audit-tools 0.28.0

package/dist/shared/providers/providerFactory.js

@@ -0,0 +1,246 @@
+import { spawnSync } from "node:child_process";
+import { LocalSubprocessProvider } from "./localSubprocessProvider.js";
+import { SubprocessTemplateProvider } from "./subprocessTemplateProvider.js";
+import { CodexProvider } from "./codexProvider.js";
+import { OpenAiCompatibleProvider } from "./openAiCompatibleProvider.js";
+function hasEntries(values) {
+    return (values?.length ?? 0) > 0;
+}
+function hasConfiguredClaudeCode(sessionConfig) {
+    return (Boolean(sessionConfig.claude_code?.command?.trim()) ||
+        hasEntries(sessionConfig.claude_code?.extra_args) ||
+        sessionConfig.claude_code?.dangerously_skip_permissions === true);
+}
+function hasConfiguredOpenCode(sessionConfig) {
+    return (Boolean(sessionConfig.opencode?.command?.trim()) ||
+        hasEntries(sessionConfig.opencode?.extra_args));
+}
+function hasConfiguredCodex(config) {
+    return Boolean(config?.command?.trim()) || hasEntries(config?.extra_args);
+}
+/**
+ * openai-compatible is configured when both an endpoint and a model are set. The
+ * API key is resolved (and degrades) at launch — env presence is intentionally
+ * not probed here, mirroring how the agentic providers don't read credentials
+ * during resolution.
+ */
+export function hasConfiguredOpenAiCompatible(config) {
+    return Boolean(config?.base_url?.trim()) && Boolean(config?.model?.trim());
+}
+function commandExists(command) {
+    const lookupCommand = process.platform === "win32" ? "where" : "which";
+    const result = spawnSync(lookupCommand, [command], { stdio: "ignore" });
+    return result.status === 0;
+}
+function getAutoProviderContext(sessionConfig, env, lookupCommand) {
+    const insideClaudeCode = Boolean(env.CLAUDECODE);
+    const claudeCommand = sessionConfig.claude_code?.command ?? "claude";
+    const opencodeCommand = sessionConfig.opencode?.command ?? "opencode";
+    const codexCommand = sessionConfig.codex?.command ?? "codex";
+    // In-session env signal for the OpenAI Codex CLI: `CODEX=1`, mirroring
+    // the `CLAUDECODE` / `OPENCODE` convention used by other agentic CLIs.
+    // Note: `CODEX_*` vars in quota/hostLimits.ts denote Anthropic's "Codex
+    // Desktop" originator — a distinct concept from the OpenAI Codex CLI.
+    // This signal is the behavioral contract; it is regression-tested in
+    // packages/shared/tests/codex-antigravity-providers.test.mjs.
+    const insideCodex = Boolean(env.CODEX);
+    return {
+        inVSCode: (env.TERM_PROGRAM ?? "").toLowerCase() === "vscode",
+        insideOpenCode: Boolean(env.OPENCODE),
+        insideClaudeCode,
+        insideCodex,
+        // In-IDE marker for Antigravity: either an `ANTIGRAVITY` env var or
+        // `TERM_PROGRAM === "antigravity"`, mirroring the VSCode / TERM_PROGRAM
+        // pattern. Both paths require an operator-configured command_template to
+        // activate (template-absent falls through to the next priority rung).
+        // This signal is the behavioral contract; it is regression-tested in
+        // packages/shared/tests/codex-antigravity-providers.test.mjs.
+        inAntigravity: Boolean(env.ANTIGRAVITY) ||
+            (env.TERM_PROGRAM ?? "").toLowerCase() === "antigravity",
+        hasVSCodeTaskTemplate: hasEntries(sessionConfig.vscode_task?.command_template),
+        hasAntigravityTemplate: hasEntries(sessionConfig.antigravity?.command_template),
+        hasSubprocessTemplate: hasEntries(sessionConfig.subprocess_template?.command_template),
+        hasClaudeCodeConfig: hasConfiguredClaudeCode(sessionConfig),
+        hasOpenCodeConfig: hasConfiguredOpenCode(sessionConfig),
+        hasCodexConfig: hasConfiguredCodex(sessionConfig.codex),
+        hasOpenAiCompatibleConfig: hasConfiguredOpenAiCompatible(sessionConfig.openai_compatible),
+        claudeAvailable: !insideClaudeCode && lookupCommand(claudeCommand),
+        opencodeAvailable: lookupCommand(opencodeCommand),
+        // Self-spawn guard mirrors claudeAvailable: a fresh `codex` subprocess
+        // cannot be spawned from inside a codex session.
+        codexAvailable: !insideCodex && lookupCommand(codexCommand),
+    };
+}
+/**
+ * Ranked priority table for auto-provider resolution. Each entry specifies a
+ * provider name, a human-readable rationale, and a predicate over the context
+ * snapshot. `chooseAutoProvider` returns the first matching entry's name.
+ * To add a new provider, insert one rule object at the correct rank.
