lastlight 0.5.1 → 0.6.2

package/dist/engine/executors/backends.js

@@ -0,0 +1,541 @@
+import { basename, join, relative } from "path";
+import { writeFileSync } from "fs";
+import { createTaskSandbox, setupTaskWorktree, prePopulateWorkspace, SANDBOX_IMAGE_QA, } from "../../sandbox/index.js";
+import { SmolSandbox, smolAvailable, SMOL_WORKSPACE_DIR } from "../../sandbox/smol.js";
+import { AGENTIC_PROFILE_FOR, loadAgentContext, } from "../profiles.js";
+import { AgenticShim } from "../event-shim.js";
+import { projectSlugForCwd } from "../../session-log.js";
+import { ALLOW_ALL_SENTINEL, DEFAULT_ALLOWLIST, mergeAllowlist } from "../../sandbox/egress-allowlist.js";
+import { getDockerSandboxOtelEnv, getOtelEnvForSandbox, recordError, recordExecutionMetrics } from "../../telemetry/index.js";
+import { recordPiEvent } from "../../telemetry/pi-events.js";
+import { DEFAULT_MODEL, DOCKER_WORKSPACE_DIR, SKILL_BUNDLE_ROOT, stageSkillBundle, skillBundleKey, excludeFromGit, serverArtifacts, stageArtifactsIn, harvestArtifactsOut, RunResultAccumulator, finalizeFromRunResult, coerceThinking, resolveSessionsDir, emptyResult, applyEnv, } from "./shared.js";
+// ── In-process path (gondolin / none) ───────────────────────────────
+export async function executeInProcess(prompt, config, ctx) {
+    const startTime = Date.now();
+    console.log(`  [executor] Running in-process (task: ${ctx.taskId}, sandbox: ${ctx.backend})`);
+    const model = config.model || DEFAULT_MODEL;
+    const thinking = coerceThinking(config.variant);
+    const profile = ctx.access ? AGENTIC_PROFILE_FOR[ctx.access.profile] : undefined;
+    const sessionsDir = resolveSessionsDir(config);
+    // When the harness pre-cloned the target repo, cwd is the checkout
+    // (`<workDir>/<repo>/`) so the agent's commands run inside the repo with no
+    // `cd` preamble; otherwise cwd is the workspace root and the agent clones in.
+    const agentCwd = ctx.access?.prePopulateBranch
+        ? join(ctx.workDir, ctx.access.repo)
+        : ctx.workDir;
+    // Stage this phase's skills into its own bundle and point pi at the staged
+    // dirs explicitly via `skillPaths` below. The bundle lives at the workspace
+    // root — a sibling of the repo, outside its git tree — for `none` (the host
+    // FS is fully visible in-process). gondolin mounts only cwd, so its bundle
+    // is staged under the repo and added to the checkout's local
+    // `.git/info/exclude` so the agent can't commit it.
+    const gondolin = ctx.backend === "gondolin";
+    const skillRoot = gondolin ? agentCwd : ctx.workDir;
+    let stagedSkillDirs;
+    try {
+        stagedSkillDirs = stageSkillBundle(skillRoot, skillBundleKey(config), config.skillPaths, "symlink");
+        if (stagedSkillDirs && gondolin)
+            excludeFromGit(agentCwd, SKILL_BUNDLE_ROOT);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.warn(`[executor] Could not stage skills: ${msg}`);
+    }
+    // Server-mode build assets: agentCwd is the host-visible repo checkout for
+    // the in-process backends (gondolin's cwd mount / none's host FS), so stage
+    // and harvest operate on it directly.
+    const artifacts = serverArtifacts(config, agentCwd);
+    stageArtifactsIn(artifacts);
+    const shim = new AgenticShim({
+        homeDir: sessionsDir,
+        projectSlug: projectSlugForCwd(agentCwd),
+        model,
+        initialPrompt: prompt,
+    });
+    // agentic-pi reads its own env (provider keys, App PEM, etc.) from
+    // process.env. Splice in our scoped values for the duration of the call,
+    // then restore.
+    const restore = applyEnv(ctx.env);
+    // Env forwarded INTO the sandbox so the agent's `bash` calls see it.
+    // agentic-pi auto-injects GITHUB_TOKEN/GH_TOKEN when --profile is set;
+    // git identity is set here so `git commit` works without extra setup.
+    //
+    // Notes per backend:
+    //   - gondolin: the VM's user inherits HOME from the agentic-pi process
+    //     (so the host's HOME — e.g. /Users/clifton — leaks in). We force
+    //     HOME=/root so `git config --global` and `gh auth status` write
+    //     to a real path inside the VM.
+    //   - none: agent runs on the host; do NOT override HOME (would mess
+    //     with the harness user's real config).
+    //   - docker (handled separately): the container's `agent` user has
+    //     its own HOME=/home/agent baked in by the image; no override.
+    const baseSandboxEnv = {
+        GIT_AUTHOR_NAME: "last-light[bot]",
+        GIT_AUTHOR_EMAIL: "last-light[bot]@users.noreply.github.com",
+        GIT_COMMITTER_NAME: "last-light[bot]",
+        GIT_COMMITTER_EMAIL: "last-light[bot]@users.noreply.github.com",
+        // /workspace is a bind mount from the host (host UID) into a VM running
+        // as a different UID; git refuses to operate without an explicit
+        // safe-directory. Setting it via GIT_CONFIG_* avoids needing HOME and
+        // a writeable ~/.gitconfig.
