looply-cli 0.0.0-stage → 0.3.0

package/dist/agent-cmd.js

@@ -0,0 +1,154 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AGENT_SCHEMA_VERSION = void 0;
+exports.suggestion = suggestion;
+exports.buildSnapshot = buildSnapshot;
+exports.renderAgentJson = renderAgentJson;
+exports.renderAgentText = renderAgentText;
+/**
+ * `looply agent` — the machine-readable surface.
+ *
+ * Everything else in this CLI is written for a person: boxes, colour, a next
+ * step spelled out. This one is written for another program, and the two goals
+ * fight each other badly enough that mixing them produces output neither can
+ * use. So the split is explicit.
+ *
+ * Three promises, because a tool that consumes this has no way to ask:
+ *
+ *  1. `schemaVersion` changes when a field's meaning changes. A consumer can
+ *     refuse to guess rather than silently misread.
+ *  2. Every field is either present or explicitly `null`. Nothing is omitted,
+ *     so `undefined` never has to be told apart from "absent because false".
+ *  3. It exits 0 whenever it could answer at all, including "nothing is
+ *     running". A non-zero exit means the question could not be answered —
+ *     never that the answer was boring.
+ */
+exports.AGENT_SCHEMA_VERSION = 1;
+const DEFAULT_STALE_MS = 3 * 60 * 1000;
+const DEFAULT_LIMIT = 50;
+/**
+ * What a caller should probably do next, as a stable token rather than prose.
+ *
+ * Deliberately not a sentence: a program branching on `"scan"` keeps working
+ * when the wording changes, and a program branching on English does not.
+ */
+function suggestion(input) {
+    if (!input.configured)
+        return 'init';
+    if (input.openQuestions > 0)
+        return 'answer-question';
+    if (input.live)
+        return 'wait';
+    if (input.ready === 0 && input.draft === 0)
+        return 'scan';
+    return 'run';
+}
+function buildSnapshot(input) {
+    const status = input.status;
+    const staleAfter = input.staleAfterMs ?? DEFAULT_STALE_MS;
+    const limit = input.limit ?? DEFAULT_LIMIT;
+    const ready = input.items.filter((i) => i.state === 'ready').length;
+    const draft = input.items.filter((i) => i.state === 'draft' || i.state === 'verifying').length;
+    const blocked = input.items.filter((i) => i.state === 'blocked').length;
+    const live = status?.live === true;
+    const lastEventAt = status?.lastEventAt ? Date.parse(status.lastEventAt) : null;
+    return {
+        schemaVersion: exports.AGENT_SCHEMA_VERSION,
+        cliVersion: input.cliVersion,
+        project: {
+            name: input.config?.project.name ?? 'unknown',
+            configured: input.config !== null,
+            id: input.config?.project.id ?? null,
+        },
+        machine: input.machine,
+        run: {
+            live,
+            id: status?.runId ?? null,
+            branch: status?.branch ?? null,
+            startedAt: status?.startedAt ?? null,
+            endedAt: status?.endedAt ?? null,
+            stopReason: status?.stopReason ?? null,
+            // Null rather than false when nothing has ever run: "not stale" and "no
+            // run to be stale" are different answers.
+            stale: status === null ? null : live && lastEventAt !== null ? input.now - lastEventAt > staleAfter : false,
+        },
+        round: status?.round
+            ? {
+                n: status.round.n,
+                itemId: status.round.itemId,
+                title: status.round.title,
+                attempt: status.round.attempt,
+                phase: status.round.state,
+                checks: status.round.steps.map((s) => ({
+                    name: s.step,
+                    ok: s.ok,
+                    skipped: s.skipped === true,
+                    ms: s.ms,
+                })),
+            }
+            : null,
+        totals: status?.totals ?? { rounds: 0, committed: 0, discarded: 0, abandoned: 0 },
+        queue: {
+            ready,
+            draft,
+            blocked,
+            total: input.items.length,
+            items: input.items.slice(0, limit).map(toAgentItem),
+        },
+        questions: (status?.openQuestions ?? []).map((q) => ({
+            id: q.qId,
+            text: q.text,
+            default: q.default,
+            deadline: q.deadline,
+        })),
+        suggests: suggestion({
+            configured: input.config !== null,
+            live,
+            ready,
+            draft,
+            openQuestions: status?.openQuestions.length ?? 0,
+        }),
+    };
+}
+function toAgentItem(item) {
+    return {
+        id: item.id,
+        title: item.title,
+        tag: item.tag,
+        state: item.state,
+        attempts: item.attempts,
+        lastFailure: item.lastFailure ?? null,
+        evidence: item.evidence.map((e) => ({ path: e.path, line: e.line ?? null })),
+    };
+}
+/** Stable two-space JSON — diffable, and readable when a human ends up reading it. */
+function renderAgentJson(snapshot) {
+    return `${JSON.stringify(snapshot, null, 2)}\n`;
+}
+/**
+ * The same snapshot as lines of `key=value`.
