agentfootprint 13.0.0 → 14.0.0

package/dist/core/agent/stages/toolCalls/execution/resumedInvocation.js

@@ -0,0 +1,429 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildResumedInvocation = void 0;
+const pause_js_1 = require("../../../../pause.js");
+const toolEffects_js_1 = require("../../../../../semantics/toolEffects.js");
+const toolSecurityEvents_js_1 = require("../../../toolSecurityEvents.js");
+const dispatchRefusals_js_1 = require("../helpers/dispatchRefusals.js");
+const consent_js_1 = require("../../../../../identity/consent.js");
+const reportingCredentials_js_1 = require("../decorators/reportingCredentials.js");
+const capture_js_1 = require("../../../negativeClaims/capture.js");
+const codeRunnerTool_js_1 = require("../../../../codeRunnerTool.js");
+const requestEvidence_js_1 = require("../../../../../tools/requestEvidence.js");
+const mcpClientUse_js_1 = require("../../../../../tools/mcpClientUse.js");
+const consentRequest_js_1 = require("../../../../consentRequest.js");
+const bindings_js_1 = require("../access/bindings.js");
+/** Compose the existing resumed invocation without changing its catch/cleanup boundary. */
+function buildResumedInvocation(deps, links) {
+    // Resolve a tool's declared credential (declare-and-push) and execute it,
+    // emitting the same credential.* events as the main loop. Used by the
+    // check-in RESUME path when a human APPROVES — the tool never ran at pause
+    // time (that's the whole point: consent BEFORE credentials + execute), so it
+    // runs now. Fail-closed: a blocked/failed credential surfaces to the model
+    // and the tool does NOT run. A tool that pauses again during an approved
+    // resume can't re-pause (resume returns void), so that is surfaced as an error.
+    //
+    // `heldTo` names the consent gate a person approved this call through (a
+    // check-in, an ask). Its arguments are then held to the request once more
+    // at the last moment before `execute` — defence in depth behind the frozen
+    // copies every app callback is handed (`lib/frozenCopy.ts`): arguments that
+    // no longer re-derive the request's id (`runsAsAsked`, the one rule that
+    // binds a decision to its call) do not run (`callChanged`).
+    const resolveCredentialAndExecute = async (scope, resolved, toolName, args, toolCallId, iteration, env, heldTo, 
+    /** Filled for the call's script row (`deps.scriptRecord`): what `execute`
+     *  was handed, the runner's facts, a ceiling refusal, a throw. */
+    seen) => {
+        const tool = resolved.tool;
+        /** What the approval covers — the arguments as handed in, before any
+         *  `wants` resolution or clock redraw derives the ones `execute` gets. */
+        const approved = args;
+        const emitSecurity = (0, toolSecurityEvents_js_1.bindToolSecurityEvents)(scope, { toolCallId, iteration });
+        // The two refusals share one door here too (9.92.0): a name nothing holds,
+        // and a name whose offered party cannot answer on this resume.
+        if (!tool) {
+            return {
+                result: resolved.refusal ?? (0, dispatchRefusals_js_1.unknownToolResult)(toolName, links.dispatchRoster(scope)),
+                error: true,
+            };
+        }
+        const invalidArgs = links.argumentRefusal(scope, tool, args, {
+            toolName,
+            toolCallId,
+            iteration,
+        });
+        if (invalidArgs !== undefined)
+            return { result: invalidArgs, error: true };
+        links.noteOffWire(scope, resolved, { toolName, toolCallId, iteration });
+        // Declared artifact arguments (9.22.0) — the same resolution the batch
+        // loop applies, at this door: a resumed call's refs are judged exactly
+        // as an inline call's, BEFORE credentials, and a refusal means the tool
+        // does not run.
+        let wantedMeta;
+        if (tool.wants !== undefined) {
+            const resolution = await links.resolveWantsAtDispatch(scope, toolName, tool.wants, args, tool.schema.inputSchema);
+            if (!resolution.ok)
+                return { result: resolution.refusal, error: true };
+            args = resolution.args;
+            wantedMeta = resolution.wanted;
+        }
+        const runIdentity = scope.runIdentity;
+        let resolvedCredential;
+        const need = tool.needs;
+        if (need) {
+            emitSecurity('agentfootprint.credential.requested', {
+                service: need.credential,
+                ...(need.mode && { mode: need.mode }),
+            });
+            try {
+                const cred = await links.credentialsIn(scope, need.credential).getCredential({
+                    service: need.credential,
+                    ...(need.scopes && { scopes: need.scopes }),
+                    ...(need.mode && { mode: need.mode }),
+                    ...(runIdentity && {
+                        identity: {
+                            ...(runIdentity.principal && { principal: runIdentity.principal }),
+                            ...(runIdentity.tenant && { tenant: runIdentity.tenant }),
+                        },
+                    }),
+                });
+                if (cred.status === 'issued') {
+                    resolvedCredential = cred.credential;
+                    emitSecurity('agentfootprint.credential.acquired', {
+                        service: need.credential,
+                        kind: cred.credential.kind,
+                        ...(cred.expiresAt !== undefined && { expiresAt: cred.expiresAt }),
+                    });
+                    // The consent that was outstanding for this service has been given.
+                    deps.clearConsentOutstanding?.(need.credential);
+                }
+                else {
+                    emitSecurity('agentfootprint.credential.authorization_required', {
+                        service: need.credential,
+                        sessionId: cred.sessionId,
+                    });
+                    // Still not authorized on the far side of a resume. A resume cannot
+                    // pause again (`ResumeFn` returns void), so the honest move is the
+                    // URL-free refusal plus `error: true`: the model reads it, the loop
+                    // continues, and if it calls the tool again `execute` CAN pause — a
+                    // fresh consent round with a fresh URL on `PendingAsk`. The
+                    // consent record still goes out on the side channel so the turn
+                    // cannot end quietly.