+        GIT_CONFIG_COUNT: "1",
+        GIT_CONFIG_KEY_0: "safe.directory",
+        GIT_CONFIG_VALUE_0: "*",
+    };
+    const otelSandboxEnv = config.otel?.enabled && config.otel.forwardToSandbox ? getOtelEnvForSandbox() : {};
+    const sandboxEnv = ctx.backend === "gondolin"
+        ? { ...otelSandboxEnv, ...baseSandboxEnv, HOME: "/root", USER: "root", LOGNAME: "root" }
+        : { ...otelSandboxEnv, ...baseSandboxEnv };
+    let notifiedSessionId = false;
+    let result;
+    const acc = new RunResultAccumulator();
+    try {
+        // HTTP egress allowlist. lastlight owns the policy (rather than relying
+        // on agentic-pi's bundled default) so a single source — `egress-allowlist.ts`
+        // — covers both backends. `unrestrictedEgress` opts a phase out via the
+        // `"*"` sentinel; gondolin (post the upstream allow-all patch) treats it
+        // as "allow every host".
+        const extraHosts = config.otel?.enabled && config.otel.forwardToSandbox ? config.otel.collectorHosts : [];
+        const allowedHttpHosts = config.unrestrictedEgress
+            ? [ALLOW_ALL_SENTINEL]
+            : mergeAllowlist(DEFAULT_ALLOWLIST, extraHosts);
+        // Loaded lazily: agentic-pi transitively imports pi-coding-agent, whose
+        // bundled undici writes a v8 Agent onto `Symbol.for('undici.globalDispatcher.1')`
+        // the moment its `lib/global.js` evaluates. Node's built-in fetch reads
+        // from the same symbol, so eager-loading here would poison every fetch
+        // in the harness — breaking arctic's OAuth code exchange (strict
+        // content-length validation). Dynamic import keeps the harness on
+        // Node's clean dispatcher unless an in-process sandbox actually runs.
+        const { run: agenticRun } = await import("agentic-pi");
+        result = await agenticRun({
+            model,
+            prompt,
+            thinking,
+            profile,
+            // Test/eval escape hatch: when set (by the eval harness), agentic-pi's
+            // built-in github_* tools talk to a local fake GitHub instead of
+            // api.github.com. Unset in production.
+            githubApiBaseUrl: config.githubApiBaseUrl,
+            sandbox: ctx.backend === "gondolin" ? "gondolin" : "none",
+            sandboxEnv,
+            cwd: agentCwd,
+            noSession: true,
+            // Explicit per-phase skill bundle (staged above). pi loads these
+            // additively; nothing is written into the repo for the agent to commit.
+            skillPaths: stagedSkillDirs,
+            allowedHttpHosts,
+            // Explicit boolean — without it, agentic-pi auto-enables web search
+            // when any provider key is in process.env. We forwarded those keys
+            // above only for opted-in workflows, but `process.env` on the harness
+            // host carries them regardless, so we must opt-out explicitly.
+            webSearch: config.webSearch === true,
+            webSearchProvider: config.webSearchProvider,
+            onEvent: (record) => {
+                acc.feed(record);
+                shim.feed(record);
+                recordPiEvent(record, {
+                    includeContent: config.otel?.includeContent === true,
+                    surface: "agent",
+                    workflowName: config.telemetry?.workflowName,
+                    phaseName: config.telemetry?.phaseName,
+                    model,
+                });
+                if (!notifiedSessionId && ctx.onSessionId && record.type === "session" && typeof record.id === "string") {
+                    notifiedSessionId = true;
+                    ctx.onSessionId(record.id);
+                }
+            },
+            onWarn: (msg) => console.warn(`[agentic] ${msg}`),
+        });
+    }
+    catch (err) {
+        restore();
+        // Harvest even on failure so a partial plan/summary still reaches the store.
+        harvestArtifactsOut(artifacts);
+        const msg = err instanceof Error ? err.message : String(err);
+        const durationMs = Date.now() - startTime;
+        recordError("agent", err, { "sandbox.backend": ctx.backend, model, success: false, stop_reason: "error_executor", "workflow.name": config.telemetry?.workflowName, "phase.name": config.telemetry?.phaseName });
+        recordExecutionMetrics("agent", { "sandbox.backend": ctx.backend, model, success: false, stop_reason: "error_executor", durationMs });
+        const fallbackId = `exec-${basename(ctx.taskId)}`;
+        const synthesizedId = await shim
+            .finalizeWithFallback(emptyResult("error_executor", durationMs), fallbackId, msg)
+            .catch(() => null);
+        return {
+            success: false,
+            output: "",
+            turns: 0,
+            error: msg,
+            durationMs,
+            sessionId: synthesizedId ?? undefined,
+            stopReason: "error_executor",
+        };
+    }
+    restore();
+    harvestArtifactsOut(artifacts);
+    // agentic-pi's in-process `stats` is the same compaction-blind
+    // `usage_snapshot`. Prefer our per-message accumulation when it carries
+    // token data (see RunResultAccumulator.bestStats).
