agy-worker-mcp 0.3.1

package/dist/server/tools/start.js

@@ -0,0 +1,482 @@
+import { spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { z } from 'zod';
+import { ValidationError } from '../../contract/errors.js';
+import { assertContained, binPath, canonicalize, chmodDbFiles, ensureJobDirs, isWithin, jobPaths, newJobId, newSessionId, stateHome, writeJsonAtomic, } from '../../contract/paths.js';
+import { describePolicy } from '../../broker/blockers.js';
+import { cleanupOldJobs, reconcile } from '../../broker/reconcile.js';
+import { ensureGateHook } from '../../gate/hooks-file.js';
+import { ceilingAbsenceHint, loadCeiling } from '../../policy/ceiling.js';
+import { validateWriteRoots } from '../../policy/containment.js';
+import { getProfile, resolvePolicy } from '../../policy/profiles.js';
+import { evaluateCommandPolicy, firstMatchForDenial, parseRulesLenient } from '../../policy/rules.js';
+import { hooksFilePath } from '../../gate/hooks-file.js';
+import { appendUserTurn } from '../../runner/inbox.js';
+import { buildAgyArgv, buildChildEnv, resolveAgyBin } from '../../runner/spawn.js';
+import { acquireJobLocks } from '../../store/locks.js';
+import { createJob, listJobs, LIVE_LIFECYCLES } from '../../store/jobs.js';
+import { createSession, getSession } from '../../store/sessions.js';
+import { errorReply, reply } from '../context.js';
+import { acceptedEfforts } from './capabilities.js';
+/**
+ * `agy_start` — begin a new job and return its `job_id` immediately.
+ *
+ * Never blocks. The job outlives this server process, so any client connected to
+ * the same project can pick it up with `agy_wait` / `agy_logs`.
+ *
+ * `dry_run: true` resolves everything — argv, policy, locks that *would* be
+ * taken — and returns the `EffectiveConfig` without spawning. Settling
+ * configuration this way costs no agy quota.
+ */
+export const startInput = z.object({
+    prompt: z.string().min(1).describe('Task for the agent. Sent as --print=<prompt>.'),
+    cwd: z
+        .string()
+        .optional()
+        .describe('Workspace directory. Must be inside the project root. Defaults to the project root.'),
+    profile: z
+        .enum(['research_readonly', 'general_worker'])
+        .optional()
+        .describe('Permission profile ceiling. research_readonly cannot write or run interpreters. Defaults to research_readonly.'),
+    model: z
+        .string()
+        .refine((v) => !v.startsWith('-'), 'must not look like a CLI flag')
+        .optional(),
+    effort: z.enum(['low', 'medium', 'high']).optional(),
+    mode: z
+        .string()
+        .refine((v) => !v.startsWith('-'), 'must not look like a CLI flag')
+        .optional()
+        .describe('agy execution mode, e.g. accept-edits or plan.'),
+    session_id: z
+        .string()
+        .optional()
+        .describe('Continue an existing agy conversation. Omit to create a new session.'),
+    session_mode: z
+        .enum(['oneshot', 'session'])
+        .optional()
+        .describe('oneshot closes stdin after the prompt; session keeps it open for agy_send.'),
+    permissions: z
+        .object({
+        allow: z
+            .array(z.string())
+            .optional()
+            .describe('Narrows within the profile+ceiling allow list; entries the ceiling refuses come back in rejected_allow.'),
+        deny: z
+            .array(z.string())
+            .optional()
+            .describe('Always wins: unioned with the profile deny list and HARD_DENY, never narrowed.'),
+        sandboxed: z
+            .boolean()
+            .optional()
+            .describe('Forces agy\'s OS sandbox on for this job (0.2.0 behaviour). Parent can only narrow: true forces the sandbox on; false or absent changes nothing.'),
+        read_roots: z
+            .array(z.string())
+            .optional()
+            .describe("The project ceiling's read_roots apply by default. List entries here only to use a subset of them; entries outside the ceiling are dropped and reported in rejected_read_roots."),
+    })
+        .optional()
+        .describe('Three-owner model (see docs/permissions.md): code (HARD_DENY, profiles) is fixed; the project ceiling (~/.agy-worker/projects/<hash>/policy.json, human-owned, outside the workspace) sets what can ever be granted; this field only narrows within that ceiling, never widens it.'),
+    on_denial: z
+        .enum(['abort', 'continue', 'guide'])
+        .optional()
+        .describe('What to do on the first policy denial. Default continue.'),
+    max_denials: z
+        .number()
+        .int()
+        .positive()
+        .optional()
+        .describe('Abort the job after this many gate denials regardless of on_denial. Null = never. A middle ground between abort (one flaky-tool workaround kills the job) and continue (unbounded denial loops).'),
+    timeout_ms: z.number().int().positive().optional(),
+    idle_timeout_ms: z
+        .number()
+        .int()
+        .positive()
+        .optional()
+        .describe('session_mode "session" only. Closes stdin (ending the process) after this many ms of no agy_send following the last completed turn. Does not affect timeout_ms/deadline_at — agy_send never extends those. Ignored for oneshot.'),
+    expected_artifacts: z
+        .array(z.string())
+        .optional()
+        .describe('Workspace-relative paths that must exist afterwards. Missing ones block verified_success.'),
+    json_schema: z.string().optional().describe('Path to a JSON schema for structured output.'),
+    verify_command: z
+        .string()
+        .min(1)
+        .transform((v) => v.trim())
+        .refine((v) => v.length > 0, 'must not be blank')
+        .optional()
