dsh-cliworker-now 0.0.0-stage → 0.7.7

package/lib/types/host/hermes-accounts.js

@@ -0,0 +1,356 @@
+import { constants } from 'node:fs';
+import { lstat, mkdir, mkdtemp, open, realpath, rm } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join, resolve, sep } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { accountEmail, localTokenExpired } from "./account-identity.js";
+import { authenticatedAccountLogins, providerLogin, usableNativeApiKey } from "./account-login.js";
+import { hermesSourceSuppressed, projectHermesUnsuppressedAuth } from "./hermes-suppression.js";
+import { projectHermesNousSource } from "./hermes-nous.js";
+import { parseHermesOwnEnvironment } from "./hermes-env.js";
+import { privateDirectory } from "./extended-adapters.js";
+import { assertHermesOwnAccounts } from "./hermes-models.js";
+import { effectiveHermesHome, prepareHermesAccountHome, hermesAccountEnvironment, } from "./hermes-account-context.js";
+import { hermesNativeCommand } from "./hermes-installation.js";
+import { projectDirectory } from "./process.js";
+const record = (value) => value !== null && typeof value === 'object' && !Array.isArray(value);
+const nonempty = (value) => typeof value === 'string' && !!value.trim();
+const configured = (authMethod) => ({
+    state: 'configured',
+    verification: 'local',
+    ...(authMethod ? { authMethod } : {}),
+    summary: '已配置 Hermes 账号',
+});
+/** Only the display email from the native OAuth ID token is projected, never token text.
+ * This is local metadata, not signature validation or a remote login assertion.
+ */
+function tokenEmail(value) {
+    if (typeof value !== 'string' || value.length > 32 * 1024)
+        return;
+    const pieces = value.split('.');
+    if (pieces.length !== 3 || pieces.some((part) => !/^[A-Za-z0-9_-]+$/.test(part)))
+        return;
+    const buffer = Buffer.from(pieces[1], 'base64url');
+    try {
+        const claims = JSON.parse(buffer.toString('utf8'));
+        return record(claims) ? accountEmail(claims.email) : undefined;
+    }
+    catch {
+        return;
+    }
+    finally {
+        buffer.fill(0);
+    }
+}
+/** Native shapes from auth_codex.py/auth_xai.py and NousResearch/hermes-agent@6c80c327 auth_nous.py.
+ * Explicit own credentials project local login; provider declarations and unknown schemas do not.
+ */
+export function projectHermesIdentity(raw) {
+    if (!record(raw))
+        throw new Error('Invalid Hermes auth metadata');
+    raw = projectHermesUnsuppressedAuth(raw);
+    if (!record(raw))
+        throw new Error('Invalid Hermes auth metadata');
+    const providers = record(raw.providers) ? raw.providers : {};
+    const ids = nonempty(raw.active_provider) ? [raw.active_provider] : Object.keys(providers);
+    const logins = [];
+    let expired = false;
+    let renewable = false;
+    for (const id of ids) {
+        const state = providers[id];
+        if (id === 'nous' && record(state)) {
+            try {
+                const nous = projectHermesNousSource(raw);
+                logins.push({
+                    ...providerLogin('nous', 'oauth'),
+                    ...(nous.email ? { accountLabel: nous.email } : {}),
+                });
+            }
+            catch (error) {
+                if (error instanceof Error && /过期/.test(error.message)) {
+                    expired = true;
+                    try {
+                        projectHermesNousSource(raw, 0, { allowExpired: true });
+                        renewable = nonempty(state.refresh_token);
+                    }
+                    catch {
+                        /* A stale bearer is not sufficient without the same valid own source. */
+                    }
+                }
+            }
+            continue;
+        }
+        if (!record(state) || !record(state.tokens))
+            continue;
+        const tokens = state.tokens;
+        const recognized = (id === 'openai-codex' && state.auth_mode === 'chatgpt') ||
+            (id === 'xai-oauth' && ['oauth_device_code', 'oauth_pkce'].includes(String(state.auth_mode)));
+        if (!recognized ||
+            !usableNativeApiKey(state.tokens.access_token) ||
+            state.disabled === true ||
