agenticreplay 0.1.0 → 0.1.2

package/node_modules/@agenticreplay/adapters/dist/contract.js

@@ -0,0 +1,460 @@
+import { mkdir, mkdtemp, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { isDeepStrictEqual } from 'node:util';
+import nodePath from 'node:path';
+import { PLACEHOLDER_KEY, readEnv } from './env.js';
+/**
+ * The adapter contract: the behaviour every adapter must have for capture to work at all.
+ *
+ * Adapters break silently. A harness renames the variable it reads for its API origin, the adapter
+ * keeps setting the old one, and every run still *looks* fine — the agent answers, the exit code is
+ * zero, and the trace is empty. Each check below exists because breaking it produces exactly that
+ * shape of failure: nothing to see until a user files a confusing bug.
+ */
+/** Every check, in the order they run. A failing check never stops the others. */
+export const CONTRACT_CHECKS = [
+    'id-format',
+    'detect-resolves',
+    'prepare-shape',
+    'redirects-model-traffic',
+    'no-invented-keys',
+    'no-ctx-mutation',
+    'deterministic',
+    'no-foreign-paths',
+    'harness-versions',
+    'artifacts-resettable',
+];
+/** At least one of these must be redirected, or the proxy sees nothing at all. */
+export const MODEL_BASE_URL_VARS = [
+    'ANTHROPIC_BASE_URL',
+    'OPENAI_BASE_URL',
+    'OPENAI_API_BASE',
+];
+/**
+ * Anything shaped like an API origin, including variables no harness reads yet.
+ *
+ * `_HOST` is in the set because goose reads `OPENAI_HOST` and `ANTHROPIC_HOST` and neither of the
+ * `_BASE_URL` spellings for the second — an origin is an origin whatever a harness calls it, and a
+ * pattern that only knew two spellings would have let an adapter point one at the provider while
+ * the checks reported it redirected. `AGENTICREPLAY_INSTRUMENT_HOSTS` names hostnames rather than an origin
+ * and ends `HOSTS`, so it is not caught by this.
+ */
+const BASE_URL_LIKE = /(?:_BASE_URL|_API_BASE|_HOST)$/;
+/** Anything shaped like a credential. Over-matching here only ever costs a clearer error. */
+const CREDENTIAL_LIKE = /(?:KEY|TOKEN|SECRET|PASSWORD)$/;
+const ID_FORMAT = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+/** A port no adapter would plausibly hardcode: the checks must follow `ctx.proxyUrl`. */
+const CONTRACT_PROXY = 'http://127.0.0.1:49831';
+const PROBE_KEY = 'agenticreplay-contract-probe';
+/** Returned by a check that does not apply to this adapter, so it is neither passed nor failed. */
+const SKIP = Symbol('skip');
+/**
+ * Runs one adapter through the contract. Never throws: a runner that dies on a broken adapter is
+ * the same class of bug it is trying to catch, and callers batch this over a whole registry.
+ */
+export async function checkAdapterContract(adapter, opts = {}) {
+    const root = await mkdtemp(join(tmpdir(), 'agenticreplay-contract-'));
+    const passed = [];
+    const failed = [];
+    try {
+        const base = await baseContext(root, opts.ctx ?? {});
+        const primary = await attempt(adapter, base);
+        const runners = [
+            ['id-format', async () => idFormat(adapter)],
+            ['detect-resolves', () => detectResolves(adapter, base, join(root, 'missing-workspace'))],
+            ['prepare-shape', async () => prepareShape(primary)],
+            [
+                'redirects-model-traffic',
+                async () => redirectsModelTraffic(primary, base, adapter.capture ?? 'env'),
+            ],
+            ['no-invented-keys', () => noInventedKeys(adapter, base)],
+            ['no-ctx-mutation', () => noCtxMutation(adapter, base)],
+            ['deterministic', () => deterministic(adapter, base)],
+            ['no-foreign-paths', async () => noForeignPaths(primary, base)],
+            ['harness-versions', async () => harnessVersions(adapter)],
+            ['artifacts-resettable', async () => artifactsResettable(adapter)],
+        ];
+        for (const [check, run] of runners) {
+            let outcome;
+            try {
+                outcome = await run();
+            }
+            catch (err) {
+                outcome = `the check itself threw: ${describeError(err)}`;
+            }
+            if (outcome === SKIP)
+                continue;
+            if (outcome === undefined)
+                passed.push(check);
+            else
+                failed.push({ check, detail: outcome });
+        }
+    }
+    finally {
+        await rm(root, { recursive: true, force: true });
+    }
+    return { adapter: adapter.id, passed, failed, ok: failed.length === 0 };
+}
+/** One line for a pass, one line per failure otherwise — the shape a CI log wants. */
+export function formatContractResult(result) {
+    if (result.ok)
+        return `${result.adapter}: ok (${result.passed.length} checks)`;
+    const total = result.passed.length + result.failed.length;
+    const lines = result.failed.map((f) => `  - ${f.check}: ${f.detail}`);
+    return [`${result.adapter}: ${result.failed.length}/${total} checks failed`, ...lines].join('\n');
+}
+async function attempt(adapter, base) {
+    try {
+        return { launch: await adapter.prepare(clone(base)) };
+    }
+    catch (err) {
+        return { error: describeError(err) };
+    }
+}
+async function baseContext(root, over) {
+    const cwd = over.cwd ?? join(root, 'work');
+    const runDir = over.runDir ?? join(root, 'run');
+    // Only create the directories we invented: a caller-supplied path is theirs to manage.