+ */
+const PROVIDER_PRIORITY_RULES = [
+    {
+        name: "opencode",
+        comment: "Running inside an opencode session: use it directly.",
+        predicate: (ctx) => ctx.insideOpenCode,
+    },
+    {
+        name: "codex",
+        comment: "Running inside a codex session: use it directly (codexAvailable is forced " +
+            "false by the self-spawn guard, so the config/tie-break rungs below would " +
+            "not reach it — but a host already inside codex can drive it in-session).",
+        predicate: (ctx) => ctx.insideCodex,
+    },
+    {
+        name: "vscode-task",
+        comment: "Note: when inside a Claude Code session (CLAUDECODE set) `claudeAvailable` " +
+            "is forced false, so we never resolve to claude-code — a fresh `claude` " +
+            "subprocess cannot be spawned from within one. Such runs fall through to " +
+            "local-subprocess (manual dispatch), matching ClaudeCodeProvider's guard.",
+        predicate: (ctx) => ctx.inVSCode && ctx.hasVSCodeTaskTemplate,
+    },
+    {
+        name: "antigravity",
+        comment: "Antigravity is IDE-bound and needs an operator-configured template, exactly " +
+            "like vscode-task. Only resolve to it when both the IDE marker and a template " +
+            "are present.",
+        predicate: (ctx) => ctx.inAntigravity && ctx.hasAntigravityTemplate,
+    },
+    {
+        name: "subprocess-template",
+        comment: "Explicit subprocess template configured: use it.",
+        predicate: (ctx) => ctx.hasSubprocessTemplate,
+    },
+    {
+        name: "claude-code",
+        comment: "Config-gated: operator explicitly configured claude-code and it is available.",
+        predicate: (ctx) => ctx.hasClaudeCodeConfig && ctx.claudeAvailable,
+    },
+    {
+        name: "opencode",
+        comment: "Config-gated: operator explicitly configured opencode and it is available.",
+        predicate: (ctx) => ctx.hasOpenCodeConfig && ctx.opencodeAvailable,
+    },
+    {
+        name: "codex",
+        comment: "Config-gated: operator explicitly configured codex and it is available.",
+        predicate: (ctx) => ctx.hasCodexConfig && ctx.codexAvailable,
+    },
+    {
+        name: "claude-code",
+        comment: "Tie-break: claude is available but opencode is not — prefer claude-code.",
+        predicate: (ctx) => ctx.claudeAvailable && !ctx.opencodeAvailable,
+    },
+    {
+        name: "opencode",
+        comment: "Tie-break: opencode is available but claude is not — prefer opencode.",
+        predicate: (ctx) => ctx.opencodeAvailable && !ctx.claudeAvailable,
+    },
+    {
+        name: "openai-compatible",
+        comment: "Configured background pool: an OpenAI-compatible endpoint (base_url + model) is an API, " +
+            "not a CLI, so there is no PATH probe. Ranked below the available agentic CLIs (which " +
+            "produce stronger edits when truly present) but ABOVE the codex last-resort, so an " +
+            "explicitly-configured endpoint is preferred over a fallback codex pick — notably inside a " +
+            "CLAUDECODE session, where claude can't self-spawn and this becomes the automatic worker.",
+        predicate: (ctx) => ctx.hasOpenAiCompatibleConfig,
+    },
+    {
+        name: "codex",
+        comment: "Last resort: codex is only auto-selected when no claude/opencode is available, " +
+            "to avoid surprising existing setups that rely on those.",
+        predicate: (ctx) => ctx.codexAvailable && !ctx.claudeAvailable && !ctx.opencodeAvailable,
+    },
+];
+function chooseAutoProvider(context) {
+    for (const rule of PROVIDER_PRIORITY_RULES) {
+        if (rule.predicate(context))
+            return rule.name;
+    }
+    return "local-subprocess";
+}
+/**
+ * Resolve a concrete provider name. Only the explicit `"auto"` sentinel triggers
+ * environment auto-detection; any other requested name (or `sessionConfig.provider`)
+ * passes through verbatim, and an entirely unspecified provider defaults to
+ * `"local-subprocess"`. Callers that want auto-detection on an unspecified
+ * provider should pass `"auto"` (see `createFreshSessionProvider`).
+ */
+export function resolveFreshSessionProviderName(name, sessionConfig = {}, options = {}) {
+    const requestedProvider = name ?? sessionConfig.provider ?? "local-subprocess";
+    if (requestedProvider !== "auto") {
+        return requestedProvider;
+    }
+    const env = options.env ?? process.env;
+    const lookupCommand = options.commandExists ?? commandExists;
+    return chooseAutoProvider(getAutoProviderContext(sessionConfig, env, lookupCommand));
+}
+/**
+ * Instantiate the resolved provider. When neither `name` nor
+ * `sessionConfig.provider` is set, auto-detection is requested on the caller's
+ * behalf (the conversation-first default). The claude-code and opencode providers
+ * are built via the injected `deps` so each orchestrator keeps its own behavior;
+ * every other provider lives in shared and is instantiated here directly. The
+ * auto-fallback warning is attributed to `deps.orchestratorName`.
+ */
+export function createFreshSessionProvider(name, sessionConfig = {}, deps) {
+    // Conversation-first callers pass nothing; treat that as a request to
+    // auto-detect rather than silently falling back to local-subprocess.
+    const effectiveName = name ?? sessionConfig.provider ?? "auto";
+    const providerName = resolveFreshSessionProviderName(effectiveName, sessionConfig);
+    // Log the auto-resolution decision (only when auto-detection actually ran;
+    // an explicitly named provider is the caller's choice and needs no signal).
+    // local-subprocess means no capable agent provider was detected, so it
+    // carries the manual-dispatch fallback reason; any other resolution names the
+    // detected provider. Structured one-line stderr (FINDING-012 convention),
+    // attributed to the orchestrator that invoked the shared factory.
+    // When a RunLogger is provided, a structured provider_launch event is also
+    // emitted for machine-parseable, run-correlated observability (FND-OBS-12e8582b).