+                    deps.reportConsentOutstanding?.({
+                        service: need.credential,
+                        authorizationUrl: cred.authorizationUrl,
+                        sessionId: cred.sessionId,
+                        tool: toolName,
+                        iteration,
+                    });
+                    return { result: (0, consent_js_1.modelRefusal)(need.credential), error: true };
+                }
+            }
+            catch (credErr) {
+                const reason = credErr instanceof Error ? credErr.message : String(credErr);
+                emitSecurity('agentfootprint.credential.failed', {
+                    service: need.credential,
+                    reason,
+                    tool: toolName,
+                    ...((0, reportingCredentials_js_1.errorClassOf)(credErr) !== undefined && { errorClass: (0, reportingCredentials_js_1.errorClassOf)(credErr) }),
+                });
+                return { result: `credential error for '${need.credential}': ${reason}`, error: true };
+            }
+        }
+        let executed = false;
+        let negativeDispatch;
+        /** What the run ended with, when it ended before the call could run. */
+        let ended;
+        try {
+            // The time layer's dispatch moment — a resumed call is dispatched NOW,
+            // so its `dispatchedAt` is the resume's, not the pause's.
+            const dispatched = deps.time !== undefined
+                ? (await Promise.resolve().then(() => __importStar(require('../../timeLayer.js')))).timeAtDispatch(scope, { toolCallId, toolName }, iteration, tool, args, deps.time.appZone)
+                : undefined;
+            const callTime = dispatched?.context;
+            if (dispatched !== undefined)
+                args = dispatched.args;
+            // `let`, not `const`: the semantic projection below replaces the value
+            // on the non-envelope path exactly as the batch loop does.
+            // This dispatch's own slot for the runner's facts (`CODE_RUN_SLOT`):
+            // facts reach the exact dispatch that ran, never another run's call
+            // that happens to reuse the provider's id.
+            const codeRunSlot = {};
+            const executionContext = {
+                [codeRunnerTool_js_1.CODE_RUN_SLOT]: codeRunSlot,
+                toolCallId,
+                iteration,
+                ...(callTime !== undefined && { time: callTime }),
+                ...(env.signal && { signal: env.signal }),
+                credentials: (0, reportingCredentials_js_1.reportingCredentials)(links.credentialsIn(scope, tool.needs?.credential), emitSecurity, toolName),
+                hasCredentials: links.hasCredentials,
+                ...(resolvedCredential && { credential: resolvedCredential }),
+                ...links.toolArtifacts(scope, toolName, toolCallId),
+                ...(wantedMeta !== undefined && { wanted: wantedMeta }),
+                ...links.toolProgress(scope, { toolName, toolCallId, iteration }),
+                ...(0, requestEvidence_js_1.requestEvidenceFor)(scope, { toolName, toolCallId, iteration }),
+                ...(0, mcpClientUse_js_1.mcpClientUseFor)(scope, { toolCallId }),
+                ...links.sessionContext(scope, toolName, toolCallId),
+                ...links.toolDispatchCtx(scope, { toolName, toolCallId, iteration }, env.signal),
+            };
+            // The last moment before the call runs, after every await that prepared
+            // it — its artifacts (`wants`), its credential (`needs`), its clock, and
+            // on an ask the rest of the chain. The engine stops waiting on an
+            // aborted run's stage (a hang-up, a deadline), but the stage goes on:
+            // a call never runs for a caller already told the run ended. Thrown past
+            // the catch below — the run ended, the tool did not fail.
+            ended = (0, consentRequest_js_1.runEndedBy)(env.signal);
+            if (ended !== undefined)
+                throw ended;
+            // An approved call runs with the arguments its request binds, or not
+            // at all — asked here, after every callback that saw them has returned.
+            if (heldTo !== undefined) {
+                const read = (key) => scope.$getValue(key);
+                if (!(0, consentRequest_js_1.runsAsAsked)(read('pausedRequest'), (0, consentRequest_js_1.gatedCallOf)(read, heldTo), approved)) {
+                    // Nothing ran; the call's sessions are still released, as for a
+                    // run that ended here.
+                    await links.endCall(scope).catch(() => undefined);
+                    return {
+                        result: (0, bindings_js_1.rewrittenAfterApproval)(toolName, 'those arguments changed before the call could run'),
+                        error: true,
+                        callChanged: true,
+                    };
+                }
+            }
+            // `Tool.search`: reserved, with the dispatch instant, just before the
+            // call runs — as in the batch loop.
+            const searchDispatch = links.searchFunnel.dispatch(scope, tool, callTime);
+            negativeDispatch =
+                deps.negativeClaimsArmed === true
+                    ? (0, capture_js_1.startNegativeCall)(scope, {
+                        tool,
+                        party: resolved.party,
+                        args,
+                        toolCallId,
+                        iteration,
+                        runId: links.runFactsOf(scope)?.runId,
+                        dispatch: searchDispatch,
+                        context: executionContext,
+                    })
+                    : undefined;
+            executed = true;
+            if (seen !== undefined) {
+                // Read now, before any tool code runs: what the call proposed and
+                // what `execute` is handed — values, never the arguments object.
+                seen.entered = true;
+                seen.proposed = links.programOfCall(tool, links.proposedArgsOf(scope, toolCallId) ?? args);
+                seen.submitted = links.programOfCall(tool, args);
+            }
+            let result = await tool.execute(args, executionContext);
+            // The runner's facts, at this execute boundary as at the batch loop's.
+            const codeRun = links.takeCodeRun(scope, tool, codeRunSlot, {
+                toolName,
+                toolCallId,
+                takeListed: false,
+            });
+            if (seen !== undefined && codeRun !== undefined)
+                seen.codeRun = codeRun;
+            if (negativeDispatch !== undefined)
+                result = (0, capture_js_1.captureNegativeResult)(scope, negativeDispatch, result, tool);
+            await links.endCall(scope);
+            const searchBoundary = (status) => ({
+                call: { toolName, toolCallId, iteration },
+                tool,
+                ...(resolved.party !== undefined && { party: resolved.party }),
+                args: negativeDispatch?.args ?? args,
+                ...(searchDispatch !== undefined && { dispatch: searchDispatch }),
+                ...(status !== undefined && { status }),
+            });
+            // The typed effects channel (9.19.0) — same unwrap as the batch loop,
+            // at this path's own execute boundary, so a resumed call's envelope is
+            // judged exactly as an inline one's.
