store.ts).
+     * `createdAt` is preserved from the existing file on disk when one exists
+     * (first save for a given `sessionId` stamps it fresh); `updatedAt` is
+     * always stamped fresh from the injected clock.
+     *
+     * bober: re-reads the existing file on every save to preserve `createdAt`
+     * — an O(1) extra read per turn, fine at this scale. If this ever needs to
+     * avoid the extra read, cache `createdAt` in-memory in the caller (the
+     * loop already holds a `session` handle across turns) and pass it through
+     * explicitly instead.
+     */
+    save(record: SessionSaveInput): Promise<void>;
+    /**
+     * Load a session record by id. Returns `null` if not found or malformed —
+     * NEVER throws. This null-on-corrupt result is what `resumeSession` maps
+     * to its typed `{ error }` result (sc-6-5); a corrupt file is never
+     * silently overwritten with an empty session.
+     */
+    load(sessionId: string): Promise<SessionRecord | null>;
+    /**
+     * Copy the transcript at `sessionId` into a new session file under
+     * `newId`. Writes ONLY the new file — the source is only ever read, never
+     * rewritten, so continuing the fork leaves the original byte-identical
+     * (sc-6-3). Throws if the source session does not exist or is corrupt
+     * (nothing to fork).
+     */
+    fork(sessionId: string, newId: string): Promise<string>;
+}
+//# sourceMappingURL=session-store.d.ts.map

package/dist/orchestrator/session-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.d.ts","sourceRoot":"","sources":["../../src/orchestrator/session-store.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AA+CrD;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAK3C,CAAC;AAIH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;EAO9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,GAAG,WAAW,CAAC,CAAC;AAgB9E;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAKpE;AAID,MAAM,WAAW,mBAAmB;IAClC,0FAA0F;IAC1F,WAAW,EAAE,MAAM,CAAC;IACpB,sGAAsG;IACtG,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;gBAEzB,IAAI,EAAE,mBAAmB;IAKrC,2FAA2F;IAC3F,GAAG,IAAI,MAAM;IAIb,yDAAyD;IACzD,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAI/B;;;;;;;;;;;;OAYG;IACG,IAAI,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BnD;;;;;OAKG;IACG,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAY5D;;;;;;OAMG;IACG,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAiB9D"}

