agentfootprint 9.6.0 → 9.7.0

package/AGENTS.md

@@ -475,7 +475,7 @@ Resilience decorators live on the `agentfootprint/resilience` subpath
 (not the main barrel). Each preserves the `LLMProvider` interface and
 stacks freely.
 
-### Observability — 73 typed events across 20 domains
+### Observability — 77 typed events across 20 domains
 
 ```typescript
 agent.on('agentfootprint.context.injected', (e) =>

package/CLAUDE.md

@@ -60,7 +60,7 @@ Traps: `src/observability/` holds the finder IMPLEMENTATIONS (canonical home; `d
 - **Embedder fingerprint** (8.9.0) → `Embedder.id` (optional; every shipped embedder sets one, and NONE include dims — the store appends `@<dims>` itself, so an id carrying its own size double-stamps) + `indexDocuments` defaulting `embedderId` to it + `SqliteVectorStore.reconcileFingerprint` (the only comparison site). Rule: dimensions ALWAYS decide, model ids decide only when BOTH sides named themselves — refusing on an absent name would block the majority of callers who never pass `embedderId`.
 - **Retrieval record** (8.8.0) → FOUR stages write one object in sequence: `loadRelevant` (candidates+scores+threshold verdicts) → `pickByBudget` (re-marks admitted→over-budget/over-max-entries) → `formatDefault` (`promptFragment` + `promptPosition`) → the read mount's outputMapper lifts it to root as `retrievalEvidence_<id>`. `memoryRecallInjections` then splits ONE recall into one ActiveInjection PER CHUNK — guarded by a byte-equality check (`fragments.join('\n\n') === systemContent`) that falls back to the single injection rather than change the prompt. `rank` (score order) and `promptPosition` (picker order) are DIFFERENT and both load-bearing: joining fragments in rank order reproduces the right bytes in a sequence the model never saw.
 - **AgentState** → all 8 stages/ files, both builders' mappers, memory-wire STRING-TYPED keys ('runIdentity'/'turnNumber'/… buildAgentChart.ts:177-180 — not refactor-safe), finalizeResult's `reliabilityFail*`/`policyHalt*` reads (rename silently kills the typed errors).
-- **events/** → 73 typed events across 20 domains (counts anti-drift-tested against this file — update BOTH when adding events): ALL_EVENT_TYPES exhaustiveness tests, DomainWildcard hand-list, ~42 importers (recorders, strategies, stream, commentary).
+- **events/** → 77 typed events across 20 domains (counts anti-drift-tested against this file — update BOTH when adding events): ALL_EVENT_TYPES exhaustiveness tests, DomainWildcard hand-list, ~42 importers (recorders, strategies, stream, commentary).
 - **adapters/types.ts LLMMessage/LLMRequest** → 62 importers: tool_use round-trip (toolCalls.ts:115-135), wire assembly (callLLM.ts:150-160), providers, cache strategies, security/extractSequence, reliability loop.
 - **Cache** → strategy registration is a MODULE SIDE EFFECT (src/index.ts:15-17); an entry point skipping that import silently falls back to NoOp. Resolved once per Agent at construction (Agent.ts:347).
 - **Injection engine eval semantics** → Evaluate stage cursor keystone (buildInjectionEngineSubflow.ts:214-222), Route stage MIRRORS slot filters (keep in sync with buildSystemPromptSlot), read_skill gate (toolCalls.ts:747). The gate's allowed set is TWO kinds of id (8.4.0): a HOP (`deps.allowedSkillIds` = `graph.reachableSkills(cursor)` — activates AND moves the cursor) ∪ an OPEN skill (`deps.openSkillIds` = `Agent.openSkillIds()`, Agent.ts:1052 — a registered skill whose trigger is `llm-activated` AND that the graph declares no incoming edge to; activates, never moves the cursor). Both clauses are load-bearing: the trigger test is "read_skill can really activate this", the edge test keeps a bare model edge `.route(a,m)` from-gated. **8.5.0** extends the SAME trigger test three ways: a decision `tree()` returns `[]` from `reachableSkills` (leaves compile to `rule` triggers, so a pick could only be accepted then dropped — the gate refuses with a tree-specific message, `deps.skillGraphIsTree`, derived in AgentBuilder from `graph.nodes.some(kind==='predicate')`); `surfaceMode:'tool-only'` is refused at agent build for any skill whose trigger is not `llm-activated` (skillBodyDelivery.ts — the read_skill tool result is the only channel that mode has, and the graph never calls read_skill); and `read_skill`'s DESCRIPTION is rebuilt per iteration from `reachableSkills(cursor) ∪ open` (Agent.readSkillOfferFor → buildToolsSlot's `readSkillFor`). **The read_skill ENUM must stay the full catalog** — `toolArgValidation` defaults to `'enforce'` and runs at toolCalls.ts:570, BEFORE the gate at :765, and sets `error = true` which the gate skips; narrowing the enum silently retires the teaching refusal, `skill.rejected`, routeRecorder's rejection hops and the rejected-cap governor.

