looply-cli 0.0.0-stage → 0.2.0

package/dist/tool-bridge.js

@@ -0,0 +1,329 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOOL_POLICIES = void 0;
+exports.toolWorkerRoot = toolWorkerRoot;
+exports.ensureToolWorker = ensureToolWorker;
+exports.makeToolBridge = makeToolBridge;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const exec_domains_1 = require("./exec-domains");
+const shared_grants_1 = require("./shared-grants");
+const toolchain_mirror_1 = require("./toolchain-mirror");
+const tool_protocol_1 = require("./tool-protocol");
+const untrusted_exec_1 = require("./untrusted-exec");
+const tool_call_record_1 = require("./tool-call-record");
+const core_1 = require("@looply/core");
+/**
+ * THE TRUSTED HALF, WHICH DELIBERATELY DOES NO FILE WORK.
+ *
+ * This is the load-bearing decision of the whole decomposition. The obvious
+ * implementation of a tool bridge is:
+ *
+ *   request arrives -> validate the path -> fs.readFile(project + path)
+ *
+ * and that would put every model-supplied string one validator bug away from
+ * the daemon's own authority. So this never touches a project file. It checks
+ * the SHAPE of a request, refuses what is obviously not a request at all, and
+ * hands the rest to a worker running inside the container.
+ *
+ * The path checking here is a courtesy, not a boundary: it turns nonsense into
+ * a clean structured refusal instead of a container denial that reads like a
+ * crash. If it were wrong tomorrow, the worker still resolves the physical path
+ * and the container still refuses what it was never granted.
+ *
+ * WHAT THE MODEL CANNOT CHOOSE. The worker executable, the project root, the
+ * container profile, the grants and the network policy all come from the run
+ * context. Nothing in a tool request reaches any of them.
+ */
+/**
+ * The compiled worker, whether this file is running compiled or from source.
+ *
+ * In production both sit in `dist` together. Under the test runner this module
+ * is loaded from `src`, where there is no compiled worker — and the worker MUST
+ * be the compiled one either way, because that is the file the container runs.
+ * Falling back to the sibling `dist` keeps the tests exercising production's
+ * artefact rather than a second copy that could drift from it.
+ */
+function workerSourcePath() {
+    const beside = (0, node_path_1.join)(__dirname, 'tool-worker.js');
+    if ((0, node_fs_1.existsSync)(beside))
+        return beside;
+    return (0, node_path_1.join)(__dirname, '..', 'dist', 'tool-worker.js');
+}
+/** The worker script, somewhere the container can read and cannot write. */
+function toolWorkerRoot(deps = {}) {
+    return deps.workerRoot ?? (0, node_path_1.join)((0, node_os_1.tmpdir)(), 'looply-toolworker');
+}
+/**
+ * Put the worker where a contained process can read it.
+ *
+ * READ ONLY, and keyed by content. The worker is the one thing in this design
+ * that runs with the container's grants, so a directory the container could
+ * write would be a directory it could replace the worker in — which is the same
+ * as having no worker policy at all.
+ */
+function ensureToolWorker(deps = {}) {
+    const src = deps.workerSource ?? workerSourcePath();
+    if (!(0, node_fs_1.existsSync)(src))
+        return { ok: false, because: `no tool worker at ${src}` };
+    let digest;
+    try {
+        digest = (0, node_crypto_1.createHash)('sha256').update((0, node_fs_1.readFileSync)(src)).digest('hex').slice(0, 16);
+    }
+    catch (e) {
+        return { ok: false, because: `the tool worker could not be read (${e.message})` };
+    }
+    const dir = (0, node_path_1.join)(toolWorkerRoot(deps), digest);
+    const dest = (0, node_path_1.join)(dir, 'tool-worker.js');
+    try {
+        (0, node_fs_1.mkdirSync)(dir, { recursive: true });
+        // Copied every time rather than trusted once: the copy is cheap and the
+        // alternative is believing whatever is already sitting there.