+        .describe('A command the runner — not agy — runs once, after agy exits normally, against the final workspace state. Outside the model\'s own decisions: it cannot skip, reorder, or narrow it. Not a sandboxing feature — it runs as the user, unsandboxed, at the same trust level as the parent agent running the command itself. A non-zero exit or a verify_timeout_ms timeout makes outcome "failed", never a Blocker.'),
+    verify_timeout_ms: z
+        .number()
+        .int()
+        .positive()
+        .optional()
+        .describe('Timeout for verify_command alone, independent of timeout_ms/deadline_at — verify_command may run past the job\'s own deadline. Defaults to limits.default_verify_timeout_ms, clamped to limits.max_timeout_ms. Ignored without verify_command.'),
+    requested_by: z.string().optional(),
+    parent_task_id: z.string().optional(),
+    dry_run: z
+        .boolean()
+        .optional()
+        .describe('Resolve configuration and policy without spawning agy. Costs no quota.'),
+    expected_commands: z
+        .array(z.string())
+        .optional()
+        .describe('dry_run only: shell commands to evaluate against the effective policy.'),
+});
+function clamp(n, min, max) {
+    return Math.min(Math.max(n, min), max);
+}
+/** Opportunistic retention window for finished job directories. */
+const CLEANUP_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1000;
+export async function handleStart(ctx, input) {
+    try {
+        await reconcile(ctx.store);
+        cleanupOldJobs(ctx.store, CLEANUP_MAX_AGE_MS);
+        chmodDbFiles(ctx.store.paths.db);
+        if (input.expected_commands && !input.dry_run) {
+            throw new ValidationError({
+                field: 'expected_commands',
+                value: input.expected_commands,
+                expected: 'expected_commands is only valid when dry_run is true',
+            });
+        }
+        // Measured 2026-09-08 (M8): agy rejects an `--effort`
+        // that disagrees with a suffixed model name, and any `--effort` on
+        // `claude-*`. Both fail in ~5 s with exit 1 after a job was created —
+        // the audit (`08`) counted two such wasted jobs. Refuse before spawning.
+        if (input.effort && input.model) {
+            const accepted = acceptedEfforts(input.model);
+            if (accepted !== null && !accepted.includes(input.effort)) {
+                throw new ValidationError({
+                    field: 'effort',
+                    value: input.effort,
+                    expected: accepted.length === 0
+                        ? `omit effort for ${input.model}: agy does not accept --effort for this model`
+                        : `omit effort for ${input.model}, or pass exactly "${accepted.join('" | "')}" (the effort is part of the model name)`,
+                });
+            }
+        }
+        const profileName = input.profile ?? 'research_readonly';
+        const profileDef = getProfile(profileName);
+        const rawCwd = input.cwd ?? ctx.paths.root;
+        const cwd = assertContained(rawCwd, [ctx.paths.root], 'write');
+        // Fail before anything else is created: a job whose gate can never load
+        // must never reach `acquireJobLocks` / `createJob` — there would be
+        // nothing left to unwind a lock or a job row with no runner ever spawned to
+        // finalize it. `ensureGateHook` below no longer has a fail-open fallback
+        // (the `|| printf` command is gone), so it must never be called with a
+        // `gatePath` that does not exist.
+        const gatePath = binPath('gate');
+        if (!existsSync(gatePath)) {
+            throw new ValidationError({
+                field: 'gate',
+                value: gatePath,
+                expected: 'dist/gate.js built',
+            });
+        }
+        const canonicalCwd = canonicalize(cwd);
+        const canonicalState = canonicalize(stateHome());
+        const canonicalGate = canonicalize(gatePath);
+        if (canonicalState === canonicalCwd || isWithin(canonicalState, canonicalCwd)) {
+            throw new ValidationError({
+                field: 'workspace',
+                value: cwd,
+                expected: `workspace must not contain state home (${canonicalState})`,
+            });
+        }
+        if (canonicalGate === canonicalCwd || isWithin(canonicalGate, canonicalCwd)) {
+            throw new ValidationError({
+                field: 'gate',
+                value: gatePath,
+                expected: `gate binary (${gatePath}) must not lie inside the workspace (${cwd})`,
+            });
+        }
+        let sessionId;
+        let conversationId;
+        let sessionExists = false;
+        if (input.session_id) {
+            const session = getSession(ctx.store, input.session_id);
+            if (!session) {
+                throw new ValidationError({
+                    field: 'session_id',
+                    value: input.session_id,
+                    expected: `an existing session id in project ${ctx.paths.root}`,
+                });
+            }
+            sessionId = session.session_id;
+            conversationId = session.conversation_id;
+            sessionExists = true;
+            // A still-null conversation_id while a job on this session is genuinely
+            // live (queued/starting/running/canceling) just means we are between
+            // turns — the natural `LOCK_CONFLICT` from `acquireJobLocks` below is
+            // what should surface in that case, not this. Only when *nothing* is
+            // live for this session does a null conversation_id mean its one job
+            // finished without agy ever reporting a conversation id, so there is
+            // nothing to resume — continuing silently would start a brand-new
+            // conversation while `agy_start`'s own contract promises this resumes
+            // the old one (finding 14): surface it instead of losing context
+            // quietly.