package/dist/orchestrator/session-store.js

@@ -0,0 +1,186 @@
+// ── session-store.ts ────────────────────────────────────────────────────
+//
+// Persists the own agentic loop's provider-agnostic transcript (`Message[]`)
+// to `.bober/sessions/<sessionId>.json`, opt-in via `AgenticLoopParams.session`
+// (agent-loop-capability-port sprint 6). Mirrors `src/research/job-store.ts`:
+// `ensureDir`, Zod `safeParse`-before-write, `JSON.parse`+`safeParse`-on-read
+// returning `null` on missing OR malformed (never throws), async fs only.
+//
+// NOT the same layer as `src/chat/conversation-store.ts` (`.bober/chat/`,
+// chat `/resume`) or do-bridge's `sessionId` (a spawned-run id,
+// `do-<findingId>`) — this store is model-context transcript resume/fork for
+// the own loop. Keep the names distinct (see this sprint's contract nonGoals).
+import { readFile, writeFile } from "node:fs/promises";
+import { createHash } from "node:crypto";
+import { join } from "node:path";
+import { z } from "zod";
+import { ensureDir } from "../state/helpers.js";
+// ── Zod mirror of the Message union (providers/types.ts:135-139) ──────
+//
+// There is no existing Zod schema for `Message` in the codebase — authored
+// here. IMPORTANT: `z.union` tries variants in order and returns the FIRST
+// match. `AssistantMessage {role:"assistant",content,toolCalls}` and
+// `TextMessage {role:"assistant",content}` overlap on `{role,content}` (zod
+// objects are non-strict by default, so an extra key like `toolCalls` is
+// simply allowed/stripped by the less-specific schema). `AssistantMessageSchema`
+// MUST come before `TextMessageSchema` in the union below, or an assistant
+// message WITH `toolCalls` silently loses them on round-trip.
+const ToolCallSchema = z.object({
+    id: z.string(),
+    name: z.string(),
+    input: z.record(z.string(), z.unknown()),
+});
+const ToolResultSchema = z.object({
+    toolUseId: z.string(),
+    content: z.string(),
+    isError: z.boolean().optional(),
+});
+const AssistantMessageSchema = z.object({
+    role: z.literal("assistant"),
+    content: z.string(),
+    toolCalls: z.array(ToolCallSchema),
+});
+const ToolResultMessageSchema = z.object({
+    role: z.literal("user"),
+    toolResults: z.array(ToolResultSchema),
+});
+const SystemUpdateMessageSchema = z.object({
+    role: z.literal("user"),
+    systemUpdate: z.string(),
+    cacheTtl: z.enum(["5m", "1h"]).optional(),
+});
+const TextMessageSchema = z.object({
+    role: z.enum(["user", "assistant"]),
+    content: z.string(),
+});
+/**
+ * Mirrors the `Message` union (providers/types.ts:135-139). Variant order
+ * matters — see the ordering note above. Keep this schema in sync if the
+ * `Message` union ever changes shape.
+ */
+export const MessageSchema = z.union([
+    AssistantMessageSchema,
+    ToolResultMessageSchema,
+    SystemUpdateMessageSchema,
+    TextMessageSchema,
+]);
+// ── SessionRecord ───────────────────────────────────────────────────────
+export const SessionRecordSchema = z.object({
+    sessionId: z.string().min(1),
+    model: z.string(),
+    createdAt: z.string().datetime(),
+    updatedAt: z.string().datetime(),
+    turnsUsed: z.number().int().nonnegative(),
+    messages: z.array(MessageSchema),
+});
+// ── Path helpers ──────────────────────────────────────────────────────
+const SESSIONS_DIR = ".bober/sessions";
+function sessionsDir(projectRoot) {
+    return join(projectRoot, SESSIONS_DIR);
+}
+function sanitizeId(id) {
+    return id.replace(/[^a-zA-Z0-9_-]/g, "_");
+}
+// ── Deterministic fork id ───────────────────────────────────────────────
+/**
+ * Derive a deterministic fork id from a source `sessionId` + an injected
+ * timestamp. Mirrors `job-store.ts`'s `jobId()` content-hash pattern — no
+ * argless `randomUUID()`/`Date.now()`. Used by `forkSession()`
+ * (agentic-loop.ts) when the caller omits an explicit `newId`.
+ */
+export function sessionForkId(sessionId, now) {
+    return createHash("sha256")
+        .update(`${sessionId}|fork|${now}`)
+        .digest("hex")
+        .slice(0, 16);
+}
+/**
+ * Persists agentic-loop transcripts to `.bober/sessions/<sessionId>.json`.
+ * Mirrors `src/research/job-store.ts`: validates with Zod before every
+ * write; reads return `null` on both missing AND malformed JSON (never
+ * throws) — this is what lets `resumeSession` fail soft (sc-6-5).
+ */
+export class SessionStore {
+    projectRoot;
+    clock;
+    constructor(opts) {
+        this.projectRoot = opts.projectRoot;
+        this.clock = opts.now ?? (() => new Date().toISOString());
+    }
+    /** Current time from the injected clock — exposed for deterministic fork-id derivation. */
+    now() {
+        return this.clock();
+    }
+    /** Absolute path to the session file for `sessionId`. */
+    path(sessionId) {
+        return join(sessionsDir(this.projectRoot), `${sanitizeId(sessionId)}.json`);
+    }
+    /**
+     * Persist a session record. Validates with `SessionRecordSchema` before
+     * writing so an invalid record never reaches disk (mirrors job-store.ts).
+     * `createdAt` is preserved from the existing file on disk when one exists
+     * (first save for a given `sessionId` stamps it fresh); `updatedAt` is
+     * always stamped fresh from the injected clock.
+     *
+     * bober: re-reads the existing file on every save to preserve `createdAt`
+     * — an O(1) extra read per turn, fine at this scale. If this ever needs to
+     * avoid the extra read, cache `createdAt` in-memory in the caller (the
+     * loop already holds a `session` handle across turns) and pass it through
+     * explicitly instead.
+     */
+    async save(record) {
+        await ensureDir(sessionsDir(this.projectRoot));
+        const existing = await this.load(record.sessionId);
+        const now = this.clock();
+        const full = {
+            ...record,
+            createdAt: existing?.createdAt ?? now,
+            updatedAt: now,
+        };
+        const validation = SessionRecordSchema.safeParse(full);
+        if (!validation.success) {
+            const issues = validation.error.issues
+                .map((i) => `  - ${i.path.join(".")}: ${i.message}`)
+                .join("\n");
+            throw new Error(`Invalid session record:\n${issues}`);
+        }
+        await writeFile(this.path(record.sessionId), JSON.stringify(validation.data, null, 2) + "\n", "utf-8");
+    }
+    /**
+     * Load a session record by id. Returns `null` if not found or malformed —
+     * NEVER throws. This null-on-corrupt result is what `resumeSession` maps
+     * to its typed `{ error }` result (sc-6-5); a corrupt file is never
+     * silently overwritten with an empty session.
+     */
+    async load(sessionId) {
+        try {
+            const raw = JSON.parse(await readFile(this.path(sessionId), "utf-8"));
+            const result = SessionRecordSchema.safeParse(raw);
+            return result.success ? result.data : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Copy the transcript at `sessionId` into a new session file under
+     * `newId`. Writes ONLY the new file — the source is only ever read, never
+     * rewritten, so continuing the fork leaves the original byte-identical
+     * (sc-6-3). Throws if the source session does not exist or is corrupt
+     * (nothing to fork).
+     */
+    async fork(sessionId, newId) {
+        const source = await this.load(sessionId);
+        if (!source) {
+            throw new Error(`Cannot fork session '${sessionId}': not found or corrupt.`);
+        }
+        await this.save({
+            sessionId: newId,
+            model: source.model,
+            turnsUsed: source.turnsUsed,
+            messages: source.messages,
+        });
+        return newId;
+    }
+}
+//# sourceMappingURL=session-store.js.map