+            const envelope = (0, toolEffects_js_1.readToolResultEnvelope)(result);
+            if (envelope !== undefined) {
+                // Coverage (this release) before the ceiling, for the same reason the
+                // effects are judged even when the payload is refused: the boundary a
+                // tool declared is not the channel that can overflow, and a limit
+                // that died with an oversized result would be the silence this
+                // primitive exists to break. An absence's status is the tool's own
+                // and wins over the envelope's only when the envelope declared none.
+                const searched = links.searchFunnel.compose(scope, searchBoundary(envelope.status), envelope.content);
+                const declaredContent = searched !== undefined ? searched.value : envelope.content;
+                const coverageStatus = links.declareCoverage(scope, { toolName, toolCallId, iteration }, declaredContent, searched?.reading);
+                const declaredStatus = envelope.status ?? coverageStatus;
+                // The semantic envelope (9.53.0), on the unwrapped content — the
+                // effects+semantics composition point: full envelope to the record,
+                // projection to the model. BEFORE the ceiling, which must measure
+                // what the model will actually read.
+                const semanticView = links.declareSemantics(scope, { toolName, toolCallId, iteration }, declaredContent);
+                const content = semanticView ?? declaredContent;
+                // The tool's own ceiling (9.20.0) measures the CONTENT — the channel
+                // that can overflow a context window. The DECLARED effects are small
+                // validated data and are still judged by the caller: a tool that
+                // proposed a transition and overflowed its payload does not lose the
+                // transition. The delivered status becomes 'invalid' (the declared
+                // status described a result the model never received — the
+                // `result_refused` event keeps what was declared).
+                const refusal = links.refuseOverCeiling(scope, { toolName, toolCallId, iteration }, tool, content, declaredStatus);
+                if (refusal !== undefined) {
+                    if (negativeDispatch !== undefined)
+                        (0, capture_js_1.keepNegativeResultOut)(scope, negativeDispatch.resultId);
+                    if (seen !== undefined)
+                        seen.overCeiling = true;
+                    return {
+                        result: refusal,
+                        executed: true,
+                        negativeResultId: negativeDispatch?.resultId,
+                        ceilingRefused: true,
+                        envelope: { ...envelope, content: refusal, status: 'invalid' },
+                    };
+                }
+                // The column-type contract (9.78.0), at the same door and one step
+                // after the ceiling. `'warn'` files and returns undefined — this
+                // path keeps every byte it had.
+                const columnRefusal = links.judgeColumns(scope, { toolName, toolCallId, iteration }, content);
+                if (columnRefusal !== undefined) {
+                    if (negativeDispatch !== undefined)
+                        (0, capture_js_1.keepNegativeResultOut)(scope, negativeDispatch.resultId);
+                    return {
+                        result: columnRefusal,
+                        executed: true,
+                        negativeResultId: negativeDispatch?.resultId,
+                        // The ceiling's flag, reused for the ceiling's reason: a refused
+                        // payload must not advance the step pointer on any path, and
+                        // there is exactly one fact here — the model did not get the
+                        // result — not two spellings of it.
+                        ceilingRefused: true,
+                        envelope: { ...envelope, content: columnRefusal, status: 'invalid' },
+                    };
+                }
+                return {
+                    result: content,
+                    executed: true,
+                    negativeResultId: negativeDispatch?.resultId,
+                    envelope: declaredStatus === envelope.status && content === envelope.content
+                        ? envelope
+                        : {
+                            ...envelope,
+                            content,
+                            ...(declaredStatus !== undefined && { status: declaredStatus }),
+                        },
+                };
+            }
+            const searched = links.searchFunnel.compose(scope, searchBoundary(undefined), result);
+            if (searched !== undefined)
+                result = searched.value;
+            const coverageStatus = links.declareCoverage(scope, { toolName, toolCallId, iteration }, result, searched?.reading);
+            // The semantic envelope (9.53.0) on this path's own execute boundary —
+            // a resumed call's envelope is judged exactly as an inline one's.
+            const semanticView = links.declareSemantics(scope, { toolName, toolCallId, iteration }, result);
+            if (semanticView !== undefined)
+                result = semanticView;
+            const refusal = links.refuseOverCeiling(scope, { toolName, toolCallId, iteration }, tool, result, coverageStatus);
+            if (refusal !== undefined) {
+                if (negativeDispatch !== undefined)
+                    (0, capture_js_1.keepNegativeResultOut)(scope, negativeDispatch.resultId);
+                if (seen !== undefined)
+                    seen.overCeiling = true;
+                // Synthesized empty-effects envelope: the resume paths read the
+                // routing status off `envelope.status`, and this is how a refused
+                // NON-envelope result carries `'invalid'` there without every path
+                // learning about ceilings. Empty effects/malformed judge to nothing.
+                return {
+                    result: refusal,
+                    executed: true,
+                    negativeResultId: negativeDispatch?.resultId,
+                    ceilingRefused: true,
+                    envelope: { content: refusal, effects: [], status: 'invalid', malformed: [] },
+                };
+            }
+            // The column-type contract on this path's own execute boundary — a
+            // resumed call's rows are judged exactly as an inline one's.
+            const columnRefusal = links.judgeColumns(scope, { toolName, toolCallId, iteration }, result);
+            if (columnRefusal !== undefined) {
+                if (negativeDispatch !== undefined)
+                    (0, capture_js_1.keepNegativeResultOut)(scope, negativeDispatch.resultId);
+                return {
+                    result: columnRefusal,
+                    executed: true,
+                    negativeResultId: negativeDispatch?.resultId,
+                    ceilingRefused: true,
+                    envelope: { content: columnRefusal, effects: [], status: 'invalid', malformed: [] },
+                };
+            }
+            // A status-only shape missing its `effects: []` marker is DATA (bytes
+            // unchanged) — but never silently: name the dropped marker in dev mode.