+            if (conversationId === null) {
+                const liveJobs = listJobs(ctx.store, { sessionId, lifecycle: [...LIVE_LIFECYCLES], limit: 1 });
+                if (liveJobs.length === 0) {
+                    throw new ValidationError({
+                        field: 'session_id',
+                        value: input.session_id,
+                        expected: 'a session whose conversation_id has been captured — this session finished its only job without agy ever reporting a conversation id, so there is nothing to resume',
+                    });
+                }
+            }
+        }
+        else {
+            sessionId = newSessionId();
+            conversationId = null;
+        }
+        const onDenial = input.on_denial ?? 'continue';
+        const sessionMode = input.session_mode ?? 'oneshot';
+        const timeoutMs = clamp(input.timeout_ms ?? ctx.limits.default_timeout_ms, 1, ctx.limits.max_timeout_ms);
+        // Only meaningful for session_mode:'session' (see
+        // EffectiveConfig.idle_timeout_ms). null for oneshot — its one turn is
+        // already followed by an immediate stdin close, so there is no idle gap
+        // to bound.
+        const idleTimeoutMs = sessionMode === 'session'
+            ? clamp(input.idle_timeout_ms ?? ctx.limits.default_idle_timeout_ms, 1, ctx.limits.max_idle_timeout_ms)
+            : null;
+        // `--json-schema <path>` hands agy an arbitrary file to read; without
+        // containment a client could point it outside the workspace (finding 18).
+        const jsonSchemaPath = input.json_schema
+            ? assertContained(input.json_schema, [ctx.paths.root], 'read')
+            : null;
+        const expectedArtifacts = input.expected_artifacts ?? [];
+        // Loaded once per call, fresh — never cached across calls, so an edit to
+        // policy.json between two agy_start calls takes effect immediately.
+        // Invalid (`ValidationError`) propagates straight to `errorReply` below,
+        // failing this call closed rather than silently falling back to an empty
+        // ceiling (see docs/permissions.md).
+        const ceiling = loadCeiling(ctx.paths);
+        const policy = resolvePolicy({
+            profile: profileName,
+            workspace: cwd,
+            requested: input.permissions,
+            onDenial,
+            maxDenials: input.max_denials ?? null,
+            ceiling,
+        });
+        validateWriteRoots(policy.write_roots, gatePath);
+        // PR6: `verify_command` is checked
+        // against the same resolved deny list a `run_command` call inside this job
+        // would be checked against — `policy.deny` already unions `HARD_DENY`, the
+        // profile's own deny list, the ceiling's `deny`, and the request's
+        // own `deny`, `{workspace}`-substituted by `resolvePolicy` above — so
+        // reusing it here is both the simplest check and the correct one: nothing
+        // verify_command runs unsandboxed after the job finishes should be able to
+        // do what an ordinary `run_command` call could not have done inside it.
+        let verify = null;
+        if (input.verify_command) {
+            const denyMatch = firstMatchForDenial(parseRulesLenient(policy.deny), {
+                verb: 'command',
+                value: input.verify_command,
+            });
+            if (denyMatch) {
+                throw new ValidationError({
+                    field: 'verify_command',
+                    value: input.verify_command,
+                    expected: `a command not matched by a deny rule — matched ${denyMatch.raw}`,
+                });
+            }
+            const verifyTimeoutMs = clamp(input.verify_timeout_ms ?? ctx.limits.default_verify_timeout_ms, 1, ctx.limits.max_timeout_ms);
+            verify = { command: input.verify_command, timeout_ms: verifyTimeoutMs };
+        }
+        const jobId = newJobId();
+        const now = Date.now();
+        const deadlineAt = now + timeoutMs;
+        // Session mode takes its prompts from stdin, so turn 1 is seeded into the
+        // inbox below rather than passed on the command line (agy refuses both).
+        const streamInput = sessionMode === 'session';
+        // The workspace is always addDirs[0] (buildAgyArgv's own contract);
+        // policy.add_dirs is `requested.read_roots` filtered against
+        // the human ceiling's glob list.
+        const addDirs = [cwd, ...policy.add_dirs];
+        // M10 (measured on agy 1.1.27): agy loads `.agents/hooks.json` from
+        // *every* `--add-dir`, and a deny from such a hook runs before ours and
+        // short-circuits the chain — our gate never sees the call, the watchdog
+        // (I4) then kills the job as "gate not confirmed", and whether a foreign
+        // `overwrite` could clobber ours is unmeasured. Fail closed: a read root
+        // that carries its own hook file is refused here, with the path, rather
+        // than started and misreported.
+        for (const dir of policy.add_dirs) {
+            const foreign = hooksFilePath(dir);
+            if (existsSync(foreign)) {
+                throw new ValidationError({
+                    field: 'read_roots',
+                    value: dir,
+                    expected: `a read root without its own .agents/hooks.json — agy loads hook files from every --add-dir, and ${foreign} would run ahead of this job's gate (M10). Remove it from read_roots or move the hook file`,
+                });
+            }
+        }
+        const argv = buildAgyArgv({
+            prompt: streamInput ? '' : input.prompt,
+            addDirs,
+            model: input.model ?? null,
+            effort: input.effort ?? null,
+            mode: input.mode ?? null,
+            conversationId,
+            inputFormat: streamInput ? 'stream-json' : null,
+            outputFormat: 'stream-json',
+            printTimeoutMs: timeoutMs,
+            jsonSchemaPath,
+        });
+        const agyBin = resolveAgyBin();
+        // Pin the gate's own openStore() to the same project root and state home
+        // this server resolved, so a nested repo as `cwd` or an env-override root
+        // can never make the gate compute a different, empty database (finding 10).