+ *
+ * For shell callers, where reaching for `jq` to learn whether a run is going is
+ * more ceremony than the question deserves.
+ */
+function renderAgentText(s) {
+    const lines = [
+        `schema=${s.schemaVersion}`,
+        `project=${s.project.name}`,
+        `configured=${s.project.configured}`,
+        `paired=${s.machine.paired}`,
+        `run.live=${s.run.live}`,
+        `run.stale=${s.run.stale ?? 'null'}`,
+        `round=${s.round?.n ?? 'null'}`,
+        `phase=${s.round?.phase ?? 'null'}`,
+        `queue.ready=${s.queue.ready}`,
+        `queue.draft=${s.queue.draft}`,
+        `queue.blocked=${s.queue.blocked}`,
+        `questions=${s.questions.length}`,
+        `totals.committed=${s.totals.committed}`,
+        `totals.discarded=${s.totals.discarded}`,
+        `suggests=${s.suggests ?? 'null'}`,
+    ];
+    return `${lines.join('\n')}\n`;
+}
+//# sourceMappingURL=agent-cmd.js.map

package/dist/agent-cmd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-cmd.js","sourceRoot":"","sources":["../src/agent-cmd.ts"],"names":[],"mappings":";;;AAsFA,gCAYC;AAED,sCAqEC;AAeD,0CAEC;AAQD,0CAmBC;AAlND;;;;;;;;;;;;;;;;;GAiBG;AAEU,QAAA,oBAAoB,GAAG,CAAC,CAAC;AAuDtC,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACvC,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB;;;;;GAKG;AACH,SAAgB,UAAU,CAAC,KAM1B;IACC,IAAI,CAAC,KAAK,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC;IACrC,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACtD,IAAI,KAAK,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,aAAa,CAAC,KAAiB;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,IAAI,gBAAgB,CAAC;IAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,aAAa,CAAC;IAE3C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACpE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;IAC/F,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAExE,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,KAAK,IAAI,CAAC;IACnC,MAAM,WAAW,GAAG,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEhF,OAAO;QACL,aAAa,EAAE,4BAAoB;QACnC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE;YACP,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,SAAS;YAC7C,UAAU,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI;YACjC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,IAAI;SACrC;QACD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,EAAE;YACH,IAAI;YACJ,EAAE,EAAE,MAAM,EAAE,KAAK,IAAI,IAAI;YACzB,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI;YAC9B,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,IAAI;YACpC,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,IAAI;YAChC,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI;YACtC,wEAAwE;YACxE,0CAA0C;YAC1C,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK;SAC5G;QACD,KAAK,EAAE,MAAM,EAAE,KAAK;YAClB,CAAC,CAAC;gBACE,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACjB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;gBAC3B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;gBACzB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;gBAC7B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;gBACzB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACrC,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,IAAI;oBAC3B,EAAE,EAAE,CAAC,CAAC,EAAE;iBACT,CAAC,CAAC;aACJ;YACH,CAAC,CAAC,IAAI;QACR,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;QACjF,KAAK,EAAE;YACL,KAAK;YACL,KAAK;YACL,OAAO;YACP,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YACzB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;SACpD;QACD,SAAS,EAAE,CAAC,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnD,EAAE,EAAE,CAAC,CAAC,GAAG;YACT,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC,CAAC;QACH,QAAQ,EAAE,UAAU,CAAC;YACnB,UAAU,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI;YACjC,IAAI;YACJ,KAAK;YACL,KAAK;YACL,aAAa,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,IAAI,CAAC;SACjD,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAU;IAC7B,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,SAAgB,eAAe,CAAC,QAAuB;IACrD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,eAAe,CAAC,CAAgB;IAC9C,MAAM,KAAK,GAAG;QACZ,UAAU,CAAC,CAAC,aAAa,EAAE;QAC3B,WAAW,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE;QAC3B,cAAc,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE;QACpC,UAAU,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE;QAC5B,YAAY,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE;QACxB,aAAa,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,MAAM,EAAE;QACpC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,MAAM,EAAE;QAC/B,SAAS,CAAC,CAAC,KAAK,EAAE,KAAK,IAAI,MAAM,EAAE;QACnC,eAAe,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE;QAC9B,eAAe,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE;QAC9B,iBAAiB,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE;QAClC,aAAa,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE;QACjC,oBAAoB,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE;QACxC,oBAAoB,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE;QACxC,YAAY,CAAC,CAAC,QAAQ,IAAI,MAAM,EAAE;KACnC,CAAC;IACF,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC"}

package/dist/agent-contained.d.ts

@@ -0,0 +1,114 @@
+import { type AgentInvoke, type AgentSpec } from './agent-exec';
+import type { ProviderStateDeps } from './provider-state';
+import { type ToolchainResult } from './toolchain-mirror';
+import { type UntrustedExecutionBackend } from './untrusted-exec';
+/**
+ * THE CODING AGENT, INSIDE THE BOUNDARY.