+    if (over.cwd === undefined)
+        await mkdir(cwd, { recursive: true });
+    if (over.runDir === undefined)
+        await mkdir(runDir, { recursive: true });
+    return {
+        runId: 'run_contract',
+        proxyUrl: CONTRACT_PROXY,
+        // An adapter that takes its command from argv (generic-openai) gets one without special-casing.
+        userArgs: ['agenticreplay-contract-agent', '--task', 'contract check'],
+        env: {},
+        ...over,
+        cwd,
+        runDir,
+    };
+}
+function clone(ctx) {
+    return structuredClone(ctx);
+}
+function describeError(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+function notVerified(check) {
+    return `not verified: prepare() rejected (see ${check})`;
+}
+function idFormat(adapter) {
+    const { id } = adapter;
+    if (typeof id !== 'string' || id.trim() === '') {
+        return ('id is empty; it is how a user names the adapter on the command line and how a trace ' +
+            'records which adapter produced it');
+    }
+    if (!ID_FORMAT.test(id)) {
+        return `id '${id}' is not lowercase kebab-case; ids appear in 'agenticreplay record <id>', in run manifests and in URLs, so mixed case and underscores turn into support questions`;
+    }
+    return undefined;
+}
+async function detectResolves(adapter, base, missing) {
+    const probes = [
+        ['a directory that exists', base.cwd],
+        ['a path that does not exist', missing],
+    ];
+    for (const [label, dir] of probes) {
+        let value;
+        try {
+            value = await adapter.detect(dir);
+        }
+        catch (err) {
+            return `detect() rejected for ${label}: ${describeError(err)}. AdapterRegistry treats a throwing detector as "no", so this adapter would silently never be auto-selected — and any caller that does not guard loses detection for every other adapter too. Answer false instead`;
+        }
+        if (typeof value !== 'boolean') {
+            return `detect() resolved ${JSON.stringify(value)} for ${label}; callers write 'if (await adapter.detect(cwd))', so any truthy value silently claims the workspace`;
+        }
+    }
+    return undefined;
+}
+function prepareShape(primary) {
+    if ('error' in primary)
+        return `prepare() rejected: ${primary.error}`;
+    const { launch } = primary;
+    const problems = [];
+    if (typeof launch?.command !== 'string' || launch.command === '') {
+        problems.push('command must be a non-empty string — it is what gets spawned');
+    }
+    if (!Array.isArray(launch?.args) || !launch.args.every((a) => typeof a === 'string')) {
+        problems.push('args must be an array of strings, never a pre-joined command line');
+    }
+    if (!isStringRecord(launch?.env)) {
+        problems.push('env must be an object of string values, which is all a child process can carry');
+    }
+    return problems.length > 0 ? problems.join('; ') : undefined;
+}
+/**
+ * The check that catches adapter rot. If the harness moves to a new variable and nobody updates
+ * the adapter, capture returns nothing while every other signal — exit code, output, the agent's
+ * own answers — still says the run worked.
+ */
+function redirectsModelTraffic(primary, base, capture) {
+    if ('error' in primary)
+        return notVerified('prepare-shape');
+    const env = primary.launch.env;
+    if (!isStringRecord(env))
+        return notVerified('prepare-shape');
+    // Two mechanisms put no base-URL variable in the launch environment, and neither is the broken
+    // adapter this check exists to catch.
+    //
+    // `transport` redirects nothing on purpose: `--tls-intercept` terminates the agent's own TLS,
+    // and the run — not the adapter — puts `HTTPS_PROXY` and the run CA into the child's
+    // environment. `config` redirects through a file instead, for a harness that keeps its origin
+    // in one: the environment carries only the pointer to the directory that file lives in, and
+    // whether the file redirects anything cannot be read from `env`. Worse, it is usually a copy of
+    // the operator's own config, so under this check's synthetic workspace there is nothing to copy
+    // and the honest launch is an untouched one — which this check would read as a redirect that
+    // failed. Both are verified where the mechanism is visible, in the adapter's own tests.
+    //
+    // Either way the exemption is narrow: both are held to every other check, including the one
+    // below that any origin they *do* set must point at the proxy.