package/dist/orchestrator/session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.js","sourceRoot":"","sources":["../../src/orchestrator/session-store.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,EAAE;AACF,6EAA6E;AAC7E,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,0EAA0E;AAC1E,EAAE;AACF,0EAA0E;AAC1E,gEAAgE;AAChE,6EAA6E;AAC7E,+EAA+E;AAE/E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,yEAAyE;AACzE,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,qEAAqE;AACrE,4EAA4E;AAC5E,yEAAyE;AACzE,iFAAiF;AACjF,2EAA2E;AAC3E,8DAA8D;AAE9D,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CACzC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;CACnC,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAuB,CAAC,CAAC,KAAK,CAAC;IACvD,sBAAsB;IACtB,uBAAuB;IACvB,yBAAyB;IACzB,iBAAiB;CAClB,CAAC,CAAC;AAEH,2EAA2E;AAE3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;CACjC,CAAC,CAAC;AAWH,yEAAyE;AAEzE,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAEvC,SAAS,WAAW,CAAC,WAAmB;IACtC,OAAO,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED,2EAA2E;AAE3E;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,GAAW;IAC1D,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,GAAG,SAAS,SAAS,GAAG,EAAE,CAAC;SAClC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAWD;;;;;GAKG;AACH,MAAM,OAAO,YAAY;IACN,WAAW,CAAS;IACpB,KAAK,CAAe;IAErC,YAAY,IAAyB;QACnC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,2FAA2F;IAC3F,GAAG;QACD,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED,yDAAyD;IACzD,IAAI,CAAC,SAAiB;QACpB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9E,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,IAAI,CAAC,MAAwB;QACjC,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAE/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAkB;YAC1B,GAAG,MAAM;YACT,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,GAAG;YACrC,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM;iBACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBACnD,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,SAAS,CACb,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAC3B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAC/C,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAC7B,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAC9C,CAAC;YACF,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAClD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CAAC,SAAiB,EAAE,KAAa;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,wBAAwB,SAAS,0BAA0B,CAC5D,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,IAAI,CAAC;YACd,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/orchestrator/stack-knowledge.d.ts

