agy-worker-mcp 0.3.1

package/dist/runner/runner.js

@@ -0,0 +1,289 @@
+import { ENV } from '../contract/types.js';
+import { canonicalize, ensureJobDirs, jobPaths, projectPaths, readJsonIfExists, resolveProjectRoot, writeFileAtomic, writeJsonAtomic, } from '../contract/paths.js';
+import { startGateWatchdog } from './gate-watchdog.js';
+import { startIdleWatchdog } from './idle.js';
+import { startInboxRelay } from './inbox.js';
+import { killProcessGroup, sleep } from './reap.js';
+import { spawnAgyDetached } from './spawn.js';
+import { runVerifyCommand } from './verify.js';
+function writeState(statePath, state) {
+    writeJsonAtomic(statePath, state);
+}
+/**
+ * Run one job to completion.
+ *
+ * Sequence: read `effective-config.json` → spawn detached with file-backed stdio →
+ * start the inbox relay when `session_mode === 'session'` → wait for exit, racing
+ * `deadline_at` → run `config.verify` once, if set and the deadline did not fire
+ * (PR6 §6.2) → **always** write the final `jobs/<id>/state.json`, then
+ * `jobs/<id>/exit_code`.
+ *
+ * `exit_code` existing is the finalization signal every server polls for; if
+ * the runner can die without writing it, `reconcile` has to guess, and a job
+ * that finished cleanly gets reported as `process_error`. Writing the final
+ * `state.json` *first* is what makes that signal trustworthy the instant it
+ * appears — see the comment at the write site.
+ */
+export async function runJob(opts) {
+    const root = canonicalize(opts.projectRoot);
+    const project = projectPaths(root);
+    const paths = jobPaths(project, opts.jobId);
+    ensureJobDirs(paths);
+    const config = readJsonIfExists(paths.effectiveConfig);
+    if (!config) {
+        throw new Error(`agy-worker-runner: effective-config.json missing for job ${opts.jobId} at ${paths.effectiveConfig}`);
+    }
+    const wallStart = Date.now();
+    writeState(paths.state, {
+        job_id: opts.jobId,
+        lifecycle: 'starting',
+        pid: null,
+        pgid: null,
+        proc_start_time: null,
+        started_at: null,
+        finished_at: null,
+        updated_at: Date.now(),
+        phase: 'agy',
+        runner_pid: process.pid,
+    });
+    const stdinPipe = config.session_mode === 'session';
+    const spawned = spawnAgyDetached({ config, paths, stdinPipe });
+    writeState(paths.state, {
+        job_id: opts.jobId,
+        lifecycle: 'running',
+        pid: spawned.pid,
+        pgid: spawned.pgid,
+        proc_start_time: spawned.procStartTime,
+        started_at: spawned.startedAt,
+        finished_at: null,
+        updated_at: Date.now(),
+        phase: 'agy',
+        runner_pid: process.pid,
+    });
+    // I4: confirm the PreToolUse gate
+    // actually loaded, for every job — not just session-mode ones. Started right
+    // after `spawned.pgid` exists so `onMissing` always has something to kill.
+    let gateConfirmed = null;
+    const gateWatchdog = startGateWatchdog({
+        eventsPath: paths.events,
+        gateLogPath: paths.gateLog,
+        onConfirmed: () => {
+            gateConfirmed = true;
+        },
+        onMissing: () => {
+            gateConfirmed = false;
+            // Fire-and-forget: the main await below (the deadline race, or the bare
+            // `await exitPromise`) observes the resulting exit exactly like any other
+            // kill — no separate wiring needed for the exit-code / state-write path.
+            void killProcessGroup(spawned.pgid);
+        },
+    });
+    let relay = null;
+    let idleWatchdog = null;
+    let idleClosed = false;
+    if (stdinPipe && spawned.stdin) {
+        // Idle timeout only applies to session_mode:'session' (`idle_timeout_ms`
+        // is null otherwise). Created before the relay so
+        // `onUserLineSent` below always has something to call.
+        if (config.idle_timeout_ms != null) {
+            idleWatchdog = startIdleWatchdog({
+                eventsPath: paths.events,
+                idleTimeoutMs: config.idle_timeout_ms,
+                stdin: spawned.stdin,
+                onIdleClose: () => {
+                    idleClosed = true;
+                },
+            });
+        }
+        relay = startInboxRelay({
+            inboxPath: paths.inbox,
+            stdin: spawned.stdin,
+            onUserLineSent: () => idleWatchdog?.noteActivity(),
+            // An explicit agy_send(close:true) ends the session on its own terms;
+            // stop the idle watchdog so it cannot also race to end an already-ended
+            // stdin.
+            onClose: () => idleWatchdog?.stop(),
+        });
+    }
+    // Signal agy died by, if any: an `agy_cancel` / `on_denial: 'abort'` kill
+    // arrives as SIGTERM/SIGKILL on the process group, and verify must not run
+    // after that (see the verify block below).
+    let agySignal = null;
+    const exitPromise = new Promise((resolveExit) => {
+        spawned.child.once('exit', (code, signal) => {
+            if (signal)
+                agySignal = signal;
+            if (code !== null)
+                resolveExit(code);
+            else
+                resolveExit(signal ? 128 : 1);
+        });
+        spawned.child.once('error', () => {
+            // A post-spawn error (e.g. an EPIPE writing to a stdin pipe). The process
+            // may or may not still be running; treat it as a failure exit and let the
+            // deadline / pgid cleanup below reconcile the rest.