+    if (capture === 'transport' || capture === 'config') {
+        const stray = Object.entries(env)
+            .filter(([name]) => BASE_URL_LIKE.test(name))
+            .filter(([, value]) => !pointsAtHost(value, hostOf(base.proxyUrl) ?? base.proxyUrl));
+        if (stray.length > 0) {
+            const names = stray.map(([name, value]) => `${name}=${value}`).join(', ');
+            return `${names} does not point at the proxy (${base.proxyUrl}); traffic on that origin goes straight to the provider and never reaches the trace`;
+        }
+        return SKIP;
+    }
+    // Any base-URL-shaped variable counts, not only the three agenticreplay happens to know: a harness with
+    // its own spelling — grok-cli reads `GROK_BASE_URL` — is redirected just as effectively. So is
+    // an adapter that installs the fetch hook instead, for a harness that reads no variable at all.
+    // Narrowing this to three names would have failed both of those for setting the wrong thing,
+    // when what they set is the only thing that works.
+    //
+    // This never detected adapter *rot* on its own — an adapter still setting a variable the harness
+    // renamed sets a base-URL variable too. The harness fixtures are what catch that, by recording
+    // the exact names. What this catches is an adapter that redirects nothing whatsoever.
+    const redirected = Object.entries(env).filter(([name, value]) => BASE_URL_LIKE.test(name) && value !== '');
+    const hooked = readEnv(env, 'AGENTICREPLAY_PROXY_URL') !== undefined;
+    if (redirected.length === 0 && !hooked) {
+        return `prepare() set no base-url variable (none of ${MODEL_BASE_URL_VARS.join(', ')}, nor anything else ending _BASE_URL or _API_BASE) and installed no fetch hook, so nothing points the harness at the proxy and the run records no model traffic at all`;
+    }
+    const host = hostOf(base.proxyUrl) ?? base.proxyUrl;
+    const wrong = Object.entries(env)
+        .filter(([name]) => BASE_URL_LIKE.test(name))
+        .filter(([, value]) => !pointsAtHost(value, host));
+    if (wrong.length > 0) {
+        const names = wrong.map(([name, value]) => `${name}=${value}`).join(', ');
+        return `${names} does not point at the proxy (${base.proxyUrl}); traffic on that origin goes straight to the provider and never reaches the trace`;
+    }
+    return undefined;
+}
+/**
+ * An invented credential is not a convenience: harnesses pick a provider from which credentials
+ * are present, so fabricating one can change which model the run calls. `passKey` substitutes an
+ * obviously-fake placeholder for the provider the harness actually speaks; anything beyond that
+ * has to come from the user's own environment.
+ */
+async function noInventedKeys(adapter, base) {
+    const bare = await attempt(adapter, { ...base, env: {} });
+    if ('error' in bare)
+        return notVerified('prepare-shape');
+    if (!isStringRecord(bare.launch.env))
+        return notVerified('prepare-shape');
+    const invented = Object.entries(bare.launch.env).filter(([name]) => CREDENTIAL_LIKE.test(name));
+    const fabricated = invented
+        .filter(([, value]) => value !== PLACEHOLDER_KEY)
+        .map(([name]) => name);
+    if (fabricated.length > 0) {
+        // Never echo the value: it may be a real credential read from somewhere unexpected.
+        return `prepare() set ${fabricated.join(', ')} to a value ctx.env did not contain. If the harness refuses to start without a credential use passKey(), which substitutes the recognisable placeholder '${PLACEHOLDER_KEY}'`;
+    }
+    const families = [...new Set(invented.map(([name]) => providerFamily(name)))];
+    if (families.length < 2)
+        return undefined;
+    // With one provider's credential already in hand, inventing the other's is what flips the
+    // harness's provider auto-selection — and a recorded run then answers from a different model
+    // than the same command would without recording.
+    for (const family of families) {
+        const donor = invented.find(([name]) => providerFamily(name) === family)?.[0];
+        if (donor === undefined)
+            continue;
+        const probeEnv = { [donor]: PROBE_KEY };
+        const probe = await attempt(adapter, { ...base, env: probeEnv });
+        if ('error' in probe)
+            return notVerified('prepare-shape');
+        const stillInvented = Object.keys(probe.launch.env).filter((name) => CREDENTIAL_LIKE.test(name) &&
+            providerFamily(name) !== family &&
+            readEnv(probeEnv, name) === undefined);
+        if (stillInvented.length > 0) {
+            return `with only ${donor} in ctx.env, prepare() still invents ${stillInvented.join(', ')}; a harness that picks its provider from the credentials it can see will pick a different one under recording. Use passThrough() for a second provider`;
+        }
+    }
+    return undefined;
+}
+/**
+ * `agenticreplay record` hands the adapter `process.env` itself as `ctx.env` and the parsed argv as
+ * `ctx.userArgs`, so a mutation edits the recorder's own environment and the argv it writes into
+ * the manifest — which is then replayed.