+ *
+ * The gate was contained first because it was easier to reason about. The agent
+ * is the one that matters: it is the process a model drives, and it ran as the
+ * daemon with `--dangerously-skip-permissions`, which is to say with a shell and
+ * the machine's whole environment.
+ *
+ * Two independent changes, and neither is sufficient alone.
+ *
+ * THE CAPABILITY SURFACE. The agent gets an explicit tool allowlist and no
+ * `Bash`. That is not a request — a tool absent from the set is a tool the CLI
+ * does not offer, so there is no shell to reach for. `--strict-mcp-config` with
+ * an empty server set means no MCP server configured anywhere on the machine
+ * becomes a capability by accident.
+ *
+ * THE CONTAINER. Even if the capability surface were wrong tomorrow, the agent
+ * runs in its own AppContainer: no machine token, no broker secret, no daemon
+ * profile, no `.git`, no `.looply/state`, no other project. The two layers are
+ * tested separately on purpose, because each is supposed to hold on its own.
+ *
+ * The agent keeps its OWN provider credential. Using the model is its job;
+ * speaking for the machine is not.
+ */
+/**
+ * What the agent may do, named without reference to any provider.
+ *
+ * The approval work that follows must never branch on a Claude flag, so the
+ * contract is written in terms of what an agent needs rather than how one CLI
+ * spells it.
+ */
+/**
+ * The built-in tools the agent is allowed.
+ *
+ * `Bash` is absent, and that is the whole point: the implementer's job is to
+ * edit files and report, and Looply runs the commands. `Task` is absent because
+ * a sub-agent is another process with its own tool set; `WebFetch` because
+ * fetching is not editing.
+ */
+export declare const AGENT_TOOLS: readonly string[];
+/** An MCP configuration with no servers in it. */
+export declare const EMPTY_MCP = "{\"mcpServers\":{}}";
+export interface ClaudeInvocation {
+    executable: string;
+    argv: readonly string[];
+}
+/**
+ * Where the installed Claude actually lives.
+ *
+ * `claude.cmd` is a shim that runs a native executable inside the npm package,
+ * so the package is what the container needs — and only the package. The
+ * directory the shim sits in also holds `eas` and `heroku` shims on this
+ * machine, and an agent that could resolve those would be an agent that could
+ * deploy.
+ */
+export declare function claudePackageDir(nodeExe?: string): string | null;
+/**
+ * The command line for one agent turn.
+ *
+ * The prompt is NOT here. It goes on stdin, because it is many lines of
+ * instructions and a command line is neither a safe nor a large enough place
+ * for it — the previous implementation already knew that, and this keeps it
+ * true now that a container is involved.
+ */
+export declare function claudeInvocation(packageDir: string, format?: 'text' | 'json'): ClaudeInvocation;
+/**
+ * Names `agent.env` may never forward, whatever a config asks for.
+ *
+ * `agent.env` exists so a provider key reaches the agent without being written
+ * into a file. It is a list of NAMES read from the daemon's own environment,
+ * which means a config that named `LOOPLY_MACHINE_SECRET` would have handed the
+ * agent the machine's identity — the one thing the whole containment arc exists
+ * to withhold. Nothing else in the chain would have objected.