package/ai-instructions/claude-code/SKILL.md

@@ -379,7 +379,7 @@ if (isPaused(result)) {
 }
 ```
 
-## Observability — 73 typed events × 20 domains
+## Observability — 77 typed events × 20 domains
 
 ```typescript
 agent.on('agentfootprint.context.injected', (e) =>

package/dist/adapters/code/agentcore.js

@@ -0,0 +1,294 @@
+"use strict";
+/**
+ * agentCoreCodeRunner — AWS Bedrock AgentCore Code Interpreter behind the
+ * {@link CodeRunner} port (peer-dep `@aws-sdk/client-bedrock-agentcore`).
+ *
+ *   import { agentCoreCodeRunner } from 'agentfootprint/providers';
+ *   const runner = agentCoreCodeRunner({ region: 'us-east-1', identifier: 'aws.codeinterpreter.v1' });
+ *
+ * A REAL sandbox, which is the point: `localCodeRunner` gives you process
+ * isolation on your own machine and says so; this gives you a managed,
+ * network-and-filesystem-isolated environment, and the tool code is identical
+ * across the swap.
+ *
+ * ── The three operations, verified against the SDK ──────────────────────────
+ * Pinned in `test/adapters/aws/awsCommandPin.ts`, and verified against a real
+ * install of `@aws-sdk/client-bedrock-agentcore` 3.1108.0:
+ *
+ *   • `StartCodeInterpreterSessionCommand`
+ *       in  `{ codeInterpreterIdentifier, name?, sessionTimeoutSeconds? }`
+ *       out `{ codeInterpreterIdentifier, sessionId, createdAt }`
+ *   • `InvokeCodeInterpreterCommand`
+ *       in  `{ codeInterpreterIdentifier, sessionId, name: 'executeCode',
+ *              arguments: { code, language } }`
+ *       out `{ sessionId, stream }` — an **event stream**, not a body (below)
+ *   • `StopCodeInterpreterSessionCommand`
+ *       in  `{ codeInterpreterIdentifier, sessionId }`   ← the session ID, not a URI
+ *       out `{ codeInterpreterIdentifier, sessionId, lastUpdatedAt }`
+ *
+ * **`Invoke` answers with an `AsyncIterable`.** `InvokeCodeInterpreterResponse`
+ * is `{ sessionId?, stream?: AsyncIterable<CodeInterpreterStreamOutput> }`, and
+ * every member of that union is either `{ result }` or a modelled EXCEPTION —
+ * `accessDeniedException`, `throttlingException`, `validationException`, and
+ * four more. An adapter that read a `body` field would find `undefined` and
+ * report an empty success on every call, and one that iterated only for
+ * `result` would treat an AccessDenied as "the code printed nothing." So this
+ * drains the stream, raises the exception members BY NAME, and folds the
+ * result members into one `CodeResult`.
+ *
+ * The payload lands twice: `structuredContent` carries `{ stdout, stderr,
+ * exitCode, executionTime }` and `content[]` carries typed blocks. The
+ * structured half is preferred because it is typed; the text blocks are the
+ * fallback for a response that only filled the other one.
+ *
+ * ── How this talks to the SDK (the 9.4.0 law) ───────────────────────────────
+ * Through `client.send(new SomeCommand(input))`, never a method on the client.
+ * A bare `@aws-sdk/client-*` **Client is command-based**: its prototype carries
+ * `send` and `destroy` and nothing else — verified again for this adapter
+ * (`BedrockAgentCoreClient.prototype.startCodeInterpreterSession` is
+ * `undefined`; the shortcut exists only on the aggregated `BedrockAgentCore`).
+ * Three adapters have shipped that bug in this package.
+ *
+ * ── Credentials ─────────────────────────────────────────────────────────────
+ * Standard AWS credential resolution (the SDK's own chain). A tool holding a
+ * long-lived session must NOT cache a `Credential` object from `ctx.credential`
+ * past the call that produced it — a session outliving a run outlives its
+ * token. Re-resolve per execute through `ctx.credentials`.
+ *
+ * Pattern: Adapter (GoF) + lazy peer-dep load — the SDK is required only when
+ * `start()` first runs (or never, if you inject `_client` / `_sdk`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.agentCoreCodeRunner = void 0;
+const lazyRequire_js_1 = require("../../lib/lazyRequire.js");
+const DEFAULT_MAX_OUTPUT_CHARS = 8_000;
+/** The service's own name for "run this code". Not a name we chose. */
+const EXECUTE_CODE = 'executeCode';
+function agentCoreCodeRunner(options) {
+    const id = options.id ?? 'agentcore-code-runner';
+    const maxOutputChars = options.maxOutputChars ?? DEFAULT_MAX_OUTPUT_CHARS;
+    let client;
+    const resolve = () => {
+        client ??= options._client ?? createCodeClient(options);
+        return client;
+    };
+    return {
+        id,
+        async start(req) {
+            const api = resolve();
+            const started = await api.startSession({
+                codeInterpreterIdentifier: options.identifier,
+                // The isolation key names the session on AWS's side too, so an operator
+                // reading the console sees the same partition the runtime enforces. It
+                // is a HASH-free label AWS documents as non-unique; the key is already
+                // the caller's own composition, never widened here.