+    if (effectiveName === "auto") {
+        const fallbackReason = providerName === "local-subprocess"
+            ? "no capable agent provider detected; agent tasks require manual dispatch — configure claude-code, opencode, or subprocess-template in session-config.json to automate them"
+            : "none";
+        process.stderr.write(`[shared] providers: ${deps.orchestratorName} auto-resolved provider ` +
+            `'${providerName}' (fallback: ${fallbackReason})\n`);
+        deps.runLogger?.event({
+            kind: "provider_launch",
+            provider: providerName,
+            phase: "provider_auto_resolution",
+            note: fallbackReason === "none"
+                ? `auto-resolved to ${providerName}`
+                : `auto-resolved to ${providerName}; fallback: ${fallbackReason}`,
+        });
+    }
+    switch (providerName) {
+        case "local-subprocess":
+            return new LocalSubprocessProvider();
+        case "subprocess-template":
+            if (!sessionConfig.subprocess_template?.command_template?.length) {
+                throw new Error("subprocess-template provider requires session-config.json with subprocess_template.command_template.");
+            }
+            return new SubprocessTemplateProvider(sessionConfig.subprocess_template);
+        case "claude-code":
+            return deps.createClaudeCodeProvider(sessionConfig.claude_code);
+        case "codex":
+            // Codex needs no required config — the command defaults to "codex".
+            return new CodexProvider(sessionConfig.codex);
+        case "openai-compatible":
+            // OpenAI-compatible endpoint (NIM/vLLM/…). No required config at
+            // construction; base_url/model/key are validated (and degrade) at launch.
+            return new OpenAiCompatibleProvider(sessionConfig.openai_compatible);
+        case "opencode":
+            return deps.createOpenCodeProvider(sessionConfig.opencode);
+        case "vscode-task":
+            if (!sessionConfig.vscode_task?.command_template?.length) {
+                throw new Error("vscode-task provider requires session-config.json with vscode_task.command_template.");
+            }
+            return new SubprocessTemplateProvider(sessionConfig.vscode_task, "vscode-task");
+        case "antigravity":
+            if (!sessionConfig.antigravity?.command_template?.length) {
+                throw new Error("antigravity provider requires session-config.json with antigravity.command_template — Antigravity is an agentic IDE, not a headless CLI, so it must be driven via a configured command/task template.");
+            }
+            return new SubprocessTemplateProvider(sessionConfig.antigravity, "antigravity");
+        default:
+            throw new Error(`Unknown provider: ${providerName}`);
+    }
+}
+//# sourceMappingURL=providerFactory.js.map

package/dist/shared/providers/providerFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerFactory.js","sourceRoot":"","sources":["../../../src/shared/providers/providerFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAS/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAGzE,SAAS,UAAU,CAAC,MAA4B;IAC9C,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,uBAAuB,CAAC,aAA4B;IAC3D,OAAO,CACL,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACnD,UAAU,CAAC,aAAa,CAAC,WAAW,EAAE,UAAU,CAAC;QACjD,aAAa,CAAC,WAAW,EAAE,4BAA4B,KAAK,IAAI,CACjE,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,aAA4B;IACzD,OAAO,CACL,OAAO,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAChD,UAAU,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAC/C,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA+B;IACzD,OAAO,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAA0C;IAE1C,OAAO,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC7B,CAAC;AAwBD,SAAS,sBAAsB,CAC7B,aAA4B,EAC5B,GAAsB,EACtB,aAA2C;IAE3C,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,aAAa,CAAC,WAAW,EAAE,OAAO,IAAI,QAAQ,CAAC;IACrE,MAAM,eAAe,GAAG,aAAa,CAAC,QAAQ,EAAE,OAAO,IAAI,UAAU,CAAC;IACtE,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,EAAE,OAAO,IAAI,OAAO,CAAC;IAC7D,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,sEAAsE;IACtE,qEAAqE;IACrE,8DAA8D;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO;QACL,QAAQ,EAAE,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ;QAC7D,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QACrC,gBAAgB;QAChB,WAAW;QACX,oEAAoE;QACpE,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,qEAAqE;QACrE,8DAA8D;QAC9D,aAAa,EACX,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;YACxB,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,aAAa;QAC1D,qBAAqB,EAAE,UAAU,CAAC,aAAa,CAAC,WAAW,EAAE,gBAAgB,CAAC;QAC9E,sBAAsB,EAAE,UAAU,CAChC,aAAa,CAAC,WAAW,EAAE,gBAAgB,CAC5C;QACD,qBAAqB,EAAE,UAAU,CAC/B,aAAa,CAAC,mBAAmB,EAAE,gBAAgB,CACpD;QACD,mBAAmB,EAAE,uBAAuB,CAAC,aAAa,CAAC;QAC3D,iBAAiB,EAAE,qBAAqB,CAAC,aAAa,CAAC;QACvD,cAAc,EAAE,kBAAkB,CAAC,aAAa,CAAC,KAAK,CAAC;QACvD,yBAAyB,EAAE,6BAA6B,CACtD,aAAa,CAAC,iBAAiB,CAChC;QACD,eAAe,EAAE,CAAC,gBAAgB,IAAI,aAAa,CAAC,aAAa,CAAC;QAClE,iBAAiB,EAAE,aAAa,CAAC,eAAe,CAAC;QACjD,uEAAuE;QACvE,iDAAiD;QACjD,cAAc,EAAE,CAAC,WAAW,IAAI,aAAa,CAAC,YAAY,CAAC;KAC5D,CAAC;AACJ,CAAC;AAQD;;;;;GAKG;AACH,MAAM,uBAAuB,GAA2B;IACtD