+ *
+ * The reserved family is matched by PREFIX rather than by a list of the four
+ * names that exist today, so a credential added later is covered the day it is
+ * added rather than the day somebody remembers this file.
+ */
+export declare function isReservedEnvName(name: string): boolean;
+/** A name that is not a name. `agent.env` takes variables, not patterns. */
+export declare function isEnvPattern(name: string): boolean;
+export type ForwardResult = {
+    ok: true;
+    env: Record<string, string>;
+} | {
+    ok: false;
+    because: string;
+};
+export interface ContainedAgentDeps {
+    backend?: UntrustedExecutionBackend;
+    toolchain?: () => ToolchainResult;
+    /** Overridable so tests can drive a fake provider through the real route. */
+    packageDir?: string | null;
+    /** `scan` reads a structured envelope; the round reads the transcript. */
+    format?: 'text' | 'json';
+    /** Overridable for tests; production reads the platform's own shell. */
+    shell?: string;
+    /** The daemon home the provider credential is seeded from. Tests override it. */
+    providerHome?: ProviderStateDeps['home'];
+    now?: () => number;
+}
+/**
+ * An {@link AgentInvoke} that runs the agent contained.
+ *
+ * Fails closed in both directions it can: no containment, no run; no provider
+ * runtime, no run. Neither ever falls back to running the agent as the daemon,
+ * which is the outcome this whole arc exists to prevent.
+ */
+export declare function makeContainedAgentRunner(projectDir: string, spec?: AgentSpec, deps?: ContainedAgentDeps): AgentInvoke;
+//# sourceMappingURL=agent-contained.d.ts.map

package/dist/agent-contained.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-contained.d.ts","sourceRoot":"","sources":["../src/agent-contained.ts"],"names":[],"mappings":"AAGA,OAAO,EAAmC,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAGjG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAGL,KAAK,yBAAyB,EAE/B,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;;;;;;GAMG;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,MAAM,EAA8C,CAAC;AAExF,kDAAkD;AAClD,eAAO,MAAM,SAAS,wBAAsB,CAAC;AAE7C,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,MAAyB,GAAG,MAAM,GAAG,IAAI,CASlF;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,MAAM,GAAG,MAAe,GAC/B,gBAAgB,CAgBlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElD;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AA2BnC,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,yBAAyB,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,eAAe,CAAC;IAClC,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,YAAY,CAAC,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,SAAyB,EAC/B,IAAI,GAAE,kBAAuB,GAC5B,WAAW,CAiJb"}

package/dist/agent-contained.js

@@ -0,0 +1,292 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EMPTY_MCP = exports.AGENT_TOOLS = void 0;
+exports.claudePackageDir = claudePackageDir;
+exports.claudeInvocation = claudeInvocation;
+exports.isReservedEnvName = isReservedEnvName;
+exports.isEnvPattern = isEnvPattern;
+exports.makeContainedAgentRunner = makeContainedAgentRunner;
+const agent_runtime_1 = require("./agent-runtime");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const agent_exec_1 = require("./agent-exec");
+const exec_domains_1 = require("./exec-domains");
+const toolchain_mirror_1 = require("./toolchain-mirror");
+const untrusted_exec_1 = require("./untrusted-exec");
+/**
+ * THE CODING AGENT, INSIDE THE BOUNDARY.
+ *
+ * The gate was contained first because it was easier to reason about. The agent
+ * is the one that matters: it is the process a model drives, and it ran as the
+ * daemon with `--dangerously-skip-permissions`, which is to say with a shell and
+ * the machine's whole environment.
+ *
+ * Two independent changes, and neither is sufficient alone.
+ *
+ * THE CAPABILITY SURFACE. The agent gets an explicit tool allowlist and no
+ * `Bash`. That is not a request — a tool absent from the set is a tool the CLI
+ * does not offer, so there is no shell to reach for. `--strict-mcp-config` with
+ * an empty server set means no MCP server configured anywhere on the machine
+ * becomes a capability by accident.
+ *
+ * THE CONTAINER. Even if the capability surface were wrong tomorrow, the agent
+ * runs in its own AppContainer: no machine token, no broker secret, no daemon
+ * profile, no `.git`, no `.looply/state`, no other project. The two layers are
+ * tested separately on purpose, because each is supposed to hold on its own.