+                name: sessionName(req.key),
+                ...(options.sessionTimeoutSeconds !== undefined && {
+                    sessionTimeoutSeconds: options.sessionTimeoutSeconds,
+                }),
+            });
+            const sessionId = started.sessionId;
+            if (!sessionId) {
+                throw new Error('agentCoreCodeRunner: StartCodeInterpreterSession returned no sessionId. ' +
+                    'Nothing can be invoked or stopped without one, so this is raised rather than ' +
+                    'carried forward as an unusable session.');
+            }
+            let stopped = false;
+            return {
+                id: sessionId,
+                async execute(exec) {
+                    if (stopped) {
+                        throw new Error(`agentCoreCodeRunner: session ${sessionId} was stopped; open a new one to run more code.`);
+                    }
+                    const answer = await api.invoke({
+                        codeInterpreterIdentifier: options.identifier,
+                        sessionId,
+                        name: EXECUTE_CODE,
+                        arguments: {
+                            code: exec.code,
+                            ...(exec.language ?? req.language ?? options.language
+                                ? { language: exec.language ?? req.language ?? options.language ?? 'python' }
+                                : {}),
+                        },
+                    });
+                    const stdout = cut(answer.stdout, maxOutputChars);
+                    const stderr = cut(answer.stderr, maxOutputChars);
+                    const truncated = {
+                        ...(stdout.cut && { stdout: true }),
+                        ...(stderr.cut && { stderr: true }),
+                        ...((stdout.cut || stderr.cut) && {
+                            ofChars: Math.max(answer.stdout.length, answer.stderr.length),
+                        }),
+                    };
+                    return {
+                        // `isError` is the service's own verdict; a non-zero exit is ours.
+                        ok: answer.isError !== true && (answer.exitCode ?? 0) === 0,
+                        stdout: stdout.text,
+                        stderr: stderr.text,
+                        ...(answer.exitCode !== undefined && { exitCode: answer.exitCode }),
+                        ...(Object.keys(truncated).length > 0 && { truncated }),
+                    };
+                },
+                async stop() {
+                    if (stopped)
+                        return;
+                    stopped = true;
+                    try {
+                        await api.stopSession({
+                            codeInterpreterIdentifier: options.identifier,
+                            sessionId,
+                        });
+                    }
+                    catch (err) {
+                        // "Already gone" is the EXPECTED shape here, not an incident: the
+                        // session TTL is enforced by AWS, so a run that idled past it finds
+                        // the session collected. Anything else is re-raised, and the tier
+                        // reports it on `tools.session_close_failed`.
+                        if (!isAlreadyGone(err))
+                            throw err;
+                    }
+                },
+            };
+        },
+    };
+}
+exports.agentCoreCodeRunner = agentCoreCodeRunner;
+/** A session label from the isolation key — AWS's `name` is a human handle. */
+function sessionName(key) {
+    // Keep it recognisable and within the service's naming charset.
+    return `af-${key.replace(/[^A-Za-z0-9_-]/g, '-')}`.slice(0, 100);
+}
+function isAlreadyGone(err) {
+    const name = err instanceof Error ? err.name : '';
+    return name === 'ResourceNotFoundException' || name === 'ValidationException';
+}
+/**
+ * Map {@link AgentCoreCodeClientLike} onto the real SDK commands.
+ *
+ * Two things this function owns and nothing else does: the COMMAND FORM (see
+ * the module header), and the DRAIN of `InvokeCodeInterpreterResponse.stream`.
+ */
+function createCodeClient(options) {
+    let mod;
+    if (options._sdk) {
+        mod = options._sdk;
+    }
+    else {
+        try {
+            // Lazy peer-dep: only loaded when no _client/_sdk is injected and start() runs.