+    const better = acc.bestStats();
+    if (better && (better.tokens?.total ?? 0) > 0)
+        result.stats = better;
+    const finalResult = await finalizeFromRunResult(result, prompt, shim, startTime, acc.extensions(), acc.skills(), acc.toolError(), acc.endedOnToolCall());
+    recordExecutionMetrics("agent", {
+        "sandbox.backend": ctx.backend,
+        model,
+        success: finalResult.success,
+        stop_reason: finalResult.stopReason,
+        durationMs: finalResult.durationMs,
+        costUsd: finalResult.costUsd,
+        inputTokens: finalResult.inputTokens,
+        outputTokens: finalResult.outputTokens,
+        "workflow.name": config.telemetry?.workflowName,
+        "phase.name": config.telemetry?.phaseName,
+    });
+    return finalResult;
+}
+// ── Docker path ─────────────────────────────────────────────────────
+export async function executeDocker(prompt, config, ctx) {
+    // HTTP egress routing — docker analog of the gondolin allowlist.
+    // Sandbox is wired to coredns-strict by default (allowlist enforced via
+    // DNS sinkhole + nginx ssl_preread); a phase that set
+    // `unrestricted_egress: true` points at coredns-open instead.
+    // The IPs here match the static assignments in docker-compose.yml
+    // (see src/sandbox/egress-firewall-config.ts for the constants).
+    const dnsIp = config.unrestrictedEgress
+        ? (process.env.LASTLIGHT_DNS_OPEN || "172.30.0.11")
+        : (process.env.LASTLIGHT_DNS_STRICT || "172.30.0.10");
+    // A phase can opt into the browser-QA image (Playwright + Chromium baked in)
+    // with `sandbox_image: qa`. The runner only schedules such a phase when the
+    // image is actually present (see `qaImageAvailable`), so by here it's safe to
+    // request; pass undefined otherwise to use the lean default image.
+    const imageName = config.sandboxImage === "qa" ? SANDBOX_IMAGE_QA : undefined;
+    const sbx = await createTaskSandbox({
+        taskId: ctx.taskId,
+        stateDir: ctx.stateDir,
+        sandboxDir: config.sandboxDir,
+        env: ctx.env,
+        prePopulate: ctx.prePopulate,
+        dnsIp,
+        imageName,
+    });
+    if (!sbx) {
+        throw new Error("LASTLIGHT_SANDBOX=docker but no docker sandbox was available. " +
+            "Install Docker and build the sandbox image, or set LASTLIGHT_SANDBOX=gondolin / none.");
+    }
+    try {
+        const md = loadAgentContext(config.agentContextDir);
+        if (md)
+            writeFileSync(join(sbx.workDir, "AGENTS.md"), md);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.warn(`[executor] Could not write docker AGENTS.md: ${msg}`);
+    }
+    const startTime = Date.now();
+    console.log(`  [executor] Running in docker sandbox (task: ${ctx.taskId})`);
+    const model = config.model || DEFAULT_MODEL;
+    const thinking = coerceThinking(config.variant);
+    const profile = ctx.access ? AGENTIC_PROFILE_FOR[ctx.access.profile] : undefined;
+    const sessionsDir = resolveSessionsDir(config);
+    // When the harness pre-cloned the repo, cwd is the checkout
+    // (`<workspace>/<repo>/`) so the agent runs inside the repo with no `cd`
+    // preamble; otherwise it's the workspace root.
+    const agentCwd = ctx.prePopulate
+        ? `${DOCKER_WORKSPACE_DIR}/${ctx.prePopulate.repo}`
+        : DOCKER_WORKSPACE_DIR;
+    // Stage this phase's skills into its own bundle at the workspace ROOT — a
+    // sibling of any repo subdir, never inside its git tree. docker bind-mounts
+    // the WHOLE workspace, so the agent reaches the bundle by an absolute
+    // `--skill` path even though cwd is the repo. Copy (not symlink) because the
+    // agent's tools run inside the container and host symlink targets don't
+    // resolve there. Map the host dests to their in-container paths for `--skill`.
+    let skillDirsInContainer = [];
+    try {
+        const staged = stageSkillBundle(sbx.workDir, skillBundleKey(config), config.skillPaths, "copy");
+        if (staged) {
+            skillDirsInContainer = staged.map((d) => `${DOCKER_WORKSPACE_DIR}/${relative(sbx.workDir, d)}`);
+        }
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.warn(`[executor] Could not stage skills in docker workspace: ${msg}`);
+    }
+    // Server-mode build assets. The host-visible repo checkout is the
+    // bind-mounted workspace path (`sbx.workDir[/<repo>]`), NOT the in-container
+    // `agentCwd`. Stage now; harvest before each `sbx.cleanup()` below (cleanup
+    // removes the workspace, taking the docs with it).
+    const hostRepoDir = ctx.prePopulate ? join(sbx.workDir, ctx.prePopulate.repo) : sbx.workDir;
+    const artifacts = serverArtifacts(config, hostRepoDir);
+    stageArtifactsIn(artifacts);
+    // The dashboard reads from <sessionsDir>/projects/<slug>/. Use the same
+    // resolved cwd for the slug so live tails land in the right project dir.