+ *
+ * The agent keeps its OWN provider credential. Using the model is its job;
+ * speaking for the machine is not.
+ */
+/**
+ * What the agent may do, named without reference to any provider.
+ *
+ * The approval work that follows must never branch on a Claude flag, so the
+ * contract is written in terms of what an agent needs rather than how one CLI
+ * spells it.
+ */
+/**
+ * The built-in tools the agent is allowed.
+ *
+ * `Bash` is absent, and that is the whole point: the implementer's job is to
+ * edit files and report, and Looply runs the commands. `Task` is absent because
+ * a sub-agent is another process with its own tool set; `WebFetch` because
+ * fetching is not editing.
+ */
+exports.AGENT_TOOLS = ['Read', 'Glob', 'Grep', 'Edit', 'Write'];
+/** An MCP configuration with no servers in it. */
+exports.EMPTY_MCP = '{"mcpServers":{}}';
+/**
+ * Where the installed Claude actually lives.
+ *
+ * `claude.cmd` is a shim that runs a native executable inside the npm package,
+ * so the package is what the container needs — and only the package. The
+ * directory the shim sits in also holds `eas` and `heroku` shims on this
+ * machine, and an agent that could resolve those would be an agent that could
+ * deploy.
+ */
+function claudePackageDir(nodeExe = process.execPath) {
+    let base;
+    try {
+        base = (0, node_path_1.dirname)((0, node_fs_1.realpathSync)(nodeExe));
+    }
+    catch {
+        base = (0, node_path_1.dirname)(nodeExe);
+    }
+    const pkg = (0, node_path_1.join)(base, 'node_modules', '@anthropic-ai', 'claude-code');
+    return (0, node_fs_1.existsSync)((0, node_path_1.join)(pkg, 'bin', 'claude.exe')) ? pkg : null;
+}
+/**
+ * The command line for one agent turn.
+ *
+ * The prompt is NOT here. It goes on stdin, because it is many lines of
+ * instructions and a command line is neither a safe nor a large enough place
+ * for it — the previous implementation already knew that, and this keeps it
+ * true now that a container is involved.
+ */
+function claudeInvocation(packageDir, format = 'text') {
+    return {
+        executable: (0, node_path_1.join)(packageDir, 'bin', 'claude.exe'),
+        argv: [
+            '-p',
+            '--output-format',
+            format,
+            // An allowlist, not a denylist: a tool that is not named is not offered.
+            '--tools',
+            exports.AGENT_TOOLS.join(','),
+            // No MCP server from the user's profile becomes a capability by accident.
+            '--strict-mcp-config',
+            '--mcp-config',
+            exports.EMPTY_MCP,
+        ],
+    };
+}
+/**
+ * Names `agent.env` may never forward, whatever a config asks for.
+ *
+ * `agent.env` exists so a provider key reaches the agent without being written
+ * into a file. It is a list of NAMES read from the daemon's own environment,
+ * which means a config that named `LOOPLY_MACHINE_SECRET` would have handed the
+ * agent the machine's identity — the one thing the whole containment arc exists
+ * to withhold. Nothing else in the chain would have objected.
+ *
+ * The reserved family is matched by PREFIX rather than by a list of the four
+ * names that exist today, so a credential added later is covered the day it is
+ * added rather than the day somebody remembers this file.
+ */
+function isReservedEnvName(name) {
+    return /^LOOPLY_/i.test(name.trim());
+}
+/** A name that is not a name. `agent.env` takes variables, not patterns. */
+function isEnvPattern(name) {
+    return /[*?[\]]/.test(name);
+}
+/**
+ * The named environment variables, with the values the daemon actually holds.
+ *
+ * Absent ones are simply not forwarded: a config that names something unset
+ * should not hand the child an empty string that reads as configured.
+ *
+ * REFUSES rather than filtering silently. A config asking for the machine
+ * credential is a mistake somebody needs to see and fix; quietly dropping it
+ * would leave the agent failing for a reason nothing explains.
+ */
+function forwarded(spec) {
+    const out = {};
+    for (const name of spec.env ?? []) {
+        if (isReservedEnvName(name)) {
+            return { ok: false, because: `agent.env may not forward ${name} — that name is Looply's own` };
+        }
+        if (isEnvPattern(name)) {
+            return { ok: false, because: `agent.env takes variable names, not patterns (${name})` };
+        }
+        const v = process.env[name];
+        if (typeof v === 'string' && v.length > 0)
+            out[name] = v;
+    }
+    return { ok: true, env: out };
+}
+/**
+ * An {@link AgentInvoke} that runs the agent contained.