+            mod = (0, lazyRequire_js_1.lazyRequire)('@aws-sdk/client-bedrock-agentcore');
+        }
+        catch {
+            throw new Error('agentCoreCodeRunner requires the `@aws-sdk/client-bedrock-agentcore` peer dependency.\n' +
+                '  Install:  npm install @aws-sdk/client-bedrock-agentcore\n' +
+                '  Or pass `_client` for a pre-built or mock client.\n' +
+                '  For a local dev loop with no AWS at all, use `localCodeRunner()`.');
+        }
+    }
+    if (!mod.BedrockAgentCoreClient) {
+        throw new Error('agentCoreCodeRunner: `@aws-sdk/client-bedrock-agentcore` is installed but ' +
+            '`BedrockAgentCoreClient` was not found. Update the SDK.');
+    }
+    const sdk = new mod.BedrockAgentCoreClient({ ...(options.region && { region: options.region }) });
+    const send = async (Ctor, name, input) => {
+        if (!Ctor) {
+            throw new Error(`agentCoreCodeRunner: \`@aws-sdk/client-bedrock-agentcore\` is missing ${name}. ` +
+                'Upgrade the SDK, or pass `_client` with your own mapping.');
+        }
+        return sdk.send(new Ctor(input));
+    };
+    return {
+        async startSession(input) {
+            const r = (await send(mod.StartCodeInterpreterSessionCommand, 'StartCodeInterpreterSessionCommand', input));
+            return { ...(r?.sessionId !== undefined && { sessionId: r.sessionId }) };
+        },
+        async invoke(input) {
+            const r = (await send(mod.InvokeCodeInterpreterCommand, 'InvokeCodeInterpreterCommand', input));
+            return drainStream(r?.stream);
+        },
+        async stopSession(input) {
+            await send(mod.StopCodeInterpreterSessionCommand, 'StopCodeInterpreterSessionCommand', input);
+        },
+    };
+}
+/** Every modelled error member of the stream union, in SDK spelling. */
+const STREAM_ERROR_MEMBERS = [
+    'accessDeniedException',
+    'conflictException',
+    'internalServerException',
+    'resourceNotFoundException',
+    'serviceQuotaExceededException',
+    'throttlingException',
+    'validationException',
+];
+/**
+ * Drain the event stream into one answer.
+ *
+ * An ERROR MEMBER RAISES. This is the honesty line for this adapter: the SDK
+ * models seven failure shapes as ordinary members of the stream union, so an
+ * `AccessDeniedException` arrives as a value, not a rejection. Folding it in
+ * as empty output would report a clean run in which the code "printed
+ * nothing" — a silent success, at the exact moment an operator most needs the
+ * word "AccessDenied".
+ */
+async function drainStream(stream) {
+    if (!stream) {
+        throw new Error('agentCoreCodeRunner: InvokeCodeInterpreter returned no stream. The response carries ' +
+            'its payload as an event stream (`response.stream`), so an absent one is a broken ' +
+            'call, not an empty result.');
+    }
+    let stdout = '';
+    let stderr = '';
+    let exitCode;
+    let isError = false;
+    for await (const event of stream) {
+        for (const member of STREAM_ERROR_MEMBERS) {
+            const raised = event[member];
+            if (raised) {
+                const error = new Error(`agentCoreCodeRunner: ${member} from InvokeCodeInterpreter — ` +
+                    `${raised.message ?? 'no message supplied'}`);
+                error.name = member.charAt(0).toUpperCase() + member.slice(1);
+                throw error;
+            }
+        }
+        const result = event.result;
+        if (!result)
+            continue;
+        if (result.isError === true)
+            isError = true;
+        const structured = result.structuredContent;
+        if (structured) {
+            if (structured.stdout !== undefined)
+                stdout += structured.stdout;
+            if (structured.stderr !== undefined)
+                stderr += structured.stderr;
+            if (structured.exitCode !== undefined)
+                exitCode = structured.exitCode;
+        }
+        else {
+            // Fallback: a response that filled only the typed content blocks. Text
+            // blocks are the readable half; a binary/resource block is described by
+            // name rather than inlined, because inlining it is the bug this port exists
+            // to prevent.