+    const shim = new AgenticShim({
+        homeDir: sessionsDir,
+        projectSlug: projectSlugForCwd(agentCwd),
+        model,
+        initialPrompt: prompt,
+    });
+    const acc = new RunResultAccumulator();
+    let notifiedSessionId = false;
+    // Identity forwarded into the sandboxed agentic-pi run inside the container.
+    // The container's `agent` user already has HOME=/home/agent set up, so we
+    // do NOT override HOME here — only git identity + safe.directory (for the
+    // host-UID bind mount). GITHUB_TOKEN/GH_TOKEN are auto-injected by
+    // agentic-pi when --profile is set.
+    const sandboxEnv = {
+        // Inner-run env for the agent's child shells. Points at the in-network
+        // collector (IP-only, no secret headers) so any OTLP a script emits is
+        // tunnelled the same way the agent's own telemetry is.
+        ...(config.otel?.enabled && config.otel.forwardToSandbox ? getDockerSandboxOtelEnv() : {}),
+        GIT_AUTHOR_NAME: "last-light[bot]",
+        GIT_AUTHOR_EMAIL: "last-light[bot]@users.noreply.github.com",
+        GIT_COMMITTER_NAME: "last-light[bot]",
+        GIT_COMMITTER_EMAIL: "last-light[bot]@users.noreply.github.com",
+        GIT_CONFIG_COUNT: "1",
+        GIT_CONFIG_KEY_0: "safe.directory",
+        GIT_CONFIG_VALUE_0: "*",
+    };
+    try {
+        await sbx.sandbox.runAgent(ctx.taskId, prompt, {
+            model,
+            thinking,
+            profile,
+            sandboxEnv,
+            agentCwd,
+            skillDirs: skillDirsInContainer,
+            webSearch: config.webSearch === true,
+            webSearchProvider: config.webSearchProvider,
+            onLine: (line) => {
+                if (!line.startsWith("{"))
+                    return;
+                let record;
+                try {
+                    record = JSON.parse(line);
+                }
+                catch {
+                    return;
+                }
+                acc.feed(record);
+                shim.feed(record);
+                recordPiEvent(record, {
+                    includeContent: config.otel?.includeContent === true,
+                    surface: "agent",
+                    workflowName: config.telemetry?.workflowName,
+                    phaseName: config.telemetry?.phaseName,
+                    model,
+                });
+                if (!notifiedSessionId && ctx.onSessionId && record.type === "session" && typeof record.id === "string") {
+                    notifiedSessionId = true;
+                    ctx.onSessionId(record.id);
+                }
+            },
+        });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        const durationMs = Date.now() - startTime;
+        recordError("agent", err, { "sandbox.backend": "docker", model, success: false, stop_reason: "error_sandbox", "workflow.name": config.telemetry?.workflowName, "phase.name": config.telemetry?.phaseName });
+        recordExecutionMetrics("agent", { "sandbox.backend": "docker", model, success: false, stop_reason: "error_sandbox", durationMs });
+        const fallbackId = `exec-${basename(ctx.taskId)}`;
+        const synthesizedId = await shim
+            .finalizeWithFallback(emptyResult("error_sandbox", durationMs), fallbackId, msg)
+            .catch(() => null);
+        harvestArtifactsOut(artifacts);
+        await sbx.cleanup();
+        return {
+            success: false,
+            output: "",
+            turns: 0,
+            error: msg,
+            durationMs,
+            sessionId: synthesizedId ?? undefined,
+            stopReason: "error_sandbox",
+        };
+    }
+    harvestArtifactsOut(artifacts);
+    await sbx.cleanup();
+    const finalResult = await finalizeFromRunResult(acc.build(0), prompt, shim, startTime, acc.extensions(), acc.skills(), acc.toolError(), acc.endedOnToolCall());
+    recordExecutionMetrics("agent", {
+        "sandbox.backend": "docker",
+        model,
+        success: finalResult.success,
+        stop_reason: finalResult.stopReason,
+        durationMs: finalResult.durationMs,
+        costUsd: finalResult.costUsd,
+        inputTokens: finalResult.inputTokens,
+        outputTokens: finalResult.outputTokens,
+        "workflow.name": config.telemetry?.workflowName,
+        "phase.name": config.telemetry?.phaseName,
+    });
+    return finalResult;
+}
+// ── smolvm path (local micro-VM) ────────────────────────────────────
+//
+// Structural peer of executeDocker: Last Light owns the boundary, mounts the
+// workspace, runs `agentic-pi run --sandbox none` inside the VM, parses the
+// stream, destroys the machine. Differences from docker: a real micro-VM
+// (own kernel) and NATIVE per-machine egress via smolvm's `--allow-host`
+// (sourced from egress-allowlist.ts) instead of the coredns/nginx sidecars.
+export async function executeSmol(prompt, config, ctx) {
+    if (!smolAvailable()) {
+        throw new Error("LASTLIGHT_SANDBOX=smol but the smolvm CLI is not available. " +
+            "Install smolvm (https://smolmachines.com) and start `smolvm serve`, " +
+            "or set LASTLIGHT_SANDBOX=docker / gondolin / none.");
+    }
+    // Native egress allowlist — the docker/gondolin policy expressed as
+    // per-machine `--allow-host` flags. `unrestrictedEgress` → null (open, but
+    // still `--net`). NOTE: unlike docker's coredns-open, this has no SSRF
+    // metadata floor — a spike gap, documented in smol.ts. The allowlist does
+    // NOT include docker-registry hosts, so the image must already be in smolvm's
+    // store (pre-pull / `smolvm pack`) — `start` won't reach a registry here.