@@ -0,0 +1,17 @@
+import type { VulnClass } from "./security-audit-types.js";
+/**
+ * Every VulnClass value (security-audit-types.ts:9-25, widened sprint-1 of
+ * spec-20260714-security-auditor-per-stack-skills). The taxonomy does not
+ * vary by stack — it is the fixed classification backbone every audit is
+ * organised against. Must stay in lockstep with the VulnClass union — see
+ * security-audit-types.test.ts's lockstep assertion.
+ *
+ * The stack -> skill resolver that used to live in this file (detectStack,
+ * extractSecurityExcerpt, readSkillSecurityExcerpt, resolveStackSecurityContext,
+ * STACK_SKILL_MAP) has moved to src/orchestrator/security-knowledge/ (registry.ts,
+ * index.ts, selector.ts, resolver.ts) — a retrieval pipeline over the 8 authored
+ * skill files, replacing the old head-excerpt approach (G3). This constant is
+ * kept here because several unrelated modules import it from this path.
+ */
+export declare const ALL_VULN_CLASSES: VulnClass[];
+//# sourceMappingURL=stack-knowledge.d.ts.map

package/dist/orchestrator/stack-knowledge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-knowledge.d.ts","sourceRoot":"","sources":["../../src/orchestrator/stack-knowledge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAI3D;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,EAkBvC,CAAC"}

package/dist/orchestrator/stack-knowledge.js

@@ -0,0 +1,35 @@
+// ── Taxonomy ───────────────────────────────────────────────────────
+/**
+ * Every VulnClass value (security-audit-types.ts:9-25, widened sprint-1 of
+ * spec-20260714-security-auditor-per-stack-skills). The taxonomy does not
+ * vary by stack — it is the fixed classification backbone every audit is
+ * organised against. Must stay in lockstep with the VulnClass union — see
+ * security-audit-types.test.ts's lockstep assertion.
+ *
+ * The stack -> skill resolver that used to live in this file (detectStack,
+ * extractSecurityExcerpt, readSkillSecurityExcerpt, resolveStackSecurityContext,
+ * STACK_SKILL_MAP) has moved to src/orchestrator/security-knowledge/ (registry.ts,
+ * index.ts, selector.ts, resolver.ts) — a retrieval pipeline over the 8 authored
+ * skill files, replacing the old head-excerpt approach (G3). This constant is
+ * kept here because several unrelated modules import it from this path.
+ */
+export const ALL_VULN_CLASSES = [
+    "injection",
+    "authn-authz",
+    "secret-handling",
+    "input-validation",
+    "path-traversal",
+    "privilege-escalation",
+    "race-condition",
+    "money-integrity",
+    "ssrf",
+    "xss",
+    "insecure-randomness",
+    "crypto-weakness",
+    "deserialization",
+    "supply-chain",
+    "idor-bola",
+    "denial-of-service",
+    "audit-logging",
+];
+//# sourceMappingURL=stack-knowledge.js.map

package/dist/orchestrator/stack-knowledge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-knowledge.js","sourceRoot":"","sources":["../../src/orchestrator/stack-knowledge.ts"],"names":[],"mappings":"AAEA,sEAAsE;AAEtE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAgB;IAC3C,WAAW;IACX,aAAa;IACb,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB;IAChB,sBAAsB;IACtB,gBAAgB;IAChB,iBAAiB;IACjB,MAAM;IACN,KAAK;IACL,qBAAqB;IACrB,iBAAiB;IACjB,iBAAiB;IACjB,cAAc;IACd,WAAW;IACX,mBAAmB;IACnB,eAAe;CAChB,CAAC"}