+        const env = buildChildEnv(process.env, { projectRoot: ctx.paths.root, stateHome: stateHome() });
+        const effectiveConfig = {
+            job_id: jobId,
+            session_id: sessionId,
+            conversation_id: conversationId,
+            cwd,
+            profile: profileName,
+            model: input.model ?? null,
+            effort: input.effort ?? null,
+            mode: input.mode ?? null,
+            session_mode: sessionMode,
+            on_denial: onDenial,
+            write_mode: profileDef.write,
+            timeout_ms: timeoutMs,
+            deadline_at: deadlineAt,
+            idle_timeout_ms: idleTimeoutMs,
+            expected_artifacts: expectedArtifacts,
+            json_schema_path: jsonSchemaPath,
+            policy,
+            add_dirs: addDirs,
+            verify,
+            argv,
+            agy_bin: agyBin,
+            env,
+            created_at: now,
+        };
+        // Same three fields on both replies, from one builder: what the policy
+        // ended up as, what the request lost on the way there, and that rendered
+        // for a caller who reads prose. A rejected `permissions.allow` collapses
+        // the effective allow list to empty — profile defaults included — which is
+        // the trap this reports (see policyCeilingBlockers).
+        const described = describePolicy(policy);
+        const warnings = [...described.warnings];
+        if (!policy.ceiling_present)
+            warnings.push(ceilingAbsenceHint(policy.ceiling_path));
+        const hasVerifiable = (input.expected_artifacts && input.expected_artifacts.length > 0) ||
+            Boolean(input.verify_command) ||
+            Boolean(input.json_schema);
+        if (profileName === 'general_worker' && !hasVerifiable) {
+            warnings.push('nothing verifiable requested: the best outcome this job can reach is success_unverified. Pass verify_command (the build or test command), expected_artifacts, or json_schema to make verified_success possible.');
+        }
+        let preflight;
+        if (input.dry_run && input.expected_commands) {
+            const allowRules = parseRulesLenient(policy.allow);
+            const denyRules = parseRulesLenient(policy.deny);
+            const commandResults = [];
+            let deniedCount = 0;
+            for (const cmd of input.expected_commands) {
+                const evalRes = evaluateCommandPolicy(cmd, allowRules, denyRules);
+                const decision = evalRes.allowed ? 'allow' : 'deny';
+                if (!evalRes.allowed) {
+                    deniedCount++;
+                }
+                commandResults.push({
+                    command: cmd,
+                    decision,
+                    stage: evalRes.stage,
+                    required_rule: evalRes.requiredRule,
+                });
+            }
+            preflight = { commands: commandResults };
+            if (deniedCount > 0) {
+                warnings.push(`${deniedCount} of ${input.expected_commands.length} expected_commands would be denied; see preflight.commands`);
+            }
+        }
+        if (input.dry_run) {
+            return reply({
+                dry_run: true,
+                job_id: jobId,
+                session_id: sessionId,
+                policy_summary: described.policy_summary,
+                blockers: described.blockers,
+                warnings,
+                ...(preflight ? { preflight } : {}),
+                effective_config: effectiveConfig,
+            });
+        }
+        // Locks first: a lost race must leave nothing behind, and
+        // no DB row references this job_id yet, so there is nothing to unwind.
+        acquireJobLocks(ctx.store, {
+            jobId,
+            cwd,
+            writeMode: profileDef.write,
+            sessionId,
+            maxRunning: ctx.limits.max_running_jobs,
+        });
+        if (!sessionExists) {
+            createSession(ctx.store, {
+                sessionId,
+                cwd,
+                model: input.model ?? null,
+                effort: input.effort ?? null,
+                profile: profileName,
+            });
+        }
+        createJob(ctx.store, {
+            jobId,
+            sessionId,
+            cwd,
+            profile: profileName,
+            writeMode: profileDef.write,
+            sessionMode,
+            onDenial,
+            deadlineAt,
+            requestedBy: input.requested_by ?? null,
+            parentTaskId: input.parent_task_id ?? null,
+        });
+        chmodDbFiles(ctx.store.paths.db);
+        const paths = jobPaths(ctx.paths, jobId);
+        ensureJobDirs(paths);
+        const request = { ...input };
+        writeJsonAtomic(paths.request, request);
+        writeJsonAtomic(paths.effectiveConfig, effectiveConfig);
+        writeJsonAtomic(paths.policy, policy);
+        // Turn 1 of a session-mode job. The runner's inbox relay writes it to agy's
+        // stdin as soon as the process is up; `agy_send` appends later turns to the
+        // same file. Written before the spawn so the relay can never miss it.
+        if (streamInput && input.prompt !== '') {
+            appendUserTurn(paths.inbox, input.prompt);
+        }
+        ensureGateHook(cwd, gatePath);
+        // Detached: the runner outlives this server process entirely.
+        // stdio is 'ignore' — the runner redirects agy's own stdout/stderr
+        // to job-directory files itself; nothing here needs a pipe.