+    const extraHosts = config.otel?.enabled && config.otel.forwardToSandbox ? config.otel.collectorHosts : [];
+    const allowHosts = config.unrestrictedEgress
+        ? null
+        : mergeAllowlist(DEFAULT_ALLOWLIST, extraHosts);
+    // Workspace dir on the host. We boot the VM FIRST (with the dir mounted),
+    // then probe where the share actually lands and clone/stage into that — see
+    // SmolSandbox.resolveHostWorkspace for why the mount source isn't always the
+    // share root. So no pre-clone here; just the dir.
+    const workDir = setupTaskWorktree({
+        taskId: ctx.taskId,
+        stateDir: ctx.stateDir,
+        sandboxDir: config.sandboxDir,
+    });
+    const sandbox = new SmolSandbox({ env: ctx.env, allowHosts });
+    const machine = await sandbox.create({ taskId: ctx.taskId, worktreePath: workDir });
+    const hostWs = machine.hostWorkspace;
+    // Now that we know the share-backed host dir, provision it: clone the repo,
+    // drop AGENTS.md, stage skills — all where the guest will see them at
+    // SMOL_WORKSPACE_DIR.
+    if (ctx.prePopulate)
+        prePopulateWorkspace(hostWs, ctx.prePopulate);
+    try {
+        const md = loadAgentContext(config.agentContextDir);
+        if (md)
+            writeFileSync(join(hostWs, "AGENTS.md"), md);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.warn(`[executor] Could not write smol AGENTS.md: ${msg}`);
+    }
+    const startTime = Date.now();
+    console.log(`  [executor] Running in smol micro-VM (task: ${ctx.taskId})`);
+    const model = config.model || DEFAULT_MODEL;
+    const thinking = coerceThinking(config.variant);
+    const profile = ctx.access ? AGENTIC_PROFILE_FOR[ctx.access.profile] : undefined;
+    const sessionsDir = resolveSessionsDir(config);
+    const agentCwd = ctx.prePopulate
+        ? `${SMOL_WORKSPACE_DIR}/${ctx.prePopulate.repo}`
+        : SMOL_WORKSPACE_DIR;
+    // Skills copied (not symlinked) into the share-backed workspace root — host
+    // symlink targets wouldn't resolve across the VM mount — then mapped to their
+    // in-guest paths for `--skill`. Same rationale as the docker path.
+    let skillDirsInGuest = [];
+    try {
+        const staged = stageSkillBundle(hostWs, skillBundleKey(config), config.skillPaths, "copy");
+        if (staged) {
+            skillDirsInGuest = staged.map((d) => `${SMOL_WORKSPACE_DIR}/${relative(hostWs, d)}`);
+        }
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.warn(`[executor] Could not stage skills in smol workspace: ${msg}`);
+    }
+    const hostRepoDir = ctx.prePopulate ? join(hostWs, ctx.prePopulate.repo) : hostWs;
+    const artifacts = serverArtifacts(config, hostRepoDir);
+    stageArtifactsIn(artifacts);
+    const shim = new AgenticShim({
+        homeDir: sessionsDir,
+        projectSlug: projectSlugForCwd(agentCwd),
+        model,
+        initialPrompt: prompt,
+    });
+    const acc = new RunResultAccumulator();
+    let notifiedSessionId = false;
+    // Git identity for the inner agentic-pi run. No HOME override — the sandbox
+    // image's `agent` user has its own HOME. GITHUB_TOKEN/GH_TOKEN are
+    // auto-injected by agentic-pi from the machine env when --profile is set.