+            (record(state.last_auth_error) && state.last_auth_error.relogin_required === true))
+            continue;
+        const entries = record(raw.credential_pool) ? raw.credential_pool[id] : undefined;
+        if (entries !== undefined &&
+            (!Array.isArray(entries) ||
+                entries.some((entry) => !record(entry) ||
+                    entry.auth_type !== 'oauth' ||
+                    ![
+                        'device_code',
+                        'manual:device_code',
+                        ...(id === 'openai-codex' ? ['manual:loopback_pkce'] : []),
+                    ].includes(String(entry.source)) ||
+                    entry.access_token !== tokens.access_token ||
+                    entry.disabled === true ||
+                    ['dead', 'exhausted'].includes(String(entry.last_status)))))
+            continue;
+        if (localTokenExpired(state.tokens.access_token)) {
+            expired = true;
+            continue;
+        }
+        const email = tokenEmail(state.tokens.id_token);
+        logins.push({
+            ...providerLogin(id === 'xai-oauth' ? 'xai' : id, 'oauth'),
+            ...(email ? { accountLabel: email } : {}),
+        });
+    }
+    const pools = record(raw.credential_pool) ? raw.credential_pool : {};
+    for (const [provider, entries] of Object.entries(pools)) {
+        if (!Array.isArray(entries))
+            continue;
+        for (const entry of entries) {
+            if (!record(entry) ||
+                entry.auth_type !== 'api_key' ||
+                entry.disabled === true ||
+                ['dead', 'exhausted'].includes(String(entry.last_status)) ||
+                entry.status === 'exhausted' ||
+                !['manual', 'config', ...(provider === 'openrouter' ? ['manual:openrouter_pkce'] : [])].includes(String(entry.source ?? 'manual')) ||
+                !usableNativeApiKey(entry.access_token ?? entry.runtime_api_key))
+                continue;
+            logins.push(providerLogin(provider, 'api', { baseUrl: entry.base_url }));
+        }
+    }
+    if (logins.length) {
+        const identity = authenticatedAccountLogins(logins);
+        const only = identity.logins?.length === 1 ? identity.logins[0] : undefined;
+        return { ...identity, ...(only?.accountLabel ? { accountLabel: only.accountLabel } : {}) };
+    }
+    if (renewable)
+        return {
+            state: 'configured', verification: 'local', authMethod: 'oauth',
+            summary: 'Hermes 登录已保存，等待自动续期',
+        };
+    if (expired)
+        return {
+            state: 'unauthenticated',
+            verification: 'local',
+            authMethod: 'oauth',
+            summary: '登录已过期，请重新登录',
+        };
+    // Do not choose an arbitrary identity when several providers are configured.
+    const pool = record(raw.credential_pool) ? Object.values(raw.credential_pool).flat() : [];
+    const api = pool.some((entry) => record(entry) &&
+        entry.auth_type === 'api_key' &&
+        (nonempty(entry.access_token) || nonempty(entry.runtime_api_key)));
+    if (Object.keys(providers).length || pool.length)
+        return configured(api ? 'api' : undefined);
+    return undefined;
+}
+async function environmentLogins(path, signal, auth) {
+    let file;
+    const buffer = Buffer.alloc(64 * 1024 + 1);
+    try {
+        file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+        const info = await file.stat();
+        if (!info.isFile() || info.nlink !== 1 || info.size > 64 * 1024)
+            throw new Error('Unsafe Hermes environment');
+        let length = 0;
+        while (length < buffer.length) {
+            signal.throwIfAborted();
+            const { bytesRead } = await file.read(buffer, length, buffer.length - length, length);
+            if (!bytesRead)
+                break;
+            length += bytesRead;
+        }
+        if (length > 64 * 1024)
+            throw new Error('Oversized Hermes environment');
+        // Default generated config.yaml and commented .env templates do not prove an account exists.
+        // Only explicit provider API-key assignments count; values never leave this local boolean check.
