bulkhead-runtime 0.1.0 → 2026.4.5-beta.1

package/dist/skills/enablement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enablement.d.ts","sourceRoot":"","sources":["../../src/skills/enablement.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEvE,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IACjC,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IACpC,WAAW,IAAI,kBAAkB,EAAE,CAAC;IACpC,cAAc,IAAI,MAAM,EAAE,CAAC;CAC5B;AAMD,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,aAAa,GACtB,eAAe,CAmDjB"}
+{"version":3,"file":"enablement.d.ts","sourceRoot":"","sources":["../../src/skills/enablement.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGvE,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IACjC,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IACpC,WAAW,IAAI,kBAAkB,EAAE,CAAC;IACpC,cAAc,IAAI,MAAM,EAAE,CAAC;CAC5B;AAMD,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,aAAa,GACtB,eAAe,CAkDjB"}

package/dist/skills/enablement.js

@@ -1,5 +1,6 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { atomicWriteFileSync } from "../shared/index.js";
 export function createSkillEnablement(workspaceDir, registry) {
     const filePath = path.join(workspaceDir, "enabled-skills.json");
     function loadState() {
@@ -12,8 +13,7 @@ export function createSkillEnablement(workspaceDir, registry) {
         }
     }
     function saveState(state) {
-        fs.mkdirSync(path.dirname(filePath), { recursive: true });
-        fs.writeFileSync(filePath, JSON.stringify(state, null, 2));
+        atomicWriteFileSync(filePath, JSON.stringify(state, null, 2));
     }
     return {
         enable(skillId) {

package/dist/skills/enablement.js.map

@@ -1 +1 @@
-{"version":3,"file":"enablement.js","sourceRoot":"","sources":["../../src/skills/enablement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAelC,MAAM,UAAU,qBAAqB,CACnC,YAAoB,EACpB,QAAuB;IAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;IAEhE,SAAS,SAAS;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,SAAS,SAAS,CAAC,KAAsB;QACvC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO;QACL,MAAM,CAAC,OAAO;YACZ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;YACzC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;YAC1B,IAAI,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvD,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,SAAS,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,CAAC,OAAO;YACb,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC7B,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACnC,SAAS,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,SAAS,CAAC,OAAO;YACf,OAAO,SAAS,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrD,CAAC;QAED,WAAW;YACT,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,aAAa;iBACvB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;iBAC7B,MAAM,CAAC,CAAC,CAAC,EAA2B,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QAC7D,CAAC;QAED,cAAc;YACZ,OAAO,SAAS,EAAE,CAAC,aAAa,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"enablement.js","sourceRoot":"","sources":["../../src/skills/enablement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAczD,MAAM,UAAU,qBAAqB,CACnC,YAAoB,EACpB,QAAuB;IAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;IAEhE,SAAS,SAAS;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,SAAS,SAAS,CAAC,KAAsB;QACvC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,OAAO;QACL,MAAM,CAAC,OAAO;YACZ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;YACzC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;YAC1B,IAAI,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvD,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,SAAS,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,CAAC,OAAO;YACb,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC7B,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACnC,SAAS,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,SAAS,CAAC,OAAO;YACf,OAAO,SAAS,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrD,CAAC;QAED,WAAW;YACT,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,aAAa;iBACvB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;iBAC7B,MAAM,CAAC,CAAC,CAAC,EAA2B,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QAC7D,CAAC;QAED,cAAc;YACZ,OAAO,SAAS,EAAE,CAAC,aAAa,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/workspace/runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/workspace/runner.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAU1D,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,EAAE,UAAU,CAAC;IAClB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,MAAM,EAAE,eAAe,CAAC;IACxB,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,EAAE,eAAe,CAAC;CAC9B;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,sBAAsB,GAC1B,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,cAAc,CAAC,CA+L3D"}
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/workspace/runner.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAsB1D,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,EAAE,UAAU,CAAC;IAClB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,MAAM,EAAE,eAAe,CAAC;IACxB,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,EAAE,eAAe,CAAC;CAC9B;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,sBAAsB,GAC1B,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,cAAc,CAAC,CA0U3D"}

package/dist/workspace/runner.js

@@ -1,25 +1,31 @@
 import * as path from "node:path";
 import * as fs from "node:fs";