+        (0, node_fs_1.copyFileSync)(src, dest);
+    }
+    catch (e) {
+        return { ok: false, because: `the tool worker could not be placed (${e.message})` };
+    }
+    return { ok: true, path: dest };
+}
+function refuse(tool, code, because) {
+    return { ok: false, tool, because, code };
+}
+/**
+ * Shape checking only. Anything that depends on what is actually on disk —
+ * whether a file exists, whether it is text, where a junction leads — is the
+ * worker's business, because the worker is the one inside the boundary.
+ */
+function shapeTrouble(req) {
+    switch (req.tool) {
+        case 'read':
+            return (0, tool_protocol_1.pathTrouble)(req.path);
+        case 'edit': {
+            const p = (0, tool_protocol_1.pathTrouble)(req.path);
+            if (p !== null)
+                return p;
+            if (typeof req.oldText !== 'string' || req.oldText.length === 0)
+                return 'oldText is required';
+            if (typeof req.newText !== 'string')
+                return 'newText is required';
+            if (req.expected !== undefined && (!Number.isInteger(req.expected) || req.expected < 1)) {
+                return 'expected must be a positive whole number';
+            }
+            return null;
+        }
+        case 'write': {
+            const p = (0, tool_protocol_1.pathTrouble)(req.path);
+            if (p !== null)
+                return p;
+            if (typeof req.contents !== 'string')
+                return 'contents are required';
+            if (req.intent !== 'create' && req.intent !== 'overwrite') {
+                return 'intent must be create or overwrite';
+            }
+            if (Buffer.byteLength(req.contents, 'utf8') > tool_protocol_1.LIMITS.writeBytes)
+                return 'that is too large to write';
+            return null;
+        }
+        case 'glob':
+            if (typeof req.pattern !== 'string' || req.pattern.length === 0)
+                return 'a pattern is required';
+            return req.under === undefined ? null : (0, tool_protocol_1.pathTrouble)(req.under);
+        case 'grep':
+            if (typeof req.pattern !== 'string' || req.pattern.length === 0)
+                return 'a pattern is required';
+            if (req.under !== undefined) {
+                const u = (0, tool_protocol_1.pathTrouble)(req.under);
+                if (u !== null)
+                    return u;
+            }
+            return null;
+        default:
+            return 'no such tool';
+    }
+}
+/**
+ * A bridge for one project and one role.
+ *
+ * The budget is per bridge, which is per provider invocation. It exists because
+ * the model may call tools as many times as it likes inside one session and
+ * nobody is watching the loop. It is NOT the Goal or autonomy budget — those
+ * count provider invocations and belong to Phase 6, which this must not touch.
+ */
+function makeToolBridge(projectDir, policy, deps = {}) {
+    const backend = deps.backend ?? new untrusted_exec_1.AppContainerBackend();
+    const ensureToolchain = deps.toolchain ?? (() => (0, toolchain_mirror_1.ensureToolchainMirror)());
+    const timeoutMs = deps.timeoutMs ?? 60_000;
+    const now = deps.now ?? Date.now;
+    const recorder = deps.record ?? tool_call_record_1.NO_RECORD;
+    let calls = 0;
+    let bytesRead = 0;
+    let bytesWritten = 0;
+    /**
+     * Serve one request. Every return below is a response the model will see, and
+     * `call` writes every one of them down — including the refusals that never
+     * reach the worker, which are a large share of what a model ends up quoting.
+     */
+    const serve = async (raw) => {
+        if (raw === null || typeof raw !== 'object') {
+            return refuse('unknown', 'bad_request', 'a tool request is required');
+        }
+        const req = raw;
+        const name = req.tool;
+        // THE ALLOWLIST IS THE ROLE'S, NOT THE MODEL'S. A scanner that asks to
+        // write is refused here, before anything is launched.