+            for (const block of result.content ?? []) {
+                if (block.text !== undefined)
+                    stdout += block.text;
+                else if (block.name !== undefined)
+                    stdout += `[${block.type ?? 'resource'}: ${block.name}]`;
+            }
+        }
+    }
+    return {
+        stdout,
+        stderr,
+        ...(exitCode !== undefined && { exitCode }),
+        ...(isError && { isError }),
+    };
+}
+/** Cut to `max` characters, saying whether it cut. */
+function cut(text, max) {
+    if (text.length <= max)
+        return { text, cut: false };
+    return { text: text.slice(0, max), cut: true };
+}
+//# sourceMappingURL=agentcore.js.map

package/dist/adapters/code/agentcore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentcore.js","sourceRoot":"","sources":["../../../src/adapters/code/agentcore.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;;;AAGH,6DAAuD;AAuEvD,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,uEAAuE;AACvE,MAAM,YAAY,GAAG,aAAa,CAAC;AAEnC,SAAgB,mBAAmB,CAAC,OAAmC;IACrE,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,uBAAuB,CAAC;IACjD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAC1E,IAAI,MAA2C,CAAC;IAChD,MAAM,OAAO,GAAG,GAA4B,EAAE;QAC5C,MAAM,KAAK,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO;QACL,EAAE;QACF,KAAK,CAAC,KAAK,CAAC,GAAG;YACb,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC;gBACrC,yBAAyB,EAAE,OAAO,CAAC,UAAU;gBAC7C,wEAAwE;gBACxE,uEAAuE;gBACvE,uEAAuE;gBACvE,oDAAoD;gBACpD,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;gBAC1B,GAAG,CAAC,OAAO,CAAC,qBAAqB,KAAK,SAAS,IAAI;oBACjD,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;iBACrD,CAAC;aACH,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YACpC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,0EAA0E;oBACxE,+EAA+E;oBAC/E,yCAAyC,CAC5C,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,OAAO;gBACL,EAAE,EAAE,SAAS;gBACb,KAAK,CAAC,OAAO,CAAC,IAAI;oBAChB,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,IAAI,KAAK,CACb,gCAAgC,SAAS,gDAAgD,CAC1F,CAAC;oBACJ,CAAC;oBACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;wBAC9B,yBAAyB,EAAE,OAAO,CAAC,UAAU;wBAC7C,SAAS;wBACT,IAAI,EAAE,YAAY;wBAClB,SAAS,EAAE;4BACT,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;gCACnD,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,IAAI,QAAQ,EAAE;gCAC7E,CAAC,CAAC,EAAE,CAAC;yBACR;qBACF,CAAC,CAAC;oBACH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;oBAClD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;oBAClD,MAAM,SAAS,GAAG;wBAChB,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;wBACnC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;wBACnC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI;4BAChC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;yBAC9D,CAAC;qBACH,CAAC;oBACF,OAAO;wBACL,mEAAmE;wBACnE,EAAE,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC;wBAC3D,MAAM,EAAE,MAAM,CAAC,IAAI;wBACnB,MAAM,EAAE,MAAM,CAAC,IAAI;wBACnB,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;wBACnE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;qBACxD,CAAC;gBACJ,CAAC;gBACD,KAAK,CAAC,IAAI;oBACR,IAAI,OAAO;wBAAE,OAAO;oBACpB,OAAO,GAAG,IAAI,CAAC;oBACf,IAAI,CAAC;wBACH,MAAM,GAAG,CAAC,WAAW,CAAC;4BACpB,yBAAyB,EAAE,OAAO,CAAC,UAAU;4BAC7C,SAAS;yBACV,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,kEAAkE;wBAClE,oEAAoE;wBACpE,kEAAkE;wBAClE,8CAA8C;wBAC9C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;4BAAE,MAAM,GAAG,CAAC;oBACrC,CAAC;gBACH,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAzFD,kDAyFC;AAED,+EAA+E;AAC/E,SAAS,WAAW,CAAC,GAAW;IAC9B,gEAAgE;IAChE,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,OAAO,IAAI,KAAK,2BAA2B,IAAI,IAAI,KAAK,qBAAqB,CAAC;AAChF,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,OAAmC;IAC3D,IAAI,GAAkC,CAAC;IACvC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,gFAAgF;YAChF,GAAG,GAAG,IAAA,4BAAW,EAAgC,mCAAmC,CAAC,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,yFAAyF;gBACvF,6DAA6D;gBAC7D,uDAAuD;gBACvD,qEAAqE,CACxE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,4EAA4E;YAC1E,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,sBAAsB,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAElG,MAAM,IAAI,GAAG,KAAK,EAChB,IAA+C,EAC/C,IAAY,EACZ,KAAc,EACI,EAAE;QACpB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,yEAAyE,IAAI,IAAI;gBAC/E,2DAA2D,CAC9D,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,KAAK;YACtB,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CACnB,GAAG,CAAC,kCAAkC,EACtC,oCAAoC,EACpC,KAAK,CACN,CAAkC,CAAC;YACpC,OAAO,EAAE,GAAG,CAAC,CAAC,EAAE,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;QAC3E,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CACnB,GAAG,CAAC,4BAA4B,EAChC,8BAA8B,EAC9B,KAAK,CACN,CAAuE,CAAC;YACzE,OAAO,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,KAAK;YACrB,MAAM,IAAI,CAAC,GAAG,CAAC,iCAAiC,EAAE,mCAAmC,EAAE,KAAK,CAAC,CAAC;QAChG,CAAC;KACF,CAAC;AACJ,CAAC;AA0BD,wEAAwE;AACxE,MAAM,oBAAoB,GAAG;IAC3B,uBAAuB;IACvB,mBAAmB;IACnB,yBAAyB;IACzB,2BAA2B;IAC3B,+BAA+B;IAC/B,qBAAqB;IACrB,qBAAqB;CACb,CAAC;AAEX;;;;;;;;;GASG;AACH,KAAK,UAAU,WAAW,CACxB,MAAkE;IAElE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,sFAAsF;YACpF,mFAAmF;YACnF,4BAA4B,CAC/B,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,QAA4B,CAAC;IACjC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YAC7B,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,wBAAwB,MAAM,gCAAgC;oBAC5D,GAAG,MAAM,CAAC,OAAO,IAAI,qBAAqB,EAAE,CAC/C,CAAC;gBACF,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9D,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,GAAG,IAAI,CAAC;QAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAC5C,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC;YACjE,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC;YACjE,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS;gBAAE,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,uEAAuE;YACvE,wEAAwE;YACxE,4EAA4E;YAC5E,cAAc;YACd,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;gBACzC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC;qBAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;oBAAE,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,UAAU,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC;YAC9F,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM;QACN,MAAM;QACN,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3C,GAAG,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,CAAC;KAC5B,CAAC;AACJ,CAAC;AAED,sDAAsD;AACtD,SAAS,GAAG,CAAC,IAAY,EAAE,GAAW;IACpC,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACpD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC"}

package/dist/adapters/code/local.js

@@ -0,0 +1,200 @@
+"use strict";
+/**
+ * localCodeRunner — run code in a child process, on this machine.