 import * as url from "node:url";
+import { spawn } from "node:child_process";
 import { getOrCreateSession, updateSession, } from "../sessions/index.js";
 import { createSandboxManager } from "../sandbox/manager.js";
 import { createIpcPeer } from "../sandbox/ipc.js";
+import { DEFAULT_MODEL, DEFAULT_PROVIDER, PROTECTED_SYSTEM_ENV_KEYS, buildProviderEnvKey, } from "../shared/index.js";
+import { runWithModelFallback, createCooldownStore } from "../runtime/model-fallback.js";
+import { resolveContextWindowInfo, evaluateContextWindowGuard, CONTEXT_WINDOW_HARD_MIN_TOKENS } from "../runtime/context-guard.js";
+import { collectProviderApiKeys, executeWithApiKeyRotation } from "../runtime/api-key-rotation.js";
+import { createSubsystemLogger } from "../logging/subsystem.js";
+const log = createSubsystemLogger("workspace-runner");
 export function createWorkspaceRunner(ctx) {
     const sandboxManager = createSandboxManager();
+    const cooldownStore = createCooldownStore();
     return async function run(options) {
         const sessionId = options.sessionId ?? `session_${Date.now()}`;
-        const modelId = options.model ?? ctx.config.model ?? "claude-sonnet-4-20250514";
-        const provider = options.provider ?? ctx.config.provider ?? "anthropic";
-        const providerEnvKey = `${provider.toUpperCase().replace(/-/g, "_")}_API_KEY`;
-        const apiKey = options.apiKey ?? ctx.config.apiKey ?? process.env[providerEnvKey] ?? "";
-        const sessionsDir = path.join(ctx.workspaceDir, "sessions");
+        const requestedModelId = options.model ?? ctx.config.model ?? DEFAULT_MODEL;
+        const requestedProvider = options.provider ?? ctx.config.provider ?? DEFAULT_PROVIDER;
+        const sessionsDir = path.join(ctx.workspaceDir, "sessions", sessionId);
         fs.mkdirSync(sessionsDir, { recursive: true });
-        getOrCreateSession(ctx.workspaceDir, sessionId, { model: modelId });
+        await getOrCreateSession(ctx.workspaceDir, sessionId, { model: requestedModelId });
         await ctx.hooks.run("session_start", { sessionId });
         await ctx.hooks.run("before_agent_start", {
             sessionId,
             message: options.message,
-            model: modelId,
+            model: requestedModelId,
         });
         let skillsPrompt = "";
         if (ctx.config.skills?.enabled !== false) {
@@ -40,119 +46,360 @@ export function createWorkspaceRunner(ctx) {
         ]
             .filter(Boolean)
             .join("\n\n");
-        const caps = await sandboxManager.capabilities();
-        const hasOsIsolation = caps.platform === "linux" && caps.hasUnshare && caps.hasMountNamespace;
-        const workerConfig = {
-            workspaceDir: ctx.workspaceDir,
-            sessionsDir,
-            sessionId,
-            message: options.message,
-            model: modelId,
-            provider,
-            systemPrompt: systemPrompt || undefined,
-            enableCodingTools: hasOsIsolation,
-        };
-        const workerPath = resolveWorkerPath();
-        const workerEnv = {
-            SANDBOX_WORKER_CONFIG: JSON.stringify(workerConfig),
-        };
-        if (apiKey) {
-            workerEnv[providerEnvKey] = apiKey;
-        }
-        const sandboxConfig = {
-            memoryLimitMb: 512,
-            pidsLimit: 100,
-            timeoutMs: 5 * 60 * 1000,
-            networkIsolation: false,
-        };
-        const sandboxProcess = await sandboxManager.spawn({
-            command: process.execPath,
-            args: [
-                "--experimental-vm-modules",
-                "--no-warnings",
-                workerPath,
-            ],
-            env: workerEnv,
-            cwd: ctx.workspaceDir,
-            config: sandboxConfig,
-            protectedKeys: apiKey ? [providerEnvKey] : [],
-            onStderr: (data) => {
-                process.stderr.write(`[sandbox:${ctx.userId}] ${data}`);
-            },
-        });
-        const hostPeer = createIpcPeer(sandboxProcess.stdout, sandboxProcess.stdin);
-        hostPeer.handle("memory.search", async (params) => {
-            const { query, maxResults } = params;
-            return ctx.memory.search(query, { maxResults });
-        });
-        hostPeer.handle("memory.store", async (params) => {
-            const { content, metadata } = params;
-            const id = await ctx.memory.store(content, metadata);
-            return { id };
-        });
-        hostPeer.handle("credentials.resolve", async (params) => {
-            const { skillId } = params;
-            return ctx.credentials.resolve(skillId);
-        });
-        hostPeer.handle("skill.execute", async (params) => {
-            const { skillId, params: skillParams } = params;
-            if (!ctx.skills.isEnabled(skillId)) {
-                throw new Error(`Skill "${skillId}" is not enabled for this workspace`);
-            }
-            const creds = await ctx.credentials.resolve(skillId);
-            return {
-                skillId,
-                credentials: creds ? "available" : "none",
-                params: skillParams,
-                injectedEnv: creds ? Object.keys(creds) : [],
-            };
-        });
-        hostPeer.start();
-        // If the child process dies, stop the IPC peer so pending calls reject
-        // instead of hanging forever. This prevents a deadlock where
-        // hostPeer.call() awaits a response that will never come.