package/dist/orchestrator/subagents.d.ts

@@ -0,0 +1,62 @@
+/**
+ * In-process scoped subagents (agent-loop-capability-port sprint 10).
+ *
+ * Builds the `spawn_subagent` ToolDef + handler for `AgenticLoopParams.subagents`.
+ * The handler resolves a configured `SubagentDef` by name and runs it as a
+ * NESTED `runAgenticLoop` call with a fresh message history, a scoped tool
+ * subset, optional per-agent model/effort/maxTurns overrides, and the SAME
+ * parent `Budget` instance — combined spend stays visible and a child can
+ * never out-spend a parent ceiling. Only the child's `finalText` returns to
+ * the parent (as this tool's result); the parent's own context grows by that
+ * summary alone.
+ *
+ * One-level hard cap (nonGoal #1): the child ALWAYS gets `subagents: undefined`
+ * — recursive subagent nesting is not supported.
+ *
+ * Import-cycle note: this module imports the loop's TYPES only
+ * (`AgenticLoopParams`/`AgenticLoopResult`), never the `runAgenticLoop`
+ * VALUE. The loop passes its own (hoisted) function reference in via
+ * `BuildSubagentOpts.runLoop`, keeping runtime dependencies one-directional
+ * (agentic-loop.ts -> subagents.ts, never the reverse).
+ */
+import type { LLMClient, ToolDef } from "../providers/types.js";
+import type { ToolHandler } from "./tools/index.js";
+import type { AgenticLoopParams, AgenticLoopResult } from "./agentic-loop.js";
+/** A programmatically-declared subagent a parent loop can delegate a bounded subtask to. */
+export interface SubagentDef {
+    name: string;
+    description: string;
+    systemPrompt: string;
+    /** Subset of the PARENT's tool NAMES this subagent may use. */
+    tools: string[];
+    /** Model shorthand override (e.g. "sonnet", "haiku"). Absent => inherit the parent's client/model. */
+    model?: string;
+    effort?: AgenticLoopParams["effort"];
+    /** Max nested-loop turns. Defaults to 10 when omitted. */
+    maxTurns?: number;
+}
+export interface BuildSubagentOpts {
+    /**
+     * REQUIRED to break the subagents.ts <-> agentic-loop.ts import cycle — the
+     * loop passes its own `runAgenticLoop` function reference; tests pass a fake.
+     */
+    runLoop: (params: AgenticLoopParams) => Promise<AgenticLoopResult>;
+    /**
+     * Injected for tests so `def.model` needs no real provider/API key.
+     * Defaults to the real `createClient` factory (provider inferred from the
+     * model shorthand — mirrors how role entry points build their own clients).
+     */
+    clientFactory?: (model: string) => LLMClient;
+}
+/**
+ * Build the `spawn_subagent` ToolDef + handler for a parent loop's
+ * `AgenticLoopParams.subagents`. `runAgenticLoop` registers the returned tool
+ * BEFORE its own loop starts (when `params.subagents?.length`); the handler
+ * resolves the requested subagent by name and runs it as a fresh, scoped,
+ * budget-shared nested loop.
+ */
+export declare function buildSubagentTool(defs: SubagentDef[], parentParams: AgenticLoopParams, opts: BuildSubagentOpts): {
+    tool: ToolDef;
+    handler: ToolHandler;
+};
+//# sourceMappingURL=subagents.d.ts.map

package/dist/orchestrator/subagents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagents.d.ts","sourceRoot":"","sources":["../../src/orchestrator/subagents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAM9E,4FAA4F;AAC5F,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,sGAAsG;IACtG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACrC,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,OAAO,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACnE;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS,CAAC;CAC9C;AAuCD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,WAAW,EAAE,EACnB,YAAY,EAAE,iBAAiB,EAC/B,IAAI,EAAE,iBAAiB,GACtB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,WAAW,CAAA;CAAE,CA4FzC"}

