pilotswarm-sdk 0.5.63 → 0.5.64

package/dist/migrations/feature-flags-0077.d.ts

@@ -0,0 +1,3 @@
+/** Frozen catalog publication. 0076 preserves upstream MoA dashboards. */
+export declare function featureFlagsMigration(schema: string): string;
+//# sourceMappingURL=feature-flags-0077.d.ts.map

package/dist/migrations/feature-flags-0077.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-flags-0077.d.ts","sourceRoot":"","sources":["../../src/migrations/feature-flags-0077.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CA4Q5D"}

package/dist/migrations/feature-flags-0077.js

@@ -0,0 +1,271 @@
+/** Frozen catalog publication. 0076 preserves upstream MoA dashboards. */
+export function featureFlagsMigration(schema) {
+    const s = `"${schema.replace(/"/g, '""')}"`;
+    return `
+CREATE TABLE IF NOT EXISTS ${s}.feature_flags (
+    feature_key TEXT PRIMARY KEY, display_name TEXT NOT NULL, description TEXT NOT NULL,
+    default_enabled BOOLEAN NOT NULL, default_allow_user_override BOOLEAN NOT NULL,
+    required_capability TEXT, revision BIGINT NOT NULL DEFAULT 1 CHECK (revision > 0)
+);
+CREATE TABLE IF NOT EXISTS ${s}.feature_flag_settings (
+    setting_id BIGSERIAL PRIMARY KEY,
+    feature_key TEXT NOT NULL REFERENCES ${s}.feature_flags(feature_key),
+    scope TEXT NOT NULL CHECK (scope IN ('cluster', 'user')),
+    user_id BIGINT REFERENCES ${s}.users(user_id), enabled BOOLEAN NOT NULL,
+    allow_user_override BOOLEAN, revision BIGINT NOT NULL CHECK (revision > 0),
+    updated_by TEXT NOT NULL, updated_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    CHECK ((scope = 'cluster' AND user_id IS NULL AND allow_user_override IS NOT NULL)
+        OR (scope = 'user' AND user_id IS NOT NULL AND allow_user_override IS NULL))
+);
+CREATE UNIQUE INDEX IF NOT EXISTS feature_flag_settings_cluster ON ${s}.feature_flag_settings(feature_key) WHERE scope = 'cluster';
+CREATE UNIQUE INDEX IF NOT EXISTS feature_flag_settings_user ON ${s}.feature_flag_settings(feature_key, user_id) WHERE scope = 'user';
+CREATE INDEX IF NOT EXISTS feature_flag_settings_by_user ON ${s}.feature_flag_settings(user_id) WHERE scope = 'user';
+CREATE UNIQUE INDEX IF NOT EXISTS feature_flag_audit_request ON ${s}.authz_audit
+    ((details->>'actorKey'), (details->>'requestId'))
+    WHERE action IN ('feature_flag.set', 'feature_flag.unset') AND decision = 'allow';
+INSERT INTO ${s}.feature_flags(feature_key, display_name, description, default_enabled, default_allow_user_override, required_capability)
+VALUES ('copilot.native_tasks', 'Native Copilot tasks',
+        'Allow Copilot to delegate local work to native tasks on the same worker.', false, false, 'copilot.native_tasks')
+ON CONFLICT (feature_key) DO NOTHING;
+
+CREATE OR REPLACE FUNCTION ${s}.cms_feature_definition_json(f ${s}.feature_flags) RETURNS JSONB LANGUAGE sql IMMUTABLE AS $$
+    SELECT jsonb_build_object('featureKey', f.feature_key, 'displayName', f.display_name,
+        'description', f.description, 'defaultEnabled', f.default_enabled,
+        'defaultAllowUserOverride', f.default_allow_user_override,
+        'requiredCapability', f.required_capability, 'revision', f.revision::TEXT);
+$$;
+CREATE OR REPLACE FUNCTION ${s}.cms_feature_setting_json(r ${s}.feature_flag_settings) RETURNS JSONB LANGUAGE sql IMMUTABLE AS $$
+    SELECT jsonb_build_object('settingId', r.setting_id::TEXT, 'featureKey', r.feature_key,
+        'scope', r.scope, 'userId', r.user_id, 'enabled', r.enabled, 'allowUserOverride', r.allow_user_override,
+        'revision', r.revision::TEXT, 'updatedBy', r.updated_by, 'updatedAt', r.updated_at);
+$$;
+CREATE OR REPLACE FUNCTION ${s}.cms_feature_revisions() RETURNS TABLE(feature_key TEXT, revision TEXT) LANGUAGE sql STABLE AS $$
+    SELECT f.feature_key, f.revision::TEXT FROM ${s}.feature_flags f ORDER BY f.feature_key;
+$$;
+-- Internal worker read: one statement snapshot, complete settings for each requested key.