-        sandboxProcess.waitForExit().then(() => hostPeer.stop(), () => hostPeer.stop());
-        let result;
-        try {
-            const response = await hostPeer.call("agent.run", {
-                message: options.message,
-                sessionId,
-                model: modelId,
-                provider,
-                systemPrompt: systemPrompt || undefined,
+        async function executeWithModel(provider, modelId) {
+            // Context window guard — same check as single-user runtime
+            const ctxInfo = resolveContextWindowInfo({
+                configContextTokens: options.contextTokens,
             });
-            if (response.error) {
-                throw new Error(`Agent execution failed: ${response.error}`);
+            const ctxGuard = evaluateContextWindowGuard({ info: ctxInfo });
+            if (ctxGuard.shouldBlock) {
+                throw new Error(`Context window too small (${ctxGuard.tokens} tokens). Minimum: ${CONTEXT_WINDOW_HARD_MIN_TOKENS}.`);
             }
-            result = {
-                response: response.response ?? "",
-                sessionId: response.sessionId ?? sessionId,
-            };
-        }
-        catch (err) {
-            hostPeer.stop();
-            sandboxProcess.kill();
-            await sandboxProcess.waitForExit();
-            throw err;
+            const providerEnvKey = buildProviderEnvKey(provider);
+            const apiKeys = [];
+            if (options.apiKey)
+                apiKeys.push(options.apiKey);
+            if (options.apiKeys) {
+                apiKeys.push(...options.apiKeys);
+            }
+            if (ctx.config.apiKey)
+                apiKeys.push(ctx.config.apiKey);
+            apiKeys.push(...collectProviderApiKeys(provider));
+            const uniqueKeys = [...new Set(apiKeys.filter((k) => k.length > 0))];
+            if (uniqueKeys.length === 0) {
+                const envVal = process.env[providerEnvKey];
+                if (envVal)
+                    uniqueKeys.push(envVal);
+            }
+            async function runWithKey(apiKey) {
+                const workerConfig = {
+                    workspaceDir: ctx.workspaceDir,
+                    sessionsDir,
+                    sessionId,
+                    message: options.message,
+                    model: modelId,
+                    provider,
+                    systemPrompt: systemPrompt || undefined,
+                    enableCodingTools: true,
+                    contextTokens: options.contextTokens,
+                    maxRetries: options.maxRetries,
+                    enableSubagents: options.enableSubagents,
+                };
+                const workerPath = resolveWorkerPath();
+                const projectDir = path.dirname(path.dirname(workerPath));
+                const workerConfigJson = JSON.stringify(workerConfig);
+                const MAX_ENV_SIZE = 128 * 1024;
+                if (workerConfigJson.length > MAX_ENV_SIZE) {
+                    throw new Error(`SANDBOX_WORKER_CONFIG exceeds ${MAX_ENV_SIZE} bytes (${workerConfigJson.length} bytes). ` +
+                        `Reduce the message or systemPrompt size.`);
+                }
+                const workerEnv = {
+                    SANDBOX_WORKER_CONFIG: workerConfigJson,
+                };
+                if (apiKey) {
+                    workerEnv[providerEnvKey] = apiKey;
+                }
+                const sandboxConfig = {
+                    memoryLimitMb: 512,
+                    pidsLimit: 100,
+                    timeoutMs: 5 * 60 * 1000,
+                    networkIsolation: true,
+                    mountBinds: [
+                        { source: projectDir, target: projectDir, readonly: true },
+                    ],
+                };
+                const workerArgs = [
+                    "--experimental-vm-modules",
+                    "--no-warnings",
+                ];
+                if (workerPath.endsWith(".ts")) {
+                    workerArgs.push("--import", "tsx");
+                }
+                workerArgs.push(workerPath);
+                const sandboxProcess = await sandboxManager.spawn({
+                    command: process.execPath,
+                    args: workerArgs,
+                    env: workerEnv,
+                    cwd: ctx.workspaceDir,
+                    config: sandboxConfig,
+                    protectedKeys: apiKey ? [providerEnvKey] : [],
+                    onStderr: (data) => {
+                        process.stderr.write(`[sandbox:${ctx.userId}] ${data}`);
+                    },
+                });
+                const agentTimeoutMs = (sandboxConfig.timeoutMs ?? 5 * 60 * 1000) + 60_000;
+                const hostPeer = createIpcPeer(sandboxProcess.stdout, sandboxProcess.stdin, { callTimeoutMs: agentTimeoutMs });
+                const ipcRateLimiter = createIpcRateLimiter();
+                hostPeer.handle("memory.search", async (params) => {
+                    ipcRateLimiter.check("memory.search");
+                    const p = params;
+                    const query = p?.query;
+                    if (typeof query !== "string" || query.length === 0) {
+                        throw new Error("memory.search: 'query' must be a non-empty string");
+                    }
+                    if (query.length > 10_000) {
+                        throw new Error("memory.search: 'query' exceeds maximum length (10000)");
+                    }
+                    const maxResults = typeof p?.maxResults === "number"
+                        ? Math.min(Math.max(1, Math.floor(p.maxResults)), 100)
+                        : undefined;
+                    return ctx.memory.search(query, { maxResults });
+                });
+                hostPeer.handle("memory.store", async (params) => {
+                    ipcRateLimiter.check("memory.store");
+                    const p = params;
+                    const content = p?.content;
+                    if (typeof content !== "string" || content.length === 0) {
+                        throw new Error("memory.store: 'content' must be a non-empty string");
+                    }
+                    if (content.length > 1_000_000) {
+                        throw new Error("memory.store: 'content' exceeds maximum length (1000000)");
+                    }
+                    const metadata = p?.metadata;
+                    if (metadata !== undefined) {