+            const nearMiss = (0, toolEffects_js_1.explainStatusOnlyNearMiss)(result);
+            if (nearMiss !== undefined)
+                links.warnEffect(toolName, nearMiss);
+            if (coverageStatus !== undefined) {
+                // The ceiling path's synthesized envelope, for the same reason: the
+                // resume paths read the routing status off `envelope.status`, and an
+                // absence that lost its status here would route down whichever edge a
+                // statusless result routes down — the confusion the word exists to
+                // end. Empty effects/malformed judge to nothing, so the only thing
+                // this carries is the status.
+                return {
+                    result,
+                    executed: true,
+                    negativeResultId: negativeDispatch?.resultId,
+                    envelope: { content: result, effects: [], status: coverageStatus, malformed: [] },
+                };
+            }
+            return { result, executed: true, negativeResultId: negativeDispatch?.resultId };
+        }
+        catch (err) {
+            if (ended !== undefined && err === ended) {
+                // Nothing ran; the call's sessions are still released, and the run's
+                // end — not a tool failure — is what the stage ends with.
+                await links.endCall(scope).catch(() => undefined);
+                throw err;
+            }
+            // Settled by throwing is still settled — a tool that opened a session and
+            // then failed must not keep it.
+            await links.endCall(scope);
+            if (seen !== undefined && executed)
+                seen.threw = true;
+            if ((0, pause_js_1.isPauseRequest)(err)) {
+                return {
+                    result: `tool '${toolName}' requested a pause while resuming an approved check-in, which is not supported`,
+                    error: true,
+                    // It ran — a tool that asked to pause had already started work.
+                    executed,
+                    negativeResultId: negativeDispatch?.resultId,
+                };
+            }
+            // A tool that threw still RAN, and may have done half its work; the
+            // after-tool moment exists precisely for the rules that care about that.
+            return {
+                result: err instanceof Error ? err.message : String(err),
+                error: true,
+                executed,
+                negativeResultId: negativeDispatch?.resultId,
+            };
+        }
+    };
+    return { resolveCredentialAndExecute };
+}
+exports.buildResumedInvocation = buildResumedInvocation;
+//# sourceMappingURL=resumedInvocation.js.map

package/dist/core/agent/stages/toolCalls/execution/resumedInvocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resumedInvocation.js","sourceRoot":"","sources":["../../../../../../src/core/agent/stages/toolCalls/execution/resumedInvocation.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAMA,mDAA4E;AAC5E,4EAKiD;AACjD,0EAAwE;AACxE,wEAAmE;AAGnE,mEAAkE;AAClE,mFAA2F;AAC3F,mEAK4C;AAC5C,qEAAgF;AAChF,gFAA6E;AAC7E,0EAAuE;AACvE,qEAAqF;AACrF,uDAA+D;AAuC/D,2FAA2F;AAC3F,SAAgB,sBAAsB,CACpC,IAGC,EACD,KAA6B;IAE7B,0EAA0E;IAC1E,sEAAsE;IACtE,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,gFAAgF;IAChF,EAAE;IACF,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,4DAA4D;IAC5D,MAAM,2BAA2B,GAAG,KAAK,EACvC,KAA6B,EAC7B,QAAoB,EACpB,QAAgB,EAChB,IAAuC,EACvC,UAAkB,EAClB,SAAiB,EACjB,GAAsC,EACtC,MAAwB;IACxB;sEACkE;IAClE,IAAuB,EAoBtB,EAAE;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B;kFAC0E;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC;QACtB,MAAM,YAAY,GAAG,IAAA,8CAAsB,EAAC,KAAK,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9E,2EAA2E;QAC3E,+DAA+D;QAC/D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,OAAO,IAAI,IAAA,uCAAiB,EAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBACpF,KAAK,EAAE,IAAI;aACZ,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3D,QAAQ;YACR,UAAU;YACV,SAAS;SACV,CAAC,CAAC;QACH,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC3E,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,gBAAgB;QAChB,IAAI,UAA8D,CAAC;QACnE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,sBAAsB,CACnD,KAAK,EACL,QAAQ,EACR,IAAI,CAAC,KAAK,EACV,IAAI,EACJ,IAAI,CAAC,MAAM,CAAC,WAAW,CACxB,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,EAAE;gBAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACvE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;YACvB,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC;QACjC,CAAC;QACD,MAAM,WAAW,GAAG,KAAK,CAAC,WAEb,CAAC;QACd,IAAI,kBAA0C,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,IAAI,EAAE,CAAC;YACT,YAAY,CAAC,qCAAqC,EAAE;gBAClD,OAAO,EAAE,IAAI,CAAC,UAAU;gBACxB,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;aACtC,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC;oBAC3E,OAAO,EAAE,IAAI,CAAC,UAAU;oBACxB,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;oBAC3C,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;oBACrC,GAAG,CAAC,WAAW,IAAI;wBACjB,QAAQ,EAAE;4BACR,GAAG,CAAC,WAAW,CAAC,SAAS,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC;4BAClE,GAAG,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC;yBAC1D;qBACF,CAAC;iBACH,CAAC,CAAC;gBACH,