+CREATE OR REPLACE FUNCTION ${s}.cms_feature_snapshot(p_keys TEXT[]) RETURNS JSONB LANGUAGE sql STABLE AS $$
+    SELECT jsonb_build_object(
+        'definitions', COALESCE((SELECT jsonb_agg(${s}.cms_feature_definition_json(f) ORDER BY f.feature_key)
+            FROM ${s}.feature_flags f WHERE f.feature_key = ANY(p_keys)), '[]'::JSONB),
+        'settings', COALESCE((SELECT jsonb_agg(${s}.cms_feature_setting_json(r) ||
+            CASE WHEN u.user_id IS NOT NULL THEN jsonb_build_object('owner', jsonb_build_object('provider', u.provider, 'subject', u.subject)) ELSE '{}'::JSONB END)
+            FROM ${s}.feature_flag_settings r LEFT JOIN ${s}.users u ON u.user_id = r.user_id
+            WHERE r.feature_key = ANY(p_keys)), '[]'::JSONB));
+$$;
+-- Authenticated surfaces supply the actor; never accept it from request JSON.
+CREATE OR REPLACE FUNCTION ${s}.cms_feature_target(p_provider TEXT, p_subject TEXT, p_admin BOOLEAN, p_scope TEXT, p_user BIGINT, p_write BOOLEAN)
+RETURNS BIGINT LANGUAGE plpgsql STABLE AS $$
+DECLARE v_actor BIGINT; v_target BIGINT;
+BEGIN
+    IF COALESCE(p_provider, '') = '' OR COALESCE(p_subject, '') = '' THEN
+        RAISE EXCEPTION 'FEATURE_FORBIDDEN: An authenticated actor is required';
+    END IF;
+    SELECT u.user_id INTO v_actor FROM ${s}.users u WHERE u.provider = p_provider AND u.subject = p_subject;
+    IF p_scope = 'cluster' THEN
+        IF p_user IS NOT NULL THEN RAISE EXCEPTION 'FEATURE_INVALID: Cluster scope cannot name a user'; END IF;
+        IF p_write AND NOT COALESCE(p_admin, false) THEN RAISE EXCEPTION 'FEATURE_FORBIDDEN: Cluster changes require admin'; END IF;
+        RETURN NULL;
+    END IF;
+    IF p_scope IS DISTINCT FROM 'user' THEN RAISE EXCEPTION 'FEATURE_INVALID: Invalid feature scope'; END IF;
+    v_target := COALESCE(p_user, v_actor);
+    IF v_target IS NULL OR (NOT COALESCE(p_admin, false) AND v_target IS DISTINCT FROM v_actor) THEN
+        RAISE EXCEPTION 'FEATURE_FORBIDDEN: Only admins can access another user';
+    END IF;
+    IF NOT EXISTS (SELECT 1 FROM ${s}.users WHERE user_id = v_target) THEN RAISE EXCEPTION 'FEATURE_NOT_FOUND: User not found'; END IF;
+    RETURN v_target;
+END;
+$$;
+CREATE OR REPLACE FUNCTION ${s}.cms_feature_read(p_provider TEXT, p_subject TEXT, p_admin BOOLEAN, p_scope TEXT, p_user BIGINT)