+                        const metaStr = JSON.stringify(metadata);
+                        if (metaStr.length > 10_000) {
+                            throw new Error("memory.store: 'metadata' exceeds maximum serialized size (10000 bytes)");
+                        }
+                    }
+                    const id = await ctx.memory.store(content, metadata);
+                    return { id };
+                });
+                hostPeer.handle("skill.execute", async (params) => {
+                    ipcRateLimiter.check("skill.execute");
+                    const p = params;
+                    const skillId = p?.skillId;
+                    if (typeof skillId !== "string" || skillId.length === 0) {
+                        throw new Error("skill.execute: 'skillId' must be a non-empty string");
+                    }
+                    if (!ctx.skills.isEnabled(skillId)) {
+                        throw new Error(`Skill "${skillId}" is not enabled for this workspace`);
+                    }
+                    const skillEntry = ctx.skillRegistry.get(skillId);
+                    if (!skillEntry) {
+                        throw new Error(`Skill "${skillId}" not found in registry`);
+                    }
+                    const execScript = findSkillExecutable(skillEntry.path);
+                    if (!execScript) {
+                        throw new Error(`Skill "${skillId}" has no executable script. ` +
+                            `Add execute.js, execute.mjs, or execute.sh to the skill directory.`);
+                    }
+                    const resolvedScript = path.resolve(execScript);
+                    const resolvedSkillDir = path.resolve(skillEntry.path);
+                    if (!resolvedScript.startsWith(resolvedSkillDir + path.sep)) {
+                        throw new Error(`Skill script "${execScript}" resolves outside skill directory`);
+                    }
+                    const credentials = await ctx.credentials.resolve(skillId) ?? {};
+                    const execParams = (p?.params ?? {});
+                    const result = await executeSkillScript(execScript, execParams, credentials, resolvedSkillDir);
+                    return { result };
+                });
+                hostPeer.handle("hooks.before_tool_call", async (params) => {
+                    ipcRateLimiter.check("hooks.before_tool_call");
+                    const p = params;
+                    const toolName = typeof p?.toolName === "string" ? p.toolName : "unknown";
+                    const input = (p?.input && typeof p.input === "object") ? p.input : {};
+                    await ctx.hooks.run("before_tool_call", { toolName, input });
+                    return {};
+                });
+                hostPeer.handle("hooks.after_tool_call", async (params) => {
+                    ipcRateLimiter.check("hooks.after_tool_call");
+                    const p = params;
+                    const toolName = typeof p?.toolName === "string" ? p.toolName : "unknown";
+                    const input = (p?.input && typeof p.input === "object") ? p.input : {};
+                    await ctx.hooks.run("after_tool_call", { toolName, input, result: p?.result });
+                    return {};
+                });
+                const onEvent = options.onEvent;
+                if (onEvent) {
+                    hostPeer.handle("agent.event", async (params) => {
+                        const event = (params ?? {});
+                        try {
+                            onEvent(event);
+                        }
+                        catch { /* caller error */ }
+                        return {};
+                    });
+                }
+                hostPeer.start();
+                // If the child process dies, stop the IPC peer so pending calls reject
+                // instead of hanging forever. This prevents a deadlock where
+                // hostPeer.call() awaits a response that will never come.
+                sandboxProcess.waitForExit().then(() => hostPeer.stop(), () => hostPeer.stop());
+                let result;
+                try {
+                    const response = await hostPeer.call("agent.run", {
+                        message: options.message,
+                        sessionId,
+                        model: modelId,
+                        provider,
+                        systemPrompt: systemPrompt || undefined,
+                    });
+                    if (response.error) {
+                        throw new Error(`Agent execution failed: ${response.error}`);
+                    }
+                    result = {
+                        response: response.response ?? "",
+                        sessionId: response.sessionId ?? sessionId,
+                    };
+                }
+                catch (err) {
+                    hostPeer.stop();
+                    sandboxProcess.kill();
+                    await sandboxProcess.waitForExit();
+                    throw err;
+                }
+                hostPeer.stop();
+                sandboxProcess.kill();
+                await sandboxProcess.waitForExit();
+                return {
+                    ...result,
+                    provider,
+                    model: modelId,
+                };
+            }
+            if (uniqueKeys.length > 1) {
+                return executeWithApiKeyRotation({
+                    provider,
+                    apiKeys: uniqueKeys,
+                    execute: runWithKey,
+                });
+            }
+            return runWithKey(uniqueKeys[0] ?? "");
         }
-        hostPeer.stop();
-        sandboxProcess.kill();
-        await sandboxProcess.waitForExit();
+        const fallbackResult = await runWithModelFallback({
+            provider: requestedProvider,
+            model: requestedModelId,
+            fallbacks: options.fallbacks,
+            run: executeWithModel,
+            cooldownStore,
+        });
         await ctx.hooks.run("after_agent_end", {
             sessionId,
-            result: result.response,
+            result: fallbackResult.result.response,
         });
         await ctx.hooks.run("session_end", { sessionId });
-        updateSession(ctx.workspaceDir, sessionId, { model: modelId });
-        return result;
+        await updateSession(ctx.workspaceDir, sessionId, { model: fallbackResult.model });
+        return {
+            ...fallbackResult.result,