+ */
+async function noCtxMutation(adapter, base) {
+    const ctx = clone(base);
+    const before = structuredClone(ctx);
+    try {
+        await adapter.prepare(ctx);
+    }
+    catch {
+        return notVerified('prepare-shape');
+    }
+    if (isDeepStrictEqual(ctx, before))
+        return undefined;
+    const fields = Object.keys(before).filter((key) => !isDeepStrictEqual(ctx[key], before[key]));
+    return `prepare() mutated ctx.${fields.join(', ctx.')}; the caller owns that object and reuses it — copy instead, e.g. args: [...ctx.userArgs]`;
+}
+/** Replay prepares the same context again. Anything that drifts turns into a false divergence. */
+async function deterministic(adapter, base) {
+    const first = await attempt(adapter, base);
+    const second = await attempt(adapter, base);
+    if ('error' in first || 'error' in second)
+        return notVerified('prepare-shape');
+    const drifted = ['command', 'args', 'env'].filter((key) => !isDeepStrictEqual(first.launch[key], second.launch[key]));
+    if (drifted.length === 0)
+        return undefined;
+    return `two prepare() calls on the same ctx disagreed on ${drifted.join(', ')}; replay prepares the same context again, so anything random or time-based here reads as a divergence`;
+}
+/**
+ * Cheap leak check. Launch env is written into the run manifest and shared with bug reports, so an
+ * absolute path from outside the run is both a privacy leak and a value nobody else can reproduce.
+ */
+function noForeignPaths(primary, base) {
+    if ('error' in primary)
+        return notVerified('prepare-shape');
+    const env = primary.launch.env;
+    if (!isStringRecord(env))
+        return notVerified('prepare-shape');
+    for (const [name, value] of Object.entries(env)) {
+        for (const candidate of absolutePaths(value)) {
+            if (isInside(candidate, base.runDir) || isInside(candidate, base.cwd))
+                continue;
+            return `env ${name} contains ${candidate}, which is outside ctx.runDir and ctx.cwd; write scratch config under ctx.runDir so the launch is reproducible on a machine that is not yours`;
+        }
+    }
+    return undefined;
+}
+function harnessVersions(adapter) {
+    const range = adapter.harnessVersions;
+    if (range === undefined)
+        return SKIP;
+    if (typeof range !== 'string' || range.trim() === '') {
+        return 'harnessVersions is set but empty; leave it off entirely rather than declaring a range that matches nothing';
+    }
+    return isSemverRange(range)
+        ? undefined
+        : `harnessVersions '${range}' is not a semver range; it is the field that says which harness versions this adapter was actually verified against, so 'latest' or a date says nothing`;
+}
+/**
+ * A path a replay resets has to be one the recording captured.
+ *
+ * `agenticreplay replay` clears `artifacts.resetBeforeReplay` and restores the recording's initial tree over
+ * the top, which is what puts those paths back to where the run began. But `agenticreplay record` forces
+ * only `artifacts.capture`, so a reset path outside it is a path the recording never held: the
+ * clear happens, the restore writes nothing there, and the harness starts from an empty directory
+ * rather than from the state the recording can answer for. The declaration reads as though it
+ * describes the recording; this is where it has to.
+ *
+ * Prefix-wise rather than exact, because `capture: ['cache']` covers `resetBeforeReplay:
+ * ['cache/**']` — the same directory said twice with different precision.
+ */
+function artifactsResettable(adapter) {
+    const artifacts = adapter.artifacts;
+    const reset = artifacts?.resetBeforeReplay ?? [];
+    if (reset.length === 0)
+        return SKIP;
+    const capture = artifacts?.capture ?? [];
+    const covered = (path) => capture.some((c) => {
+        const bare = c.replace(/[\\/]+$/, '');
+        return path === bare || path.startsWith(`${bare}/`) || path.startsWith(`${bare}\\`);
+    });
+    const orphans = reset.filter((path) => !covered(path));
+    if (orphans.length === 0)
+        return undefined;
+    return (`artifacts.resetBeforeReplay names ${orphans.join(', ')}, which artifacts.capture does not ` +
+        'cover. A replay deletes those paths and restores the recording over the top, and the ' +
+        'recording holds only what capture declared — so they would be reset to empty rather than to ' +
+        'the state the run started from');
+}
+function isStringRecord(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        !Array.isArray(value) &&
+        Object.values(value).every((v) => typeof v === 'string'));
+}
+function hostOf(url) {
+    try {
+        return new URL(url).host;
+    }
+    catch {
+        return undefined;
+    }
+}
+function pointsAtHost(value, host) {
+    const valueHost = hostOf(value);
+    return valueHost !== undefined ? valueHost === host : value.includes(host);
+}
+/** `ANTHROPIC_API_KEY` and `ANTHROPIC_AUTH_TOKEN` are one provider; `OPENAI_API_KEY` is another. */
+function providerFamily(name) {
+    return name.split('_')[0] ?? name;
+}
+const URL_LIKE = /\b[a-z][a-z0-9+.-]*:\/\/\S+/gi;
+const ABSOLUTE_PATH = /(?:^|[\s:;,"'=])((?:[A-Za-z]:[\\/]|\/)[^\s:;,"'=]*)/g;
+/** Absolute-looking paths in a value, ignoring the path component of any URL inside it. */
+function absolutePaths(value) {
+    const withoutUrls = value.replace(URL_LIKE, ' ');
+    const found = [];
+    for (const match of withoutUrls.matchAll(ABSOLUTE_PATH)) {
+        const path = match[1];
+        // One segment (`/v1`, `/tmp`) is not a leak; a leak has a directory in it.