+            resolveExit(1);
+        });
+    });
+    let timedOut = false;
+    let exitCode;
+    try {
+        if (config.deadline_at != null) {
+            const remaining = Math.max(0, config.deadline_at - Date.now());
+            let deadlineTimer = null;
+            const deadlineHit = new Promise((res) => {
+                deadlineTimer = setTimeout(() => res('deadline'), remaining);
+            });
+            const winner = await Promise.race([
+                exitPromise.then((code) => ({ tag: 'exit', code })),
+                deadlineHit.then(() => ({ tag: 'deadline' })),
+            ]);
+            if (deadlineTimer)
+                clearTimeout(deadlineTimer);
+            if (winner.tag === 'deadline') {
+                timedOut = true;
+                await killProcessGroup(spawned.pgid);
+                exitCode = await exitPromise;
+            }
+            else {
+                exitCode = winner.code;
+            }
+        }
+        else {
+            exitCode = await exitPromise;
+        }
+    }
+    finally {
+        relay?.stop();
+        idleWatchdog?.stop();
+        // finalize(), not stop(): the process is known to be gone by this point,
+        // so this does one last synchronous check instead of trusting a poll tick
+        // or the grace/cap timer to have already fired — both races a fast job
+        // can win (see `gate-watchdog.ts`'s own doc comment on `finalize`).
+        gateWatchdog.finalize();
+    }
+    // PR6: `verify_command` runs once,
+    // after agy has exited normally, against the final workspace state — before
+    // the job is recorded as finished, so a caller can never observe
+    // `lifecycle: 'finished'` without `verification.verify` already settled
+    // (`jobs/<id>/exit_code` is the finalization signal every server polls for;
+    // see the comment on that write below).
+    //
+    // Skipped when the deadline killed agy (`timedOut === true`): that already
+    // means the job did not run to completion, so there is nothing meaningful
+    // left to verify, and `config.verify.timeout_ms` is a separate clock from
+    // `deadline_at` on purpose — running it anyway could keep the job alive
+    // well past a timeout the caller already asked to be enforced.
+    //
+    // Also skipped when agy was killed by a signal (`agy_cancel`, the gate's
+    // `on_denial: 'abort'` mark reconciled into a group kill) or exited non-zero:
+    // `computeOutcome` already resolves those to `canceled` / `failed` ahead of
+    // anything verify could say, so running it would only keep a job the caller
+    // just cancelled alive for up to `verify.timeout_ms` more.
+    let verifyDone = false;
+    if (!timedOut && agySignal === null && exitCode === 0 && config.verify) {
+        // 0.2.2 (PR1): announce the phase *before* verify starts.
+        // From here until the final write below, agy's pid is gone and `exit_code`
+        // does not exist — indistinguishable, to a reconciler, from a runner that
+        // was killed. `phase: 'verifying'` plus `runner_pid` is what lets it wait
+        // for us instead (`reconcileJob`, row 2 / row 3).
+        writeState(paths.state, {
+            job_id: opts.jobId,
+            lifecycle: 'running',
+            pid: spawned.pid,
+            pgid: spawned.pgid,
+            proc_start_time: spawned.procStartTime,
+            started_at: spawned.startedAt,
+            finished_at: null,
+            updated_at: Date.now(),
+            idle_closed: idleClosed,
+            gate_confirmed: gateConfirmed,
+            phase: 'verifying',
+            runner_pid: process.pid,
+        });
+        const verifyRecord = await runVerifyCommand({
+            command: config.verify.command,
+            cwd: config.cwd,
+            env: config.env,
+            timeoutMs: config.verify.timeout_ms,
+            logPath: paths.verifyLog,
+        });
+        writeJsonAtomic(paths.verifyJson, verifyRecord);
+        verifyDone = true;
+    }
+    const finishedAt = Date.now();
+    // `state.json` first, `exit_code` second — deliberately reordered from a
+    // naive "write both" (PR3). `exit_code`
+    // existing is the signal every reconciler polls for and finalizes on the
+    // instant it sees it (`reconcileJob`'s own doc comment); `exit_code` written
+    // first would leave a real window where a reconciler observes it, but reads
+    // `state.json` before this call has landed and gets the *previous* write
+    // (the plain 'running' state, with no `timed_out`/`idle_closed`/
+    // `gate_confirmed` at all) — silently losing exactly the fact PR3 depends on
+    // being there every time. Writing state first makes that window impossible:
+    // by the time `exit_code` exists, `state.json` already carries the complete
+    // final record.
+    writeState(paths.state, {
+        job_id: opts.jobId,
+        lifecycle: 'finished',
+        pid: spawned.pid,
+        pgid: spawned.pgid,
+        proc_start_time: spawned.procStartTime,
+        started_at: spawned.startedAt,
+        finished_at: finishedAt,
+        updated_at: finishedAt,
+        timed_out: timedOut,
+        idle_closed: idleClosed,
+        gate_confirmed: gateConfirmed,
+        verify_done: verifyDone,
+        phase: 'done',
+        runner_pid: process.pid,
+    });
+    writeExitCode(paths.exitCode, exitCode);
+    return {
+        jobId: opts.jobId,
+        exitCode,
+        timedOut,
+        durationMs: finishedAt - wallStart,
+    };
+}
+/**
+ * Enforce the deadline: `SIGTERM` to the process group, grace period, then
+ * `SIGKILL`. Signalling the *group* rather than the pid is what reaches agy's own
+ * children (verified by checking `pgrep -g` afterwards).