+        const env = parseHermesOwnEnvironment(buffer.subarray(0, length).toString('utf8'));
+        return Object.entries(env).flatMap(([name, value]) => {
+            const match = /^(OPENROUTER|OPENAI|ANTHROPIC|GEMINI|GOOGLE|GROQ|MISTRAL|DEEPSEEK|XAI|ZAI|KIMI|MINIMAX|NOUS)_API_KEY(?:_\d+)?$/.exec(name);
+            if (!match || !usableNativeApiKey(value))
+                return [];
+            const provider = ['GEMINI', 'GOOGLE'].includes(match[1])
+                ? 'google'
+                : match[1] === 'KIMI'
+                    ? 'kimi-coding'
+                    : match[1].toLowerCase();
+            return hermesSourceSuppressed(auth, provider, `env:${name}`) ? [] : [providerLogin(provider, 'api')];
+        });
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return [];
+        throw error;
+    }
+    finally {
+        buffer.fill(0);
+        await file?.close();
+    }
+}
+export async function readHermesAccount(config, signal) {
+    signal.throwIfAborted();
+    let file;
+    let identity;
+    let auth = {};
+    const buffer = Buffer.alloc(64 * 1024 + 1);
+    try {
+        const home = effectiveHermesHome(config);
+        const info = await lstat(home);
+        if (!info.isDirectory() || info.isSymbolicLink())
+            throw new Error('Unsafe Hermes home');
+        try {
+            file = await open(join(home, 'auth.json'), constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+            const info = await file.stat();
+            if (!info.isFile() || info.nlink !== 1 || info.size > 64 * 1024)
+                throw new Error('Unsafe Hermes auth file');
+            let length = 0;
+            while (length < buffer.length) {
+                signal.throwIfAborted();
+                const result = await file.read(buffer, length, buffer.length - length, length);
+                if (!result.bytesRead)
+                    break;
+                length += result.bytesRead;
+            }
+            if (length > 64 * 1024)
+                throw new Error('Oversized Hermes auth file');
+            auth = JSON.parse(buffer.subarray(0, length).toString('utf8'));
+            identity = projectHermesIdentity(auth);
+            signal.throwIfAborted();
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        const envLogins = await environmentLogins(join(home, '.env'), signal, auth);
+        if (envLogins.length)
+            return authenticatedAccountLogins([...(identity?.logins ?? []), ...envLogins]);
+        return (identity ?? {
+            state: 'unconfigured',
+            verification: 'local',
+            summary: '尚未配置 Hermes 账号',
+        });
+    }
+    catch (error) {
+        signal.throwIfAborted();
+        return error.code === 'ENOENT'
+            ? { state: 'unconfigured', verification: 'local', summary: '尚未配置 Hermes 账号' }
+            : {
+                state: 'unavailable',
+                verification: 'local',
+                summary: '账号配置读取失败，请检查配置',
+            };
+    }
+    finally {
+        buffer.fill(0);
+        await file?.close();
+    }
+}
+export async function listHermesAccountSources(config, signal) {
+    const status = await readHermesAccount(config, signal);
+    if (!['authenticated', 'configured', 'unauthenticated'].includes(status.state))
+        return [];
+    const plugin = resolve(config.stateDirectory ?? join(process.env.DSH_HOME ?? join(homedir(), '.dsh'), 'cliworker-now'), 'accounts', 'hermes');
+    const id = effectiveHermesHome(config) === plugin ? 'plugin' : 'native';
+    return [{ id, label: id === 'plugin' ? '插件账号' : 'CLI 全局账号' }];
+}
+export async function prepareHermesAccount(action, executable, project, config, signal, source) {
+    signal.throwIfAborted();
+    if (!['login', 'manage', 'logout'].includes(action))
+        throw new Error('不支持的 Hermes 账号操作');
+    if (!nonempty(executable) || executable.includes('\0'))
+        throw new Error('Invalid Hermes executable');
+    projectDirectory(project);
+    let sourceLabel = '';
+    if (action === 'logout') {
+        const sources = await listHermesAccountSources(config, signal);
+        const chosen = source ? sources.find((item) => item.id === source) : sources[0];
+        if (!chosen)
+            throw new Error('账号来源已变化，请刷新后重试');
+        sourceLabel = chosen.label;
+    }