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC7B,kBAAkB,GAAG,IAAI,CAAC,UAAU,CAAC;oBACrC,YAAY,CAAC,oCAAoC,EAAE;wBACjD,OAAO,EAAE,IAAI,CAAC,UAAU;wBACxB,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;wBAC1B,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;qBACnE,CAAC,CAAC;oBACH,oEAAoE;oBACpE,IAAI,CAAC,uBAAuB,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAClD,CAAC;qBAAM,CAAC;oBACN,YAAY,CAAC,kDAAkD,EAAE;wBAC/D,OAAO,EAAE,IAAI,CAAC,UAAU;wBACxB,SAAS,EAAE,IAAI,CAAC,SAAS;qBAC1B,CAAC,CAAC;oBACH,oEAAoE;oBACpE,mEAAmE;oBACnE,oEAAoE;oBACpE,oEAAoE;oBACpE,4DAA4D;oBAC5D,gEAAgE;oBAChE,sBAAsB;oBACtB,IAAI,CAAC,wBAAwB,EAAE,CAAC;wBAC9B,OAAO,EAAE,IAAI,CAAC,UAAU;wBACxB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;wBACvC,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,IAAI,EAAE,QAAQ;wBACd,SAAS;qBACV,CAAC,CAAC;oBACH,OAAO,EAAE,MAAM,EAAE,IAAA,yBAAY,EAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBAChE,CAAC;YACH,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC5E,YAAY,CAAC,kCAAkC,EAAE;oBAC/C,OAAO,EAAE,IAAI,CAAC,UAAU;oBACxB,MAAM;oBACN,IAAI,EAAE,QAAQ;oBACd,GAAG,CAAC,IAAA,sCAAY,EAAC,OAAO,CAAC,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAA,sCAAY,EAAC,OAAO,CAAC,EAAE,CAAC;iBAClF,CAAC,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,yBAAyB,IAAI,CAAC,UAAU,MAAM,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACzF,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,gBAA8C,CAAC;QACnD,wEAAwE;QACxE,IAAI,KAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,uEAAuE;YACvE,0DAA0D;YAC1D,MAAM,UAAU,GACd,IAAI,CAAC,IAAI,KAAK,SAAS;gBACrB,CAAC,CAAC,CAAC,wDAAa,oBAAoB,GAAC,CAAC,CAAC,cAAc,CACjD,KAAK,EACL,EAAE,UAAU,EAAE,QAAQ,EAAE,EACxB,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,IAAI,CAAC,IAAI,CAAC,OAAO,CAClB;gBACH,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,QAAQ,GAAG,UAAU,EAAE,OAAO,CAAC;YACrC,IAAI,UAAU,KAAK,SAAS;gBAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;YACrD,uEAAuE;YACvE,2DAA2D;YAC3D,qEAAqE;YACrE,oEAAoE;YACpE,2CAA2C;YAC3C,MAAM,WAAW,GAAgB,EAAE,CAAC;YACpC,MAAM,gBAAgB,GAAG;gBACvB,CAAC,iCAAa,CAAC,EAAE,WAAW;gBAC5B,UAAU;gBACV,SAAS;gBACT,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;gBACjD,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;gBACzC,WAAW,EAAE,IAAA,8CAAoB,EAC/B,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,EAClD,YAAY,EACZ,QAAQ,CACT;gBACD,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,GAAG,CAAC,kBAAkB,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC;gBAC7D,GAAG,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC;gBACnD,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;gBACvD,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;gBACjE,GAAG,IAAA,uCAAkB,EAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;gBACjE,GAAG,IAAA,iCAAe,EAAC,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC;gBACzC,GAAG,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC;gBACpD,GAAG,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC;aACjF,CAAC;YACF,wEAAwE;YACxE,yEAAyE;YACzE,kEAAkE;YAClE,sEAAsE;YACtE,yEAAyE;YACzE,0DAA0D;YAC1D,KAAK,GAAG,IAAA,8BAAU,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,KAAK,CAAC;YACrC,qEAAqE;YACrE,wEAAwE;YACxE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC5D,IAAI,CAAC,IAAA,+BAAW,EAAC,IAAI,CAAC,eAAe,CAAC,EAAE,IAAA,+BAAW,EAAC,IAAI,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAC7E,gEAAgE;oBAChE,uBAAuB;oBACvB,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAClD,OAAO;wBACL,MAAM,EAAE,IAAA,oCAAsB,EAC5B,QAAQ,EACR,mDAAmD,CACpD;wBACD,KAAK,EAAE,IAAI;wBACX,WAAW,EAAE,IAAI;qBAClB,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,sEAAsE;YACtE,oCAAoC;YACpC,MAAM,cAAc,GAAG,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC1E,gBAAgB;gBACd,IAAI,CAAC,mBAAmB,KAAK,IAAI;oBAC/B,CAAC,CAAC,IAAA,8BAAiB,EAAC,KAAK,EAAE;wBACvB,IAAI;wBACJ,KAAK,EAAE,QAAQ,CAAC,KAAK;wBACrB,IAAI;wBACJ,UAAU;wBACV,SAAS;wBACT,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,KAAK;wBACrC,QAAQ,EAAE,cAAc;wBACxB,OAAO,EAAE,gBAAgB;qBAC1B,CAAC;oBACJ,CAAC,CAAC,SAAS,CAAC;YAChB,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,kEAAkE;gBAClE,iEAAiE;gBACjE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC;gBAC3F,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACxD,uEAAuE;YACvE,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE;gBAC1D,QAAQ;gBACR,UAAU;gBACV,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;YACH,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS;gBAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;YACxE,IAAI,gBAAgB,KAAK,SAAS;gBAChC,MAAM,GAAG,IAAA,kCAAqB,EAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACxE,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,cAAc,GAAG,CAAC,MAAoC,EAAE,EAAE,CAAC,CAAC;gBAChE,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE;gBACzC,IAAI;gBACJ,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAC9D,IAAI,EAAE,gBAAgB,EAAE,IAAI,IAAI,IAAI;gBACpC,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;gBACjE,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;aACxC,CAAC,CAAC;YACH,sEAAsE;YACtE,uEAAuE;YACvE,qCAAqC;YACrC,MAAM,QAAQ,GAAG,IAAA,uCAAsB,EAAC,MAAM,CAAC,CAAC;YAChD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,sEAAsE;gBACtE,sEAAsE;gBACtE,kEAAkE;gBAClE,+DAA+D;gBAC/D,mEAAmE;gBACnE,qEAAqE;gBACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,CACzC,KAAK,EACL,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC/B,QAAQ,CAAC,OAAO,CACjB,CAAC;gBACF,MAAM,eAAe,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACnF,MAAM,cAAc,GAAG,KAAK,CAAC,eAAe,CAC1C,KAAK,EACL,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EACnC,eAAe,EACf,QAAQ,EAAE,OAAO,CAClB,CAAC;gBACF,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,IAAI,cAAc,CAAC;gBACzD,iEAAiE;gBACjE,oEAAoE;gBACpE,kEAAkE;gBAClE,qCAAqC;gBACrC,MAAM,YAAY,GAAG,KAAK,CAAC,gBAAgB,CACzC,KAAK,EACL,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EACnC,eAAe,CAChB,CAAC;gBACF,MAAM,OAAO,GAAG,YAAY,IAAI,eAAe,CAAC;gBAChD,qEAAqE;gBACrE,qEAAqE;gBACrE,iEAAiE;gBACjE,qEAAqE;gBACrE,mEAAmE;gBACnE,2DAA2D;gBAC3D,mDAAmD;gBACnD,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB,CACrC,KAAK,EACL,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EACnC,IAAI,EACJ,OAAO,EACP,cAAc,CACf,CAAC;gBACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,IAAI,gBAAgB,KAAK,SAAS;wBAChC,IAAA,kCAAqB,EAAC,KAAK,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;oBAC1D,IAAI,IAAI,KAAK,SAAS;wBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;oBAChD,OAAO;wBACL,MAAM,EAAE,OAAO;wBACf,QAAQ,EAAE,IAAI;wBACd,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ;wBAC5C,cAAc,EAAE,IAAI;wBACpB,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE;qBAC/D,CAAC;gBACJ,CAAC;gBACD,mEAAmE;gBACnE,iEAAiE;gBACjE,gCAAgC;gBAChC,MAAM,aAAa,GAAG,KAAK,CAAC,YAAY,CACtC,KAAK,EACL,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EACnC,OAAO,CACR,CAAC;gBACF,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;oBAChC,IAAI,gBAAgB,KAAK,SAAS;wBAChC,IAAA,kCAAqB,EAAC,KAAK,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;oBAC1D,OAAO;wBACL,MAAM,EAAE,aAAa;wBACrB,QAAQ,EAAE,IAAI;wBACd,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ;wBAC5C,iEAAiE;wBACjE,6DAA6D;wBAC7D,6DAA6D;wBAC7D,oCAAoC;wBACpC,cAAc,EAAE,IAAI;wBACpB,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE;qBACrE,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,MAAM,EAAE,OAAO;oBACf,QAAQ,EAAE,IAAI;oBACd,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ;oBAC5C,QAAQ,EACN,cAAc,KAAK,QAAQ,CAAC,MAAM,IAAI,OAAO,KAAK,QAAQ,CAAC,OAAO;wBAChE,CAAC,CAAC,QAAQ;wBACV,CAAC,CAAC;4BACE,GAAG,QAAQ;4BACX,OAAO;4BACP,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;yBAChE;iBACR,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;YACtF,IAAI,QAAQ,KAAK,SAAS;gBAAE,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC;YACpD,MAAM,cAAc,GAAG,KAAK,CAAC,eAAe,CAC1C,KAAK,EACL,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EACnC,MAAM,EACN,QAAQ,EAAE,OAAO,CAClB,CAAC;YACF,uEAAuE;YACvE,kEAAkE;YAClE,MAAM,YAAY,GAAG,KAAK,CAAC,gBAAgB,CACzC,KAAK,EACL,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EACnC,MAAM,CACP,CAAC;YACF,IAAI,YAAY,KAAK,SAAS;gBAAE,MAAM,GAAG,YAAY,CAAC;YACtD,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB,CACrC,KAAK,EACL,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EACnC,IAAI,EACJ,MAAM,EACN,cAAc,CACf,CAAC;YACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,IAAI,gBAAgB,KAAK,SAAS;oBAAE,IAAA,kCAAqB,EAAC,KAAK,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAC5F,IAAI,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBAChD,gEAAgE;gBAChE,kEAAkE;gBAClE,mEAAmE;gBACnE,qEAAqE;gBACrE,OAAO;oBACL,MAAM,EAAE,OAAO;oBACf,QAAQ,EAAE,IAAI;oBACd,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ;oBAC5C,cAAc,EAAE,IAAI;oBACpB,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;iBAC9E,CAAC;YACJ,CAAC;YACD,mEAAmE;YACnE,6DAA6D;YAC7D,MAAM,aAAa,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;YAC7F,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,IAAI,gBAAgB,KAAK,SAAS;oBAAE,IAAA,kCAAqB,EAAC,KAAK,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAC5F,OAAO;oBACL,MAAM,EAAE,aAAa;oBACrB,QAAQ,EAAE,IAAI;oBACd,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ;oBAC5C,cAAc,EAAE,IAAI;oBACpB,QAAQ,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;iBACpF,CAAC;YACJ,CAAC;YACD,sEAAsE;YACtE,wEAAwE;YACxE,MAAM,QAAQ,GAAG,IAAA,0CAAyB,EAAC,MAAM,CAAC,CAAC;YACnD,IAAI,QAAQ,KAAK,SAAS;gBAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACjE,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,oEAAoE;gBACpE,qEAAqE;gBACrE,sEAAsE;gBACtE,mEAAmE;gBACnE,mEAAmE;gBACnE,8BAA8B;gBAC9B,OAAO;oBACL,MAAM;oBACN,QAAQ,EAAE,IAAI;oBACd,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ;oBAC5C,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,EAAE;iBAClF,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBACzC,qEAAqE;gBACrE,0DAA0D;gBAC1D,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAClD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,0EAA0E;YAC1E,gCAAgC;YAChC,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,QAAQ;gBAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YACtD,IAAI,IAAA,yBAAc,EAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO;oBACL,MAAM,EAAE,SAAS,QAAQ,iFAAiF;oBAC1G,KAAK,EAAE,IAAI;oBACX,gEAAgE;oBAChE,QAAQ;oBACR,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ;iBAC7C,CAAC;YACJ,CAAC;YACD,oEAAoE;YACpE,yEAAyE;YACzE,OAAO;gBACL,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBACxD,KAAK,EAAE,IAAI;gBACX,QAAQ;gBACR,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ;aAC7C,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,OAAO,EAAE,2BAA2B,EAAE,CAAC;AACzC,CAAC;AAndD,wDAmdC"}

package/dist/core/agent/stages/toolCalls/execution/wantedArguments.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.admitWantedArguments = void 0;