+RETURNS JSONB LANGUAGE plpgsql STABLE AS $$
+DECLARE v_user BIGINT; v_result JSONB;
+BEGIN
+    v_user := ${s}.cms_feature_target(p_provider, p_subject, p_admin, p_scope, p_user, false);
+    SELECT jsonb_build_object('userId', v_user,
+        'definitions', COALESCE((SELECT jsonb_agg(${s}.cms_feature_definition_json(f) ORDER BY f.feature_key) FROM ${s}.feature_flags f), '[]'::JSONB),
+        'settings', COALESCE((SELECT jsonb_agg(${s}.cms_feature_setting_json(r)) FROM ${s}.feature_flag_settings r
+            WHERE r.scope = 'cluster' OR r.user_id = v_user), '[]'::JSONB)) INTO v_result;
+    RETURN v_result;
+END;
+$$;
+CREATE OR REPLACE FUNCTION ${s}.cms_feature_mutate(
+    p_provider TEXT, p_subject TEXT, p_admin BOOLEAN, p_scope TEXT, p_user BIGINT,
+    p_key TEXT, p_enabled BOOLEAN, p_override BOOLEAN, p_unset BOOLEAN, p_expected BIGINT, p_request TEXT)
+RETURNS JSONB LANGUAGE plpgsql AS $$
+DECLARE v_user BIGINT; v_actor TEXT; v_hash TEXT; v_before JSONB; v_after JSONB;
+    v_revision BIGINT; v_result JSONB; v_receipt JSONB;
+BEGIN
+    v_user := ${s}.cms_feature_target(p_provider, p_subject, p_admin, p_scope, p_user, true);
+    -- Registration locks ghost users before moving their preferences. Take the
+    -- same user -> feature lock order, and keep this FK target alive until commit.
+    IF v_user IS NOT NULL THEN
+        PERFORM 1 FROM ${s}.users WHERE user_id = v_user FOR KEY SHARE;
+        IF NOT FOUND THEN RAISE EXCEPTION 'FEATURE_NOT_FOUND: User not found'; END IF;
+    END IF;
+    IF p_expected IS NULL OR p_expected < 1 OR COALESCE(length(p_request), 0) NOT BETWEEN 1 AND 128 OR p_unset IS NULL THEN
+        RAISE EXCEPTION 'FEATURE_INVALID: Positive expectedRevision and requestId are required';
+    END IF;
+    IF (NOT p_unset AND (p_enabled IS NULL OR (p_scope = 'cluster' AND p_override IS NULL)))
+        OR (p_scope = 'user' AND p_override IS NOT NULL)
+        OR (p_unset AND (p_enabled IS NOT NULL OR p_override IS NOT NULL)) THEN
+        RAISE EXCEPTION 'FEATURE_INVALID: Invalid setting values for scope';
+    END IF;
+    v_actor := jsonb_build_array(p_provider, p_subject)::TEXT;
+    v_hash := md5(jsonb_build_array(p_scope, v_user, p_key, p_enabled, p_override, p_unset, p_expected)::TEXT);
+    -- Serialize receipts across different feature keys using the same actor/request ID.