+        if (!policy.tools.includes(name)) {
+            return refuse('unknown', 'bad_request', `the ${policy.role} may not call ${String(name)}`);
+        }
+        if (calls >= tool_protocol_1.INVOCATION_BUDGET.calls) {
+            return refuse(name, 'budget_exhausted', 'this invocation has made too many tool calls');
+        }
+        if (bytesRead >= tool_protocol_1.INVOCATION_BUDGET.bytesRead) {
+            return refuse(name, 'budget_exhausted', 'this invocation has read too much');
+        }
+        if (bytesWritten >= tool_protocol_1.INVOCATION_BUDGET.bytesWritten) {
+            return refuse(name, 'budget_exhausted', 'this invocation has written too much');
+        }
+        const bad = shapeTrouble(req);
+        if (bad !== null)
+            return refuse(name, 'bad_request', bad);
+        const tools = ensureToolchain();
+        if (!tools.ok)
+            return refuse(name, 'worker_failed', `no contained toolchain — ${tools.because}`);
+        const worker = ensureToolWorker(deps);
+        if (!worker.ok)
+            return refuse(name, 'worker_failed', worker.because);
+        calls += 1;
+        /*
+         * BOTH SHARED PATHS GO THROUGH THE LOCK, not through the per-launch grant
+         * list. The toolchain mirror and the tool-worker directory are shared by
+         * every workspace on the machine, and granting them per launch is what left
+         * 262 and 509 permanent container ACEs on them. Read and execute only, so
+         * the thing running inside the boundary cannot rewrite the thing that will
+         * run inside it next time.
+         */
+        const shared = await (0, shared_grants_1.ensureSharedAccess)(backend instanceof untrusted_exec_1.AppContainerBackend ? backend : null, (0, untrusted_exec_1.containerName)('agent', projectDir), (0, exec_domains_1.sharedGrantPaths)(tools.path, [(0, node_path_1.join)(worker.path, '..')]), deps.sharedGrants ?? {});
+        if (!shared.ok)
+            return refuse(name, 'worker_failed', `shared grant failed — ${shared.because}`);
+        const grants = [...(0, exec_domains_1.untrustedGrants)('agent', projectDir)];
+        const out = await backend.run({
+            kind: 'agent',
+            projectKey: projectDir,
+            executable: (0, node_path_1.join)(tools.path, 'node.exe'),
+            argv: [worker.path, projectDir],
+            cwd: projectDir,
+            // The GATE environment, not the provider's: this process runs project
+            // files' neighbourhood and needs no provider credential of any kind.
+            env: (0, exec_domains_1.buildUntrustedGateEnv)(projectDir, tools.path),
+            grants,
+            protect: (0, exec_domains_1.protectedPaths)(projectDir),
+            // NO NETWORK. The transport reaches the model; the thing that touches
+            // files has no reason to reach anything, and this is stronger than the
+            // contained-provider design it replaces.
+            network: 'none',
+            stdin: JSON.stringify(req),
+            timeoutMs,
+        });
+        if (!out.ok) {
+            return refuse(name, 'worker_failed', `untrusted execution was unavailable (${out.reason})`);
+        }
+        if (out.timedOut)
+            return refuse(name, 'worker_failed', 'the tool worker did not finish in time');
+        let parsed;
+        try {
+            parsed = JSON.parse(out.stdout.trim());
+        }
+        catch {
+            return refuse(name, 'worker_failed', 'the tool worker did not answer');
+        }
+        if (parsed.ok) {
+            if (name === 'write' || name === 'edit')
+                bytesWritten += parsed.bytes ?? 0;
+            else
+                bytesRead += parsed.bytes ?? Buffer.byteLength(parsed.text, 'utf8');
+        }
+        return parsed;
+    };
+    /**
+     * The model's request in, the model's answer out, and one line written down
+     * about what happened in between.
+     *
+     * The clock is read around `serve` rather than inside it so a refusal that
+     * never launched anything is timed the same way a container run is — "it came
+     * back in 2 ms" is itself an answer to "what did the bridge do with this".
+     */
+    const call = async (raw) => {
+        const started = now();
+        const res = await serve(raw);
+        // A record is not worth a tool call: the recorder swallows its own
+        // failures, and this never stands between an answer and the model.
+        recorder.record(raw, res, Math.max(0, now() - started));
+        return res;
+    };
+    const proposeAction = (type, payload, note) => {
+        const ctx = deps.actionContext;
+        if (ctx === undefined) {
+            return {
+                ok: false,
+                code: 'no_context',
+                because: 'this run cannot request consequential actions',
+            };
+        }
+        // The context is passed SEPARATELY from the payload on purpose: there is no
+        // arrangement of model input that can reach it.