+        if (path !== undefined && path.split(/[\\/]/).filter(Boolean).length > 1)
+            found.push(path);
+    }
+    return found;
+}
+/**
+ * Whether `path` is `base` or sits under it.
+ *
+ * Delegated to the platform's own path rules rather than compared as strings. The prefix used to be
+ * built with a forward slash only, so on Windows — where `path.join` spells the whole path with
+ * backslashes — a file genuinely inside `runDir` never matched, and `no-foreign-paths` called the
+ * run's own scratch file foreign. That failed the contract for every adapter that puts a runDir
+ * path into the environment: grok, openclaw and node. On POSIX the comparison was true either way,
+ * so CI never saw it.
+ *
+ * Normalising the separators by hand would have swapped one wrong answer for another: a backslash
+ * is a legal character in a POSIX filename, so `/tmp/run` + a file called `run\evil` would have
+ * read as contained when it is not — a leak check answering yes to the thing it exists to catch.
+ *
+ * `impl` is a parameter so both flavours are reachable from a test on either OS. The Windows
+ * behaviour is the whole reason this function was touched, and a test that can only run on Windows
+ * is how the original slipped through.
+ */
+export function isInside(path, base, impl = nodePath) {
+    if (base === '')
+        return false;
+    const rel = impl.relative(base, path);
+    return rel === '' || (!rel.startsWith('..') && !impl.isAbsolute(rel));
+}
+const SEMVER_COMPARATOR = /^(?:[<>]=?|=|[~^])?v?(?:\d+|[xX*])(?:\.(?:\d+|[xX*]))?(?:\.(?:\d+|[xX*]))?(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
+/**
+ * Shape check only — no semver dependency, and a range that parses is not a range anyone verified.
+ * It exists to catch `latest`, `1.0` typoed as `v1,0`, and dates.
+ */
+function isSemverRange(range) {
+    const parts = range.split('||');
+    return parts.every((part) => {
+        const tokens = part
+            .replace(/([<>=~^]+)\s+/g, '$1')
+            .trim()
+            .split(/\s+/)
+            .filter((t) => t !== '');
+        if (tokens.length === 0)
+            return false;
+        return tokens.every((token) => token === '*' || token === '-' || SEMVER_COMPARATOR.test(token));
+    });
+}
+//# sourceMappingURL=contract.js.map

package/node_modules/@agenticreplay/adapters/dist/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,QAAQ,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAEpD;;;;;;;GAOG;AAEH,kFAAkF;AAClF,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,WAAW;IACX,iBAAiB;IACjB,eAAe;IACf,yBAAyB;IACzB,kBAAkB;IAClB,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,kBAAkB;IAClB,sBAAsB;CACd,CAAC;AA0BX,kFAAkF;AAClF,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,oBAAoB;IACpB,iBAAiB;IACjB,iBAAiB;CACT,CAAC;AAEX;;;;;;;;GAQG;AACH,MAAM,aAAa,GAAG,gCAAgC,CAAC;AAEvD,6FAA6F;AAC7F,MAAM,eAAe,GAAG,gCAAgC,CAAC;AAEzD,MAAM,SAAS,GAAG,4BAA4B,CAAC;AAE/C,yFAAyF;AACzF,MAAM,cAAc,GAAG,wBAAwB,CAAC;AAEhD,MAAM,SAAS,GAAG,8BAA8B,CAAC;AAEjD,mGAAmG;AACnG,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;AAI5B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAgB,EAChB,OAAwB,EAAE;IAE1B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACtE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAwD;YACnE,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC5C,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC;YACzF,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACpD;gBACE,yBAAyB;gBACzB,KAAK,IAAI,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;aAC3E;YACD,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACzD,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACvD,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACrD,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC/D,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAC1D,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;SACnE,CAAC;QAEF,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;YACnC,IAAI,OAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,GAAG,EAAE,CAAC;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,2BAA2B,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5D,CAAC;YACD,IAAI,OAAO,KAAK,IAAI;gBAAE,SAAS;YAC/B,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;gBACzC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,oBAAoB,CAAC,MAAsB;IACzD,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,GAAG,MAAM,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,UAAU,CAAC;IAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,gBAAgB,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpG,CAAC;AAID,KAAK,UAAU,OAAO,CAAC,OAAgB,EAAE,IAAmB;IAC1D,IAAI,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;IACvC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAA4B;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChD,uFAAuF;IACvF,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,OAAO;QACL,KAAK,EAAE,cAAc;QACrB,QAAQ,EAAE,cAAc;QACxB,gGAAgG;QAChG,QAAQ,EAAE,CAAC,8BAA8B,EAAE,QAAQ,EAAE,gBAAgB,CAAC;QACtE,GAAG,EAAE,EAAE;QACP,GAAG,IAAI;QACP,GAAG;QACH,