+ *
+ * Pattern: Adapter (GoF) over `node:child_process`.
+ * Role:    the dev default behind the {@link CodeRunner} port. `agentCoreCodeRunner`
+ *          is the production swap; the tool code does not change.
+ * Emits:   nothing. The tool that owns the session emits.
+ *
+ * ── ISOLATION, NOT A SANDBOX. Read this before deploying it. ────────────────
+ * The name is `localCodeRunner`, never `sandboxedCodeRunner`, and the
+ * difference is not modesty — it is the whole security posture.
+ *
+ * What a child process DOES give you:
+ *   • a separate process and heap — a crash or an OOM takes the child, not you;
+ *   • kill on timeout, so runaway code has a ceiling;
+ *   • no inherited stdin, so nothing can block waiting for a terminal;
+ *   • an environment ALLOWLIST — `process.env` is not inherited (only `PATH`,
+ *     so the interpreter can be found), so an `AWS_SECRET_ACCESS_KEY` in your
+ *     shell is not in the model's reach;
+ *   • a working directory, by convention.
+ *
+ * What it does NOT give you, at all:
+ *   • a filesystem jail — the code can read and write anywhere this process can;
+ *   • a network jail — it can call out;
+ *   • CPU or memory limits beyond the timeout;
+ *   • any protection from code that deletes something outside `cwd`.
+ *
+ * So: a development loop, a trusted-input pipeline, a machine you would be
+ * relaxed about a shell script running on. NOT arbitrary model-written code
+ * from an untrusted user, on a host with anything on it. For that, run a real
+ * sandbox behind the same port — `agentCoreCodeRunner`, a gVisor container, a
+ * Firecracker VM — and keep the tool identical.
+ *
+ * **In-process `eval` / `node:vm` is refused outright.** Node's own
+ * documentation says `vm` is not a security mechanism ("do not use it to run
+ * untrusted code"), so shipping it as one would be theater: the same code
+ * reaching the same globals, wearing a word that makes a reader stop checking.
+ * A subprocess is genuinely a boundary; it is just a smaller one than the word
+ * "sandbox" implies. The library teaches refusals for things that are WRONG and
+ * honest names for things that are merely LIMITED — running local code in a dev
+ * loop is not wrong, and calling it a sandbox is.
+ *
+ * @example
+ *   const agent = Agent.create({ provider })
+ *     .tool(codeRunnerTool({ runner: localCodeRunner() }))
+ *     .build();
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.localCodeRunner = void 0;
+const lazyRequire_js_1 = require("../../lib/lazyRequire.js");
+const DEFAULT_TIMEOUT_MS = 30_000;
+const DEFAULT_MAX_OUTPUT_CHARS = 8_000;
+/** How each supported language is invoked when no `command` was given. */
+const DEFAULT_COMMANDS = {
+    javascript: ['node', '-e'],
+    js: ['node', '-e'],
+    node: ['node', '-e'],
+    typescript: ['npx', 'tsx', '-e'],
+    ts: ['npx', 'tsx', '-e'],
+    python: ['python3', '-c'],
+    python3: ['python3', '-c'],
+    py: ['python3', '-c'],
+};
+function localCodeRunner(options = {}) {
+    const id = options.id ?? 'local-code-runner';
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const maxOutputChars = options.maxOutputChars ?? DEFAULT_MAX_OUTPUT_CHARS;
+    return {
+        id,
+        start(req) {
+            // A local session is a NAME and a working directory, not a live handle:
+            // each execution is its own process. Saying so matters — a consumer who
+            // assumed variables carry between calls (they do on AgentCore, whose
+            // session is a live kernel) would silently get different semantics.
+            // `codeRunnerTool` states this in the tool description it hands the model.