+        const built = (0, core_1.buildActionRequest)(type, payload, ctx, note);
+        return built.ok
+            ? { ok: true, request: built.request }
+            : { ok: false, code: built.code, because: built.because };
+    };
+    return { call, proposeAction, spent: () => ({ calls, bytesRead, bytesWritten }) };
+}
+/**
+ * What each role may call.
+ *
+ * LEAST PRIVILEGE BY ROLE, derived from what each one actually does rather than
+ * granted by habit. The implementer changes code, so it edits and writes. The
+ * verifier and the scanner form a judgement about code that already exists;
+ * neither has ever needed to change it, and giving them write access would be
+ * handing out authority nothing asked for.
+ *
+ * Nobody gets a shell. There is no tool here that runs anything at all —
+ * project code is executed in exactly one place, the gate, under Looply's own
+ * orchestration and never at the model's request.
+ */
+exports.TOOL_POLICIES = {
+    implementer: { role: 'implementer', tools: ['read', 'glob', 'grep', 'edit', 'write'] },
+    verifier: { role: 'verifier', tools: ['read', 'glob', 'grep'] },
+    scanner: { role: 'scanner', tools: ['read', 'glob', 'grep'] },
+    /**
+     * THE BRAIN. READ, GLOB, GREP — AND NOTHING THAT CHANGES ANYTHING.
+     *
+     * 🔴 IT PROPOSES; IT NEVER ACTS. A brain that could `edit` would be a second
+     * implementer with none of the first one's gate, and a brain that could
+     * `write` would be able to manufacture the very evidence its proposals are
+     * checked against. The narrowest role in the table is the one belonging to
+     * the only component that reasons.
+     *
+     * ⚠️ ENFORCED TWICE, LIKE THE OTHER THREE — once where the policy is applied
+     * and once at the bridge — because a single check is a single line to delete.
+     */
+    brain: { role: 'brain', tools: ['read', 'glob', 'grep'] },
+    /**
+     * THE PROVER. READ, GLOB, GREP — THE SECOND KEY GRADES THE TREE; IT NEVER TOUCHES IT.
+     *
+     * 🔴 IT WAS LENT THE IMPLEMENTER'S TRANSPORT. `run-cmd.ts` handed `runProver`
+     * the same invoke as the round, so the prover ran with `edit` and `write` —
+     * while its own prompt told it "read-only access … you must not modify
+     * anything". The prompt asked; nothing enforced. MEASURED, LIVE, 2026-09-24
+     * (LIVE-1 run 2): the prover's bridge was launched as role `implementer` with
+     * `mcp__looply__edit,mcp__looply__write` allowed, between a GREEN gate and
+     * the commit — the one window in a round where a write is kept without being
+     * gated — and its spend was booked as the implementer's.
+     *
+     * ⚠️ ENFORCED TWICE, LIKE THE OTHERS: the allowlist on the provider's
+     * command line, and the bridge, which refuses a tool the role does not hold.