+    const home = action === 'logout' ? effectiveHermesHome(config) : prepareHermesAccountHome(config);
+    await assertHermesOwnAccounts(home, signal);
+    const userHome = await realpath(homedir());
+    if (home === sep || home === userHome || userHome.startsWith(home + sep))
+        throw new Error('Unsafe Hermes home');
+    await mkdir(home, { recursive: true, mode: 0o700 });
+    const homeInfo = await lstat(home);
+    if (!homeInfo.isDirectory() || homeInfo.isSymbolicLink())
+        throw new Error('Unsafe Hermes home');
+    const nativeHome = await realpath(home);
+    if (nativeHome === sep || nativeHome === userHome || userHome.startsWith(nativeHome + sep))
+        throw new Error('Unsafe Hermes home');
+    const root = privateDirectory(resolve(config.stateDirectory ?? join(process.env.DSH_HOME ?? join(homedir(), '.dsh'), 'cliworker-now')));
+    const parent = privateDirectory(join(root, 'account-runtime'));
+    const state = await mkdtemp(join(parent, 'hermes-'));
+    const identity = await lstat(state);
+    const parentIdentity = await lstat(parent);
+    let removed = false;
+    const cleanup = async () => {
+        if (removed)
+            return;
+        const parentNow = await lstat(parent);
+        if (parentNow.isSymbolicLink() ||
+            parentNow.dev !== parentIdentity.dev ||
+            parentNow.ino !== parentIdentity.ino)
+            throw new Error('Hermes account runtime parent changed before cleanup');
+        try {
+            const now = await lstat(state);
+            if (now.isSymbolicLink() || now.dev !== identity.dev || now.ino !== identity.ino)
+                throw new Error('Hermes account runtime changed before cleanup');
+            await rm(state, { recursive: true, force: true });
+            removed = true;
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                removed = true;
+            else
+                throw error;
+        }
+    };
+    try {
+        signal.throwIfAborted();
+        const temporary = privateDirectory(join(state, 'tmp'));
+        const command = await hermesNativeCommand(executable, [action === 'login' ? 'model' : 'auth'], signal);
+        const argv = [process.execPath, fileURLToPath(new URL('./private-launch.mjs', import.meta.url)), ...command];
+        return {
+            argv,
+            cwd: state,
+            env: {
+                ...hermesAccountEnvironment(nativeHome),
+                TMPDIR: temporary,
+                TMP: temporary,
+                TEMP: temporary,
+                HERMES_SAFE_MODE: '1',
+                HERMES_IGNORE_RULES: '1',
+                HERMES_YOLO_MODE: '0',
+                HERMES_ACCEPT_HOOKS: '0',
+                PYTHONDONTWRITEBYTECODE: '1',
+                ELECTRON_RUN_AS_NODE: '1',
+            },
+            instruction: action === 'logout'
+                ? `${sourceLabel}：选择 Remove a credential，再选择服务商和凭据；其他来源保留。`
+                : action === 'login'
+                    ? '在 Hermes 原生菜单中选择服务商并登录。'
+                    : '在 Hermes 原生账号菜单中管理凭据；更改保存在插件的 Hermes 账号目录，终端输入仅由你直接操作。',
+            cleanup,
+        };
+    }
+    catch (error) {
+        await cleanup();
+        throw error;
+    }
+}
+//# sourceMappingURL=hermes-accounts.js.map

package/lib/types/host/hermes-accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermes-accounts.js","sourceRoot":"","sources":["../../../src/host/hermes-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAwB,MAAM,uBAAuB,CAAA;AAE7F,OAAO,EAAE,0BAA0B,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAClG,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAA;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAsB,MAAM,cAAc,CAAA;AAEnE,MAAM,MAAM,GAAG,CAAC,KAAc,EAAoC,EAAE,CAClE,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AACtE,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;AACjG,MAAM,UAAU,GAAG,CAAC,UAA4B,EAAmB,EAAE,CAAC,CAAC;IACrE,KAAK,EAAE,YAAY;IACnB,YAAY,EAAE,OAAO;IACrB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrC,OAAO,EAAE,eAAe;CACzB,CAAC,CAAA;AAEF;;GAEG;AACH,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI;QAAE,OAAM;IACjE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAM;IACxF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAA;IACnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAM;IACR,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IACjE,GAAG,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