+/** Existing wantedArguments body; original guard and native pause return stay with the handler. */
+async function admitWantedArguments(scope, frame) {
+    const resolution = await frame.resolveWantsAtDispatch(scope, frame.tc.name, frame.tool.wants, frame.callArguments.callArgs, frame.tool.schema.inputSchema);
+    if (resolution.ok) {
+        frame.callArguments.callArgs = resolution.args;
+        frame.wanted.wantedMeta = resolution.wanted;
+    }
+    else {
+        frame.wanted.wantsBlocked = true;
+        frame.outcome.error = true;
+        frame.outcome.result = resolution.refusal;
+    }
+}
+exports.admitWantedArguments = admitWantedArguments;
+//# sourceMappingURL=wantedArguments.js.map

package/dist/core/agent/stages/toolCalls/execution/wantedArguments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wantedArguments.js","sourceRoot":"","sources":["../../../../../../src/core/agent/stages/toolCalls/execution/wantedArguments.ts"],"names":[],"mappings":";;;AAqBA,mGAAmG;AAC5F,KAAK,UAAU,oBAAoB,CACxC,KAA6B,EAC7B,KAAgC;IAEhC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,sBAAsB,CACnD,KAAK,EACL,KAAK,CAAC,EAAE,CAAC,IAAI,EACb,KAAK,CAAC,IAAI,CAAC,KAAM,EACjB,KAAK,CAAC,aAAa,CAAC,QAAQ,EAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAC9B,CAAC;IACF,IAAI,UAAU,CAAC,EAAE,EAAE,CAAC;QAClB,KAAK,CAAC,aAAa,CAAC,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC;QAC/C,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;QACjC,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;QAC3B,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC;IAC5C,CAAC;AACH,CAAC;AAnBD,oDAmBC"}

package/dist/core/agent/stages/toolCalls/helpers/dedupeIds.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dedupeIds = void 0;
+/** Declaration order preserved, ids de-duplicated — the shape the gate's re-prompt
+ *  and the `skill.rejected` payload both report as "what this gate accepts". */
+function dedupeIds(ids) {
+    return [...new Set(ids)];
+}
+exports.dedupeIds = dedupeIds;
+//# sourceMappingURL=dedupeIds.js.map

package/dist/core/agent/stages/toolCalls/helpers/dedupeIds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dedupeIds.js","sourceRoot":"","sources":["../../../../../../src/core/agent/stages/toolCalls/helpers/dedupeIds.ts"],"names":[],"mappings":";;;AAAA;gFACgF;AAChF,SAAgB,SAAS,CAAC,GAAsB;IAC9C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3B,CAAC;AAFD,8BAEC"}

package/dist/core/agent/stages/toolCalls/helpers/dispatchRefusals.js

@@ -0,0 +1,83 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.unknownToolResult = exports.notServedResult = void 0;
+// LENS · tool-result · persistent-history
+// reads: the dispatchable roster ← `toolCalls/execution/catalogOperations.ts` · dispatchRoster: registry ∪ provider cache, filtered through scope.hiddenSkillIds
+// law: may omit, never deny; every clause anchored to the call it was composed on.
+/**
+ * What a call to a name nothing can dispatch gets back (9.86.0).
+ *
+ * `Unknown tool: X` was the whole sentence, on both dispatch doors, while
+ * `mcpServe` — the same library, one directory away — had been answering
+ * "Unknown tool 'rm_rf'. Served tools: echo, delete_account." for releases. The
+ * model that mistyped a name, or named one from a restored transcript, was told
+ * only that it was wrong, never what would have worked, and the cheapest repair
+ * (read the roster) was the one it could not make.
+ *
+ * The roster is the DISPATCH set — `registryByName` plus the provider cache —
+ * because that is the true statement about resolution: these are the names that
+ * answered to something. It is deliberately NOT the offer: the wire is narrowed
+ * by steps, parks and postures, and a held-out tool still dispatches by name, so
+ * an offer-shaped list would be a different (and here, false) claim.
+ *
+ * ── AND IT SAYS "RESOLVED", NOT "COULD BE DISPATCHED" ───────────────────
+ *
+ * The first draft said "Tools that could be dispatched on that call". Two gates
+ * sit between resolution and a tool running — the `tool_call` permission check
+ * and the middleware chain — so a name in this map can resolve and still be
+ * refused, and the sentence promised the model a dispatch the very next gate
+ * would decline. Neither gate is asked here: a `PermissionChecker` is a port
+ * (a hub call per name, with its own events and its own audit rows), and
+ * spending a whole permission sweep to phrase an error is a cost the sentence
+ * does not need. It reports what this map DID — resolve a name — and claims
+ * nothing about what would have happened next.
+ *
+ * The roster is role-filtered before it gets here (`dispatchRoster`), so a tool
+ * belonging to a skill the caller's policy hides is never named; and when the
+ * filter empties a stocked roster the clause is DROPPED, because "no tool name
+ * resolved" would be a denial of what the dispatch map is holding.
+ *
+ * Anchored past tense, like every other persistent result: "on that call" binds
+ * the roster to the finished call the result answers, so a later iteration that
+ * adds or drops a provider tool cannot make this sentence wrong. No exhortation
+ * — the model does not need to be told to try again.
+ *
+ * Exported for the producer registry, and used by BOTH dispatch doors so they
+ * cannot drift.