+ *
+ * Standalone entry point for callers other than {@link runJob} (e.g. `reconcile`
+ * discovering a job whose deadline has already passed). `runJob` itself does its
+ * own cancellable wait so it is not left holding a dangling timer once the
+ * process exits on its own — this function, called directly, always waits out
+ * the deadline first.
+ */
+export async function enforceDeadline(pgid, deadlineAt, graceMs) {
+    const remaining = deadlineAt - Date.now();
+    if (remaining > 0)
+        await sleep(remaining);
+    return killProcessGroup(pgid, { graceMs });
+}
+/** Write the exit code file atomically. Called on every exit path, including throws. */
+export function writeExitCode(exitCodePath, code) {
+    writeFileAtomic(exitCodePath, `${code}\n`);
+}
+/** `dist/runner.js` entry point. Reads the job id from argv or `AGY_WORKER_JOB_ID`. */
+export async function main(argv = []) {
+    const jobId = argv[0] ?? process.env[ENV.JOB_ID];
+    if (!jobId) {
+        process.stderr.write('agy-worker-runner: missing job id (pass it as argv[0] or set AGY_WORKER_JOB_ID)\n');
+        return 2;
+    }
+    const projectRoot = resolveProjectRoot().root;
+    try {
+        await runJob({ jobId, projectRoot });
+        return 0;
+    }
+    catch (e) {
+        const detail = e instanceof Error ? (e.stack ?? e.message) : String(e);
+        process.stderr.write(`agy-worker-runner: job ${jobId} failed: ${detail}\n`);
+        return 1;
+    }
+}
+//# sourceMappingURL=runner.js.map

package/dist/runner/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/runner/runner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAC1C,OAAO,EACL,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,eAAe,GAChB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAAE,iBAAiB,EAAqB,MAAM,oBAAoB,CAAA;AACzE,OAAO,EAAE,iBAAiB,EAAqB,MAAM,WAAW,CAAA;AAChE,OAAO,EAAE,eAAe,EAAmB,MAAM,YAAY,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAsB9C,SAAS,UAAU,CAAC,SAAiB,EAAE,KAAmB;IACxD,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;AACnC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAmB;IAC9C,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAC3C,aAAa,CAAC,KAAK,CAAC,CAAA;IAEpB,MAAM,MAAM,GAAG,gBAAgB,CAAkB,KAAK,CAAC,eAAe,CAAC,CAAA;IACvE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,4DAA4D,IAAI,CAAC,KAAK,OAAO,KAAK,CAAC,eAAe,EAAE,CACrG,CAAA;IACH,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAE5B,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE;QACtB,MAAM,EAAE,IAAI,CAAC,KAAK;QAClB,SAAS,EAAE,UAAU;QACrB,GAAG,EAAE,IAAI;QACT,IAAI,EAAE,IAAI;QACV,eAAe,EAAE,IAAI;QACrB,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;QACtB,KAAK,EAAE,KAAK;QACZ,UAAU,EAAE,OAAO,CAAC,GAAG;KACxB,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,KAAK,SAAS,CAAA;IACnD,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;IAE9D,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE;QACtB,MAAM,EAAE,IAAI,CAAC,KAAK;QAClB,SAAS,EAAE,SAAS;QACpB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,eAAe,EAAE,OAAO,CAAC,aAAa;QACtC,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;QACtB,KAAK,EAAE,KAAK;QACZ,UAAU,EAAE,OAAO,CAAC,GAAG;KACxB,CAAC,CAAA;IAEF,kCAAkC;IAClC,6EAA6E;IAC7E,2EAA2E;IAC3E,IAAI,aAAa,GAAmB,IAAI,CAAA;IACxC,MAAM,YAAY,GAAiB,iBAAiB,CAAC;QACnD,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,WAAW,EAAE,KAAK,CAAC,OAAO;QAC1B,WAAW,EAAE,GAAG,EAAE;YAChB,aAAa,GAAG,IAAI,CAAA;QACtB,CAAC;QACD,SAAS,EAAE,GAAG,EAAE;YACd,aAAa,GAAG,KAAK,CAAA;YACrB,wEAAwE;YACxE,0EAA0E;YAC1E,yEAAyE;YACzE,KAAK,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACrC,CAAC;KACF,CAAC,CAAA;IAEF,IAAI,KAAK,GAAsB,IAAI,CAAA;IACnC,IAAI,YAAY,GAAwB,IAAI,CAAA;IAC5C,IAAI,UAAU,GAAG,KAAK,CAAA;IACtB,IAAI,SAAS,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAC/B,yEAAyE;QACzE,kDAAkD;QAClD,uDAAuD;QACvD,IAAI,MAAM,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;YACnC,YAAY,GAAG,iBAAiB,CAAC;gBAC/B,UAAU,EAAE,KAAK,CAAC,MAAM;gBACxB,aAAa,EAAE,MAAM,CAAC,eAAe;gBACrC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,WAAW,EAAE,GAAG,EAAE;oBAChB,UAAU,GAAG,IAAI,CAAA;gBACnB,CAAC;aACF,CAAC,CAAA;QACJ,CAAC;QACD,KAAK,GAAG,eAAe,CAAC;YACtB,SAAS,EAAE,KAAK,CAAC,KAAK;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,cAAc,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE;YAClD,sEAAsE;YACtE,wEAAwE;YACxE,SAAS;YACT,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE;SACpC,CAAC,CAAA;IACJ,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,2CAA2C;IAC3C,IAAI,SAAS,GAAkB,IAAI,CAAA;IACnC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,WAAW,EAAE,EAAE;QACtD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,MAAM;gBAAE,SAAS,GAAG,MAAM,CAAA;YAC9B,IAAI,IAAI,KAAK,IAAI;gBAAE,WAAW,CAAC,IAAI,CAAC,CAAA;;gBAC/B,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACpC,CAAC,CAAC,CAAA;QACF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YAC/B,0EAA0E;YAC1E,0EAA0E;YAC1E,oDAAoD;YACpD,WAAW,CAAC,CAAC,CAAC,CAAA;QAChB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,QAAgB,CAAA;IAEpB,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;YAC9D,IAAI,aAAa,GAAyC,IAAI,CAAA;YAC9D,MAAM,WAAW,GAAG,IAAI,OAAO,CAAa,CAAC,GAAG,EAAE,EAAE;gBAClD,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,CAAA;YAC9D,CAAC,CAAC,CAAA;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAChC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAiC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClF,WAAW,CAAC,IAAI,CAAC,GAAwB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;aACnE,CAAC,CAAA;YACF,IAAI,aAAa;gBAAE,YAAY,CAAC,aAAa,CAAC,CAAA;YAE9C,IAAI,MAAM,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;gBAC9B,QAAQ,GAAG,IAAI,CAAA;gBACf,MAAM,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBACpC,QAAQ,GAAG,MAAM,WAAW,CAAA;YAC9B,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAA;YACxB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,MAAM,WAAW,CAAA;QAC9B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,KAAK,EAAE,IAAI,EAAE,CAAA;QACb,YAAY,EAAE,IAAI,EAAE,CAAA;QACpB,yEAAyE;QACzE,0EAA0E;QAC1E,uEAAuE;QACvE,oEAAoE;QACpE,YAAY,CAAC,QAAQ,EAAE,CAAA;IACzB,CAAC;IAED,mCAAmC;IACnC,4EAA4E;IAC5E,iEAAiE;IACjE,wEAAwE;IACxE,4EAA4E;IAC5E,wCAAwC;IACxC,EAAE;IACF,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,wEAAwE;IACxE,+DAA+D;IAC/D,EAAE;IACF,yEAAyE;IACzE,8EAA8E;IAC9E,4EAA4E;IAC5E,4EAA4E;IAC5E,2DAA2D;IAC3D,IAAI,UAAU,GAAG,KAAK,CAAA;IACtB,IAAI,CAAC,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACvE,0DAA0D;QAC1D,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,kDAAkD;QAClD,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE;YACtB,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,SAAS,EAAE,SAAS;YACpB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,eAAe,EAAE,OAAO,CAAC,aAAa;YACtC,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YACtB,WAAW,EAAE,UAAU;YACvB,cAAc,EAAE,aAAa;YAC7B,KAAK,EAAE,WAAW;YAClB,UAAU,EAAE,OAAO,CAAC,GAAG;SACxB,CAAC,CAAA;QACF,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC;YAC1C,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;YAC9B,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;YACnC,OAAO,EAAE,KAAK,CAAC,SAAS;SACzB,CAAC,CAAA;QACF,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;QAC/C,UAAU,GAAG,IAAI,CAAA;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC7B,yEAAyE;IACzE,wCAAwC;IACxC,yEAAyE;IACzE,6EAA6E;IAC7E,4EAA4E;IAC5E,yEAAyE;IACzE,iEAAiE;IACjE,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,gBAAgB;IAChB,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE;QACtB,MAAM,EAAE,IAAI,CAAC,KAAK;QAClB,SAAS,EAAE,UAAU;QACrB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,eAAe,EAAE,OAAO,CAAC,aAAa;QACtC,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,WAAW,EAAE,UAAU;QACvB,UAAU,EAAE,UAAU;QACtB,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,UAAU;QACvB,cAAc,EAAE,aAAa;QAC7B,WAAW,EAAE,UAAU;QACvB,KAAK,EAAE,MAAM;QACb,UAAU,EAAE,OAAO,CAAC,GAAG;KACxB,CAAC,CAAA;IACF,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAEvC,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ;QACR,QAAQ;QACR,UAAU,EAAE,UAAU,GAAG,SAAS;KACnC,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,UAAkB,EAAE,OAAgB;IACtF,MAAM,SAAS,GAAG,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACzC,IAAI,SAAS,GAAG,CAAC;QAAE,MAAM,KAAK,CAAC,SAAS,CAAC,CAAA;IACzC,OAAO,gBAAgB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;AAC5C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,YAAoB,EAAE,IAAY;IAC9D,eAAe,CAAC,YAAY,EAAE,GAAG,IAAI,IAAI,CAAC,CAAA;AAC5C,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAiB,EAAE;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAChD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mFAAmF,CACpF,CAAA;QACD,OAAO,CAAC,CAAA;IACV,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC,IAAI,CAAA;IAE7C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;QACpC,OAAO,CAAC,CAAA;IACV,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,YAAY,MAAM,IAAI,CAAC,CAAA;QAC3E,OAAO,CAAC,CAAA;IACV,CAAC;AACH,CAAC"}

package/dist/runner/spawn.d.ts

@@ -0,0 +1,98 @@
+import { type ChildProcess } from 'node:child_process';
+import type { Writable } from 'node:stream';
+import { type EffectiveConfig } from '../contract/types.js';
+import type { JobPaths } from '../contract/paths.js';
+/**
+ * Typed allowlist for argv construction. There is no free-form
+ * `extra_args` and no shell string anywhere; `spawn` always receives an array.