+    const sandboxEnv = {
+        GIT_AUTHOR_NAME: "last-light[bot]",
+        GIT_AUTHOR_EMAIL: "last-light[bot]@users.noreply.github.com",
+        GIT_COMMITTER_NAME: "last-light[bot]",
+        GIT_COMMITTER_EMAIL: "last-light[bot]@users.noreply.github.com",
+        GIT_CONFIG_COUNT: "1",
+        GIT_CONFIG_KEY_0: "safe.directory",
+        GIT_CONFIG_VALUE_0: "*",
+    };
+    try {
+        await sandbox.runAgent(ctx.taskId, prompt, {
+            model,
+            thinking,
+            profile,
+            sandboxEnv,
+            agentCwd,
+            skillDirs: skillDirsInGuest,
+            webSearch: config.webSearch === true,
+            webSearchProvider: config.webSearchProvider,
+            onLine: (line) => {
+                if (!line.startsWith("{"))
+                    return;
+                let record;
+                try {
+                    record = JSON.parse(line);
+                }
+                catch {
+                    return;
+                }
+                acc.feed(record);
+                shim.feed(record);
+                recordPiEvent(record, {
+                    includeContent: config.otel?.includeContent === true,
+                    surface: "agent",
+                    workflowName: config.telemetry?.workflowName,
+                    phaseName: config.telemetry?.phaseName,
+                    model,
+                });
+                if (!notifiedSessionId && ctx.onSessionId && record.type === "session" && typeof record.id === "string") {
+                    notifiedSessionId = true;
+                    ctx.onSessionId(record.id);
+                }
+            },
+        });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        const durationMs = Date.now() - startTime;
+        recordError("agent", err, { "sandbox.backend": "smol", model, success: false, stop_reason: "error_sandbox", "workflow.name": config.telemetry?.workflowName, "phase.name": config.telemetry?.phaseName });
+        recordExecutionMetrics("agent", { "sandbox.backend": "smol", model, success: false, stop_reason: "error_sandbox", durationMs });
+        const fallbackId = `exec-${basename(ctx.taskId)}`;
+        const synthesizedId = await shim
+            .finalizeWithFallback(emptyResult("error_sandbox", durationMs), fallbackId, msg)
+            .catch(() => null);
+        harvestArtifactsOut(artifacts);
+        await sandbox.destroy(ctx.taskId);
+        return {
+            success: false,
+            output: "",
+            turns: 0,
+            error: msg,
+            durationMs,
+            sessionId: synthesizedId ?? undefined,
+            stopReason: "error_sandbox",
+        };
+    }
+    harvestArtifactsOut(artifacts);
+    await sandbox.destroy(ctx.taskId);
+    const finalResult = await finalizeFromRunResult(acc.build(0), prompt, shim, startTime, acc.extensions(), acc.skills(), acc.toolError(), acc.endedOnToolCall());
+    recordExecutionMetrics("agent", {
+        "sandbox.backend": "smol",
+        model,
+        success: finalResult.success,
+        stop_reason: finalResult.stopReason,
+        durationMs: finalResult.durationMs,
+        costUsd: finalResult.costUsd,
+        inputTokens: finalResult.inputTokens,
+        outputTokens: finalResult.outputTokens,
+        "workflow.name": config.telemetry?.workflowName,
+        "phase.name": config.telemetry?.phaseName,
+    });
+    return finalResult;
+}
+//# sourceMappingURL=backends.js.map

package/dist/engine/executors/backends.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backends.js","sourceRoot":"","sources":["../../../src/engine/executors/backends.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAGnC,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EACL,mBAAmB,EACnB,gBAAgB,GAIjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAC1G,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAC9H,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,EACd,kBAAkB,EAClB,WAAW,EACX,QAAQ,GACT,MAAM,aAAa,CAAC;AAErB,uEAAuE;AAEvE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,MAAsB,EACtB,GAQC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,CAAC,GAAG,CACT,0CAA0C,GAAG,CAAC,MAAM,cAAc,GAAG,CAAC,OAAO,GAAG,CACjF,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC;IAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC/C,mEAAmE;IACnE,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,iBAAiB;QAC5C,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QACpC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAEhB,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,6DAA6D;IAC7D,oDAAoD;IACpD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,KAAK,UAAU,CAAC;IAC5C,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IACpD,IAAI,eAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,eAAe,GAAG,gBAAgB,CAAC,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACpG,IAAI,eAAe,IAAI,QAAQ;YAAE,cAAc,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,sCAAsC;IACtC,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpD,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAE5B,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC;QAC3B,OAAO,EAAE,WAAW;QACpB,WAAW,EAAE,iBAAiB,CAAC,QAAQ,CAAC;QACxC,KAAK;QACL,aAAa,EAAE,MAAM;KACtB,CAAC,CAAC;IAEH,mEAAmE;IACnE,yEAAyE;IACzE,gBAAgB;IAChB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAElC,qEAAqE;IACrE,uEAAuE;IACvE,sEAAsE;IACtE,EAAE;IACF,qBAAqB;IACrB,wEAAwE;IACxE,sEAAsE;IACtE,qEAAqE;IACrE,oCAAoC;IACpC,qEAAqE;IACrE,4CAA4C;IAC5C,oEAAoE;IACpE,mEAAmE;IACnE,MAAM,cAAc,GAA2B;QAC7C,eAAe,EAAE,iBAAiB;QAClC,gBAAgB,EAAE,0CAA0C;QAC5D,kBAAkB,EAAE,iBAAiB;QACrC,mBAAmB,EAAE,0CAA0C;QAC/D,wEAAwE;QACxE,iEAAiE;QACjE,sEAAsE;QACtE,4BAA4B;