+        const child = spawn(process.execPath, [binPath('runner'), jobId], {
+            cwd: ctx.paths.root,
+            detached: true,
+            stdio: 'ignore',
+            env: process.env,
+        });
+        child.unref();
+        return reply({
+            job_id: jobId,
+            session_id: sessionId,
+            lifecycle: 'queued',
+            profile: profileName,
+            cwd,
+            session_mode: sessionMode,
+            deadline_at: deadlineAt,
+            idle_timeout_ms: idleTimeoutMs,
+            policy_summary: described.policy_summary,
+            blockers: described.blockers,
+            warnings,
+            dry_run: false,
+        });
+    }
+    catch (e) {
+        return errorReply(e);
+    }
+}
+//# sourceMappingURL=start.js.map

package/dist/server/tools/start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.js","sourceRoot":"","sources":["../../../src/server/tools/start.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAC1D,OAAO,EACL,eAAe,EACf,OAAO,EACP,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,SAAS,EACT,eAAe,GAChB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACpE,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AACrG,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AACnE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAoC,MAAM,eAAe,CAAA;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEnD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IACnF,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,qFAAqF,CAAC;IAClG,OAAO,EAAE,CAAC;SACP,IAAI,CAAC,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;SAC7C,QAAQ,EAAE;SACV,QAAQ,CAAC,gHAAgH,CAAC;IAC7H,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,+BAA+B,CAAC;SAClE,QAAQ,EAAE;IACb,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,+BAA+B,CAAC;SAClE,QAAQ,EAAE;SACV,QAAQ,CAAC,gDAAgD,CAAC;IAC7D,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,sEAAsE,CAAC;IACnF,YAAY,EAAE,CAAC;SACZ,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;SAC5B,QAAQ,EAAE;SACV,QAAQ,CAAC,4EAA4E,CAAC;IACzF,WAAW,EAAE,CAAC;SACX,MAAM,CAAC;QACN,KAAK,EAAE,CAAC;aACL,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CAAC,yGAAyG,CAAC;QACtH,IAAI,EAAE,CAAC;aACJ,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CAAC,gFAAgF,CAAC;QAC7F,SAAS,EAAE,CAAC;aACT,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,kJAAkJ,CAAC;QAC/J,UAAU,EAAE,CAAC;aACV,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CACP,iLAAiL,CAClL;KACJ,CAAC;SACD,QAAQ,EAAE;SACV,QAAQ,CACP,oRAAoR,CACrR;IACH,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;SACpC,QAAQ,EAAE;SACV,QAAQ,CAAC,0DAA0D,CAAC;IACvE,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,kMAAkM,CACnM;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,iOAAiO,CAClO;IACH,kBAAkB,EAAE,CAAC;SAClB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,2FAA2F,CAAC;IACxG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAC3F,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,mBAAmB,CAAC;SAChD,QAAQ,EAAE;SACV,QAAQ,CACP,kZAAkZ,CACnZ;IACH,iBAAiB,EAAE,CAAC;SACjB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,gPAAgP,CACjP;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;IACrF,iBAAiB,EAAE,CAAC;SACjB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;CACtF,CAAC,CAAA;AAIF,SAAS,KAAK,CAAC,CAAS,EAAE,GAAW,EAAE,GAAW;IAChD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;AACxC,CAAC;AAED,mEAAmE;AACnE,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAElD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAgB,EAAE,KAAiB;IACnE,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC1B,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAA;QAC7C,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAEhC,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9C,MAAM,IAAI,eAAe,CAAC;gBACxB,KAAK,EAAE,mBAAmB;gBAC1B,KAAK,EAAE,KAAK,CAAC,iBAAiB;gBAC9B,QAAQ,EAAE,sDAAsD;aACjE,CAAC,CAAA;QACJ,CAAC;QAED,sDAAsD;QACtD,mEAAmE;QACnE,sEAAsE;QACtE,yEAAyE;QACzE,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAC7C,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,eAAe,CAAC;oBACxB,KAAK,EAAE,QAAQ;oBACf,KAAK,EAAE,KAAK,CAAC,MAAM;oBACnB,QAAQ,EACN,QAAQ,CAAC,MAAM,KAAK,CAAC;wBACnB,CAAC,CAAC,mBAAmB,KAAK,CAAC,KAAK,+CAA+C;wBAC/E,CAAC,CAAC,mBAAmB,KAAK,CAAC,KAAK,sBAAsB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,0CAA0C;iBAC3H,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,IAAI,mBAAmB,CAAA;QACxD,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;QAE1C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAA;QAC1C,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;QAE9D,wEAAwE;QACxE,oEAAoE;QACpE,4EAA4E;QAC5E,yEAAyE;QACzE,uEAAuE;QACvE,kCAAkC;QAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QAChC