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,GAAkB;IAC/B,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,KAAoB;IACvC,OAAO,yCAAyC,KAAK,GAAG,CAAC;AAC3D,CAAC;AAED,SAAS,QAAQ,CAAC,OAAgB;IAChC,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC;IACvB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/C,OAAO,CACL,sFAAsF;YACtF,mCAAmC,CACpC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACxB,OAAO,OAAO,EAAE,mKAAmK,CAAC;IACtL,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAAgB,EAChB,IAAmB,EACnB,OAAe;IAEf,MAAM,MAAM,GAA4B;QACtC,CAAC,yBAAyB,EAAE,IAAI,CAAC,GAAG,CAAC;QACrC,CAAC,4BAA4B,EAAE,OAAO,CAAC;KACxC,CAAC;IACF,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;QAClC,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,yBAAyB,KAAK,KAAK,aAAa,CAAC,GAAG,CAAC,oNAAoN,CAAC;QACnR,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,qBAAqB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,KAAK,qGAAqG,CAAC;QACtK,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB;IACpC,IAAI,OAAO,IAAI,OAAO;QAAE,OAAO,uBAAuB,OAAO,CAAC,KAAK,EAAE,CAAC;IACtE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,MAAM,EAAE,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QACjE,QAAQ,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QACrF,QAAQ,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,OAAgB,EAChB,IAAmB,EACnB,OAAuC;IAEvC,IAAI,OAAO,IAAI,OAAO;QAAE,OAAO,WAAW,CAAC,eAAe,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;IAC/B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC,eAAe,CAAC,CAAC;IAE9D,+FAA+F;IAC/F,sCAAsC;IACtC,EAAE;IACF,8FAA8F;IAC9F,qFAAqF;IACrF,8FAA8F;IAC9F,4FAA4F;IAC5F,gGAAgG;IAChG,gGAAgG;IAChG,6FAA6F;IAC7F,wFAAwF;IACxF,EAAE;IACF,4FAA4F;IAC5F,+DAA+D;IAC/D,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;aAC9B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC5C,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1E,OAAO,GAAG,KAAK,iCAAiC,IAAI,CAAC,QAAQ,qFAAqF,CAAC;QACrJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wGAAwG;IACxG,+FAA+F;IAC/F,gGAAgG;IAChG,6FAA6F;IAC7F,mDAAmD;IACnD,EAAE;IACF,iGAAiG;IACjG,+FAA+F;IAC/F,sFAAsF;IACtF,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAC3C,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAC5D,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,yBAAyB,CAAC,KAAK,SAAS,CAAC;IACrE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO,+CAA+C,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,wKAAwK,CAAC;IAC/P,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SAC9B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC5C,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,OAAO,GAAG,KAAK,iCAAiC,IAAI,CAAC,QAAQ,qFAAqF,CAAC;IACrJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,cAAc,CAAC,OAAgB,EAAE,IAAmB;IACjE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1D,IAAI,OAAO,IAAI,IAAI;QAAE,OAAO,WAAW,CAAC,eAAe,CAAC,CAAC;IACzD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC,eAAe,CAAC,CAAC;IAE1E,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChG,MAAM,UAAU,GAAG,QAAQ;SACxB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,eAAe,CAAC;SAChD,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,oFAAoF;QACpF,OAAO,iBAAiB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,4JAA4J,eAAe,GAAG,CAAC;IAC9N,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAE1C,0FAA0F;IAC1F,6FAA6F;IAC7F,iDAAiD;IACjD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9E,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,QAAQ,GAA2B,EAAE,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;QAChE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,IAAI,OAAO,IAAI,KAAK;YAAE,OAAO,WAAW,CAAC,eAAe,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CACxD,CAAC,IAAI,EAAE,EAAE,CACP,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,cAAc,CAAC,IAAI,CAAC,KAAK,MAAM;YAC/B,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,SAAS,CACxC,CAAC;QACF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,aAAa,KAAK,wCAAwC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,wJAAwJ,CAAC;QACpP,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAAC,OAAgB,EAAE,IAAmB;IAChE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC,eAAe,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAgC,CAAC,MAAM,CACvE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CACnD,CAAC;IACF,OAAO,yBAAyB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,0FAA0F,CAAC;AAClJ,CAAC;AAED,kGAAkG;AAClG,KAAK,UAAU,aAAa,CAAC,OAAgB,EAAE,IAAmB;IAChE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,IAAI,OAAO,IAAI,KAAK,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,WAAW,CAAC,eAAe,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAW,CAAC,MAAM,CAC1D,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACnE,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,oDAAoD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,uGAAuG,CAAC;AACvL,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,OAAgB,EAAE,IAAmB;IAC3D,IAAI,OAAO,IAAI,OAAO;QAAE,OAAO,WAAW,CAAC,eAAe,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;IAC/B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC,eAAe,CAAC,