IACjE,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5D,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC1F,MAAM,MAAM,GAAmB,EAAE,CAAA;IACjC,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAA;QAC3B,IAAI,EAAE,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAA;gBACzC,MAAM,CAAC,IAAI,CAAC;oBACV,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC;oBACjC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpD,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBACvD,OAAO,GAAG,IAAI,CAAA;oBACd,IAAI,CAAC;wBACH,uBAAuB,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAA;wBACvD,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;oBAC3C,CAAC;oBAAC,MAAM,CAAC;wBACP,yEAAyE;oBAC3E,CAAC;gBACH,CAAC;YACH,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,SAAQ;QACrD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;QAC3B,MAAM,UAAU,GACd,CAAC,EAAE,KAAK,cAAc,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;YACxD,CAAC,EAAE,KAAK,WAAW,IAAI,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;QAC/F,IACE,CAAC,UAAU;YACX,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;YAC9C,KAAK,CAAC,QAAQ,KAAK,IAAI;YACvB,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,gBAAgB,KAAK,IAAI,CAAC;YAElF,SAAQ;QACV,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACjF,IACE,OAAO,KAAK,SAAS;YACrB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBACtB,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,MAAM,CAAC,KAAK,CAAC;oBACd,KAAK,CAAC,SAAS,KAAK,OAAO;oBAC3B,CAAC;wBACC,aAAa;wBACb,oBAAoB;wBACpB,GAAG,CAAC,EAAE,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC3D,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAChC,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;oBAC1C,KAAK,CAAC,QAAQ,KAAK,IAAI;oBACvB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAC5D,CAAC;YAEJ,SAAQ;QACV,IAAI,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YACjD,OAAO,GAAG,IAAI,CAAA;YACd,SAAQ;QACV,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,aAAa,CAAC,EAAE,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC;YAC1D,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAA;IACpE,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,SAAQ;QACrC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;gBACd,KAAK,CAAC,SAAS,KAAK,SAAS;gBAC7B,KAAK,CAAC,QAAQ,KAAK,IAAI;gBACvB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBACzD,KAAK,CAAC,MAAM,KAAK,WAAW;gBAC5B,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAC9F,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,CACjC;gBACD,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,eAAe,CAAC;gBAEhE,SAAQ;YACV,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAA;QACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC3E,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IAC5F,CAAC;IACD,IAAI,SAAS;QACX,OAAO;YACL,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO;YAC/D,OAAO,EAAE,qBAAqB;SAC/B,CAAA;IACH,IAAI,OAAO;QACT,OAAO;YACL,KAAK,EAAE,iBAAiB;YACxB,YAAY,EAAE,OAAO;YACrB,UAAU,EAAE,OAAO;YACnB,OAAO,EAAE,aAAa;SACvB,CAAA;IACH,6EAA6E;IAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACzF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CACnB,CAAC,KAAK,EAAE,EAAE,CACR,MAAM,CAAC,KAAK,CAAC;QACb,KAAK,CAAC,SAAS,KAAK,SAAS;QAC7B,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CACpE,CAAA;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAC5F,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAmB,EAAE,IAAa;IAC/E,IAAI,IAAkD,CAAA;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAA;IAC1C,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACzF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI;YAC7D,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAC9C,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAA;YACrF,IAAI,CAAC,SAAS;gBAAE,MAAK;YACrB,MAAM,IAAI,SAAS,CAAA;QACrB,CAAC;QACD,IAAI,MAAM,GAAG,EAAE,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACvE,6FAA6F;QAC7F,iGAAiG;QACjG,MAAM,GAAG,GAAG,yBAAyB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAClF,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;YACnD,MAAM,KAAK,GACT,gHAAgH,CAAC,IAAI,CACnH,IAAI,CACL,CAAA;YACH,IAAI,CAAC,KAAK,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAA;YACnD,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;gBACvD,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM;oBACnB,CAAC,CAAC,aAAa;oBACf,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAA;YAC7B,OAAO,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;QACtG,CAAC,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAA;QACjE,MAAM,KAAK,CAAA;IACb,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,MAAM,IAAI,EAAE,KAAK,EAAE,CAAA;IACrB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAqB,EACrB,MAAmB;IAEnB,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IAAI,IAAkD,CAAA;IACtD,IAAI,QAAqC,CAAA;IACzC,IAAI,IAAI,GAAY,EAAE,CAAA;IACtB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAA;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;QACxC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;QACvF,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CACf,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EACvB,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CACjE,CAAA;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;YAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI;gBAC7D,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;YAC5C,IAAI,MAAM,GAAG,CAAC,CAAA;YACd,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC9B,MAAM,CAAC,cAAc,EAAE,CAAA;gBACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAA;gBAC9E,IAAI,CAAC,MAAM,CAAC,SAAS;oBAAE,MAAK;gBAC5B,MAAM,IAAI,MAAM,CAAC,SAAS,CAAA;YAC5B,CAAC;YACD,IAAI,MAAM,GAAG,EAAE,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;YACrE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;YAC9D,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAA;YACtC,MAAM,CAAC,cAAc,EAAE,CAAA;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QACrE,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAC3E,IAAI,SAAS,CAAC,MAAM;YAAE,OAAO,0BAA0B,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,CAAA;QACpG,OAAO,CACL,QAAQ,IAAI;YACV,KAAK,EAAE,cAAc;YACrB,YAAY,EAAE,OAAO;YACrB,OAAO,EAAE,gBAAgB;SAC1B,CACF,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,OAAQ,KAA+B,CAAC,IAAI,KAAK,QAAQ;YACvD,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE;YAC7E,CAAC,CAAC;gBACE,KAAK,EAAE,aAAa;gBACpB,YAAY,EAAE,OAAO;gBACrB,OAAO,EAAE,gBAAgB;aAC1B,CAAA;IACP,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,MAAM,IAAI,EAAE,KAAK,EAAE,CAAA;IACrB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAqB,EAAE,MAAmB;IACvF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACtD,IAAI,CAAC,CAAC,eAAe,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACzF,MAAM,MAAM,GAAG,OAAO,CACpB,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,EAAE,eAAe,CAAC,EAC/F,UAAU,EACV,QAAQ,CACT,CAAA;IACD,MAAM,EAAE,GAAkB,mBAAmB,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAA;IACtF,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAA;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAqB,EACrB,UAAkB,EAClB,OAAe,EACf,MAAqB,EACrB,MAAmB,EACnB,MAAsB;IAQtB,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;IACxF,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IACpG,gBAAgB,CAAC,OAAO,CAAC,CAAA;IACzB,IAAI,WAAW,GAAG,EAAE,CAAA;IACpB,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QAC/E,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;QAC9C,WAAW,GAAG,MAAM,CAAC,KAAK,CAAA;IAC5B,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAA;IACjG,MAAM,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3C,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;IAC1C,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IACvC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACnD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAClC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAC/F,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;IACvC,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IACvC,MAAM,IAAI,GAAG,gBAAgB,CAC3B,OAAO,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,EAAE,eAAe,CAAC,CAAC,CACzG,CAAA;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAC9D,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;IACpD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAA;IACnC,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;IAC1C,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,IAAI,OAAO;YAAE,OAAM;QACnB,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;QACrC,IACE,SAAS,CAAC,cAAc,EAAE;YAC1B,SAAS,CAAC,GAAG,KAAK,cAAc,CAAC,GAAG;YACpC,SAAS,CAAC,GAAG,KAAK,cAAc,CAAC,GAAG;YAEpC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACzE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAA;YAC9B,IAAI,GAAG,CAAC,cAAc,EAAE,IAAI,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