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CAAC;gBACxB,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,QAAQ;gBACf,QAAQ,EAAE,oBAAoB;aAC/B,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;QACtC,MAAM,cAAc,GAAG,YAAY,CAAC,SAAS,EAAE,CAAC,CAAA;QAChD,MAAM,aAAa,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;QAC5C,IAAI,cAAc,KAAK,YAAY,IAAI,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,eAAe,CAAC;gBACxB,KAAK,EAAE,WAAW;gBAClB,KAAK,EAAE,GAAG;gBACV,QAAQ,EAAE,0CAA0C,cAAc,GAAG;aACtE,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,aAAa,KAAK,YAAY,IAAI,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,eAAe,CAAC;gBACxB,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,QAAQ;gBACf,QAAQ,EAAE,gBAAgB,QAAQ,wCAAwC,GAAG,GAAG;aACjF,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,SAAiB,CAAA;QACrB,IAAI,cAA6B,CAAA;QACjC,IAAI,aAAa,GAAG,KAAK,CAAA;QACzB,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;YACvD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,eAAe,CAAC;oBACxB,KAAK,EAAE,YAAY;oBACnB,KAAK,EAAE,KAAK,CAAC,UAAU;oBACvB,QAAQ,EAAE,qCAAqC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;iBAChE,CAAC,CAAA;YACJ,CAAC;YACD,SAAS,GAAG,OAAO,CAAC,UAAU,CAAA;YAC9B,cAAc,GAAG,OAAO,CAAC,eAAe,CAAA;YACxC,aAAa,GAAG,IAAI,CAAA;YAEpB,wEAAwE;YACxE,qEAAqE;YACrE,sEAAsE;YACtE,qEAAqE;YACrE,qEAAqE;YACrE,qEAAqE;YACrE,kEAAkE;YAClE,sEAAsE;YACtE,iEAAiE;YACjE,WAAW;YACX,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;gBAC9F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,eAAe,CAAC;wBACxB,KAAK,EAAE,YAAY;wBACnB,KAAK,EAAE,KAAK,CAAC,UAAU;wBACvB,QAAQ,EACN,oKAAoK;qBACvK,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,YAAY,EAAE,CAAA;YAC1B,cAAc,GAAG,IAAI,CAAA;QACvB,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,IAAI,UAAU,CAAA;QAC9C,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,IAAI,SAAS,CAAA;QACnD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;QACxG,kDAAkD;QAClD,uEAAuE;QACvE,wEAAwE;QACxE,YAAY;QACZ,MAAM,aAAa,GACjB,WAAW,KAAK,SAAS;YACvB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,IAAI,GAAG,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC;YACvG,CAAC,CAAC,IAAI,CAAA;QACV,sEAAsE;QACtE,0EAA0E;QAC1E,MAAM,cAAc,GAAG,KAAK,CAAC,WAAW;YACtC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAC9D,CAAC,CAAC,IAAI,CAAA;QACR,MAAM,iBAAiB,GAAG,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAA;QAExD,yEAAyE;QACzE,oEAAoE;QACpE,yEAAyE;QACzE,yEAAyE;QACzE,qCAAqC;QACrC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAEtC,MAAM,MAAM,GAAG,aAAa,CAAC;YAC3B,OAAO,EAAE,WAAW;YACpB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,KAAK,CAAC,WAAW;YAC5B,QAAQ;YACR,UAAU,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YACrC,OAAO;SACR,CAAC,CAAA;QAEF,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;QAEhD,mCAAmC;QACnC,2EAA2E;QAC3E,2EAA2E;QAC3E,mEAAmE;QACnE,sEAAsE;QACtE,0EAA0E;QAC1E,2EAA2E;QAC3E,wEAAwE;QACxE,IAAI,MAAM,GAAmD,IAAI,CAAA;QACjE,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,mBAAmB,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;gBACpE,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,KAAK,CAAC,cAAc;aAC5B,CAAC,CAAA;YACF,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,IAAI,eAAe,CAAC;oBACxB,KAAK,EAAE,gBAAgB;oBACvB,KAAK,EAAE,KAAK,CAAC,cAAc;oBAC3B,QAAQ,EAAE,kDAAkD,SAAS,CAAC,GAAG,EAAE;iBAC5E,CAAC,CAAA;YACJ,CAAC;YACD,MAAM,eAAe,GAAG,KAAK,CAC3B,KAAK,CAAC,iBAAiB,IAAI,GAAG,CAAC,MAAM,CAAC,yBAAyB,EAC/D,CAAC,EACD,GAAG,CAAC,MAAM,CAAC,cAAc,CAC1B,CAAA;YACD,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;QACzE,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAA;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,UAAU,GAAG,GAAG,GAAG,SAAS,CAAA;QAElC,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,WAAW,GAAG,WAAW,KAAK,SAAS,CAAA;QAC7C,oEAAoE;QACpE,6DAA6D;QAC7D,iCAAiC;QACjC,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;QACzC,oEAAoE;QACpE,wEAAwE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,gCAAgC;QAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;YAClC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,eAAe,CAAC;oBACxB,KAAK,EAAE,YAAY;oBACnB,KAAK,EAAE,GAAG;oBACV,QAAQ,EAAE,mGAAmG,OAAO,4FAA4F;iBACjN,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC;YACxB,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;YACvC,OAAO;YACP,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAC5B,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;YACxB,cAAc;YACd,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;YAC/C,YAAY,EAAE,aAAa;YAC3B,cAAc,EAAE,SAAS;YACzB,cAAc;SACf,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,aAAa,EAAE,CAAA;QAC9B,yEAAyE;QACzE,0EAA0E;QAC1E,4EAA4E;QAC5E,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAA;QAE/F,MAAM,eAAe,GAAoB;YACvC,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