+ *
+ * Fails closed in both directions it can: no containment, no run; no provider
+ * runtime, no run. Neither ever falls back to running the agent as the daemon,
+ * which is the outcome this whole arc exists to prevent.
+ */
+function makeContainedAgentRunner(projectDir, spec = agent_exec_1.DEFAULT_AGENT, deps = {}) {
+    const backend = deps.backend ?? new untrusted_exec_1.AppContainerBackend();
+    const now = deps.now ?? (() => Date.now());
+    const ensureToolchain = deps.toolchain ?? (() => (0, toolchain_mirror_1.ensureToolchainMirror)());
+    return async (prompt, timeoutMs) => {
+        const started = now();
+        const fail = (why) => ({
+            ok: false,
+            timedOut: false,
+            ms: now() - started,
+            output: why,
+        });
+        const tools = ensureToolchain();
+        if (!tools.ok) {
+            return fail(`the agent did not run: no contained toolchain — ${tools.because}`);
+        }
+        const pass = forwarded(spec);
+        if (!pass.ok)
+            return fail(`the agent did not run: ${pass.because}`);
+        const format = deps.format ?? 'text';
+        /**
+         * ⚠️ NO SHARED-PATH GRANT HERE, AND THE ABSENCE IS DELIBERATE RATHER THAN
+         * AN OVERSIGHT. `makeContainedAgentRunner` has no production caller — that
+         * is pinned by `production-routing.spec.ts` — so wiring it to the
+         * shared-grant lock would add a locked ACL write on a path nothing takes,
+         * and the toolchain grant it used to request is exactly the per-launch
+         * grant the n122 repair removed. If this path is ever revived, it needs
+         * `ensureSharedAccess` before the launch, the way the gate runner and the
+         * tool bridge now do.
+         */
+        const grants = [...(0, exec_domains_1.untrustedGrants)('agent', projectDir)];
+        // WHICH AGENT WAS CONFIGURED.
+        //
+        // `agent.command` is a real seam — it is how another provider is pointed at,
+        // and how the round end-to-end runs with a stub and no model at all. An
+        // adapter that ignored it would silently replace whatever the person chose
+        // with Claude, which is both wrong and the way to break every test that
+        // relies on the seam.
+        let executable;
+        let argv;
+        let rawCommandLine;
+        if (spec.command === agent_exec_1.DEFAULT_AGENT.command) {
+            const pkg = deps.packageDir === undefined ? claudePackageDir() : deps.packageDir;
+            if (pkg === null) {
+                // Distinguished from a containment failure on purpose: a missing
+                // provider runtime is not a sandbox problem, and reporting it as one
+                // sends the next person to the wrong place.
+                return fail('the agent did not run: no provider runtime was found');
+            }
+            // THE CREDENTIAL, AND NOTHING ELSE FROM THE DAEMON'S PROFILE.
+            //
+            /**
+             * 🔴 NO CREDENTIAL SEEDING. It used to copy the operator's credential in
+             * here, and that mechanism is gone everywhere — the provider owns its own
+             * login now, in a persistent profile Looply only names.
+             *
+             * This path is NOT wired to that profile, deliberately.
+             * `makeContainedAgentRunner` has no production caller, pinned by
+             * `production-routing.spec.ts`, and pointing a dead path at the operator's
+             * real provider profile would create a second, untested way to reach it.
+             * If this is ever revived it needs `checkProviderAuth` and
+             * `CLAUDE_CONFIG_DIR`, the way `model-transport` does — and it will fail
+             * closed until then, because a contained profile has no credential and
+             * nothing puts one there any more.
+             */
+            const invocation = claudeInvocation(pkg, format);
+            executable = invocation.executable;
+            argv = invocation.argv;
+            // Read and execute. An agent that could rewrite its own provider runtime
+            // would be an agent choosing what the next turn runs.
+            grants.push({ path: pkg });
+        }
+        else {
+            // A configured command is a shell line, exactly as the gate's steps are,
+            // and it runs the same way: inside the container, where what it says
+            // matters much less than where it can reach.