+            fallbackUsed: fallbackResult.attempts.length > 0,
+        };
     };
 }
 function resolveWorkerPath() {
     const thisFile = url.fileURLToPath(import.meta.url);
     const srcDir = path.dirname(path.dirname(thisFile));
+    const jsPath = path.join(srcDir, "sandbox", "worker.js");
+    if (fs.existsSync(jsPath))
+        return jsPath;
     const tsPath = path.join(srcDir, "sandbox", "worker.ts");
     if (fs.existsSync(tsPath))
         return tsPath;
-    return path.join(srcDir, "sandbox", "worker.js");
+    return jsPath;
+}
+function findSkillExecutable(skillDir) {
+    for (const name of ["execute.js", "execute.mjs", "execute.sh"]) {
+        const full = path.join(skillDir, name);
+        if (fs.existsSync(full))
+            return full;
+    }
+    return undefined;
+}
+const MAX_SKILL_OUTPUT_BYTES = 10 * 1024 * 1024; // 10 MB
+async function executeSkillScript(scriptPath, params, credentials, cwd, timeoutMs = 30_000) {
+    const ext = path.extname(scriptPath);
+    let command;
+    let args;
+    switch (ext) {
+        case ".js":
+        case ".mjs":
+            command = process.execPath;
+            args = ["--no-warnings", scriptPath];
+            break;
+        case ".sh":
+            command = "/bin/bash";
+            args = [scriptPath];
+            break;
+        default:
+            throw new Error(`Unsupported skill script type: ${ext}`);
+    }
+    const env = {};
+    for (const key of PROTECTED_SYSTEM_ENV_KEYS) {
+        if (process.env[key])
+            env[key] = process.env[key];
+    }
+    for (const [key, value] of Object.entries(credentials)) {
+        if (PROTECTED_SYSTEM_ENV_KEYS.has(key))
+            continue;
+        env[key] = value;
+    }
+    return new Promise((resolve, reject) => {
+        const child = spawn(command, args, {
+            cwd,
+            env,
+            stdio: ["pipe", "pipe", "pipe"],
+            timeout: timeoutMs,
+        });
+        let stdout = "";
+        let stderr = "";
+        let outputLimitExceeded = false;
+        child.stdout.on("data", (data) => {
+            if (outputLimitExceeded)
+                return;
+            stdout += data.toString();
+            if (stdout.length > MAX_SKILL_OUTPUT_BYTES) {
+                outputLimitExceeded = true;
+                try {
+                    child.kill("SIGKILL");
+                }
+                catch { /* already dead */ }
+            }
+        });
+        child.stderr.on("data", (data) => {
+            if (outputLimitExceeded)
+                return;
+            stderr += data.toString();
+            if (stderr.length > MAX_SKILL_OUTPUT_BYTES) {
+                outputLimitExceeded = true;
+                try {
+                    child.kill("SIGKILL");
+                }
+                catch { /* already dead */ }
+            }
+        });
+        child.on("close", (code) => {
+            if (outputLimitExceeded) {
+                reject(new Error(`Skill script output exceeded ${MAX_SKILL_OUTPUT_BYTES} bytes limit`));
+            }
+            else if (code !== 0) {
+                reject(new Error(`Skill script exited with code ${code}: ${stderr.slice(0, 1000)}`));
+            }
+            else {
+                resolve(stdout);
+            }
+        });
+        child.on("error", reject);
+        child.stdin.write(JSON.stringify(params));
+        child.stdin.end();
+    });
+}
+const IPC_RATE_LIMIT = 200;
+const IPC_RATE_WINDOW_MS = 1000;
+function createIpcRateLimiter() {
+    const counters = new Map();
+    return {
+        check(method) {
+            const now = Date.now();
+            let entry = counters.get(method);
+            if (!entry || now >= entry.resetAt) {
+                entry = { count: 0, resetAt: now + IPC_RATE_WINDOW_MS };
+                counters.set(method, entry);
+            }
+            entry.count++;
+            if (entry.count > IPC_RATE_LIMIT) {
+                throw new Error(`IPC rate limit exceeded for "${method}": max ${IPC_RATE_LIMIT} calls per ${IPC_RATE_WINDOW_MS}ms`);
+            }
+        },
+    };
 }
 //# sourceMappingURL=runner.js.map

package/dist/workspace/runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/workspace/runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAYhC,OAAO,EACL,kBAAkB,EAClB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAalD,MAAM,UAAU,qBAAqB,CACnC,GAA2B;IAG3B,MAAM,cAAc,GAAG,oBAAoB,EAAE,CAAC;IAE9C,OAAO,KAAK,UAAU,GAAG,CAAC,OAA4B;QACpD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC/D,MAAM,OAAO,GACX,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,0BAA0B,CAAC;QAClE,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC;QACzD,MAAM,cAAc,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC;QAC9E,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAE3E,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC5D,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/C,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAEpE,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpD,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,EAAE;YACxC,SAAS;YACT,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;QAEH,IAAI,YAAY,GAAG,EAAE,CAAC;QACtB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YACzC,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC/C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;oBAC1D,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,6BAA6B;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG;YACnB,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE;YACrD,YAAY;SACb;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,YAAY,EAAE,CAAC;QACjD,MAAM,cAAc,GAClB,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,iBAAiB,CAAC;QAEzE,MAAM,YAAY,GAAiB;YACjC,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,WAAW;YACX,SAAS;YACT,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO;YACd,QAAQ;YACR,YAAY,EAAE,YAAY,IAAI,SAAS;YACvC,iBAAiB,EAAE,cAAc;SAClC,CAAC;QAEF,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;QAEvC,MAAM,SAAS,GAA2B;YACxC,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;SACpD,CAAC;QACF,IAAI,MAAM,EAAE,CAAC;YACX,SAAS,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC;QACrC,CAAC;QAED,MAAM,aAAa,GAAkB;YACnC,aAAa,EAAE,GAAG;YAClB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;YACxB,gBAAgB,EAAE,KAAK;SACxB,CAAC;QAEF,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC;YAChD,OAAO,EAAE,OAAO,CAAC,QAAQ;YACzB,IAAI,EAAE;gBACJ,2BAA2B;gBAC3B,eAAe;gBACf,UAAU;aACX;YACD,