package/dist/orchestrator/subagents.js

@@ -0,0 +1,143 @@
+/**
+ * In-process scoped subagents (agent-loop-capability-port sprint 10).
+ *
+ * Builds the `spawn_subagent` ToolDef + handler for `AgenticLoopParams.subagents`.
+ * The handler resolves a configured `SubagentDef` by name and runs it as a
+ * NESTED `runAgenticLoop` call with a fresh message history, a scoped tool
+ * subset, optional per-agent model/effort/maxTurns overrides, and the SAME
+ * parent `Budget` instance — combined spend stays visible and a child can
+ * never out-spend a parent ceiling. Only the child's `finalText` returns to
+ * the parent (as this tool's result); the parent's own context grows by that
+ * summary alone.
+ *
+ * One-level hard cap (nonGoal #1): the child ALWAYS gets `subagents: undefined`
+ * — recursive subagent nesting is not supported.
+ *
+ * Import-cycle note: this module imports the loop's TYPES only
+ * (`AgenticLoopParams`/`AgenticLoopResult`), never the `runAgenticLoop`
+ * VALUE. The loop passes its own (hoisted) function reference in via
+ * `BuildSubagentOpts.runLoop`, keeping runtime dependencies one-directional
+ * (agentic-loop.ts -> subagents.ts, never the reverse).
+ */
+import { resolveModel } from "./model-resolver.js";
+import { createClient } from "../providers/factory.js";
+const DEFAULT_MAX_TURNS = 10;
+function defaultClientFactory(model) {
+    return createClient(undefined, undefined, undefined, model);
+}
+// ── Result -> tool-result mapping ────────────────────────────────────
+/**
+ * Map a completed child run to the parent's tool-result shape. A child
+ * refusal/budget/error/abort surfaces as an `isError` result naming the
+ * stopReason — never a throw (sc-10-3); the parent loop continues and decides.
+ */
+function toToolResult(name, result) {
+    if (result.refused === true || result.stopReason === "refusal") {
+        return { output: `Subagent '${name}' refused: ${result.finalText}`, isError: true };
+    }
+    if (result.stopReason === "budget_exceeded") {
+        return {
+            output: `Subagent '${name}' stopped: budget_exceeded. ${result.finalText}`,
+            isError: true,
+        };
+    }
+    if (result.stopReason === "error" || result.stopReason === "aborted") {
+        return {
+            output: `Subagent '${name}' ${result.stopReason}: ${result.finalText}`,
+            isError: true,
+        };
+    }
+    return { output: result.finalText, isError: false };
+}
+// ── Builder ────────────────────────────────────────────────────────
+/**
+ * Build the `spawn_subagent` ToolDef + handler for a parent loop's
+ * `AgenticLoopParams.subagents`. `runAgenticLoop` registers the returned tool
+ * BEFORE its own loop starts (when `params.subagents?.length`); the handler
+ * resolves the requested subagent by name and runs it as a fresh, scoped,
+ * budget-shared nested loop.
+ */
+export function buildSubagentTool(defs, parentParams, opts) {
+    const byName = new Map(defs.map((d) => [d.name, d]));
+    const validNames = defs.map((d) => d.name).join(", ");
+    const clientFactory = opts.clientFactory ?? defaultClientFactory;
+    const tool = {
+        name: "spawn_subagent",
+        // NOT readOnly — a subagent may itself use write-capable tools; unknown
+        // side effects stay serial (ADR-2, mirrors nonGoal #3 for mcp__ tools).
+        description: "Delegate a bounded subtask to a fresh-context subagent. Pass the " +
+            "configured subagent `name` and the `task` text. The subagent runs " +
+            "with only its own scoped tools and returns a summary as this tool's " +
+            `result. Valid names: ${validNames}.`,
+        input_schema: {
+            type: "object",
+            properties: {
+                name: {
+                    type: "string",
+                    description: `Configured subagent to run. Valid names: ${validNames}.`,
+                },
+                task: {
+                    type: "string",
+                    description: "The task/instruction passed as the subagent's user message.",
+                },
+            },
+            required: ["name", "task"],
+        },
+    };
+    const handler = async (input) => {
+        const name = typeof input["name"] === "string" ? input["name"] : "";
+        const task = typeof input["task"] === "string" ? input["task"] : "";
+        const def = byName.get(name);
+        if (!def) {
+            return {
+                output: `Unknown subagent '${name}'. Valid names: ${validNames}.`,
+                isError: true,
+            };
+        }
+        // Scoped subset — child sees ONLY these tools/handlers (sc-10-1).
+        const scopedToolNames = new Set(def.tools);
+        const childTools = parentParams.tools.filter((t) => scopedToolNames.has(t.name));
+        const childHandlers = new Map([...parentParams.toolHandlers].filter(([n]) => scopedToolNames.has(n)));
+        const childClient = def.model ? clientFactory(def.model) : parentParams.client;
+        const childModel = def.model ? resolveModel(def.model) : parentParams.model;
+        const childParams = {
+            client: childClient,
+            model: childModel,
+            systemPrompt: def.systemPrompt,
+            userMessage: task,
+            tools: childTools,
+            toolHandlers: childHandlers,
+            maxTurns: def.maxTurns ?? DEFAULT_MAX_TURNS,
+            ...(def.effort !== undefined ? { effort: def.effort } : {}),
+            // SAME Budget instance — combined spend visible; a child cannot
+            // out-spend a parent ceiling (sc-10-2).
+            ...(parentParams.budget !== undefined ? { budget: parentParams.budget } : {}),
+            ...(parentParams.parallelReadOnlyTools !== undefined
+                ? { parallelReadOnlyTools: parentParams.parallelReadOnlyTools }
+                : {}),
+            ...(parentParams.abortSignal !== undefined ? { abortSignal: parentParams.abortSignal } : {}),
+            ...(parentParams.maxTokens !== undefined ? { maxTokens: parentParams.maxTokens } : {}),
+            // One-level hard cap (nonGoal #1) — the child NEVER gets its own subagents.
+            subagents: undefined,
+            // Deliberately EXCLUDED: session, compaction, onEvent, hooks, onTextDelta,
+            // initialMessages, onToolUse/onTurnComplete/completionCheck/maxNudges/
+            // nudgeMessage. The child is a fresh, opaque, ephemeral run — passing any
+            // of these would corrupt the parent's session file, event stream, or
+            // streamed text (see the sprint 10 briefing §4b for the per-field
+            // rationale).
+        };
+        try {
+            const result = await opts.runLoop(childParams);
+            return toToolResult(def.name, result);
+        }
+        catch (err) {
+            // Handlers must never throw (sc-10-3). runAgenticLoop itself never
+            // throws, but this guards defensively against a misbehaving injected
+            // `runLoop` (e.g. a test double).
+            const message = err instanceof Error ? err.message : String(err);
+            return { output: `Subagent '${def.name}' error: ${message}`, isError: true };
+        }
+    };
+    return { tool, handler };
+}
+//# sourceMappingURL=subagents.js.map