+    PERFORM pg_advisory_xact_lock(hashtextextended(v_actor || ':' || p_request, 7731));
+    SELECT a.details INTO v_receipt FROM ${s}.authz_audit a WHERE a.action IN ('feature_flag.set', 'feature_flag.unset')
+        AND a.decision = 'allow' AND a.details->>'actorKey' = v_actor AND a.details->>'requestId' = p_request;
+    IF v_receipt IS NOT NULL THEN
+        IF v_receipt->>'requestHash' IS DISTINCT FROM v_hash THEN RAISE EXCEPTION 'FEATURE_CONFLICT: Request ID was used for different input'; END IF;
+        RETURN v_receipt->'result';
+    END IF;
+    SELECT f.revision INTO v_revision FROM ${s}.feature_flags f WHERE f.feature_key = p_key FOR UPDATE;
+    IF NOT FOUND THEN RAISE EXCEPTION 'FEATURE_NOT_FOUND: Feature not found'; END IF;
+    IF v_revision <> p_expected THEN RAISE EXCEPTION 'FEATURE_CONFLICT: Feature changed; reload before saving'; END IF;
+    SELECT ${s}.cms_feature_setting_json(r) INTO v_before FROM ${s}.feature_flag_settings r
+        WHERE r.feature_key = p_key AND r.scope = p_scope AND r.user_id IS NOT DISTINCT FROM v_user;
+    UPDATE ${s}.feature_flags SET revision = revision + 1 WHERE feature_key = p_key RETURNING revision INTO v_revision;
+    IF p_unset THEN
+        DELETE FROM ${s}.feature_flag_settings WHERE feature_key = p_key AND scope = p_scope AND user_id IS NOT DISTINCT FROM v_user;
+    ELSE
+        UPDATE ${s}.feature_flag_settings SET enabled = p_enabled, allow_user_override = p_override,
+            revision = v_revision, updated_by = v_actor, updated_at = now()
+            WHERE feature_key = p_key AND scope = p_scope AND user_id IS NOT DISTINCT FROM v_user
+            RETURNING ${s}.cms_feature_setting_json(feature_flag_settings) INTO v_after;
+        IF NOT FOUND THEN
+        INSERT INTO ${s}.feature_flag_settings (feature_key, scope, user_id, enabled, allow_user_override, revision, updated_by)
+        VALUES (p_key, p_scope, v_user, p_enabled, p_override, v_revision, v_actor)
+        RETURNING ${s}.cms_feature_setting_json(feature_flag_settings) INTO v_after;
+        END IF;
+    END IF;
+    v_result := jsonb_build_object('featureKey', p_key, 'scope', p_scope, 'userId', v_user, 'revision', v_revision::TEXT, 'setting', v_after);
+    INSERT INTO ${s}.authz_audit(actor_provider, actor_subject, action, target, decision, details)
+    VALUES (p_provider, p_subject, CASE WHEN p_unset THEN 'feature_flag.unset' ELSE 'feature_flag.set' END,
+        p_key, 'allow', jsonb_build_object('actorKey', v_actor, 'requestId', p_request, 'requestHash', v_hash,
+            'scope', p_scope, 'userId', v_user, 'featureKey', p_key, 'before', v_before, 'after', v_after,
+            'revision', v_revision::TEXT, 'result', v_result));
+    RETURN v_result;
+END;
+$$;
+CREATE OR REPLACE FUNCTION ${s}.cms_feature_changes(p_provider TEXT, p_subject TEXT, p_admin BOOLEAN, p_limit INT)
+RETURNS JSONB LANGUAGE plpgsql STABLE AS $$
+BEGIN
+    PERFORM ${s}.cms_feature_target(p_provider, p_subject, p_admin, 'cluster', NULL, true);
+    RETURN COALESCE((SELECT jsonb_agg(to_jsonb(a)) FROM (SELECT audit_id::TEXT, occurred_at, actor_provider, actor_subject, action, target, details
+        FROM ${s}.authz_audit WHERE action IN ('feature_flag.set', 'feature_flag.unset', 'feature_flag.user_adopt')
+        ORDER BY audit_id DESC LIMIT LEAST(200, GREATEST(1, COALESCE(p_limit, 50)))) a), '[]'::JSONB);
+END;
+$$;
+CREATE OR REPLACE FUNCTION ${s}.cms_feature_users(p_provider TEXT, p_subject TEXT, p_admin BOOLEAN, p_query TEXT)
+RETURNS JSONB LANGUAGE plpgsql STABLE AS $$
+BEGIN
+    PERFORM ${s}.cms_feature_target(p_provider, p_subject, p_admin, 'cluster', NULL, true);
+    RETURN COALESCE((SELECT jsonb_agg(to_jsonb(u)) FROM (SELECT user_id AS "userId", provider, subject, email, display_name AS "displayName"
+        FROM ${s}.users WHERE COALESCE(p_query, '') = '' OR position(lower(p_query) IN lower(COALESCE(display_name, '') || ' ' || COALESCE(email, '') || ' ' || subject)) > 0
+        ORDER BY COALESCE(display_name, email, subject), user_id LIMIT 500) u), '[]'::JSONB);
+END;
+$$;
+
+-- Frozen replacement of 0063 registration, extended for feature preferences.