+     */
+    prover: { role: 'prover', tools: ['read', 'glob', 'grep'] },
+};
+//# sourceMappingURL=tool-bridge.js.map

package/dist/tool-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-bridge.js","sourceRoot":"","sources":["../src/tool-bridge.ts"],"names":[],"mappings":";;;AA2EA,wCAEC;AAUD,4CAoBC;AAsID,wCA8IC;AA/XD,6CAAyC;AACzC,qCAA4E;AAC5E,qCAAiC;AACjC,yCAAiC;AACjC,iDAMwB;AACxB,mDAA2F;AAC3F,yDAAiF;AACjF,mDAQyB;AACzB,qDAK0B;AAC1B,yDAAsE;AACtE,uCAKsB;AAEtB;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;;;;;;;;GAQG;AACH,SAAS,gBAAgB;IACvB,MAAM,MAAM,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACjD,IAAI,IAAA,oBAAU,EAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,OAAO,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;AACzD,CAAC;AAED,4EAA4E;AAC5E,SAAgB,cAAc,CAAC,OAAuB,EAAE;IACtD,OAAO,IAAI,CAAC,UAAU,IAAI,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,mBAAmB,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,gBAAgB,CAAC,OAAuB,EAAE;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,IAAI,gBAAgB,EAAE,CAAC;IACpD,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,GAAG,EAAE,EAAE,CAAC;IAChF,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAA,sBAAY,EAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,sCAAuC,CAAW,CAAC,OAAO,GAAG,EAAE,CAAC;IAC/F,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,IAAA,mBAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,wEAAwE;QACxE,8DAA8D;QAC9D,IAAA,sBAAY,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,wCAAyC,CAAW,CAAC,OAAO,GAAG,EAAE,CAAC;IACjG,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC;AA8ED,SAAS,MAAM,CAAC,IAA0B,EAAE,IAAmB,EAAE,OAAe;IAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAkB,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,GAAgB;IACpC,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,IAAA,2BAAW,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,CAAC,GAAG,IAAA,2BAAW,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,CAAC,CAAC;YACzB,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,qBAAqB,CAAC;YAC9F,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;gBAAE,OAAO,qBAAqB,CAAC;YAClE,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;gBACxF,OAAO,0CAA0C,CAAC;YACpD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,CAAC,GAAG,IAAA,2BAAW,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,CAAC,CAAC;YACzB,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,uBAAuB,CAAC;YACrE,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAC1D,OAAO,oCAAoC,CAAC;YAC9C,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,sBAAM,CAAC,UAAU;gBAAE,OAAO,4BAA4B,CAAC;YACrG,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,MAAM;YACT,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,uBAAuB,CAAC;YAChG,OAAO,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,2BAAW,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjE,KAAK,MAAM;YACT,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,uBAAuB,CAAC;YAChG,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,IAAA,2BAAW,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACjC,IAAI,CAAC,KAAK,IAAI;oBAAE,OAAO,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,IAAI,CAAC;QACd;YACE,OAAO,cAAc,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,cAAc,CAC5B,UAAkB,EAClB,MAAkB,EAClB,OAAuB,EAAE;IAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,oCAAmB,EAAE,CAAC;IAC1D,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,GAAoB,EAAE,CAAC,IAAA,wCAAqB,GAAE,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,IAAI,4BAAS,CAAC;IAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB;;;;OAIG;IACH,MAAM,KAAK,GAAG,KAAK,EAAE,GAAY,EAAyB,EAAE;QAC1D,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,SAAS,EAAE,aAAa,EAAE,4BAA4B,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,GAAG,GAAG,GAAkB,CAAC;QAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QAEtB,uEAAuE;QACvE,sDAAsD;QACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,MAAM,CAAC,IAAI,iBAAiB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;QAED,IAAI,KAAK,IAAI,iCAAiB,CAAC,KAAK,EAAE,CAAC;YACrC,OAAO,MAAM,CAAC,IAAI,EAAE,kBAAkB,EAAE,8CAA8C,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,SAAS,IAAI,iCAAiB,CAAC,SAAS,EAAE,CAAC;YAC7C,OAAO,MAAM,CAAC,IAAI,EAAE,kBAAkB,EAAE,mCAAmC,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,YAAY,IAAI,iCAAiB,CAAC,YAAY,EAAE,CAAC;YACnD,OAAO,MAAM,CAAC,IAAI,EAAE,kBAAkB,EAAE,sCAAsC,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;QAE1D,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,4BAA4B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjG,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAErE,KAAK,IAAI,CAAC,CAAC;QAEX;;;;;;;WAOG;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,kCAAkB,EACrC,OAAO,YAAY,oCAAmB,CAAC,CAAC,CAAE,OAAgC,CAAC,CAAC,CAAC,IAAI,EACjF,IAAA,8BAAa,EAAC,OAAO,EAAE,UAAU,CAAC,EAClC,IAAA,+BAAgB,EAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAA,gBAAI,EAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EACvD,IAAI,CAAC,YAAY,IAAI,EAAE,CACxB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,yBAAyB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAEhG,MAAM,MAAM,GAAc,CAAC,GAAG,IAAA,8BAAe,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;QAEpE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5B,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,UAAU;YACtB,UAAU,EAAE,IAAA,gBAAI,EAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC;YACxC,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC;YAC/B,GAAG,EAAE,UAAU;YACf,sEAAsE;YACtE,qEAAqE;YACrE,GAAG,EAAE,IAAA,oCAAqB,EAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC;YAClD,MAAM;YACN,OAAO,EAAE,IAAA,6BAAc,EAAC,UAAU,CAAC;YACnC,sEAAsE;YACtE,uEAAuE;YACvE,yCAAyC;YACzC,OAAO,EAAE,MAAM;YACf,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;YAC1B,SAAS;SACV,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,wCAAwC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,wCAAwC,CAAC,CAAC;QAEjG,IAAI,MAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAiB,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,gCAAgC,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM;gBAAE,YAAY,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;;gBACtE,SAAS,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF;;;;;;;OAOG;IACH,MAAM,IAAI,GAAG,KAAK,EAAE,GAAY,EAAyB,EAAE;QACzD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,mEAAmE;QACnE,mEAAmE;QACnE,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;QACxD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,CAAC,IAAa,EAAE,OAAgB,EAAE,IAAa,EAAiB,EAAE;QACtF,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC;QAC/B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,+CAA+C;aACzD,CAAC;QACJ,CAAC;QACD,4EAA4E;QAC5E,gDAAgD;QAChD,MAAM,KAAK,GAAG,IAAA,yBAAkB,EAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC,EAAE;YACb,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;YACtC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC9D,CAAC,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;AACpF,CAAC;AAED;;;;;;;;;;;;GAYG;AACU,QAAA,aAAa,GAAG;IAC3B,WAAW,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;IACtF,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE;IAC/D,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE;IAC7D;;;;;;;;;;;OAWG;IACH,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE;IACzD;;;;;;;;;;;;;;OAcG;IACH,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE;CACd,CAAC"}

package/dist/tool-call-record.d.ts

@@ -0,0 +1,197 @@
+import { type ToolErrorCode, type ToolName, type ToolResponse } from './tool-protocol';
+/**
+ * WHAT THE BRIDGE ACTUALLY SERVED.
+ *
+ * 🔴 A MODEL-QUOTED TOOL ERROR COULD NOT BE MATCHED TO ANYTHING. The round's
+ * note carries the model's sentence about a tool that failed, and nothing
+ * carried the other half — so the one question worth asking, *did the bridge
+ * serve what the model says it served*, could not be answered at all, and any
+ * argument about it was two people reading the same quote. The capability
+ * audit's G-05.
+ *
+ * ⚠️ THE BRIDGE KEEPS THIS, NOT THE WORKER, and that is the load-bearing
+ * choice. `makeToolBridge.call()` is the single funnel: every request arrives
+ * there and every response leaves there, INCLUDING every refusal — a role that
+ * may not call the tool, an exhausted invocation budget, a request whose shape
+ * is wrong, a toolchain that is not there, a worker that did not answer. None
+ * of those ever reaches the worker. They are also a large share of what a model
+ * quotes, so a record kept on the far side would be missing the cases it exists
+ * for.
+ *
+ * ⚠️ WHAT THE MODEL ASKED FOR IS KEPT; WHAT IT WAS GIVEN, OR ASKED TO WRITE, IS
+ * COUNTED AND NEVER COPIED. No `contents`, no `oldText`/`newText`, and none of
+ * the response text. Their sizes are already computed for the invocation budget
+ * and those numbers go in instead. A project-relative path and a search pattern
+ * are what the model chose rather than what the project holds — and this file
+ * sits inside the very checkout whose files it would otherwise be copying, so
+ * they add nothing a reader of that directory does not already have.
+ *
+ * ⚠️ THE RUN ID IS THE SWITCH. A record of what a run was served belongs to a
+ * run; `scan` and `verify` carry no run id and write nothing, byte for byte as
+ * before this existed. It is not a config setting because it could not be one:
+ * `LOOPLY_`-prefixed variables are stripped from the provider's environment and
+ * this process is spawned BY the provider, which is why the daemon's home is
+ * told on argv rather than inherited. And a record that answers a question
+ * raised after the fact is worth nothing if it was switched off when the
+ * surprise happened, which is G-05 restated.