+ */
+export interface AgyArgvInput {
+    /** Emitted as `--print=<prompt>`. Empty string is legal and is what stream-json input uses. */
+    prompt: string;
+    /**
+     * Every `--add-dir` value, one flag per element, repeated in order.
+     * **Always non-empty.** `addDirs[0]` must be the canonical workspace (the
+     * caller's contract, not re-derived here) — without it registered, tools run
+     * in agy's scratch directory, and `<ws>/.agents/hooks.json` — our whole gate —
+     * is not loaded (§3). Later elements are extra read-only roots (M4:
+     * `--add-dir` also extends the `sandbox-exec` allowlist, not just read/write
+     * containment) — always `[]` beyond the workspace until PR4 populates
+     * `policy.add_dirs` from the human ceiling file. Duplicates are
+     * dropped, order preserved.
+     */
+    addDirs: string[];
+    model?: string | null;
+    effort?: string | null;
+    mode?: string | null;
+    /** Resume an existing conversation. Never `--continue`, which is global. */
+    conversationId?: string | null;
+    /** Only for `session_mode: 'session'`; requires `--output-format stream-json`. */
+    inputFormat?: 'stream-json' | null;
+    outputFormat: 'stream-json';
+    /** Rendered as agy's duration syntax, e.g. `60m`. */
+    printTimeoutMs: number;
+    jsonSchemaPath?: string | null;
+}
+/**
+ * Build the argv.
+ *
+ * ⚠ `--print` **must** use the `=` form. Measured: a bare `-p` / `--print`
+ * swallows the next flag as its prompt and exits 2 (§2).
+ *
+ * @throws {ValidationError} if any member of `FORBIDDEN_AGY_FLAGS` would appear,
+ * or if `addDirs` is empty or contains a non-absolute entry.
+ */
+export declare function buildAgyArgv(input: AgyArgvInput): string[];
+/**
+ * `60000` → `"1m"`-style duration string accepted by `--print-timeout`
+ * (Go's `time.ParseDuration` syntax: `1h2m3s`, `500ms`, `0s`, ...).
+ */
+export declare function formatDuration(ms: number): string;
+/**
+ * Environment for the child, built from an allowlist (PATH, HOME, locale, agy's
+ * own config vars). The server's full environment is never inherited wholesale.
+ *
+ * `projectRoot`/`stateHome` are injected explicitly (not merely allowed through
+ * from `base`) so the gate process agy spawns for every tool call resolves the
+ * *same* project root and state home this server did — without them, the gate's
+ * own `openStore()` re-derives its root from its own `process.cwd()` (the
+ * workspace directory, not necessarily what `AGY_WORKER_PROJECT` pinned) and can
+ * open a different, empty database, silently disabling the whole policy gate
+ * (finding 10).
+ */
+export declare function buildChildEnv(base?: NodeJS.ProcessEnv, overrides?: {
+    projectRoot?: string;
+    stateHome?: string;
+}): Record<string, string>;
+/** Resolved agy executable: `AGY_WORKER_AGY_BIN`, else `agy` from PATH. */
+export declare function resolveAgyBin(): string;
+export interface SpawnAgyOptions {
+    config: EffectiveConfig;
+    paths: JobPaths;
+    /** Open a pipe on fd 0 so the inbox relay can write turns. Session mode only. */
+    stdinPipe: boolean;
+}
+export interface SpawnResult {
+    pid: number;
+    /** Equals `pid` because `detached: true` makes the child a group leader. */
+    pgid: number;
+    procStartTime: string | null;
+    startedAt: number;
+    /** The live child handle. The runner needs this to await exit and to end stdin. */
+    child: ChildProcess;
+    /** agy's stdin, when `stdinPipe` was requested. Never a pipe for stdout/stderr. */
+    stdin: Writable | null;
+}
+/**
+ * Spawn agy detached, with stdout and stderr pointed at real file descriptors.
+ *
+ * ⚠ Do not use `'pipe'` for stdout/stderr. Pass fds from `fs.openSync` directly in
+ * the `stdio` array: with a pipe, the child dies of EPIPE the moment the client
+ * that spawned it goes away, which destroys the entire detached design.
+ * File redirection still flushes incrementally.
+ *
+ * `detached: true` also gives the child its own process group, which is what makes
+ * a whole-tree kill possible later.