,SAAS;YACrB,eAAe,EAAE,cAAc;YAC/B,GAAG;YACH,OAAO,EAAE,WAAW;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAC5B,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;YACxB,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,QAAQ;YACnB,UAAU,EAAE,UAAU,CAAC,KAAK;YAC5B,UAAU,EAAE,SAAS;YACrB,WAAW,EAAE,UAAU;YACvB,eAAe,EAAE,aAAa;YAC9B,kBAAkB,EAAE,iBAAiB;YACrC,gBAAgB,EAAE,cAAc;YAChC,MAAM;YACN,QAAQ,EAAE,OAAO;YACjB,MAAM;YACN,IAAI;YACJ,OAAO,EAAE,MAAM;YACf,GAAG;YACH,UAAU,EAAE,GAAG;SAChB,CAAA;QAED,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,qDAAqD;QACrD,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,CAAA;QACxC,MAAM,QAAQ,GAAG,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;QACxC,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAA;QAEnF,MAAM,aAAa,GACjB,CAAC,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QAC5B,IAAI,WAAW,KAAK,gBAAgB,IAAI,CAAC,aAAa,EAAE,CAAC;YACvD,QAAQ,CAAC,IAAI,CACX,iNAAiN,CAClN,CAAA;QACH,CAAC;QAED,IAAI,SAOS,CAAA;QAEb,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAClD,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAChD,MAAM,cAAc,GAKf,EAAE,CAAA;YACP,IAAI,WAAW,GAAG,CAAC,CAAA;YAEnB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAC1C,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,CAAA;gBACjE,MAAM,QAAQ,GAAqB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;gBACrE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;oBACrB,WAAW,EAAE,CAAA;gBACf,CAAC;gBACD,cAAc,CAAC,IAAI,CAAC;oBAClB,OAAO,EAAE,GAAG;oBACZ,QAAQ;oBACR,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,aAAa,EAAE,OAAO,CAAC,YAAY;iBACpC,CAAC,CAAA;YACJ,CAAC;YAED,SAAS,GAAG,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAA;YACxC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CACX,GAAG,WAAW,OAAO,KAAK,CAAC,iBAAiB,CAAC,MAAM,4DAA4D,CAChH,CAAA;YACH,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;gBACX,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,SAAS;gBACrB,cAAc,EAAE,SAAS,CAAC,cAAc;gBACxC,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,QAAQ;gBACR,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,gBAAgB,EAAE,eAAe;aAClC,CAAC,CAAA;QACJ,CAAC;QAED,0DAA0D;QAC1D,uEAAuE;QACvE,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE;YACzB,KAAK;YACL,GAAG;YACH,SAAS,EAAE,UAAU,CAAC,KAAK;YAC3B,SAAS;YACT,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,gBAAgB;SACxC,CAAC,CAAA;QAEF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE;gBACvB,SAAS;gBACT,GAAG;gBACH,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;gBAC5B,OAAO,EAAE,WAAW;aACrB,CAAC,CAAA;QACJ,CAAC;QAED,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACnB,KAAK;YACL,SAAS;YACT,GAAG;YACH,OAAO,EAAE,WAAW;YACpB,SAAS,EAAE,UAAU,CAAC,KAAK;YAC3B,WAAW;YACX,QAAQ;YACR,UAAU;YACV,WAAW,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;YACvC,YAAY,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;SAC3C,CAAC,CAAA;QACF,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAEhC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QACxC,aAAa,CAAC,KAAK,CAAC,CAAA;QAEpB,MAAM,OAAO,GAAe,EAAE,GAAG,KAAK,EAAE,CAAA;QACxC,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvC,eAAe,CAAC,KAAK,CAAC,eAAe,EAAE,eAAe,CAAC,CAAA;QACvD,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAErC,4EAA4E;QAC5E,4EAA4E;QAC5E,sEAAsE;QACtE,IAAI,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACvC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QAC3C,CAAC;QAED,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QAE7B,8DAA8D;QAC9D,mEAAmE;QACnE,4DAA4D;QAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,EAAE;YAChE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI;YACnB,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;YACf,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAA;QACF,KAAK,CAAC,KAAK,EAAE,CAAA;QAEb,OAAO,KAAK,CAAC;YACX,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,WAAW;YACpB,GAAG;YACH,YAAY,EAAE,WAAW;YACzB,WAAW,EAAE,UAAU;YACvB,eAAe,EAAE,aAAa;YAC9B,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ;YACR,OAAO,EAAE,KAAK;SACf,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,UAAU,CAAC,CAAC,CAAC,CAAA;IACtB,CAAC;AACH,CAAC"}

package/dist/server/tools/wait.d.ts

@@ -0,0 +1,29 @@
+import { z } from 'zod';
+import { type ToolContext, type ToolReply } from '../context.js';
+/**
+ * `agy_wait` — long-poll until the job finishes or `wait_ms` runs out.
+ *
+ * Implemented as 200 ms polling, not an in-process await: the job belongs to no
+ * client, so there is no handle to await on. From the caller's
+ * side it is still a single MCP call.
+ *
+ * `wait_ms: 0` returns an immediate snapshot. On completion the reply is the
+ * judgement packet only — headline, outcome, counts, warnings, short log tail.
+ * Lists and raw text belong to `agy_result`.