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,GAAG,CAAC,YAAY;YACrB,MAAM,EAAE,aAAa;YACrB,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE;YAC7C,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;gBACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;YAC1D,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,aAAa,CAC5B,cAAc,CAAC,MAA6B,EAC5C,cAAc,CAAC,KAA4B,CAC5C,CAAC;QAEF,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAG7B,CAAC;YACF,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC/C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAG7B,CAAC;YACF,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,MAAM,CAAC,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACtD,MAAM,EAAE,OAAO,EAAE,GAAG,MAA6B,CAAC;YAClD,OAAO,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAGxC,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,UAAU,OAAO,qCAAqC,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrD,OAAO;gBACL,OAAO;gBACP,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;gBACzC,MAAM,EAAE,WAAW;gBACnB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;aAC7C,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEjB,uEAAuE;QACvE,6DAA6D;QAC7D,0DAA0D;QAC1D,cAAc,CAAC,WAAW,EAAE,CAAC,IAAI,CAC/B,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EACrB,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CACtB,CAAC;QAEF,IAAI,MAAsB,CAAC;QAE3B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAIjC,WAAW,EAAE;gBACd,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,SAAS;gBACT,KAAK,EAAE,OAAO;gBACd,QAAQ;gBACR,YAAY,EAAE,YAAY,IAAI,SAAS;aACxC,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/D,CAAC;YAED,MAAM,GAAG;gBACP,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,EAAE;gBACjC,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,SAAS;aAC3C,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChB,cAAc,CAAC,IAAI,EAAE,CAAC;YACtB,MAAM,cAAc,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChB,cAAc,CAAC,IAAI,EAAE,CAAC;QACtB,MAAM,cAAc,CAAC,WAAW,EAAE,CAAC;QAEnC,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE;YACrC,SAAS;YACT,MAAM,EAAE,MAAM,CAAC,QAAQ;SACxB,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAElD,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAE/D,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB;IACxB,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACnD,CAAC"}
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/workspace/runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAY3C,OAAO,EACL,kBAAkB,EAClB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACzF,OAAO,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AACnI,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,MAAM,GAAG,GAAG,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;AAatD,MAAM,UAAU,qBAAqB,CACnC,GAA2B;IAG3B,MAAM,cAAc,GAAG,oBAAoB,EAAE,CAAC;IAC9C,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAC;IAE5C,OAAO,KAAK,UAAU,GAAG,CAAC,OAA4B;QACpD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC/D,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC;QAC5E,MAAM,iBAAiB,GAAG,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,gBAAgB,CAAC;QAEtF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QACvE,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/C,MAAM,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAEnF,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpD,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,EAAE;YACxC,SAAS;YACT,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,gBAAgB;SACxB,CAAC,CAAC;QAEH,IAAI,YAAY,GAAG,EAAE,CAAC;QACtB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YACzC,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC/C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;oBAC1D,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,6BAA6B;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG;YACnB,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE;YACrD,YAAY;SACb;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhB,KAAK,UAAU,gBAAgB,CAC7B,QAAgB,EAChB,OAAe;YAEf,2DAA2D;YAC3D,MAAM,OAAO,GAAG,wBAAwB,CAAC;gBACvC,mBAAmB,EAAG,OAAmC,CAAC,aAAmC;aAC9F,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,0BAA0B,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/D,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,6BAA6B,QAAQ,CAAC,MAAM,sBAAsB,8BAA8B,GAAG,CACpG,CAAC;YACJ,CAAC;YAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAErD,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,IAAI,OAAO,CAAC,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACjD,IAAK,OAAmC,CAAC,OAAO,EAAE,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,GAAK,OAAmC,CAAC,OAAoB,CAAC,CAAC;YAC9E,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACrE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBAC3C,IAAI,MAAM;oBAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;YAED,KAAK,UAAU,UAAU,CAAC,MAAc;gBACtC,MAAM,YAAY,GAAiB;oBACjC,YAAY,EAAE,GAAG,CAAC,YAAY;oBAC9B,WAAW;oBACX,SAAS;oBACT,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,KAAK,EAAE,OAAO;oBACd,QAAQ;oBACR,YAAY,EAAE,YAAY,IAAI,SAAS;oBACvC,iBAAiB,EAAE,IAAI;oBACvB,aAAa,EAAG,OAAmC,CAAC,aAAmC;oBACvF,UAAU,EAAG,OAAmC,CAAC,UAAgC;oBACjF,eAAe,EAAG,OAAmC,CAAC,eAAsC;iBAC7F,CAAC;gBAEF,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;gBACvC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;gBAE1D,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBACtD,MAAM,YAAY,GAAG,GAAG,GAAG,IAAI,CAAC;gBAChC,IAAI,gBAAgB,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;oBAC3C,MAAM,IAAI,KAAK,CACb,iCAAiC,YAAY,WAAW,gBAAgB,CAAC,MAAM,WAAW;wBAC1F,0CAA0C,CAC3C,CAAC;gBACJ,CAAC;gBAED,MAAM,SAAS,GAA2B;oBACxC,qBAAqB,EAAE,gBAAgB;iBACxC,CAAC;gBACF,IAAI,MAAM,EAAE,CAAC;oBACX,SAAS,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC;gBACrC,CAAC;gBAED,MAAM,aAAa,GAAkB;oBACnC,aAAa,EAAE,GAAG;oBAClB,SAAS,EAAE,GAAG;oBACd,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;oBACxB,gBAAgB,EAAE,IAAI;oBACtB,UAAU,EAAE;wBACV,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE;qBAC3D;iBACF,CAAC;gBAEF,MAAM,UAAU,GAAG;oBACjB,2BAA2B;oBAC3B,eAAe;iBAChB,CAAC;gBACF,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC/B,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBACrC,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAE5B,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC;oBAChD,OAAO,EAAE,OAAO,CAAC,QAAQ;oBACzB,IAAI,EAAE,UAAU;oBAChB,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,GAAG,CAAC,YAAY;oBACrB,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE;oBAC7C,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;wBACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;oBAC1D,CAAC;iBACF,CAAC,CAAC;gBAEH,MAAM,cAAc,GAAG,CAAC,aAAa,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;gBAC3E,MAAM,QAAQ,GAAG,aAAa,CAC5B,cAAc,CAAC,MAA6B,EAC5C,cAAc,CAAC,KAA4B,EAC3C,EAAE,aAAa,EAAE,cAAc,EAAE,CAClC,CAAC;gBAEN,MAAM,cAAc,GAAG,oBAAoB,EAAE,CAAC;gBAE9C,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;oBAChD,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;oBACtC,MAAM,CAAC,GAAG,MAA6C,CAAC;oBACxD,MAAM,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC;oBACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACpD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;oBACvE,CAAC;oBACD,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;wBAC1B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;oBAC3E,CAAC;oBACD,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE,UAAU,KAAK,QAAQ;wBAClD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC;wBACtD,CAAC,CAAC,SAAS,CAAC;oBACd,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;gBAClD,CAAC,CAAC,CAAC;gBAEH,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;oBAC/C,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;oBACrC,MAAM,CAAC,GAAG,MAA6C,CAAC;oBACxD,MAAM,OAAO,GAAG,CAAC,EAAE,OAAO,CAAC;oBAC3B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACxD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;oBACxE,CAAC;oBACD,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;wBAC/B,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;oBAC9E,CAAC;oBACD,MAAM,QAAQ,GAAG,CAAC,EAAE,QAA+C,CAAC;oBACpE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;wBAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;wBACzC,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;4BAC5B,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;wBAC5F,CAAC;oBACH,CAAC;oBACD,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;oBACrD,OAAO,EAAE,EAAE,EAAE,CAAC;gBAChB,CAAC,CAAC,CAAC;gBAEH,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;oBAChD,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;oBACtC,MAAM,CAAC,GAAG,MAA6C,CAAC;oBACxD,MAAM,OAAO,GAAG,CAAC,EAAE,OAAO,CAAC;oBAC3B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACxD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;oBACzE,CAAC;oBACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;wBACnC,MAAM,IAAI,KAAK,CAAC,UAAU,OAAO,qCAAqC,CAAC,CAAC;oBAC1E,CAAC;oBACD,MAAM,UAAU,GAAG,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBAClD,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,MAAM,IAAI,KAAK,CAAC,UAAU,OAAO,yBAAyB,CAAC,CAAC;oBAC9D,CAAC;oBAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;oBACxD,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,MAAM,IAAI,KAAK,CACb,UAAU,OAAO,8BAA8B;4BAC/C,oEAAoE,CACrE,CAAC;oBACJ,CAAC;oBAED,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;oBAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;oBACvD,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC5D,MAAM,IAAI,KAAK,CAAC,iBAAiB,UAAU,oCAAoC,CAAC,CAAC;oBACnF,CAAC;oBAED,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;oBACjE,MAAM,UAAU,GAAG,CAAC,CAAC,EAAE,MAAM,IAAI,EAAE,CAA4B,CAAC;oBAChE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;oBAC/F,OAAO,EAAE,MAAM,EAAE,CAAC;gBACpB,CAAC,CAAC,CAAC;gBAEH,QAAQ,CAAC,MAAM,CAAC,wBAAwB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;oBACzD,cAAc,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;oBAC/C,MAAM,CAAC,GAAG,MAA6C,CAAC;oBACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC1E,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClG,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC7D,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;gBAEH,QAAQ,CAAC,MAAM,CAAC,uBAAuB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;oBACxD,cAAc,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;oBAC9C,MAAM,CAAC,GAAG,MAA6C,CAAC;oBACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC1E,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClG,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC/E,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;gBAEH,MAAM,OAAO,GAAI,OAAmC,CAAC,OAExC,CAAC;gBACd,IAAI,OAAO,EAAE,CAAC;oBACZ,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;wBAC9C,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;wBACxD,IAAI,CAAC;4BAAC,OAAO,CAAC,KAAK,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;wBACpD,OAAO,EAAE,CAAC;oBACZ,CAAC,CAAC,CAAC;gBACL,CAAC;gBAED,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAEjB,uEAAuE;gBACvE,6DAA6D;gBAC7D,0DAA0D;gBAC1D,cAAc,CAAC,WAAW,EAAE,CAAC,IAAI,CAC/B,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EACrB,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CACtB,CAAC;gBAEF,IAAI,MAAsB,CAAC;gBAE3B,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAIjC,WAAW,EAAE;wBACd,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,SAAS;wBACT,KAAK,EAAE,OAAO;wBACd,QAAQ;wBACR,YAAY,EAAE,YAAY,IAAI,SAAS;qBACxC,CAAC,CAAC;oBAEH,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;wBACnB,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC/D,CAAC;oBAED,MAAM,GAAG;wBACP,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,EAAE;wBACjC,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,SAAS;qBAC3C,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAChB,cAAc,CAAC,IAAI,EAAE,CAAC;oBACtB,MAAM,cAAc,CAAC,WAAW,EAAE,CAAC;oBACnC,MAAM,GAAG,CAAC;gBACZ,CAAC;gBAEG,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAChB,cAAc,CAAC,IAAI,EAAE,CAAC;gBACtB,MAAM,cAAc,CAAC,WAAW,EAAE,CAAC;gBAEnC,OAAO;oBACL,GAAG,MAAM;oBACT,QAAQ;oBACR,KAAK,EAAE,OAAO;iBACf,CAAC;YACJ,CAAC;YAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,OAAO,yBAAyB,CAAC;oBAC/B,QAAQ;oBACR,OAAO,EAAE,UAAU;oBACnB,OAAO,EAAE,UAAU;iBACpB,CAAC,CAAC;YACL,CAAC;YAED,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,oBAAoB,CAAC;YAChD,QAAQ,EAAE,iBAAiB;YAC3B,KAAK,EAAE,gBAAgB;YACvB,SAAS,EAAG,OAAmC,CAAC,SAAiC;YACjF,GAAG,EAAE,gBAAgB;YACrB,aAAa;SACd,CAAC,CAAC;QAEH,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE;YACrC,SAAS;YACT,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,QAAQ;SACvC,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAElD,MAAM,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC;QAElF,OAAO;YACL,GAAG,cAAc,CAAC,MAAM;YACxB,YAAY,EAAE,cAAc,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;SACjD,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB;IACxB,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,YAAY,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AAEzD,KAAK,UAAU,kBAAkB,CAC/B,UAAkB,EAClB,MAA+B,EAC/B,