+ */
+/** Beside `events.jsonl` and `run-starts.jsonl`, in the run's own state directory. */
+export declare const TOOL_CALL_FILE = "tool-calls.jsonl";
+/**
+ * How large the record may grow in one checkout.
+ *
+ * A cap rather than a rotation: rewriting an append-only log is how a
+ * neighbour's record gets lost, and this file's whole value is that what it
+ * says happened, happened. Two megabytes is thousands of calls — far more than
+ * the 300 one invocation may make — and it is the file, not the night, that is
+ * bounded.
+ */
+export declare const TOOL_CALL_CAP_BYTES: number;
+/** Longest model-chosen string kept on an entry. A pattern is identity, not content. */
+export declare const MAX_FIELD_CHARS = 512;
+export interface ToolCallEntry {
+    readonly at: string;
+    readonly runId: string;
+    readonly role: string;
+    readonly tool: ToolName | 'unknown';
+    readonly ok: boolean;
+    readonly ms: number;
+    readonly path?: string;
+    readonly pattern?: string;
+    readonly under?: string;
+    readonly bytes?: number;
+    readonly truncated?: true;
+    readonly code?: ToolErrorCode;
+    readonly because?: string;
+}
+/**
+ * What one provider invocation served in total, written as it ends.
+ *
+ * `ToolBridge.spent()`'s first reader. Distinguished from an entry by
+ * `invocation: true`, so a summariser can tell a total from a call without
+ * guessing from which fields happen to be present.
+ */
+export interface ToolCallInvocationTotal {
+    readonly at: string;
+    readonly runId: string;
+    readonly role: string;
+    readonly invocation: true;
+    readonly calls: number;
+    readonly bytesRead: number;
+    readonly bytesWritten: number;
+}
+/** The one line that closes a record at its cap. */
+export interface ToolCallCapped {
+    readonly at: string;
+    readonly capped: true;
+    readonly because: string;
+}
+export declare const CAPPED_BECAUSE = "this record reached its cap of 2097152 bytes \u2014 tool calls after this line are not recorded here";
+/**
+ * The request's identity, and nothing it carries.
+ *
+ * Read as `unknown` rather than as a typed request on purpose: this is called
+ * on the refusal paths too, where the request failed its shape check and may be
+ * any shape at all. A record that threw on a malformed request would be missing
+ * exactly the entries a person came looking for.
+ */
+export declare function identityOf(raw: unknown): Pick<ToolCallEntry, 'path' | 'pattern' | 'under'>;
+/** What an answer cost, never what it contained. */
+export declare function answerOf(res: ToolResponse): Pick<ToolCallEntry, 'bytes' | 'truncated' | 'code' | 'because'>;
+export declare function entryFor(raw: unknown, res: ToolResponse, meta: {
+    runId: string;
+    role: string;
+    at: string;
+    ms: number;
+}): ToolCallEntry;
+export interface RecordFs {
+    size(path: string): number | null;
+    append(path: string, line: string): void;
+    mkdir(dir: string): void;
+}
+export declare const nodeRecordFs: RecordFs;
+export interface ToolCallRecorder {
+    /** Never throws and never returns a failure: a record is not worth a tool call. */
+    record(raw: unknown, res: ToolResponse, ms: number): void;
+    /**
+     * What this invocation served in total, written once as it ends.
+     *
+     * `ToolBridge.spent()` had no consumer for most of its life — its own
+     * comment said "for tests and for logging" and nothing logged it, which is
+     * how the capability audit found it (E-05). It is also the closest thing this
+     * system has to E-05's "repeated-context bytes": how much the bridge actually
+     * served one provider invocation. `mcp-main` has the one moment that knows an
+     * invocation is over — the pipe closes and stdin ends — and calls this there.
+     *
+     * ⚠️ THE FIRST LINE OF THIS BLOCK USED TO SAY `spent()` "HAS HAD NO CONSUMER
+     * SINCE IT WAS WRITTEN", three lines above the sentence naming its consumer.