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,sDAAsD;QAC/D,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc;KACvC;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EACL,4EAA4E;YAC5E,2EAA2E;YAC3E,0EAA0E;QAC5E,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW;KACpC;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EACL,6EAA6E;YAC7E,yEAAyE;YACzE,0EAA0E;YAC1E,0EAA0E;QAC5E,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,qBAAqB;KAC9D;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EACL,8EAA8E;YAC9E,+EAA+E;YAC/E,cAAc;QAChB,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,sBAAsB;KACpE;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,kDAAkD;QAC3D,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,qBAAqB;KAC9C;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,+EAA+E;QACxF,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,eAAe;KACnE;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,4EAA4E;QACrF,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,iBAAiB;KACnE;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,yEAAyE;QAClF,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc;KAC7D;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,0EAA0E;QACnF,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,GAAG,CAAC,iBAAiB;KAClE;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,uEAAuE;QAChF,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,GAAG,CAAC,eAAe;KAClE;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,OAAO,EACL,0FAA0F;YAC1F,uFAAuF;YACvF,oFAAoF;YACpF,4FAA4F;YAC5F,0FAA0F;QAC5F,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,yBAAyB;KAClD;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EACL,iFAAiF;YACjF,yDAAyD;QAC3D,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CACjB,GAAG,CAAC,cAAc,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,GAAG,CAAC,iBAAiB;KACvE;CACF,CAAC;AAEF,SAAS,kBAAkB,CAAC,OAA4B;IACtD,KAAK,MAAM,IAAI,IAAI,uBAAuB,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IAChD,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAC7C,IAAwB,EACxB,gBAA+B,EAAE,EACjC,UAGI,EAAE;IAEN,MAAM,iBAAiB,GACrB,IAAI,IAAI,aAAa,CAAC,QAAQ,IAAI,kBAAkB,CAAC;IACvD,IAAI,iBAAiB,KAAK,MAAM,EAAE,CAAC;QACjC,OAAO,iBAAyC,CAAC;IACnD,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,aAAa,CAAC;IAC7D,OAAO,kBAAkB,CACvB,sBAAsB,CAAC,aAAa,EAAE,GAAG,EAAE,aAAa,CAAC,CAC1D,CAAC;AACJ,CAAC;AA2BD;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CACxC,IAAwB,EACxB,gBAA+B,EAAE,EACjC,IAA8B;IAE9B,sEAAsE;IACtE,qEAAqE;IACrE,MAAM,aAAa,GAAG,IAAI,IAAI,aAAa,CAAC,QAAQ,IAAI,MAAM,CAAC;IAC/D,MAAM,YAAY,GAAG,+BAA+B,CAClD,aAAa,EACb,aAAa,CACd,CAAC;IACF,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,8EAA8E;IAC9E,0EAA0E;IAC1E,kEAAkE;IAClE,2EAA2E;IAC3E,kFAAkF;IAClF,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,cAAc,GAClB,YAAY,KAAK,kBAAkB;YACjC,CAAC,CAAC,2KAA2K;YAC7K,CAAC,CAAC,MAAM,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uBAAuB,IAAI,CAAC,gBAAgB,0BAA0B;YACpE,IAAI,YAAY,gBAAgB,cAAc,KAAK,CACtD,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;YACpB,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,YAAY;YACtB,KAAK,EAAE,0BAA0B;YACjC,IAAI,EACF,cAAc,KAAK,MAAM;gBACvB,CAAC,CAAC,oBAAoB,YAAY,EAAE;gBACpC,CAAC,CAAC,oBAAoB,YAAY,eAAe,cAAc,EAAE;SACtE,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,YAAY,EAAE,CAAC;QACrB,KAAK,kBAAkB;YACrB,OAAO,IAAI,uBAAuB,EAAE,CAAC;QACvC,KAAK,qBAAqB;YACxB,IAAI,CAAC,aAAa,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;gBACjE,MAAM,IAAI,KAAK,CACb,sGAAsG,CACvG,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,0BAA0B,CACnC,aAAa,CAAC,mBAAmB,CAClC,CAAC;QACJ,KAAK,aAAa;YAChB,OAAO,IAAI,CAAC,wBAAwB,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAClE,KAAK,OAAO;YACV,oEAAoE;YACpE,OAAO,IAAI,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAChD,KAAK,mBAAmB;YACtB,iEAAiE;YACjE,0EAA0E;YAC1E,OAAO,IAAI,wBAAwB,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;QACvE,KAAK,UAAU;YACb,OAAO,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC7D,KAAK,aAAa;YAChB,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;gBACzD,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,0BAA0B,CACnC,aAAa,CAAC,WAAW,EACzB,aAAa,CACd,CAAC;QACJ,KAAK,aAAa;YAChB,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;gBACzD,MAAM,IAAI,KAAK,CACb,uMAAuM,CACxM,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,0BAA0B,CACnC,aAAa,CAAC,WAAW,EACzB,aAAa,CACd,CAAC;QACJ;YACE,MAAM,IAAI,KAAK,CAAC,qBAAqB,YAAY,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/shared/providers/providerKeyedFactory.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Build a provider-keyed lookup: given a record of provider-name → value and a
+ * generic `fallback`, return a function that resolves a provider name to its
+ * specific value or the fallback when the name is unknown.
+ *
+ * This is the shared shape behind the quota error-parser factory and the audit
+ * header-extractor factory (drift-plan E5): both kept their own
+ * `Record<string, T>[name] ?? fallback` lookup, which is the same primitive.
+ * Centralizing it guarantees the unknown-key → generic-fallback contract is
+ * identical and tested once. Values are looked up by reference, so callers that
+ * want singleton strategies simply pass singletons in `record` / `fallback`.
+ */
+export declare function makeProviderKeyedFactory<T>(record: Record<string, T>, fallback: T): (providerName: string) => T;
+//# sourceMappingURL=providerKeyedFactory.d.ts.map

package/dist/shared/providers/providerKeyedFactory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerKeyedFactory.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/providerKeyedFactory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,EACxC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EACzB,QAAQ,EAAE,CAAC,GACV,CAAC,YAAY,EAAE,MAAM,KAAK,CAAC,CAE7B"}

package/dist/shared/providers/providerKeyedFactory.js

@@ -0,0 +1,16 @@
+/**
+ * Build a provider-keyed lookup: given a record of provider-name → value and a
+ * generic `fallback`, return a function that resolves a provider name to its
+ * specific value or the fallback when the name is unknown.
+ *
+ * This is the shared shape behind the quota error-parser factory and the audit
+ * header-extractor factory (drift-plan E5): both kept their own
+ * `Record<string, T>[name] ?? fallback` lookup, which is the same primitive.
+ * Centralizing it guarantees the unknown-key → generic-fallback contract is
+ * identical and tested once. Values are looked up by reference, so callers that
+ * want singleton strategies simply pass singletons in `record` / `fallback`.
+ */
+export function makeProviderKeyedFactory(record, fallback) {
+    return (providerName) => record[providerName] ?? fallback;
+}
+//# sourceMappingURL=providerKeyedFactory.js.map

package/dist/shared/providers/providerKeyedFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerKeyedFactory.js","sourceRoot":"","sources":["../../../src/shared/providers/providerKeyedFactory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAyB,EACzB,QAAW;IAEX,OAAO,CAAC,YAAoB,EAAK,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC;AACvE,CAAC"}

package/dist/shared/providers/spawnLoggedCommand.d.ts

@@ -0,0 +1,10 @@
+import { createWriteStream } from "node:fs";
+import { spawn } from "node:child_process";
+import type { LaunchFreshSessionInput, LaunchFreshSessionResult } from "./types.js";
+export interface SpawnLoggedCommandOptions {
+    createWriteStream?: typeof createWriteStream;
+    spawn?: typeof spawn;
+    killGraceMs?: number;
+}
+export declare function spawnLoggedCommand(command: string, args: string[], input: LaunchFreshSessionInput, env?: Record<string, string>, options?: SpawnLoggedCommandOptions): Promise<LaunchFreshSessionResult>;
+//# sourceMappingURL=spawnLoggedCommand.d.ts.map

package/dist/shared/providers/spawnLoggedCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawnLoggedCommand.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/spawnLoggedCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAoB,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAOpB,MAAM,WAAW,yBAAyB;IACxC,iBAAiB,CAAC,EAAE,OAAO,iBAAiB,CAAC;IAC7C,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAsUD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,EAAE,uBAAuB,EAC9B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAenC"}

package/dist/shared/providers/spawnLoggedCommand.js

@@ -0,0 +1,304 @@
+import { createWriteStream } from "node:fs";
+import { spawn } from "node:child_process";
+import { stripClaudeCodeEnv } from "../tooling/exec.js";
+const TERMINATION_SIGNAL = "SIGTERM";
+const FORCE_KILL_SIGNAL = "SIGKILL";
+const FORCE_KILL_GRACE_MS = 1_000;
+const HEARTBEAT_INTERVAL_MS = 30_000;
+function formatCommand(command, args) {
+    return [command, ...args].join(" ");
+}
+/**
+ * Encapsulates one spawned provider run. The former single `new Promise`
+ * closure held 13+ mutable locals and 6 inner functions; those are now fields
+ * and methods here, so the lifecycle (start → log → settle) is readable without
+ * a 200-line closure. Behavior is preserved exactly:
+ *  - flush-before-settle: `settle` only fires on `close` after `pendingLogWrites`
+ *    drains;
+ *  - timeout → SIGTERM → grace → SIGKILL escalation;
+ *  - OBS-101: the structured heartbeat JSON line is emitted on EVERY heartbeat,
+ *    independent of `onProgress` (which stays consumer-gated).
+ */
+class SpawnRunController {
+    command;
+    args;
+    input;
+    env;
+    spawnProcess;
+    killGraceMs;
+    stdoutLog;
+    stderrLog;
+    startedAt = Date.now();
+    timedOut = false;
+    settled = false;
+    child = null;
+    timer;
+    heartbeat;
+    forceKillTimer;
+    pendingLogWrites = 0;
+    childClosed = false;
+    closeCode = null;
+    closeSignal = null;
+    logsEnded = false;
+    stdoutLineBuf = "";
+    resolve;
+    reject;
+    constructor(command, args, input, env, spawnProcess, openWriteStream, killGraceMs) {
+        this.command = command;
+        this.args = args;
+        this.input = input;
+        this.env = env;
+        this.spawnProcess = spawnProcess;
+        this.killGraceMs = killGraceMs;
+        this.stdoutLog = openWriteStream(input.stdoutPath, { flags: "a" });
+        this.stderrLog = openWriteStream(input.stderrPath, { flags: "a" });
+    }
+    run() {
+        return new Promise((resolve, reject) => {
+            this.resolve = resolve;
+            this.reject = reject;
+            this.start();
+        });
+    }
+    clearTimers() {
+        if (this.timer)
+            clearTimeout(this.timer);
+        if (this.heartbeat)
+            clearInterval(this.heartbeat);
+        if (this.forceKillTimer)
+            clearTimeout(this.forceKillTimer);
+    }
+    endLogs(callback) {
+        if (this.logsEnded) {
+            callback();
+            return;
+        }
+        this.logsEnded = true;
+        let remaining = 2;
+        const done = () => {
+            remaining -= 1;
+            if (remaining === 0) {
+                callback();
+            }
+        };
+        this.stdoutLog.end(done);
+        this.stderrLog.end(done);
+    }
+    settle(callback) {
+        if (this.settled)
+            return;
+        this.settled = true;
+        this.clearTimers();
+        this.endLogs(callback);
+    }
+    fail = (error) => {
+        if (this.child && !this.child.killed) {
+            this.child.kill(FORCE_KILL_SIGNAL);
+        }
+        const normalized = error instanceof Error ? error : new Error(String(error));
+        this.settle(() => this.reject(normalized));
+    };
+    /**
+     * A failure on one of the per-run log WriteStreams (e.g. EACCES on the log
+     * dir, disk full). OBS-46d448f2: previously this routed straight to `fail`
+     * with the raw error, so a run that died purely because of log-file I/O was
+     * indistinguishable from a provider crash. Annotate the error with which
+     * stream/path failed so the rejection carries a durable, attributable signal.