+CREATE OR REPLACE FUNCTION ${s}.cms_register_user(
+    p_provider     TEXT,
+    p_subject      TEXT,
+    p_email        TEXT,
+    p_display_name TEXT
+) RETURNS BIGINT AS $$
+DECLARE
+    v_provider TEXT := NULLIF(BTRIM(p_provider), '');
+    v_subject  TEXT := NULLIF(BTRIM(p_subject), '');
+    v_email    TEXT := NULLIF(BTRIM(p_email), '');
+    v_display  TEXT := NULLIF(BTRIM(p_display_name), '');
+    v_user_id  BIGINT;
+    v_ghost    BIGINT;
+    v_feature TEXT;
+    v_revision BIGINT;
+    v_before JSONB;
+    v_after JSONB;
+BEGIN
+    IF v_provider IS NULL OR v_subject IS NULL THEN
+        RAISE EXCEPTION 'User provider and subject are required';
+    END IF;
+
+    INSERT INTO ${s}.users (provider, subject, email, display_name)
+    VALUES (v_provider, v_subject, v_email, v_display)
+    ON CONFLICT (provider, subject) DO UPDATE
+    SET email        = COALESCE(EXCLUDED.email, ${s}.users.email),
+        display_name = COALESCE(EXCLUDED.display_name, ${s}.users.display_name),
+        updated_at   = now()
+    WHERE COALESCE(EXCLUDED.email, ${s}.users.email) IS DISTINCT FROM ${s}.users.email
+       OR COALESCE(EXCLUDED.display_name, ${s}.users.display_name) IS DISTINCT FROM ${s}.users.display_name;
+
+    SELECT user_id INTO v_user_id
+    FROM ${s}.users
+    WHERE provider = v_provider AND subject = v_subject;
+
+    IF v_email IS NOT NULL THEN
+        FOR v_ghost IN
+            SELECT u.user_id FROM ${s}.users u
+            WHERE u.provider = v_provider
+              AND LOWER(u.subject) = LOWER(v_email)
+              AND u.user_id <> v_user_id
+            ORDER BY u.user_id FOR UPDATE
+        LOOP
+            UPDATE ${s}.session_shares ss SET user_id = v_user_id
+            WHERE ss.user_id = v_ghost
+              AND NOT EXISTS (
+                  SELECT 1 FROM ${s}.session_shares e
+                  WHERE e.session_id = ss.session_id AND e.user_id = v_user_id
+              );
+            UPDATE ${s}.session_shares e SET access = 'write'
+            FROM ${s}.session_shares g
+            WHERE g.user_id = v_ghost AND g.session_id = e.session_id
+              AND e.user_id = v_user_id AND g.access = 'write' AND e.access <> 'write';
+            DELETE FROM ${s}.session_shares WHERE user_id = v_ghost;
+            UPDATE ${s}.session_shares SET granted_by = v_user_id WHERE granted_by = v_ghost;
+            -- Editor grants: move the ones the real user does not already
+            -- hold, drop the duplicates, re-point granted_by.
+            UPDATE ${s}.agent_package_editors ge SET user_id = v_user_id
+            WHERE ge.user_id = v_ghost
+              AND NOT EXISTS (
+                  SELECT 1 FROM ${s}.agent_package_editors e
+                  WHERE e.package_id = ge.package_id AND e.user_id = v_user_id
+              );
+            DELETE FROM ${s}.agent_package_editors WHERE user_id = v_ghost;
+            UPDATE ${s}.agent_package_editors SET granted_by = v_user_id WHERE granted_by = v_ghost;
+            UPDATE ${s}.session_owners SET user_id = v_user_id WHERE user_id = v_ghost;
+            UPDATE ${s}.session_group_owners SET user_id = v_user_id WHERE user_id = v_ghost;
+            -- Carry preferences from the email placeholder to the stable login
+            -- identity. A real user's explicit preference wins a collision.
+            -- Bump even for a collision: worker caches must discard the ghost.