+     * 🔴 It was written by the very commit that ADDED that consumer: the block was
+     * extended to describe the fix and its opening line was left alone, so it was
+     * false from the moment it was typed. Fixed in M9-4.
+     */
+    total(spent: {
+        calls: number;
+        bytesRead: number;
+        bytesWritten: number;
+    }): void;
+}
+/** A recorder that keeps nothing — what a bridge with no run id gets. */
+export declare const NO_RECORD: ToolCallRecorder;
+/**
+ * The recorder for one bridge, which is one provider invocation.
+ *
+ * ⚠️ IT SWALLOWS ITS OWN FAILURES, deliberately and to the end. A full disk, a
+ * read-only checkout or a path that vanished must cost the round nothing: the
+ * tool call has already been served and its answer is already on its way back
+ * to the model. Losing a line of the record is a smaller harm than turning a
+ * working round into a failed one to complain about bookkeeping.
+ */
+export declare function makeToolCallRecorder(stateDir: string, meta: {
+    runId: string;
+    role: string;
+}, deps?: {
+    fs?: RecordFs;
+    now?: () => number;
+}): ToolCallRecorder;
+/**
+ * What a person is told about the record, from the file's own text.
+ *
+ * Parsed the way every other reader here parses a ledger: a damaged line is
+ * dropped and counted rather than thrown over, because a record is read when
+ * something has already gone wrong and refusing to answer then is the worst
+ * possible moment for it.
+ */
+export interface ToolCallSummary {
+    readonly calls: number;
+    readonly refused: number;
+    readonly badLines: number;
+    readonly capped: boolean;
+    /** The most recent refusal, which is usually the one being looked for. */
+    readonly lastRefusal: {
+        tool: string;
+        code: string;
+        because: string;
+    } | null;
+    /**
+     * What the bridge served, summed over the invocations that said.
+     *
+     * Null when no invocation total is in the file — a record written before this
+     * existed, or one whose invocation is still going. Never a zero standing in
+     * for silence, for the reason every other figure here is absent rather than
+     * zero.
+     */
+    readonly served: {
+        invocations: number;
+        calls: number;
+        bytesRead: number;
+        bytesWritten: number;
+    } | null;
+}
+export declare function summariseToolCalls(text: string | null): ToolCallSummary | null;
+/** Kept beside the cap so a reader can see the two numbers agree. */
+export declare const RECORD_LIMITS: {
+    capBytes: number;
+    fieldChars: number;
+    readBytes: number;
+};
+//# sourceMappingURL=tool-call-record.d.ts.map

package/dist/tool-call-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-call-record.d.ts","sourceRoot":"","sources":["../src/tool-call-record.ts"],"names":[],"mappings":"AAEA,OAAO,EAAU,KAAK,aAAa,EAAE,KAAK,QAAQ,EAAoB,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEjH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,sFAAsF;AACtF,eAAO,MAAM,cAAc,qBAAqB,CAAC;AAEjD;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,QAAkB,CAAC;AAEnD,wFAAwF;AACxF,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,oDAAoD;AACpD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,eAAO,MAAM,cAAc,yGACuF,CAAC;AAOnH;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,CAW1F;AAED,oDAAoD;AACpD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,OAAO,GAAG,WAAW,GAAG,MAAM,GAAG,SAAS,CAAC,CAM3G;AAED,wBAAgB,QAAQ,CACtB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC5D,aAAa,CAWf;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAClC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,eAAO,MAAM,YAAY,EAAE,QAc1B,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC/B,mFAAmF;IACnF,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1D;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAChF;AAED,yEAAyE;AACzE,eAAO,MAAM,SAAS,EAAE,gBAAsE,CAAC;AAE/F;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACrC,IAAI,GAAE;IAAE,EAAE,CAAC,EAAE,QAAQ,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAO,GAC/C,gBAAgB,CAkElB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7E;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACzG;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,eAAe,GAAG,IAAI,CAgE9E;AAED,qEAAqE;AACrE,eAAO,MAAM,aAAa;;;;CAA8F,CAAC"}