;gBAC9E,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;YAClE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACjD,OAAO,GAAG,IAAI,CAAA;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,GAAG,IAAI,CAAA;;gBACjE,MAAM,KAAK,CAAA;QAClB,CAAC;IACH,CAAC,CAAA;IACD,IAAI,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;QACtD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;QACtG,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAA;QAC5G,OAAO;YACL,IAAI;YACJ,GAAG,EAAE,KAAK;YACV,GAAG,EAAE;gBACH,GAAG,wBAAwB,CAAC,UAAU,CAAC;gBACvC,MAAM,EAAE,SAAS;gBACjB,GAAG,EAAE,SAAS;gBACd,IAAI,EAAE,SAAS;gBACf,gBAAgB,EAAE,GAAG;gBACrB,mBAAmB,EAAE,GAAG;gBACxB,gBAAgB,EAAE,GAAG;gBACrB,mBAAmB,EAAE,GAAG;gBACxB,uBAAuB,EAAE,GAAG;gBAC5B,oBAAoB,EAAE,GAAG;aAC1B;YACD,WAAW,EACT,MAAM,KAAK,QAAQ;gBACjB,CAAC,CAAC,GAAG,WAAW,2CAA2C;gBAC3D,CAAC,CAAC,MAAM,KAAK,OAAO;oBAClB,CAAC,CAAC,yBAAyB;oBAC3B,CAAC,CAAC,wDAAwD;YAChE,OAAO;SACR,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,EAAE,CAAA;QACf,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/lib/types/host/hermes-adapter.d.ts

@@ -0,0 +1,93 @@
+import { type Effort, type ModelChoice, type TaskMode } from '../shared/types.ts';
+import type { EventInput, ProtocolResult } from './protocol.ts';
+import type { TokenUsage } from '../shared/telemetry.ts';
+import { type HermesRenewalContext } from './hermes-renewal.ts';
+export interface HermesInput {
+    executable: string;
+    project: string;
+    preference: {
+        model: string;
+        effort: Effort;
+    };
+    mode: TaskMode;
+    prompt: string;
+    conversationId?: string;
+    stateDirectory: string;
+    hermesHome?: string;
+    renewal?: HermesRenewalContext;
+}
+export declare function hermesHomeDirectory(configured?: string): string;
+/** Account setup may create a new home. Resolve its nearest existing ancestor before
+ * granting writes, so a parent symlink cannot turn a narrow-looking path into all of HOME.
+ * Returns a canonical path for the sandbox and native HERMES_HOME to share.
+ */
+export declare function validateHermesHomeDirectory(path: string): string;
+/** Read-only native scalar queries; never prints a config object containing API keys. */
+export declare function discoverHermes(executable: string, capture: (argv: string[], env?: Record<string, string>) => Promise<string>, stateDirectory: string, hermesHome?: string, options?: {
+    signal?: AbortSignal;
+    fetch?: typeof fetch;
+    renewal?: HermesRenewalContext;
+}): Promise<ModelChoice[]>;
+/** Official stream-json CLI; not a claim of local installation or live execution. */
+export declare function prepareHermes(input: HermesInput): Promise<{
+    argv: string[];
+    env: Record<string, string>;
+}>;
+export type HermesRecord = {
+    type: 'system';
+    subtype: 'init';
+    session_id: string;
+    model: string;
+} | {
+    type: 'text';
+    text: string;
+} | {
+    type: 'tool_use';
+    name: string;
+    input?: Record<string, unknown>;
+    tool_call_id?: string;
+} | {
+    type: 'tool_result';
+    name: string;
+    output: string;
+    is_error: boolean;
+    duration_ms: number;
+    tool_call_id?: string;
+} | {
+    type: 'result';
+    session_id: string;
+    exit_code: number;
+    text: string;
+    error?: string;
+    tokens?: Record<string, number>;
+    duration_ms?: number;
+};
+/** Map only counters actually reported by the native final envelope. These are run totals,
+ * not a model context-window occupancy estimate and not per-message counters.
+ */
+export declare function hermesTokenUsage(tokens: unknown): TokenUsage | undefined;
+/** Native record validation; the source protocol has no public reasoning event. */
+export declare function parseHermesRecord(value: unknown): HermesRecord;
+export declare class HermesProtocol {
+    private emit;
+    private identify;
+    private maxLineBytes;
+    private decoder;
+    private pending;
+    private response;
+    private assistantStep;
+    private assistantSegmentOpen;
+    private final?;
+    private terminal;
+    private ended;
+    private failure?;
+    private tools;
+    result?: ProtocolResult;
+    conversationId?: string;
+    constructor(emit: (event: EventInput) => void, identify: (id: string) => void, maxLineBytes: number);
+    feed(chunk: Buffer | string): void;
+    end(): void;
+    private assistant;
+    private id;
+    private line;
+}