+ */
+export declare function spawnAgyDetached(opts: SpawnAgyOptions): SpawnResult;
+//# sourceMappingURL=spawn.d.ts.map

package/dist/runner/spawn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn.d.ts","sourceRoot":"","sources":["../../src/runner/spawn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,KAAK,YAAY,EAAqB,MAAM,oBAAoB,CAAA;AAGhF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAE3C,OAAO,EAA4B,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAErF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAGpD;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,+FAA+F;IAC/F,MAAM,EAAE,MAAM,CAAA;IACd;;;;;;;;;;OAUG;IACH,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,4EAA4E;IAC5E,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,kFAAkF;IAClF,WAAW,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;IAClC,YAAY,EAAE,aAAa,CAAA;IAC3B,qDAAqD;IACrD,cAAc,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,EAAE,CAuF1D;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAiBjD;AAgBD;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,IAAI,GAAE,MAAM,CAAC,UAAwB,EACrC,SAAS,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACvD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASxB;AAED,2EAA2E;AAC3E,wBAAgB,aAAa,IAAI,MAAM,CAGtC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,CAAA;IACvB,KAAK,EAAE,QAAQ,CAAA;IACf,iFAAiF;IACjF,SAAS,EAAE,OAAO,CAAA;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,mFAAmF;IACnF,KAAK,EAAE,YAAY,CAAA;IACnB,mFAAmF;IACnF,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAA;CACvB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,WAAW,CA8CnE"}

package/dist/runner/spawn.js

@@ -0,0 +1,230 @@
+import { spawn } from 'node:child_process';
+import { chmodSync, closeSync, openSync } from 'node:fs';
+import { isAbsolute } from 'node:path';
+import { FORBIDDEN_AGY_FLAGS, ENV } from '../contract/types.js';
+import { ValidationError } from '../contract/errors.js';
+import { getProcStartTime } from './reap.js';
+/**
+ * Build the argv.
+ *
+ * ⚠ `--print` **must** use the `=` form. Measured: a bare `-p` / `--print`
+ * swallows the next flag as its prompt and exits 2 (§2).
+ *
+ * @throws {ValidationError} if any member of `FORBIDDEN_AGY_FLAGS` would appear,
+ * or if `addDirs` is empty or contains a non-absolute entry.
+ */
+export function buildAgyArgv(input) {
+    if (!Array.isArray(input.addDirs) || input.addDirs.length === 0) {
+        throw new ValidationError({
+            field: 'addDirs',
+            value: input.addDirs,
+            expected: 'a non-empty array whose first element is the canonical workspace — required, or the workspace is never registered',
+        });
+    }
+    for (const dir of input.addDirs) {
+        if (typeof dir !== 'string' || !dir.trim() || !isAbsolute(dir)) {
+            throw new ValidationError({
+                field: 'addDirs',
+                value: dir,
+                expected: 'every addDirs entry to be a non-empty absolute path',
+            });
+        }
+    }
+    // Order-preserving dedupe: agy accepts repeats, but there is no reason to
+    // hand it the same root twice (e.g. a ceiling read_roots entry that
+    // happens to equal the workspace).
+    const addDirs = Array.from(new Set(input.addDirs));
+    if (typeof input.prompt !== 'string') {
+        throw new ValidationError({ field: 'prompt', value: input.prompt, expected: 'a string (may be empty)' });
+    }
+    // Measured against agy 1.1.23: the two are mutually exclusive, and agy says so
+    // itself rather than silently ignoring one —
+    //   Error: --input-format stream-json reads prompts from stdin, so a prompt
+    //   given on the command line would be ignored
+    // Working shape uses `--print=''` plus stdin;
+    // this makes it impossible to build the combination that fails.
+    if (input.inputFormat === 'stream-json' && input.prompt !== '') {
+        throw new ValidationError({
+            field: 'prompt',
+            value: input.prompt,
+            expected: 'an empty string when inputFormat is stream-json — agy rejects a command-line prompt there; queue the turn on stdin instead',
+        });
+    }
+    const argv = [];
+    argv.push(`--print=${input.prompt}`);
+    for (const dir of addDirs)
+        argv.push('--add-dir', dir);
+    // agy's own approval engine is switched off for every job (0.2.0, PR5).
+    // Measured on agy 1.1.24 (M3, variants A/B/C): under this flag our
+    // PreToolUse hook still runs, its `deny` still wins, and its
+    // `overwrite.BypassSandbox: false` still puts the command under
+    // `sandbox-exec` — the flag removes only agy's approval layer, never the OS
+    // isolation layer. That layer is redundant for our jobs because the gate is
+    // the sole authority, which rests on exactly three invariants:
+    //   I1 a bound job's gate never answers `ask` (src/gate/gate.ts `decide`),
+    //   I2 every `run_command` allow sets `BypassSandbox` explicitly, `true`
+    //      only from the human ceiling (`matchesUnsandboxed`),
+    //   I4 the runner verifies the gate actually fired before the first tool
+    //      call completed (src/runner/gate-watchdog.ts).
+    // If any of those three is ever removed, this line must go back into
+    // FORBIDDEN_AGY_FLAGS: without them, `ask` under this flag means "execute
+    // with whatever BypassSandbox the model asked for" (M3-C).
+    argv.push('--dangerously-skip-permissions');
+    if (input.model)
+        argv.push('--model', input.model);
+    if (input.effort)
+        argv.push('--effort', input.effort);
+    if (input.mode)
+        argv.push('--mode', input.mode);
+    argv.push('--output-format', input.outputFormat);
+    if (input.inputFormat)
+        argv.push('--input-format', input.inputFormat);
+    if (input.conversationId)
+        argv.push('--conversation', input.conversationId);
+    if (input.jsonSchemaPath)
+        argv.push('--json-schema', input.jsonSchemaPath);
+    argv.push('--print-timeout', formatDuration(input.printTimeoutMs));
+    for (const forbidden of FORBIDDEN_AGY_FLAGS) {
+        // Exact-match `includes` alone only catches a forbidden flag passed as its
+        // own argv element; `model`/`effort`/`mode` land in argv as free-form
+        // strings (e.g. `--model`, `<value>`), so a value shaped like
+        // `--continue=1` or `--dangerously-skip-permissions=true` would pass the
+        // exact check and still reach agy's own argv parser (finding 18). Also
+        // reject anything that starts with the forbidden flag followed by `=`.