package/dist/orchestrator/subagents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagents.js","sourceRoot":"","sources":["../../src/orchestrator/subagents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAgCvD,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,YAAY,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,wEAAwE;AAExE;;;;GAIG;AACH,SAAS,YAAY,CACnB,IAAY,EACZ,MAAyB;IAEzB,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC/D,OAAO,EAAE,MAAM,EAAE,aAAa,IAAI,cAAc,MAAM,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;QAC5C,OAAO;YACL,MAAM,EAAE,aAAa,IAAI,+BAA+B,MAAM,CAAC,SAAS,EAAE;YAC1E,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrE,OAAO;YACL,MAAM,EAAE,aAAa,IAAI,KAAK,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,SAAS,EAAE;YACtE,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACtD,CAAC;AAED,sEAAsE;AAEtE;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAmB,EACnB,YAA+B,EAC/B,IAAuB;IAEvB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,oBAAoB,CAAC;IAEjE,MAAM,IAAI,GAAY;QACpB,IAAI,EAAE,gBAAgB;QACtB,wEAAwE;QACxE,wEAAwE;QACxE,WAAW,EACT,mEAAmE;YACnE,oEAAoE;YACpE,sEAAsE;YACtE,wBAAwB,UAAU,GAAG;QACvC,YAAY,EAAE;YACZ,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,4CAA4C,UAAU,GAAG;iBACvE;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,6DAA6D;iBAC3E;aACF;YACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;SAC3B;KACF,CAAC;IAEF,MAAM,OAAO,GAAgB,KAAK,EAAE,KAA8B,EAAE,EAAE;QACpE,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEpE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO;gBACL,MAAM,EAAE,qBAAqB,IAAI,mBAAmB,UAAU,GAAG;gBACjE,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,kEAAkE;QAClE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACjF,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,CAAC,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CACvE,CAAC;QAEF,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;QAC/E,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;QAE5E,MAAM,WAAW,GAAsB;YACrC,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,UAAU;YACjB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,UAAU;YACjB,YAAY,EAAE,aAAa;YAC3B,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,iBAAiB;YAC3C,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,gEAAgE;YAChE,wCAAwC;YACxC,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,YAAY,CAAC,qBAAqB,KAAK,SAAS;gBAClD,CAAC,CAAC,EAAE,qBAAqB,EAAE,YAAY,CAAC,qBAAqB,EAAE;gBAC/D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,YAAY,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5F,GAAG,CAAC,YAAY,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,4EAA4E;YAC5E,SAAS,EAAE,SAAS;YACpB,2EAA2E;YAC3E,uEAAuE;YACvE,0EAA0E;YAC1E,qEAAqE;YACrE,kEAAkE;YAClE,cAAc;SACf,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC/C,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mEAAmE;YACnE,qEAAqE;YACrE,kCAAkC;YAClC,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,EAAE,MAAM,EAAE,aAAa,GAAG,CAAC,IAAI,YAAY,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC"}