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,KAAK,MAAM,SAAS,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,IAAI,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC;gBAAE,SAAS;YAChF,OAAO,OAAO,IAAI,aAAa,SAAS,+IAA+I,CAAC;QAC1L,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,eAAe,CAAC;IACtC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,OAAO,4GAA4G,CAAC;IACtH,CAAC;IACD,OAAO,aAAa,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,oBAAoB,KAAK,0JAA0J,CAAC;AAC1L,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,MAAM,KAAK,GAAG,SAAS,EAAE,iBAAiB,IAAI,EAAE,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,OAAO,GAAG,SAAS,EAAE,OAAO,IAAI,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAW,EAAE,CACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACjB,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACtC,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IACL,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,CACL,qCAAqC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC;QAC5F,uFAAuF;QACvF,8FAA8F;QAC9F,gCAAgC,CACjC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,IAAY;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7E,CAAC;AAED,oGAAoG;AACpG,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACpC,CAAC;AAED,MAAM,QAAQ,GAAG,+BAA+B,CAAC;AACjD,MAAM,aAAa,GAAG,sDAAsD,CAAC;AAE7E,2FAA2F;AAC3F,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,2EAA2E;QAC3E,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY,EAAE,OAAiB,QAAQ;IAC5E,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAQD,MAAM,iBAAiB,GACrB,sHAAsH,CAAC;AAEzH;;;GAGG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,IAAI;aAChB,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC;aAC/B,IAAI,EAAE;aACN,KAAK,CAAC,KAAK,CAAC;aACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@agenticreplay/adapters/dist/cursor.d.ts

@@ -0,0 +1,40 @@
+import type { Adapter } from '@agenticreplay/plugin-api';
+/**
+ * Cursor's terminal agent, which has nothing to redirect.
+ *
+ * Every other harness here reads an origin from somewhere agenticreplay can reach. Cursor reads none: the
+ * agent stream goes to hosts of Cursor's own over HTTP/2 exclusively, in Connect-over-protobuf,
+ * and the endpoint is compiled in. So this adapter sets no variables at all and the redirect
+ * happens underneath it, at the socket, when the run is given `--tls-intercept`.
+ *
+ * Two things an operator has to supply, because this adapter cannot:
+ *
+ *   - **The hosts.** `DEFAULT_TLS_HOSTS` does not carry Cursor's, deliberately: a recorded run
+ *     reached `api2.cursor.sh`, `repo42.cursor.sh` and `agentn.global.api5.cursor.sh`, and the
+ *     shard numbers in the last two vary per account, so covering them needs a wildcard —
+ *     `--tls-hosts '+*.cursor.sh'`. Putting a wildcard over a vendor's whole domain into the
+ *     default list would decrypt its sign-in origins too, which is the one thing that list
+ *     promises not to do. So it stays an explicit opt-in.
+ *   - **`--trust`.** The agent refuses to run non-interactively in a directory it has not been
+ *     trusted in. Passing it is the operator's call, not this adapter's: it is a permission grant,
+ *     and an adapter that quietly granted permissions on someone's behalf would be a worse bug
+ *     than the inconvenience it saved.
+ *
+ * The installer ships two shims, `cursor-agent` and `agent`, byte-identical and in the same
+ * directory: both run `versions/<build>/index.js` through the bundled node, and
+ * `CURSOR_INVOKED_AS` is how the tool learns which name it was called by. Its own usage text
+ * says `agent`, the shorter and more natural one. `cursor-agent` is launched here anyway,
+ * because a bare `agent` on PATH is generic enough to belong to something else, and since the
+ * two shims sit in one directory, whichever name resolves means both do.
+ *
+ * On Windows that directory is `%LOCALAPPDATA%\cursor-agent\` and the installer does not add
+ * it to PATH, so `agenticreplay record cursor` reports ENOENT until it is. Loud rather than silent, which
+ * is the tradeoff for a fixture that means the same thing on every machine;
+ * `agenticreplay record exec -- <full path to the shim> ...` is the way round it.
+ *
+ * `harnessVersions` is deliberately unset: Cursor ships date-stamped builds
+ * (`2026.09.02-c22c1a3`), not semver, so a range would be a claim in a vocabulary the harness
+ * does not use. The version the fixture was verified against is recorded in its `note` instead.
+ */
+export declare const cursorAdapter: Adapter;
+//# sourceMappingURL=cursor.d.ts.map

package/node_modules/@agenticreplay/adapters/dist/cursor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.d.ts","sourceRoot":"","sources":["../src/cursor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAyB,MAAM,2BAA2B,CAAC;AAqBhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,eAAO,MAAM,aAAa,EAAE,OAiB3B,CAAC"}

package/node_modules/@agenticreplay/adapters/dist/cursor.js

@@ -0,0 +1,71 @@
+import { detectAgent } from './detect.js';
+/**
+ * Where the installer puts `cursor-agent`, per platform.