+        if (argv.includes(forbidden) || argv.some((a) => a.startsWith(`${forbidden}=`))) {
+            throw new ValidationError({
+                field: 'argv',
+                value: forbidden,
+                expected: `never one of the forbidden flags`,
+                allowed: FORBIDDEN_AGY_FLAGS.slice(),
+            });
+        }
+    }
+    return argv;
+}
+/**
+ * `60000` → `"1m"`-style duration string accepted by `--print-timeout`
+ * (Go's `time.ParseDuration` syntax: `1h2m3s`, `500ms`, `0s`, ...).
+ */
+export function formatDuration(ms) {
+    if (!Number.isFinite(ms) || ms < 0) {
+        throw new ValidationError({ field: 'printTimeoutMs', value: ms, expected: 'a non-negative finite number of milliseconds' });
+    }
+    let totalMs = Math.round(ms);
+    const hours = Math.floor(totalMs / 3_600_000);
+    totalMs -= hours * 3_600_000;
+    const minutes = Math.floor(totalMs / 60_000);
+    totalMs -= minutes * 60_000;
+    const seconds = totalMs / 1000;
+    let out = '';
+    if (hours > 0)
+        out += `${hours}h`;
+    if (minutes > 0 || hours > 0)
+        out += `${minutes}m`;
+    if (Number.isInteger(seconds))
+        out += `${seconds}s`;
+    else
+        out += `${Number(seconds.toFixed(3))}s`;
+    return out.length > 0 ? out : '0s';
+}
+/** Environment variable names allowed through to the child. Nothing else survives. */
+const ALLOWED_ENV_KEYS = [
+    'PATH',
+    'HOME',
+    'LANG',
+    'LC_ALL',
+    'LC_CTYPE',
+    'TMPDIR',
+    'USER',
+    'LOGNAME',
+    'SHELL',
+    'TERM',
+];
+/**
+ * Environment for the child, built from an allowlist (PATH, HOME, locale, agy's
+ * own config vars). The server's full environment is never inherited wholesale.
+ *
+ * `projectRoot`/`stateHome` are injected explicitly (not merely allowed through
+ * from `base`) so the gate process agy spawns for every tool call resolves the
+ * *same* project root and state home this server did — without them, the gate's
+ * own `openStore()` re-derives its root from its own `process.cwd()` (the
+ * workspace directory, not necessarily what `AGY_WORKER_PROJECT` pinned) and can
+ * open a different, empty database, silently disabling the whole policy gate
+ * (finding 10).
+ */
+export function buildChildEnv(base = process.env, overrides) {
+    const env = {};
+    for (const key of ALLOWED_ENV_KEYS) {
+        const value = base[key];
+        if (typeof value === 'string' && value.length > 0)
+            env[key] = value;
+    }
+    if (overrides?.projectRoot)
+        env[ENV.PROJECT_ROOT] = overrides.projectRoot;
+    if (overrides?.stateHome)
+        env[ENV.STATE_HOME] = overrides.stateHome;
+    return env;
+}
+/** Resolved agy executable: `AGY_WORKER_AGY_BIN`, else `agy` from PATH. */
+export function resolveAgyBin() {
+    const override = process.env[ENV.AGY_BIN];
+    return override && override.trim() ? override.trim() : 'agy';
+}
+/**
+ * Spawn agy detached, with stdout and stderr pointed at real file descriptors.
+ *
+ * ⚠ Do not use `'pipe'` for stdout/stderr. Pass fds from `fs.openSync` directly in
+ * the `stdio` array: with a pipe, the child dies of EPIPE the moment the client
+ * that spawned it goes away, which destroys the entire detached design.
+ * File redirection still flushes incrementally.
+ *
+ * `detached: true` also gives the child its own process group, which is what makes
+ * a whole-tree kill possible later.
+ */
+export function spawnAgyDetached(opts) {
+    const { config, stdinPipe } = opts;
+    const outFd = openSync(opts.paths.events, 'a', 0o600);
+    const errFd = openSync(opts.paths.stderr, 'a', 0o600);
+    try {
+        chmodSync(opts.paths.events, 0o600);
+        chmodSync(opts.paths.stderr, 0o600);
+    }
+    catch {
+        // best-effort
+    }
+    let child;
+    try {
+        const stdio = [stdinPipe ? 'pipe' : 'ignore', outFd, errFd];
+        child = spawn(config.agy_bin, config.argv, {
+            cwd: config.cwd,
+            env: config.env,
+            detached: true,
+            stdio,
+        });
+    }
+    finally {
+        // Node dups fds passed as numbers into the child; closing our copies here
+        // does not affect the child's descriptors and avoids leaking fds across the
+        // lifetime of a long-running job.
+        closeSync(outFd);
+        closeSync(errFd);
+    }
+    const startedAt = Date.now();
+    const pid = child.pid;
+    if (pid == null) {
+        throw new Error(`agy-worker: spawn of "${config.agy_bin}" produced no pid`);
+    }
+    // detached:true makes the child the leader of a brand-new process group, so its
+    // pgid equals its pid — this is what later lets us `kill(-pgid)` the whole tree.