+            // EXPLICIT, never inferred. A configured provider's runtime lives where
+            // the person said it lives; the command line is not consulted for it.
+            const declared = (0, agent_runtime_1.checkRuntimeGrants)(spec.runtime ?? [], undefined, projectDir);
+            if (!declared.ok)
+                return fail(`the agent did not run: ${declared.because}`);
+            for (const p of declared.paths)
+                grants.push({ path: p });
+            // Doubled: `'C:\Windows'` evaluates to `C:Windows`, a RELATIVE path.
+            // See the note in `exec-domains.ts`, where the same literal appeared.
+            const shell = deps.shell ?? (0, node_path_1.join)((0, untrusted_exec_1.systemRoot)(), 'System32', 'cmd.exe');
+            const line = (0, agent_exec_1.agentCommandLine)(spec, format);
+            executable = shell;
+            argv = ['/d', '/s', '/c', line];
+            rawCommandLine = `"${shell}" /d /s /c "${line}"`;
+        }
+        const out = await backend.run({
+            kind: 'agent',
+            projectKey: projectDir,
+            executable,
+            argv,
+            ...(rawCommandLine === undefined ? {} : { rawCommandLine }),
+            cwd: projectDir,
+            env: (0, exec_domains_1.buildAgentEnv)(projectDir, pass.env, tools.path),
+            grants,
+            protect: (0, exec_domains_1.protectedPaths)(projectDir),
+            // The agent has to reach its model. It holds no machine or broker
+            // credential, so what it can reach is not what it could send.
+            network: 'internet-client',
+            stdin: prompt,
+            timeoutMs,
+        });
+        if (!out.ok) {
+            return fail(`the agent did not run: untrusted execution was unavailable (${out.reason} at ${out.stage}) — ${out.because}`);
+        }
+        const said = `${out.stdout}${out.stderr}`;
+        // A CHILD THAT SAID NOTHING AT ALL IS ITS OWN SYMPTOM.
+        //
+        // A timeout with empty output reads exactly like a model call that ran long,
+        // and it is usually not that: it is a provider runtime that never finished
+        // starting. Measured here, the packaged Claude binary answers `--version` in
+        // about a second inside the container and then hangs indefinitely on
+        // anything that loads its bundle — ten minutes, no output, no file written —
+        // while the same binary with the same environment runs in under two seconds
+        // outside it. Reporting a bare timeout would send the next person to raise
+        // the time limit, which is the one thing that cannot help.
+        if (out.timedOut && said.trim().length === 0) {
+            return {
+                ok: false,
+                timedOut: true,
+                ms: now() - started,
+                output: 'the agent produced no output before the timeout — the provider runtime may not start under containment',
+            };
+        }
+        return {
+            ok: out.exitCode === 0 && !out.timedOut,
+            timedOut: out.timedOut,
+            ms: now() - started,
+            output: said,
+        };
+    };
+}
+//# sourceMappingURL=agent-contained.js.map

package/dist/agent-contained.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-contained.js","sourceRoot":"","sources":["../src/agent-contained.ts"],"names":[],"mappings":";;;AA2EA,4CASC;AAUD,4CAmBC;AAeD,8CAEC;AAGD,oCAEC;AAoDD,4DAqJC;AAhVD,mDAAqD;AACrD,qCAAmD;AACnD,yCAA0C;AAC1C,6CAAiG;AAEjG,iDAA+F;AAE/F,yDAAiF;AACjF,qDAK0B;AAE1B;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;;;;;;GAMG;AAEH;;;;;;;GAOG;AACU,QAAA,WAAW,GAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAExF,kDAAkD;AACrC,QAAA,SAAS,GAAG,mBAAmB,CAAC;AAO7C;;;;;;;;GAQG;AACH,SAAgB,gBAAgB,CAAC,UAAkB,OAAO,CAAC,QAAQ;IACjE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,mBAAO,EAAC,IAAA,sBAAY,EAAC,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAA,mBAAO,EAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;IACvE,OAAO,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,gBAAgB,CAC9B,UAAkB,EAClB,SAA0B,MAAM;IAEhC,OAAO;QACL,UAAU,EAAE,IAAA,gBAAI,EAAC,UAAU,EAAE,KAAK,EAAE,YAAY,CAAC;QACjD,IAAI,EAAE;YACJ,IAAI;YACJ,iBAAiB;YACjB,MAAM;YACN,yEAAyE;YACzE,SAAS;YACT,mBAAW,CAAC,IAAI,CAAC,GAAG,CAAC;YACrB,0EAA0E;YAC1E,qBAAqB;YACrB,cAAc;YACd,iBAAS;SACV;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,iBAAiB,CAAC,IAAY;IAC5C,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,4EAA4E;AAC5E,SAAgB,YAAY,CAAC,IAAY;IACvC,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAMD;;;;;;;;;GASG;AACH,SAAS,SAAS,CAAC,IAAe;IAChC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;QAClC,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6BAA6B,IAAI,8BAA8B,EAAE,CAAC;QACjG,CAAC;QACD,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iDAAiD,IAAI,GAAG,EAAE,CAAC;QAC1F,CAAC;QACD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAChC,CAAC;AAgBD;;;;;;GAMG;AACH,SAAgB,wBAAwB,CACtC,UAAkB,EAClB,OAAkB,0BAAa,EAC/B,OAA2B,EAAE;IAE7B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,oCAAmB,EAAE,CAAC;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,IAAA,wCAAqB,GAAE,CAAC,CAAC;IAE1E,OAAO,KAAK,EAAE,MAAc,EAAE,SAAiB,EAA0B,EAAE;QACzE,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAiB,EAAE,CAAC,CAAC;YAC5C,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,KAAK;YACf,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO;YACnB,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,mDAAmD,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,0BAA0B,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAEpE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC;QACrC;;;;;;;;;WASG;QACH,MAAM,MAAM,GAAc,CAAC,GAAG,IAAA,8BAAe,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;QAEpE,8BAA8B;QAC9B,EAAE;QACF,6EAA6E;QAC7E,wEAAwE;QACxE,2EAA2E;QAC3E,wEAAwE;QACxE,sBAAsB;QACtB,IAAI,UAAkB,CAAC;QACvB,IAAI,IAAuB,CAAC;QAC5B,IAAI,cAAkC,CAAC;QAEvC,IAAI,IAAI,CAAC,OAAO,KAAK,0BAAa,CAAC,OAAO,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;YACjF,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,iEAAiE;gBACjE,qEAAqE;gBACrE,4CAA4C;gBAC5C,OAAO,IAAI,CAAC,sDAAsD,CAAC,CAAC;YACtE,CAAC;YACD,8DAA8D;YAC9D,EAAE;YACF;;;;;;;;;;;;;eAaG;YACH,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACjD,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;YACnC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;YACvB,yEAAyE;YACzE,sDAAsD;YACtD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,yEAAyE;YACzE,qEAAqE;YACrE,6CAA6C;YAC7C,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,QAAQ,GAAG,IAAA,kCAAkB,EAAC,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAC/E,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,0BAA0B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5E,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAEzD,qEAAqE;YACrE,sEAAsE;YACtE,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,IAAI,IAAA,gBAAI,EAAC,IAAA,2BAAU,GAAE,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,IAAA,6BAAgB,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,UAAU,GAAG,KAAK,CAAC;YACnB,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAChC,cAAc,GAAG,IAAI,KAAK,eAAe,IAAI,GAAG,CAAC;QACnD,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5B,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,UAAU;YACtB,UAAU;YACV,IAAI;YACJ,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;YAC3D,GAAG,EAAE,UAAU;YACf,GAAG,EAAE,IAAA,4BAAa,EAAC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC;YACpD,MAAM;YACN,OAAO,EAAE,IAAA,6BAAc,EAAC,UAAU,CAAC;YACnC,kEAAkE;YAClE,8DAA8D;YAC9D,OAAO,EAAE,iBAAiB;YAC1B,KAAK,EAAE,MAAM;YACb,SAAS;SACV,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,IAAI,CACT,+DAA+D,GAAG,CAAC,MAAM,OAAO,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,OAAO,EAAE,CAC9G,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1C,uDAAuD;QACvD,EAAE;QACF,6EAA6E;QAC7E,2EAA2E;QAC3E,6EAA6E;QAC7E,qEAAqE;QACrE,6EAA6E;QAC7E,4EAA4E;QAC5E,2EAA2E;QAC3E,2DAA2D;QAC3D,IAAI,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,IAAI;gBACd,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO;gBACnB,MAAM,EACJ,wGAAwG;aAC3G,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ;YACvC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO;YACnB,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}