+     */
+    onLogStreamError = (stream, path) => {
+        return (error) => {
+            const cause = error instanceof Error ? error : new Error(String(error));
+            const annotated = new Error(`Provider run ${this.input.runId} failed writing the ${stream} log (${path}): ${cause.message}`, { cause });
+            if (this.input.uiMode === "visible") {
+                process.stderr.write(`[provider] ${annotated.message}\n`);
+            }
+            this.fail(annotated);
+        };
+    };
+    writeLog(write, chunk) {
+        this.pendingLogWrites += 1;
+        write.write(chunk, () => {
+            this.pendingLogWrites -= 1;
+            this.maybeSettleFromClose();
+        });
+    }
+    maybeSettleFromClose() {
+        if (!this.childClosed || this.pendingLogWrites > 0 || this.settled) {
+            return;
+        }
+        if (this.timedOut) {
+            this.settle(() => this.reject(new Error(`Fresh session timed out after ${this.input.timeoutMs}ms for run ${this.input.runId}.`)));
+            return;
+        }
+        this.settle(() => this.resolve({
+            accepted: this.closeCode === 0 && this.closeSignal === null,
+            processId: this.child?.pid,
+            exitCode: this.closeCode,
+            signal: this.closeSignal,
+            command: formatCommand(this.command, this.args),
+            args: this.args,
+            stdoutPath: this.input.stdoutPath,
+            stderrPath: this.input.stderrPath,
+            error: this.closeCode === 0 && this.closeSignal === null
+                ? undefined
+                : this.closeSignal
+                    ? `Provider command exited with signal ${this.closeSignal}.`
+                    : `Provider command exited with code ${this.closeCode}.`,
+        }));
+    }
+    onHeartbeat = () => {
+        const elapsedMs = Date.now() - this.startedAt;
+        const message = `[provider] run ${this.input.runId} still running after ${elapsedMs}ms\n`;
+        this.writeLog(this.stderrLog, message);
+        if (this.input.uiMode === "visible") {
+            process.stderr.write(message);
+        }
+        // Structured heartbeat telemetry is routed through the run log file so it
+        // is correlated, machine-parseable, and durable. It is also echoed to
+        // process.stderr when uiMode === 'visible' for console visibility.
+        const structuredHeartbeat = JSON.stringify({
+            type: "provider_heartbeat",
+            runId: this.input.runId,
+            elapsedMs,
+        }) + "\n";
+        this.writeLog(this.stderrLog, structuredHeartbeat);
+        if (this.input.uiMode === "visible") {
+            process.stderr.write(structuredHeartbeat);
+        }
+        // The onProgress callback stays consumer-gated: only fire it when wired.
+        if (this.input.onProgress) {
+            this.input.onProgress({
+                type: "heartbeat",
+                runId: this.input.runId,
+                obligationId: this.input.obligationId,
+                elapsedMs,
+            });
+        }
+    };
+    emitOutputLine(line) {
+        const trimmed = line.trim();
+        if (trimmed.length > 0 && this.input.onProgress) {
+            this.input.onProgress({
+                type: "output",
+                runId: this.input.runId,
+                obligationId: this.input.obligationId,
+                elapsedMs: Date.now() - this.startedAt,
+                message: trimmed,
+            });
+        }
+    }
+    /**
+     * Drain any trailing partial line (output with no terminating newline) as a
+     * final 'output' progress event. Without this, a worker whose last line lacks
+     * a trailing newline never surfaces that line (COR-64b4c9f5).
+     */
+    flushStdoutLineBuf() {
+        if (this.stdoutLineBuf.length === 0)
+            return;
+        const residual = this.stdoutLineBuf;
+        this.stdoutLineBuf = "";
+        this.emitOutputLine(residual);
+    }
+    onStdout = (chunk) => {
+        this.writeLog(this.stdoutLog, chunk);
+        if (this.input.uiMode === "visible") {
+            process.stdout.write(chunk);
+        }
+        if (this.input.onProgress) {
+            this.stdoutLineBuf += chunk.toString();
+            const lines = this.stdoutLineBuf.split("\n");
+            this.stdoutLineBuf = lines.pop() ?? "";
+            for (const line of lines) {
+                this.emitOutputLine(line);
+            }
+        }
+    };
+    onStderr = (chunk) => {
+        this.writeLog(this.stderrLog, chunk);
+        if (this.input.uiMode === "visible") {
+            process.stderr.write(chunk);
+        }
+    };
+    /** Spawn the child and wire timers, heartbeat, and stream handlers. */
+    start() {
+        this.stdoutLog.on("error", this.onLogStreamError("stdout", this.input.stdoutPath));
+        this.stderrLog.on("error", this.onLogStreamError("stderr", this.input.stderrPath));
+        let spawnedChild;
+        try {
+            spawnedChild = this.spawnProcess(this.command, this.args, {
+                cwd: this.input.repoRoot,
+                // ARC-6d068334: scrub the host's interactive-session markers
+                // (CLAUDECODE / CLAUDE_CODE_*) from EVERY process the tool launches,
+                // including a provider session spawn — otherwise a worker session (and
+                // any test command it spawns) is graded against the host session state,
+                // the exact contamination the deterministic-command paths already scrub.