WAAmC,EACnC,GAAW,EACX,SAAS,GAAG,MAAM;IAElB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,OAAe,CAAC;IACpB,IAAI,IAAc,CAAC;IAEnB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,KAAK,CAAC;QACX,KAAK,MAAM;YACT,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC3B,IAAI,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;YACrC,MAAM;QACR,KAAK,KAAK;YACR,OAAO,GAAG,WAAW,CAAC;YACtB,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;YACpB,MAAM;QACR;YACE,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,yBAAyB,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;IACrD,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACvD,IAAI,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACjD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,GAAG;YACH,GAAG;YACH,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAEhC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvC,IAAI,mBAAmB;gBAAE,OAAO;YAChC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;gBAC3C,mBAAmB,GAAG,IAAI,CAAC;gBAC3B,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvC,IAAI,mBAAmB;gBAAE,OAAO;YAChC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;gBAC3C,mBAAmB,GAAG,IAAI,CAAC;gBAC3B,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,mBAAmB,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,sBAAsB,cAAc,CAAC,CAAC,CAAC;YAC1F,CAAC;iBAAM,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACvF,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE1B,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1C,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,SAAS,oBAAoB;IAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8C,CAAC;IAEvE,OAAO;QACL,KAAK,CAAC,MAAc;YAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnC,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,kBAAkB,EAAE,CAAC;gBACxD,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC9B,CAAC;YACD,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,IAAI,KAAK,CAAC,KAAK,GAAG,cAAc,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,UAAU,cAAc,cAAc,kBAAkB,IAAI,CACnG,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/workspace/types.d.ts

@@ -9,6 +9,7 @@ export interface WorkspaceConfig {
     provider?: string;
     apiKey?: string;
     systemPrompt?: string;
+    credentialPassphrase?: string;
     skills?: {
         enabled?: boolean;
     };

package/dist/workspace/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/workspace/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AAEjC,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC/B,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,iBAAiB,CAAC,EAAE;YAClB,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;YAChE,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,OAAO,CAAC,EAAE,MAAM,CAAC;SAClB,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IAEtC,GAAG,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/workspace/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AAEjC,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC/B,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,iBAAiB,CAAC,EAAE;YAClB,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;YAChE,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,OAAO,CAAC,EAAE,MAAM,CAAC;SAClB,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IAEtC,GAAG,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC"}

package/dist/workspace/workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../src/workspace/workspace.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,SAAS,EACT,eAAe,EACf,WAAW,EAEZ,MAAM,YAAY,CAAC;AAMpB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAK3D,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,eAAe,CAAC;IACxB,aAAa,EAAE,aAAa,CAAC;CAC9B;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAmBxD;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,SAAS,CAAC,CAkDpB;AAED,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,eAAe,CAQzE"}
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../src/workspace/workspace.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,SAAS,EACT,eAAe,EACf,WAAW,EAEZ,MAAM,YAAY,CAAC;AAMpB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAM3D,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,eAAe,CAAC;IACxB,aAAa,EAAE,aAAa,CAAC;CAC9B;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAmBxD;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,SAAS,CAAC,CA0DpB;AAED,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,eAAe,CAQzE"}

package/dist/workspace/workspace.js

@@ -6,6 +6,7 @@ import { createEmbeddingProvider } from "../memory/embeddings.js";
 import { createSkillEnablement } from "../skills/enablement.js";
 import { createCredentialStore } from "../credentials/store.js";
 import { createWorkspaceRunner } from "./runner.js";
+import { atomicWriteFileSync } from "../shared/index.js";
 export function validateWorkspaceId(userId) {
     if (!userId || typeof userId !== "string") {
         throw new Error("Workspace userId must be a non-empty string");
@@ -24,10 +25,15 @@ export async function createWorkspace(options) {
     const { userId, stateDir, config, skillRegistry } = options;
     validateWorkspaceId(userId);
     const workspaceDir = path.join(stateDir, "workspaces", userId);
-    fs.mkdirSync(workspaceDir, { recursive: true });
+    fs.mkdirSync(workspaceDir, { recursive: true, mode: 0o700 });
     const configPath = path.join(workspaceDir, "config.json");
     if (!fs.existsSync(configPath)) {
-        fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
+        const { credentialPassphrase: _cp, apiKey: _ak, ...persistableConfig } = config;
+        if (persistableConfig.memory?.embeddingProvider?.apiKey) {
+            const { apiKey: _epk, ...safeEp } = persistableConfig.memory.embeddingProvider;
+            persistableConfig.memory = { ...persistableConfig.memory, embeddingProvider: safeEp };
+        }
+        atomicWriteFileSync(configPath, JSON.stringify(persistableConfig, null, 2));
     }
     const hooks = createHookRunner();
     const memoryDir = path.join(workspaceDir, "memory");
@@ -39,7 +45,10 @@ export async function createWorkspace(options) {
         embeddingProvider,
     });
     const skills = createSkillEnablement(workspaceDir, skillRegistry);
-    const credentials = createCredentialStore({ workspaceDir });
+    const credentials = createCredentialStore({
+        workspaceDir,
+        passphrase: config.credentialPassphrase,
+    });
     const run = createWorkspaceRunner({
         userId,
         workspaceDir,