+    const pgid = pid;
+    const procStartTime = getProcStartTime(pid);
+    return {
+        pid,
+        pgid,
+        procStartTime,
+        startedAt,
+        child,
+        stdin: stdinPipe ? (child.stdin ?? null) : null,
+    };
+}
+//# sourceMappingURL=spawn.js.map

package/dist/runner/spawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn.js","sourceRoot":"","sources":["../../src/runner/spawn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAwC,MAAM,oBAAoB,CAAA;AAChF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAGtC,OAAO,EAAE,mBAAmB,EAAE,GAAG,EAAwB,MAAM,sBAAsB,CAAA;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAkC5C;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,KAAmB;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,eAAe,CAAC;YACxB,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,KAAK,CAAC,OAAO;YACpB,QAAQ,EACN,mHAAmH;SACtH,CAAC,CAAA;IACJ,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAChC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,eAAe,CAAC;gBACxB,KAAK,EAAE,SAAS;gBAChB,KAAK,EAAE,GAAG;gBACV,QAAQ,EAAE,qDAAqD;aAChE,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,0EAA0E;IAC1E,oEAAoE;IACpE,mCAAmC;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;IAElD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,yBAAyB,EAAE,CAAC,CAAA;IAC1G,CAAC;IACD,+EAA+E;IAC/E,6CAA6C;IAC7C,4EAA4E;IAC5E,+CAA+C;IAC/C,8CAA8C;IAC9C,gEAAgE;IAChE,IAAI,KAAK,CAAC,WAAW,KAAK,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC/D,MAAM,IAAI,eAAe,CAAC;YACxB,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,QAAQ,EACN,4HAA4H;SAC/H,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;IACpC,KAAK,MAAM,GAAG,IAAI,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;IACtD,wEAAwE;IACxE,mEAAmE;IACnE,6DAA6D;IAC7D,gEAAgE;IAChE,4EAA4E;IAC5E,4EAA4E;IAC5E,+DAA+D;IAC/D,2EAA2E;IAC3E,yEAAyE;IACzE,2DAA2D;IAC3D,yEAAyE;IACzE,qDAAqD;IACrD,qEAAqE;IACrE,0EAA0E;IAC1E,2DAA2D;IAC3D,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAA;IAC3C,IAAI,KAAK,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAClD,IAAI,KAAK,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IACrD,IAAI,KAAK,CAAC,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,YAAY,CAAC,CAAA;IAChD,IAAI,KAAK,CAAC,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;IACrE,IAAI,KAAK,CAAC,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAA;IAC3E,IAAI,KAAK,CAAC,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,cAAc,CAAC,CAAA;IAC1E,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAA;IAElE,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;QAC5C,2EAA2E;QAC3E,sEAAsE;QACtE,8DAA8D;QAC9D,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,eAAe,CAAC;gBACxB,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,kCAAkC;gBAC5C,OAAO,EAAE,mBAAmB,CAAC,KAAK,EAAE;aACrC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,8CAA8C,EAAE,CAAC,CAAA;IAC7H,CAAC;IACD,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAA;IAC7C,OAAO,IAAI,KAAK,GAAG,SAAS,CAAA;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,CAAA;IAC5C,OAAO,IAAI,OAAO,GAAG,MAAM,CAAA;IAC3B,MAAM,OAAO,GAAG,OAAO,GAAG,IAAI,CAAA;IAE9B,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,IAAI,KAAK,GAAG,CAAC;QAAE,GAAG,IAAI,GAAG,KAAK,GAAG,CAAA;IACjC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,GAAG,IAAI,GAAG,OAAO,GAAG,CAAA;IAClD,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;QAAE,GAAG,IAAI,GAAG,OAAO,GAAG,CAAA;;QAC9C,GAAG,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IAC5C,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AACpC,CAAC;AAED,sFAAsF;AACtF,MAAM,gBAAgB,GAAsB;IAC1C,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;CACP,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,OAA0B,OAAO,CAAC,GAAG,EACrC,SAAwD;IAExD,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IACrE,CAAC;IACD,IAAI,SAAS,EAAE,WAAW;QAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,WAAW,CAAA;IACzE,IAAI,SAAS,EAAE,SAAS;QAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,SAAS,CAAA;IACnE,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,aAAa;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACzC,OAAO,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAA;AAC9D,CAAC;AAqBD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAqB;IACpD,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;IAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IACrD,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACnC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IAED,IAAI,KAAmB,CAAA;IACvB,IAAI,CAAC;QACH,MAAM,KAAK,GAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;QACzE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;YACzC,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,QAAQ,EAAE,IAAI;YACd,KAAK;SACN,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,0EAA0E;QAC1E,4EAA4E;QAC5E,kCAAkC;QAClC,SAAS,CAAC,KAAK,CAAC,CAAA;QAChB,SAAS,CAAC,KAAK,CAAC,CAAA;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAA;IACrB,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAA;IAC7E,CAAC;IACD,gFAAgF;IAChF,iFAAiF;IACjF,MAAM,IAAI,GAAG,GAAG,CAAA;IAChB,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAE3C,OAAO;QACL,GAAG;QACH,IAAI;QACJ,aAAa;QACb,SAAS;QACT,KAAK;QACL,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;KAChD,CAAA;AACH,CAAC"}