+            const sessionId = `local:${req.key}`;
+            let stopped = false;
+            return Promise.resolve({
+                id: sessionId,
+                async execute(exec) {
+                    if (stopped) {
+                        throw new Error(`localCodeRunner: session ${sessionId} was stopped; open a new one to run more code.`);
+                    }
+                    const language = exec.language ?? req.language ?? 'javascript';
+                    const command = options.command ?? DEFAULT_COMMANDS[language.toLowerCase()];
+                    if (!command || command.length === 0) {
+                        throw new Error(`localCodeRunner: no command for language '${language}'. ` +
+                            `Known: ${Object.keys(DEFAULT_COMMANDS).join(', ')}. ` +
+                            "Pass `command: ['your-interpreter', '-c']` for anything else.");
+                    }
+                    const [file, ...args] = command;
+                    const raw = await runChild(resolveChildProcess(options), file, [...args, exec.code], {
+                        cwd: options.cwd ?? process.cwd(),
+                        // ALLOWLIST. `process.env` is deliberately NOT spread in — only
+                        // PATH, so the OS can find the interpreter, and it is overridable.
+                        env: { PATH: process.env.PATH ?? '', ...(options.env ?? {}) },
+                        timeoutMs: exec.timeoutMs ?? timeoutMs,
+                        ...(exec.signal && { signal: exec.signal }),
+                    });
+                    const stdout = cut(raw.stdout, maxOutputChars);
+                    const stderr = cut(raw.stderr, maxOutputChars);
+                    const truncated = {
+                        ...(stdout.cut && { stdout: true }),
+                        ...(stderr.cut && { stderr: true }),
+                        ...((stdout.cut || stderr.cut) && {
+                            ofChars: Math.max(raw.stdout.length, raw.stderr.length),
+                        }),
+                    };
+                    return {
+                        ok: raw.exitCode === 0,
+                        stdout: stdout.text,
+                        stderr: stderr.text,
+                        ...(raw.exitCode !== undefined && { exitCode: raw.exitCode }),
+                        // Present IFF something was actually cut — an empty object here
+                        // would read as "truncation happened, magnitude unknown".
+                        ...(Object.keys(truncated).length > 0 && { truncated }),
+                    };
+                },
+                stop() {
+                    // Nothing to release: each execution already ended with its process.
+                    // Idempotent, and it refuses later executions rather than silently
+                    // starting a fresh process under a session the caller closed.
+                    stopped = true;
+                    return Promise.resolve();
+                },
+            });
+        },
+    };
+}
+exports.localCodeRunner = localCodeRunner;
+function resolveChildProcess(options) {
+    if (options._childProcess)
+        return options._childProcess;
+    try {
+        return (0, lazyRequire_js_1.lazyRequire)('node:child_process');
+    }
+    catch {
+        throw new Error('localCodeRunner needs `node:child_process`, which this runtime does not provide ' +
+            '(a browser bundle, or a restricted worker). Use a remote runner — ' +
+            '`agentCoreCodeRunner` — or supply your own `CodeRunner`.');
+    }
+}
+/**
+ * One child process, promisified.
+ *
+ * A NON-ZERO EXIT IS NOT A REJECTION. Code that fails is a normal answer here —
+ * the model wrote it, it needs to read the traceback, and turning that into a
+ * thrown tool error would replace the one thing that teaches the next attempt
+ * with `error: true`. What DOES reject is the runner failing to run at all
+ * (interpreter missing, timeout, abort), because that is not the code's answer.
+ */
+async function runChild(mod, file, args, opts) {
+    const execFile = mod.execFile;
+    if (typeof execFile !== 'function') {
+        throw new Error('localCodeRunner: `node:child_process` resolved but `execFile` is missing.');
+    }
+    return new Promise((resolve, reject) => {
+        execFile(file, args, {
+            cwd: opts.cwd,
+            env: opts.env,
+            timeout: opts.timeoutMs,
+            // Generous, because the CUT is ours to make and to report — letting the
+            // runtime's own buffer overflow would surface as an error whose message
+            // says nothing about how much was lost.
+            maxBuffer: 32 * 1024 * 1024,
+            ...(opts.signal && { signal: opts.signal }),
+        }, (error, stdout, stderr) => {
+            if (!error) {
+                resolve({ stdout: String(stdout ?? ''), stderr: String(stderr ?? ''), exitCode: 0 });
+                return;
+            }
+            if (error.killed === true) {
+                reject(new Error(`localCodeRunner: the code did not finish within ${opts.timeoutMs}ms and the ` +
+                    'process was killed. Raise `timeoutMs`, or have the code do less per call.'));
+                return;
+            }
+            if (typeof error.code === 'string') {
+                // ENOENT and friends — the interpreter itself is not here. Naming it
+                // beats handing the model a traceback it cannot act on.
+                reject(new Error(`localCodeRunner: could not run '${file}' (${error.code}). ` +
+                    'Install the interpreter, or pass `command` pointing at one.'));
+                return;
+            }
+            // A real non-zero exit: the code ran and failed. That IS the result.