+ */
+export declare const waitInput: z.ZodObject<{
+    job_id: z.ZodString;
+    wait_ms: z.ZodOptional<z.ZodNumber>;
+    after_cursor: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    job_id: string;
+    wait_ms?: number | undefined;
+    after_cursor?: number | undefined;
+}, {
+    job_id: string;
+    wait_ms?: number | undefined;
+    after_cursor?: number | undefined;
+}>;
+export type WaitInput = z.infer<typeof waitInput>;
+export declare function handleWait(ctx: ToolContext, input: WaitInput): Promise<ToolReply>;
+//# sourceMappingURL=wait.d.ts.map

package/dist/server/tools/wait.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wait.d.ts","sourceRoot":"","sources":["../../../src/server/tools/wait.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAWvB,OAAO,EAAqB,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAA;AAEnF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;EAgBpB,CAAA;AAEF,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAA;AAQjD,wBAAsB,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAsEvF"}

package/dist/server/tools/wait.js

@@ -0,0 +1,120 @@
+import { z } from 'zod';
+import { jobPaths, readJsonIfExists } from '../../contract/paths.js';
+import { reconcile } from '../../broker/reconcile.js';
+import { loadBrokerResult, projectJudgementPacket } from '../../broker/result.js';
+import { sleep } from '../../runner/reap.js';
+import { completeLineEnd, readLinesFrom, readTailLines } from '../../events/cursor.js';
+import { parseEventLines } from '../../events/parse.js';
+import { normalizeParsed, tailSummary } from '../../events/normalize.js';
+import { getJob } from '../../store/jobs.js';
+import { errorReply, reply } from '../context.js';
+/**
+ * `agy_wait` — long-poll until the job finishes or `wait_ms` runs out.
+ *
+ * Implemented as 200 ms polling, not an in-process await: the job belongs to no
+ * client, so there is no handle to await on. From the caller's
+ * side it is still a single MCP call.
+ *
+ * `wait_ms: 0` returns an immediate snapshot. On completion the reply is the
+ * judgement packet only — headline, outcome, counts, warnings, short log tail.
+ * Lists and raw text belong to `agy_result`.
+ */
+export const waitInput = z.object({
+    job_id: z.string(),
+    wait_ms: z
+        .number()
+        .int()
+        .min(0)
+        .optional()
+        .describe('Max time to block. 0 returns the current state immediately.'),
+    after_cursor: z
+        .number()
+        .int()
+        .min(0)
+        .optional()
+        .describe('Byte offset from a previous call, applied to the in-progress log tail. A finished job returns the full judgement packet and its end-of-stream cursor regardless.'),
+});
+const POLL_INTERVAL_MS = 200;
+function clamp(n, min, max) {
+    return Math.min(Math.max(n, min), max);
+}
+export async function handleWait(ctx, input) {
+    try {
+        const budget = clamp(input.wait_ms ?? 0, 0, ctx.limits.max_timeout_ms);
+        const startedAt = Date.now();
+        const afterCursor = input.after_cursor ?? 0;
+        await reconcile(ctx.store);
+        let job = getJob(ctx.store, input.job_id);
+        for (;;) {
+            if (job.lifecycle === 'finished')
+                break;
+            if (Date.now() - startedAt >= budget)
+                break;
+            await sleep(POLL_INTERVAL_MS);
+            await reconcile(ctx.store);
+            job = getJob(ctx.store, input.job_id);
+        }
+        const paths = jobPaths(ctx.paths, job.job_id);
+        if (job.lifecycle === 'finished') {
+            const result = loadBrokerResult(paths);
+            if (result) {
+                const packet = projectJudgementPacket(result, {
+                    maxLogTailLines: ctx.limits.max_log_tail_lines,
+                    maxBytes: ctx.limits.max_response_bytes,
+                    // End of stream, not 0. The caller feeds this to `agy_logs`, and a
+                    // finished job has nothing left to hand out.
+                    cursor: completeLineEnd(paths.events),
+                });
+                return reply(packet);
+            }
+        }
+        // Not finished (or finished but not finalized yet) — a lightweight
+        // snapshot built directly from events.ndjson. No lists, no raw response.
+        let readLines;
+        let nextCursor;
+        if (afterCursor === 0) {
+            readLines = readTailLines(paths.events, ctx.limits.max_response_bytes);
+            nextCursor = completeLineEnd(paths.events);
+        }
+        else {
+            const read = readLinesFrom(paths.events, afterCursor, { maxBytes: ctx.limits.max_response_bytes });
+            readLines = read.lines;
+            nextCursor = read.nextCursor;
+        }
+        const normalized = normalizeParsed(parseEventLines(readLines, afterCursor));
+        const tail = tailSummary(normalized, ctx.limits.max_log_tail_lines, ctx.limits.max_response_bytes);
+        const packet = {
+            job_id: job.job_id,
+            lifecycle: job.lifecycle,
+            outcome: job.outcome,
+            headline: job.headline ?? describeLive(job.lifecycle, paths.state),
+            exit_code: job.exit_code,
+            duration_ms: job.started_at !== null ? Date.now() - job.started_at : null,
+            agent_status: job.agent_status,
+            contract_status: job.contract_status,
+            // Nothing is judged until the job finalizes; zeros here mean "not
+            // computed yet", which `lifecycle !== 'finished'` already says.
+            counts: { blockers: 0, actionable: 0, tool_errors: 0, turns: 0 },
+            warnings: [],
+            log_tail: tail,
+            cursor: nextCursor,
+        };
+        return reply(packet);
+    }
+    catch (e) {
+        return errorReply(e);
+    }
+}
+/**
+ * Headline for a job that has not finalized. Names the runner's phase when
+ * `state.json` carries one, so a caller polling through a long
+ * `verify_command` sees "running, verifying" rather than an unexplained wait
+ * (0.2.2 PR1).
+ */
+function describeLive(lifecycle, statePath) {
+    const phase = readJsonIfExists(statePath)?.phase;
+    if (lifecycle === 'running' && phase === 'verifying')
+        return 'job is running: agy exited, verify_command in progress';
+    return `job is ${lifecycle}`;
+}
+//# sourceMappingURL=wait.js.map