+                // Explicit per-run env overrides still win, then are scrubbed too so the
+                // trust boundary is uniform rather than holding only where remembered.
+                env: stripClaudeCodeEnv({ ...process.env, ...this.env }),
+                stdio: [
+                    this.input.stdinText === undefined ? "ignore" : "pipe",
+                    "pipe",
+                    "pipe",
+                ],
+            });
+            this.child = spawnedChild;
+        }
+        catch (error) {
+            this.fail(error);
+            return;
+        }
+        if (this.input.stdinText !== undefined) {
+            if (!spawnedChild.stdin) {
+                this.fail(new Error(`Fresh session spawn for run ${this.input.runId} did not provide pipe-backed stdin.`));
+                return;
+            }
+            spawnedChild.stdin.end(this.input.stdinText);
+        }
+        if (!spawnedChild.stdout || !spawnedChild.stderr) {
+            this.fail(new Error(`Fresh session spawn for run ${this.input.runId} did not provide pipe-backed stdout/stderr streams.`));
+            return;
+        }
+        this.timer = setTimeout(() => {
+            this.timedOut = true;
+            spawnedChild.kill(TERMINATION_SIGNAL);
+            this.forceKillTimer = setTimeout(() => {
+                if (!this.settled) {
+                    spawnedChild.kill(FORCE_KILL_SIGNAL);
+                }
+            }, this.killGraceMs);
+        }, this.input.timeoutMs);
+        this.heartbeat = setInterval(this.onHeartbeat, HEARTBEAT_INTERVAL_MS);
+        spawnedChild.stdout.on("data", this.onStdout);
+        spawnedChild.stderr.on("data", this.onStderr);
+        spawnedChild.on("error", this.fail);
+        spawnedChild.on("exit", (code, signal) => {
+            this.closeCode = code;
+            this.closeSignal = signal;
+        });
+        spawnedChild.on("close", (code, signal) => {
+            this.childClosed = true;
+            this.closeCode = code;
+            this.closeSignal = signal;
+            // Emit the final partial stdout line (no trailing newline) before settling
+            // so its 'output' progress event is not lost (COR-64b4c9f5).
+            this.flushStdoutLineBuf();
+            this.maybeSettleFromClose();
+        });
+    }
+}
+// Single source of truth for both orchestrators. Combines the auditor's
+// flush-before-settle correctness (settle on "close" only after all buffered
+// log writes have drained, and a computed `accepted`/rich result) with the
+// remediator's stdin piping and optional structured progress telemetry.
+//
+// On Windows `command` must be the resolved .cmd / .exe path because `spawn`
+// does not consult PATH for executables without a shell. Callers should use
+// `platformCommand()` or similar to supply the correct command form per OS.
+export async function spawnLoggedCommand(command, args, input, env, options = {}) {
+    const openWriteStream = options.createWriteStream ?? createWriteStream;
+    const spawnProcess = options.spawn ?? spawn;
+    const killGraceMs = options.killGraceMs ?? FORCE_KILL_GRACE_MS;
+    const controller = new SpawnRunController(command, args, input, env, spawnProcess, openWriteStream, killGraceMs);
+    return controller.run();
+}
+//# sourceMappingURL=spawnLoggedCommand.js.map

package/dist/shared/providers/spawnLoggedCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawnLoggedCommand.js","sourceRoot":"","sources":["../../../src/shared/providers/spawnLoggedCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAoB,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAMxD,MAAM,kBAAkB,GAAmB,SAAS,CAAC;AACrD,MAAM,iBAAiB,GAAmB,SAAS,CAAC;AACpD,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAQrC,SAAS,aAAa,CAAC,OAAe,EAAE,IAAc;IACpD,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,kBAAkB;IAqBH;IACA;IACA;IACA;IACA;IAEA;IA1BF,SAAS,CAAc;IACvB,SAAS,CAAc;IACvB,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEhC,QAAQ,GAAG,KAAK,CAAC;IACjB,OAAO,GAAG,KAAK,CAAC;IAChB,KAAK,GAAoC,IAAI,CAAC;IAC9C,KAAK,CAA6B;IAClC,SAAS,CAA6B;IACtC,cAAc,CAA6B;IAC3C,gBAAgB,GAAG,CAAC,CAAC;IACrB,WAAW,GAAG,KAAK,CAAC;IACpB,SAAS,GAAkB,IAAI,CAAC;IAChC,WAAW,GAA0B,IAAI,CAAC;IAC1C,SAAS,GAAG,KAAK,CAAC;IAClB,aAAa,GAAG,EAAE,CAAC;IACnB,OAAO,CAA8C;IACrD,MAAM,CAA0B;IAExC,YACmB,OAAe,EACf,IAAc,EACd,KAA8B,EAC9B,GAAuC,EACvC,YAA0B,EAC3C,eAAyC,EACxB,WAAmB;QANnB,YAAO,GAAP,OAAO,CAAQ;QACf,SAAI,GAAJ,IAAI,CAAU;QACd,UAAK,GAAL,KAAK,CAAyB;QAC9B,QAAG,GAAH,GAAG,CAAoC;QACvC,iBAAY,GAAZ,YAAY,CAAc;QAE1B,gBAAW,GAAX,WAAW,CAAQ;QAEpC,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,GAAG;QACD,OAAO,IAAI,OAAO,CAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC/D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;YACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACrB,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,WAAW;QACjB,IAAI,IAAI,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,SAAS;YAAE,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,cAAc;YAAE,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC7D,CAAC;IAEO,OAAO,CAAC,QAAoB;QAClC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,QAAQ,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