+            resolve({
+                stdout: String(stdout ?? ''),
+                stderr: String(stderr ?? '') || error.message,
+                exitCode: typeof error.code === 'number' ? error.code : 1,
+            });
+        });
+    });
+}
+/** Cut to `max` characters, saying whether it cut. */
+function cut(text, max) {
+    if (text.length <= max)
+        return { text, cut: false };
+    return { text: text.slice(0, max), cut: true };
+}
+//# sourceMappingURL=local.js.map

package/dist/adapters/code/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../../src/adapters/code/local.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;;;AAGH,6DAAuD;AA4DvD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAEvC,0EAA0E;AAC1E,MAAM,gBAAgB,GAAgD;IACpE,UAAU,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;IAC1B,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;IAClB,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;IACpB,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC;IAChC,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC;IACxB,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,OAAO,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC;IAC1B,EAAE,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC;CACtB,CAAC;AAEF,SAAgB,eAAe,CAAC,UAAkC,EAAE;IAClE,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,mBAAmB,CAAC;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAE1E,OAAO;QACL,EAAE;QACF,KAAK,CAAC,GAAG;YACP,wEAAwE;YACxE,wEAAwE;YACxE,qEAAqE;YACrE,oEAAoE;YACpE,2EAA2E;YAC3E,MAAM,SAAS,GAAG,SAAS,GAAG,CAAC,GAAG,EAAE,CAAC;YACrC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,EAAE,EAAE,SAAS;gBACb,KAAK,CAAC,OAAO,CAAC,IAAI;oBAChB,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,IAAI,KAAK,CACb,4BAA4B,SAAS,gDAAgD,CACtF,CAAC;oBACJ,CAAC;oBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,YAAY,CAAC;oBAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;oBAC5E,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACrC,MAAM,IAAI,KAAK,CACb,6CAA6C,QAAQ,KAAK;4BACxD,UAAU,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;4BACtD,+DAA+D,CAClE,CAAC;oBACJ,CAAC;oBACD,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC;oBAChC,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,mBAAmB,CAAC,OAAO,CAAC,EAC5B,IAAc,EACd,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EACpB;wBACE,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;wBACjC,gEAAgE;wBAChE,mEAAmE;wBACnE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;wBAC7D,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,SAAS;wBACtC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;qBAC5C,CACF,CAAC;oBACF,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;oBAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;oBAC/C,MAAM,SAAS,GAAG;wBAChB,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;wBACnC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;wBACnC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI;4BAChC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;yBACxD,CAAC;qBACH,CAAC;oBACF,OAAO;wBACL,EAAE,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;wBACtB,MAAM,EAAE,MAAM,CAAC,IAAI;wBACnB,MAAM,EAAE,MAAM,CAAC,IAAI;wBACnB,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;wBAC7D,gEAAgE;wBAChE,0DAA0D;wBAC1D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;qBACxD,CAAC;gBACJ,CAAC;gBACD,IAAI;oBACF,qEAAqE;oBACrE,mEAAmE;oBACnE,8DAA8D;oBAC9D,OAAO,GAAG,IAAI,CAAC;oBACf,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;aACF,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AA3ED,0CA2EC;AAED,SAAS,mBAAmB,CAAC,OAA+B;IAC1D,IAAI,OAAO,CAAC,aAAa;QAAE,OAAO,OAAO,CAAC,aAAa,CAAC;IACxD,IAAI,CAAC;QACH,OAAO,IAAA,4BAAW,EAAyB,oBAAoB,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,kFAAkF;YAChF,oEAAoE;YACpE,0DAA0D,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAQD;;;;;;;;GAQG;AACH,KAAK,UAAU,QAAQ,CACrB,GAA2B,EAC3B,IAAY,EACZ,IAAuB,EACvB,IAKC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,IAAI,OAAO,CAAe,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,QAAQ,CACN,IAAI,EACJ,IAAI,EACJ;YACE,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,OAAO,EAAE,IAAI,CAAC,SAAS;YACvB,wEAAwE;YACxE,wEAAwE;YACxE,wCAAwC;YACxC,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;YAC3B,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;SAC5C,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACxB,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC1B,MAAM,CACJ,IAAI,KAAK,CACP,mDAAmD,IAAI,CAAC,SAAS,aAAa;oBAC5E,2EAA2E,CAC9E,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnC,qEAAqE;gBACrE,wDAAwD;gBACxD,MAAM,CACJ,IAAI,KAAK,CACP,mCAAmC,IAAI,MAAM,KAAK,CAAC,IAAI,KAAK;oBAC1D,6DAA6D,CAChE,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,qEAAqE;YACrE,OAAO,CAAC;gBACN,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;gBAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO;gBAC7C,QAAQ,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aAC1D,CAAC,CAAC;QACL,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sDAAsD;AACtD,SAAS,GAAG,CAAC,IAAY,EAAE,GAAW;IACpC,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACpD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC"}