+ */
+/**
+ * What a call gets back when the party whose contract the model read under
+ * this name cannot answer it, and no other party may (9.92.0).
+ *
+ * Two doors reach here. A name that LEFT the wire — the model read a
+ * provider's contract on an earlier call and the provider withdrew the name —
+ * whose only remaining holder is a party the model was never shown under that
+ * name (a scoped skill that never activated): dispatching that holder would
+ * hand the model's belief to a stranger's function, which is the silent
+ * identity swap this release closed. And a resume in a fresh Agent instance
+ * of a provider-served call, where the served party is on the checkpoint but
+ * the provider's list has not been resolved on this instance.
+ *
+ * It names no roster on purpose: `unknownToolResult`'s roster is the DISPATCH
+ * map, and the map here holds exactly the implementation this sentence is
+ * refusing. Anchored past tense, one clause, like every persistent result.
+ */
+function notServedResult(toolName) {
+    return (`Tool '${toolName}' did not run on that call: the implementation whose contract was ` +
+        `offered under that name was not available to answer it.`);
+}
+exports.notServedResult = notServedResult;
+function unknownToolResult(toolName, dispatchable) {
+    const head = `Unknown tool '${toolName}' on that call.`;
+    if (dispatchable.named.length > 0) {
+        return (`${head} Tool names that resolved to an implementation on that ` +
+            `call: ${dispatchable.named.join(', ')}.`);
+    }
+    // Held-but-unnameable: the map had entries this caller may not be told about.
+    // Omission is free; the negative below would be false.
+    return dispatchable.held
+        ? head
+        : `${head} No tool name resolved to an implementation on that call.`;
+}
+exports.unknownToolResult = unknownToolResult;
+//# sourceMappingURL=dispatchRefusals.js.map

package/dist/core/agent/stages/toolCalls/helpers/dispatchRefusals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatchRefusals.js","sourceRoot":"","sources":["../../../../../../src/core/agent/stages/toolCalls/helpers/dispatchRefusals.ts"],"names":[],"mappings":";;;AAEA,0CAA0C;AAC1C,iKAAiK;AACjK,mFAAmF;AACnF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,eAAe,CAAC,QAAgB;IAC9C,OAAO,CACL,SAAS,QAAQ,oEAAoE;QACrF,yDAAyD,CAC1D,CAAC;AACJ,CAAC;AALD,0CAKC;AAED,SAAgB,iBAAiB,CAAC,QAAgB,EAAE,YAAuB;IACzE,MAAM,IAAI,GAAG,iBAAiB,QAAQ,iBAAiB,CAAC;IACxD,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,CACL,GAAG,IAAI,yDAAyD;YAChE,SAAS,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC1C,CAAC;IACJ,CAAC;IACD,8EAA8E;IAC9E,uDAAuD;IACvD,OAAO,YAAY,CAAC,IAAI;QACtB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,GAAG,IAAI,2DAA2D,CAAC;AACzE,CAAC;AAbD,8CAaC"}

package/dist/core/agent/stages/toolCalls/helpers/mountedCursor.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.atMountedCursor = void 0;
+const skillGraph_js_1 = require("../../../../../injection-engine/skillGraph.js");
+/**
+ * Is this `read_skill` target the cursor's own skill AND is that cursor
+ * MOUNTED — the one owner of "this call would change nothing" (9.86.0).
+ *
+ * ── WHY POSITION ALONE IS NOT THE ANSWER ────────────────────────────────
+ *
+ * `classifySkillTarget` answers a question about POSITION: is the target where
+ * the cursor stands? For most of the loop that settles it — the cursor's body
+ * is in that call's system prompt and its tools are on that call's wire, so
+ * asking to read it activates nothing, moves nothing and reveals nothing the
+ * request did not already carry.
+ *
+ * A PARKED map breaks that. Parking suppresses a map's contribution and leaves
+ * the cursor exactly where it was, so at a parked cursor the very same id is a
+ * RE-ENGAGEMENT: the gate admits it, the map engages, and the member's body and
+ * tools ride again on the next pass. That call moves something, which makes it
+ * a capability, which makes it the policy's question to answer.
+ *
+ * The dispatch gate has known this since 9.59.0 — it tests re-engagement BEFORE
+ * its self-call arm, which is this same fact written as two ordered arms. The
+ * `skill_read` permission gate, 480 lines upstream, has no arms to order: it
+ * asks one question and either spends the policy check or skips it, and it was
+ * asking `classifySkillTarget` alone. So a role whose checker hid a skill could
+ * have the model un-park and re-activate it. This function is the question that
+ * gate now asks, over the parked set `parkedNow` hands both of them.
+ *
+ * @example
+ * ```ts
+ * atMountedCursor({ cursor: 'audit', target: 'audit' });                          // true  — a stay
+ * atMountedCursor({ cursor: 'audit', target: 'audit', parked: new Set(['audit']) }); // false — a re-engagement
+ * atMountedCursor({ cursor: 'audit', target: 'billing' });                        // false — a move
+ * ```
+ */
+function atMountedCursor(args) {
+    const stay = (0, skillGraph_js_1.classifySkillTarget)({
+        ...(args.cursor !== undefined && { cursor: args.cursor }),
+        target: args.target,
+    }) === 'self';
+    return stay && args.parked?.has(args.target) !== true;
+}
+exports.atMountedCursor = atMountedCursor;
+//# sourceMappingURL=mountedCursor.js.map

package/dist/core/agent/stages/toolCalls/helpers/mountedCursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mountedCursor.js","sourceRoot":"","sources":["../../../../../../src/core/agent/stages/toolCalls/helpers/mountedCursor.ts"],"names":[],"mappings":";;;AAAA,iFAAoF;AAEpF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,SAAgB,eAAe,CAAC,IAO/B;IACC,MAAM,IAAI,GACR,IAAA,mCAAmB,EAAC;QAClB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QACzD,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,KAAK,MAAM,CAAC;IAChB,OAAO,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;AACxD,CAAC;AAdD,0CAcC"}