+ *
+ * Detection only — the launch uses the bare name, like every other adapter, so the fixture stays
+ * the same on every machine. What these are for is answering "is this agent even installed here",
+ * which matters more than usual because on Windows the installer does *not* put the shim on PATH.
+ */
+const CURSOR_AGENT_PATHS = [
+    // Windows: %LOCALAPPDATA%\cursor-agent\, which holds both shims
+    'AppData/Local/cursor-agent/cursor-agent.cmd',
+    'AppData/Local/cursor-agent/agent.cmd',
+    // macOS and Linux
+    '.local/bin/cursor-agent',
+    '.local/bin/agent',
+    // The editor's own directory, present whether or not the CLI is
+    '.cursor',
+];
+/**
+ * Cursor's terminal agent, which has nothing to redirect.
+ *
+ * Every other harness here reads an origin from somewhere agenticreplay can reach. Cursor reads none: the
+ * agent stream goes to hosts of Cursor's own over HTTP/2 exclusively, in Connect-over-protobuf,
+ * and the endpoint is compiled in. So this adapter sets no variables at all and the redirect
+ * happens underneath it, at the socket, when the run is given `--tls-intercept`.
+ *
+ * Two things an operator has to supply, because this adapter cannot:
+ *
+ *   - **The hosts.** `DEFAULT_TLS_HOSTS` does not carry Cursor's, deliberately: a recorded run
+ *     reached `api2.cursor.sh`, `repo42.cursor.sh` and `agentn.global.api5.cursor.sh`, and the
+ *     shard numbers in the last two vary per account, so covering them needs a wildcard —
+ *     `--tls-hosts '+*.cursor.sh'`. Putting a wildcard over a vendor's whole domain into the
+ *     default list would decrypt its sign-in origins too, which is the one thing that list
+ *     promises not to do. So it stays an explicit opt-in.
+ *   - **`--trust`.** The agent refuses to run non-interactively in a directory it has not been
+ *     trusted in. Passing it is the operator's call, not this adapter's: it is a permission grant,
+ *     and an adapter that quietly granted permissions on someone's behalf would be a worse bug
+ *     than the inconvenience it saved.
+ *
+ * The installer ships two shims, `cursor-agent` and `agent`, byte-identical and in the same
+ * directory: both run `versions/<build>/index.js` through the bundled node, and
+ * `CURSOR_INVOKED_AS` is how the tool learns which name it was called by. Its own usage text
+ * says `agent`, the shorter and more natural one. `cursor-agent` is launched here anyway,
+ * because a bare `agent` on PATH is generic enough to belong to something else, and since the
+ * two shims sit in one directory, whichever name resolves means both do.
+ *
+ * On Windows that directory is `%LOCALAPPDATA%\cursor-agent\` and the installer does not add
+ * it to PATH, so `agenticreplay record cursor` reports ENOENT until it is. Loud rather than silent, which
+ * is the tradeoff for a fixture that means the same thing on every machine;
+ * `agenticreplay record exec -- <full path to the shim> ...` is the way round it.
+ *
+ * `harnessVersions` is deliberately unset: Cursor ships date-stamped builds
+ * (`2026.09.02-c22c1a3`), not semver, so a range would be a claim in a vocabulary the harness
+ * does not use. The version the fixture was verified against is recorded in its `note` instead.
+ */
+export const cursorAdapter = {
+    id: 'cursor',
+    aliases: ['cursor-agent'],
+    // Redirecting nothing is the intent, not a defect. See the `capture` field on `Adapter`.
+    capture: 'transport',
+    async detect(cwd) {
+        void cwd;
+        return detectAgent(['cursor-agent', 'agent'], CURSOR_AGENT_PATHS);
+    },
+    async prepare(ctx) {
+        // No origin and no credential: the agent authenticates with the session its own sign-in
+        // wrote, and there is no variable to point anywhere. An empty overlay is the whole contract.
+        return { command: 'cursor-agent', args: [...ctx.userArgs], env: {} };
+    },
+};
+//# sourceMappingURL=cursor.js.map

package/node_modules/@agenticreplay/adapters/dist/cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.js","sourceRoot":"","sources":["../src/cursor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG;IACzB,gEAAgE;IAChE,6CAA6C;IAC7C,sCAAsC;IACtC,kBAAkB;IAClB,yBAAyB;IACzB,kBAAkB;IAClB,gEAAgE;IAChE,SAAS;CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,CAAC,MAAM,aAAa,GAAY;IACpC,EAAE,EAAE,QAAQ;IACZ,OAAO,EAAE,CAAC,cAAc,CAAC;IAEzB,yFAAyF;IACzF,OAAO,EAAE,WAAW;IAEpB,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,KAAK,GAAG,CAAC;QACT,OAAO,WAAW,CAAC,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAkB;QAC9B,wFAAwF;QACxF,6FAA6F;QAC7F,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IACvE,CAAC;CACF,CAAC"}