,SAAS,IAAI,CAAC,CAAC;YACf,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,QAAQ,EAAE,CAAC;YACb,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAEO,MAAM,CAAC,QAAoB;QACjC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAEO,IAAI,GAAG,CAAC,KAAc,EAAQ,EAAE;QACtC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF;;;;;;OAMG;IACK,gBAAgB,GAAG,CACzB,MAA2B,EAC3B,IAAY,EACgB,EAAE;QAC9B,OAAO,CAAC,KAAc,EAAQ,EAAE;YAC9B,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACxE,MAAM,SAAS,GAAG,IAAI,KAAK,CACzB,gBAAgB,IAAI,CAAC,KAAK,CAAC,KAAK,uBAAuB,MAAM,SAAS,IAAI,MAAM,KAAK,CAAC,OAAO,EAAE,EAC/F,EAAE,KAAK,EAAE,CACV,CAAC;YACF,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,SAAS,CAAC,OAAO,IAAI,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC,CAAC;IACJ,CAAC,CAAC;IAEM,QAAQ,CAAC,KAAkB,EAAE,KAAsB;QACzD,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC3B,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE;YACtB,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,gBAAgB,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACnE,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CACf,IAAI,CAAC,MAAM,CACT,IAAI,KAAK,CACP,iCAAiC,IAAI,CAAC,KAAK,CAAC,SAAS,cAAc,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CACvF,CACF,CACF,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CACf,IAAI,CAAC,OAAO,CAAC;YACX,QAAQ,EAAE,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YAC3D,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG;YAC1B,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,MAAM,EAAE,IAAI,CAAC,WAAW;YACxB,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;YACjC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;YACjC,KAAK,EACH,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;gBAC/C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,WAAW;oBAChB,CAAC,CAAC,uCAAuC,IAAI,CAAC,WAAW,GAAG;oBAC5D,CAAC,CAAC,qCAAqC,IAAI,CAAC,SAAS,GAAG;SAC/D,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,WAAW,GAAG,GAAS,EAAE;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC9C,MAAM,OAAO,GAAG,kBAAkB,IAAI,CAAC,KAAK,CAAC,KAAK,wBAAwB,SAAS,MAAM,CAAC;QAC1F,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QACD,0EAA0E;QAC1E,sEAAsE;QACtE,mEAAmE;QACnE,MAAM,mBAAmB,GACvB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,oBAAoB;YAC1B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;YACvB,SAAS;SACV,CAAC,GAAG,IAAI,CAAC;QACZ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC5C,CAAC;QACD,yEAAyE;QACzE,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;gBACpB,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;gBACvB,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY;gBACrC,SAAS;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEM,cAAc,CAAC,IAAY;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAChD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;gBACpB,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;gBACvB,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY;gBACrC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS;gBACtC,OAAO,EAAE,OAAO;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,kBAAkB;QACxB,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC;QACpC,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAEO,QAAQ,GAAG,CAAC,KAAa,EAAQ,EAAE;QACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAC1B,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEM,QAAQ,GAAG,CAAC,KAAa,EAAQ,EAAE;QACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC;IAEF,uEAAuE;IACvE,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAEnF,IAAI,YAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;gBACxD,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;gBACxB,6DAA6D;gBAC7D,qEAAqE;gBACrE,uEAAuE;gBACvE,wEAAwE;gBACxE,yEAAyE;gBACzE,yEAAyE;gBACzE,uEAAuE;gBACvE,GAAG,EAAE,kBAAkB,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACxD,KAAK,EAAE;oBACL,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;oBACtD,MAAM;oBACN,MAAM;iBACP;aACF,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,CACP,IAAI,KAAK,CACP,+BAA+B,IAAI,CAAC,KAAK,CAAC,KAAK,qCAAqC,CACrF,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YACjD,IAAI,CAAC,IAAI,CACP,IAAI,KAAK,CACP,+BAA+B,IAAI,CAAC,KAAK,CAAC,KAAK,qDAAqD,CACrG,CACF,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACtC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;gBACpC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;QAEtE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACvC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACxC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC;YAC1B,2EAA2E;YAC3E,6DAA6D;YAC7D,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1B,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,wEAAwE;AACxE,6EAA6E;AAC7E,2EAA2E;AAC3E,wEAAwE;AACxE,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe,EACf,IAAc,EACd,KAA8B,EAC9B,GAA4B,EAC5B,UAAqC,EAAE;IAEvC,MAAM,eAAe,GAAG,OAAO,CAAC,iBAAiB,IAAI,iBAAiB,CAAC;IACvE,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IAC5C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,mBAAmB,CAAC;IAE/D,MAAM,UAAU,GAAG,IAAI,kBAAkB,CACvC,OAAO,EACP,IAAI,EACJ,KAAK,EACL,GAAG,EACH,YAAY,EACZ,eAAe,EACf,WAAW,CACZ,CAAC;IACF,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC;AAC1B,CAAC"}