QAC5B,gBAAgB,EAAE,GAAG;QACrB,gBAAgB,EAAE,gBAAgB;QAClC,kBAAkB,EAAE,GAAG;KACxB,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1G,MAAM,UAAU,GACd,GAAG,CAAC,OAAO,KAAK,UAAU;QACxB,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;QACxF,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,cAAc,EAAE,CAAC;IAE/C,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,MAAiB,CAAC;IACtB,MAAM,GAAG,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,wEAAwE;QACxE,8EAA8E;QAC9E,wEAAwE;QACxE,yEAAyE;QACzE,yBAAyB;QACzB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,MAAM,gBAAgB,GAAG,MAAM,CAAC,kBAAkB;YAChD,CAAC,CAAC,CAAC,kBAAkB,CAAC;YACtB,CAAC,CAAC,cAAc,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;QAElD,wEAAwE;QACxE,kFAAkF;QAClF,wEAAwE;QACxE,uEAAuE;QACvE,iEAAiE;QACjE,kEAAkE;QAClE,sEAAsE;QACtE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAmC,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAEvF,MAAM,GAAG,MAAM,UAAU,CAAC;YACxB,KAAK;YACL,MAAM;YACN,QAAQ;YACR,OAAO;YACP,uEAAuE;YACvE,iEAAiE;YACjE,uCAAuC;YACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;YACzD,UAAU;YACV,GAAG,EAAE,QAAQ;YACb,SAAS,EAAE,IAAI;YACf,iEAAiE;YACjE,wEAAwE;YACxE,UAAU,EAAE,eAAe;YAC3B,gBAAgB;YAChB,oEAAoE;YACpE,mEAAmE;YACnE,sEAAsE;YACtE,+DAA+D;YAC/D,SAAS,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI;YACpC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE;gBAClB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClB,aAAa,CAAC,MAAiC,EAAE;oBAC/C,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,cAAc,KAAK,IAAI;oBACpD,OAAO,EAAE,OAAO;oBAChB,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY;oBAC5C,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS;oBACtC,KAAK;iBACN,CAAC,CAAC;gBACH,IAAI,CAAC,iBAAiB,IAAI,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;oBACxG,iBAAiB,GAAG,IAAI,CAAC;oBACzB,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YACD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;QACV,6EAA6E;QAC7E,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAChN,sBAAsB,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;QACtI,MAAM,UAAU,GAAG,QAAQ,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,MAAM,IAAI;aAC7B,oBAAoB,CACnB,WAAW,CAAC,gBAAgB,EAAE,UAAU,CAAC,EACzC,UAAU,EACV,GAAG,CACJ;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,CAAC;YACR,KAAK,EAAE,GAAG;YACV,UAAU;YACV,SAAS,EAAE,aAAa,IAAI,SAAS;YACrC,UAAU,EAAE,gBAAgB;SAC7B,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;IACV,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAE/B,+DAA+D;IAC/D,wEAAwE;IACxE,mDAAmD;IACnD,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;IAC/B,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;QAAE,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC;IAErE,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;IACzJ,sBAAsB,CAAC,OAAO,EAAE;QAC9B,iBAAiB,EAAE,GAAG,CAAC,OAAO;QAC9B,KAAK;QACL,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,WAAW,EAAE,WAAW,CAAC,UAAU;QACnC,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY;QAC/C,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS;KAC1C,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,uEAAuE;AAEvE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,MAAsB,EACtB,GAOC;IAED,iEAAiE;IACjE,wEAAwE;IACxE,sDAAsD;IACtD,8DAA8D;IAC9D,kEAAkE;IAClE,iEAAiE;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,kBAAkB;QACrC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,aAAa,CAAC;QACnD,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,aAAa,CAAC,CAAC;IAExD,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,mEAAmE;IACnE,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;IAE9E,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,KAAK;QACL,SAAS;KACV,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,gEAAgE;YAChE,uFAAuF,CACxF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACpD,IAAI,EAAE;YAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,gDAAgD,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,iDAAiD,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAE5E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC;IAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC/C,4DAA4D;IAC5D,yEAAyE;IACzE,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW;QAC9B,CAAC,CAAC,GAAG,oBAAoB,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE;QACnD,CAAC,CAAC,oBAAoB,CAAC;IAEzB,0EAA0E;IAC1E,4EAA4E;IAC5E,sEAAsE;IACtE,6EAA6E;IAC7E,wEAAwE;IACxE,+EAA+E;IAC/E,IAAI,oBAAoB,GAAa,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChG,IAAI,MAAM,EAAE,CAAC;YACX,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,oBAAoB,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,0DAA0D,GAAG,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,kEAAkE;IAClE,6EAA6E;IAC7E,4EAA4E;IAC5E,mDAAmD;IACnD,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAC5F,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACvD,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAE5B,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC;QAC3B,OAAO,EAAE,WAAW;QACpB,WAAW,EAAE,iBAAiB,CAAC,QAAQ,CAAC;QACxC,KAAK;QACL,aAAa,EAAE,MAAM;KACtB,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACvC,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,mEAAmE;IACnE,oCAAoC;IACpC,MAAM,UAAU,GAA2B;QACzC,uEAAuE;QACvE,uEAAuE;QACvE,uDAAuD;QACvD,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,eAAe,EAAE,iBAAiB;QAClC,gBAAgB,EAAE,0CAA0C;QAC5D,kBAAkB,EAAE,iBAAiB;QACrC,mBAAmB,EAAE,0CAA0C;QAC/D,gBAAgB,EAAE,GAAG;QACrB,gBAAgB,EAAE,gBAAgB;QAClC,kBAAkB,EAAE,GAAG;KACxB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE;YAC7C,KAAK;YACL,QAAQ;YACR,OAAO;YACP,UAAU;YACV,QAAQ;YACR,SAAS,EAAE,oBAAoB;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI;YACpC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACf,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO;gBAClC,IAAI,MAA+B,CAAC;gBACpC,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;gBACvD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,MAAyC,CAAC,CAAC;gBACrD,aAAa,CAAC,MAAM,EAAE;oBACpB,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,cAAc,KAAK,IAAI;oBACpD,OAAO,EAAE,OAAO;oBAChB,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY;oBAC5C,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS;oBACtC,KAAK;iBACN,CAAC,CAAC;gBACH,IAAI,CAAC,iBAAiB,IAAI,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;oBACxG,iBAAiB,GAAG,IAAI,CAAC;oBACzB,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5M,sBAAsB,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;QAClI,MAAM,UAAU,GAAG,QAAQ,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,MAAM,IAAI;aAC7B,oBAAoB,CACnB,WAAW,CAAC,eAAe,EAAE,UAAU,CAAC,EACxC,UAAU,EACV,GAAG,CACJ;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrB,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,CAAC;YACR,KAAK,EAAE,GAAG;YACV,UAAU;YACV,SAAS,EAAE,aAAa,IAAI,SAAS;YACrC,UAAU,EAAE,eAAe;SAC5B,CAAC;IACJ,CAAC;IACD,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC/B,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;IACpB,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;IAC/J,sBAAsB,CAAC,OAAO,EAAE;QAC9B,iBAAiB,EAAE,QAAQ;QAC3B,KAAK;QACL,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,WAAW,EAAE,WAAW,CAAC,UAAU;QACnC,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY;QAC/C,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS;KAC1C,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,uEAAuE;AACvE,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,yEAAyE;AACzE,yEAAyE;AACzE,4EAA4E;AAE5E,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAc,EACd,MAAsB,EACtB,GAOC;IAED,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,8DAA8D;YAC9D,sEAAsE;YACtE,oDAAoD,CACrD,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,2EAA2E;IAC3E,uEAAuE;IACvE,0EAA0E;IAC1E,8EAA8E;IAC9E,0EAA0E;IAC1E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1G,MAAM,UAAU,GAAG,MAAM,CAAC,kBAAkB;QAC1C,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,cAAc,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;IAElD,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,kDAAkD;IAClD,MAAM,OAAO,GAAG,iBAAiB,CAAC;QAChC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAErC,4EAA4E;IAC5E,sEAAsE;IACtE,sBAAsB;IACtB,IAAI,GAAG,CAAC,WAAW;QAAE,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACpD,IAAI,EAAE;YAAE,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,8CAA8C,GAAG,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,gDAAgD,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAE3E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC;IAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW;QAC9B,CAAC,CAAC,GAAG,kBAAkB,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE;QACjD,CAAC,CAAC,kBAAkB,CAAC;IAEvB,4EAA4E;IAC5E,8EAA8E;IAC9E,mEAAmE;IACnE,IAAI,gBAAgB,GAAa,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3F,IAAI,MAAM,EAAE,CAAC;YACX,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,kBAAkB,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,wDAAwD,GAAG,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAClF,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACvD,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAE5B,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC;QAC3B,OAAO,EAAE,WAAW;QACpB,WAAW,EAAE,iBAAiB,CAAC,QAAQ,CAAC;QACxC,KAAK;QACL,aAAa,EAAE,MAAM;KACtB,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACvC,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,4EAA4E;IAC5E,mEAAmE;IACnE,0EAA0E;IAC1E,MAAM,UAAU,GAA2B;QACzC,eAAe,EAAE,iBAAiB;QAClC,gBAAgB,EAAE,0CAA0C;QAC5D,kBAAkB,EAAE,iBAAiB;QACrC,mBAAmB,EAAE,0CAA0C;QAC/D,gBAAgB,EAAE,GAAG;QACrB,gBAAgB,EAAE,gBAAgB;QAClC,kBAAkB,EAAE,GAAG;KACxB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE;YACzC,KAAK;YACL,QAAQ;YACR,OAAO;YACP,UAAU;YACV,QAAQ;YACR,SAAS,EAAE,gBAAgB;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI;YACpC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACf,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO;gBAClC,IAAI,MAA+B,CAAC;gBACpC,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;gBACvD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,MAAyC,CAAC,CAAC;gBACrD,aAAa,CAAC,MAAM,EAAE;oBACpB,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,cAAc,KAAK,IAAI;oBACpD,OAAO,EAAE,OAAO;oBAChB,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY;oBAC5C,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS;oBACtC,KAAK;iBACN,CAAC,CAAC;gBACH,IAAI,CAAC,iBAAiB,IAAI,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;oBACxG,iBAAiB,GAAG,IAAI,CAAC;oBACzB,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1M,sBAAsB,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;QAChI,MAAM,UAAU,GAAG,QAAQ,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,MAAM,IAAI;aAC7B,oBAAoB,CAAC,WAAW,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC;aAC/E,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrB,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,CAAC;YACR,KAAK,EAAE,GAAG;YACV,UAAU;YACV,SAAS,EAAE,aAAa,IAAI,SAAS;YACrC,UAAU,EAAE,eAAe;SAC5B,CAAC;IACJ,CAAC;IACD,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC/B,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;IAC/J,sBAAsB,CAAC,OAAO,EAAE;QAC9B,iBAAiB,EAAE,MAAM;QACzB,KAAK;QACL,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,WAAW,EAAE,WAAW,CAAC,UAAU;QACnC,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY;QAC/C,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS;KAC1C,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;AACrB,CAAC"}