+            FOR v_feature IN SELECT feature_key FROM ${s}.feature_flag_settings
+                WHERE user_id = v_ghost ORDER BY feature_key
+            LOOP
+                PERFORM 1 FROM ${s}.feature_flags WHERE feature_key = v_feature FOR UPDATE;
+                SELECT ${s}.cms_feature_setting_json(r) INTO v_before
+                    FROM ${s}.feature_flag_settings r WHERE feature_key = v_feature AND user_id = v_ghost;
+                UPDATE ${s}.feature_flags SET revision = revision + 1 WHERE feature_key = v_feature
+                    RETURNING revision INTO v_revision;
+                IF EXISTS (SELECT 1 FROM ${s}.feature_flag_settings WHERE feature_key = v_feature AND user_id = v_user_id) THEN
+                    DELETE FROM ${s}.feature_flag_settings WHERE feature_key = v_feature AND user_id = v_ghost;
+                ELSE
+                    UPDATE ${s}.feature_flag_settings SET user_id = v_user_id, revision = v_revision,
+                        updated_by = jsonb_build_array('system', 'user-adoption')::TEXT, updated_at = now()
+                        WHERE feature_key = v_feature AND user_id = v_ghost;
+                END IF;
+                SELECT ${s}.cms_feature_setting_json(r) INTO v_after
+                    FROM ${s}.feature_flag_settings r WHERE feature_key = v_feature AND user_id = v_user_id;
+                INSERT INTO ${s}.authz_audit(actor_provider, actor_subject, action, target, decision, details)
+                VALUES ('system', 'user-adoption', 'feature_flag.user_adopt', v_feature, 'allow',
+                    jsonb_build_object('scope', 'user', 'userId', v_user_id, 'previousUserId', v_ghost,
+                        'featureKey', v_feature, 'before', v_before, 'after', v_after, 'revision', v_revision::TEXT));
+            END LOOP;
+            DELETE FROM ${s}.users WHERE user_id = v_ghost;
+        END LOOP;
+    END IF;
+
+    RETURN v_user_id;
+END;
+$$ LANGUAGE plpgsql;
+`;
+}
+//# sourceMappingURL=feature-flags-0077.js.map

package/dist/migrations/feature-flags-0077.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-flags-0077.js","sourceRoot":"","sources":["../../src/migrations/feature-flags-0077.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAChD,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;IAC5C,OAAO;6BACkB,CAAC;;;;;6BAKD,CAAC;;2CAEa,CAAC;;gCAEZ,CAAC;;;;;;qEAMoC,CAAC;kEACJ,CAAC;8DACL,CAAC;kEACG,CAAC;;;cAGrD,CAAC;;;;;6BAKc,CAAC,kCAAkC,CAAC;;;;;;6BAMpC,CAAC,+BAA+B,CAAC;;;;;6BAKjC,CAAC;kDACoB,CAAC;;;6BAGtB,CAAC;;oDAEsB,CAAC;mBAClC,CAAC;iDAC6B,CAAC;;mBAE/B,CAAC,sCAAsC,CAAC;;;;6BAI9B,CAAC;;;;;;;yCAOW,CAAC;;;;;;;;;;;mCAWP,CAAC;;;;6BAIP,CAAC;;;;gBAId,CAAC;;oDAEmC,CAAC,gEAAgE,CAAC;iDACrE,CAAC,sCAAsC,CAAC;;;;;6BAK5D,CAAC;;;;;;;gBAOd,CAAC;;;;yBAIQ,CAAC;;;;;;;;;;;;;;;2CAeiB,CAAC;;;;;;6CAMC,CAAC;;;aAGjC,CAAC,mDAAmD,CAAC;;aAErD,CAAC;;sBAEQ,CAAC;;iBAEN,CAAC;;;wBAGM,CAAC;;sBAEH,CAAC;;oBAEH,CAAC;;;;kBAIH,CAAC;;;;;;;;6BAQU,CAAC;;;cAGhB,CAAC;;eAEA,CAAC;;;;6BAIa,CAAC;;;cAGhB,CAAC;;eAEA,CAAC;;;;;;6BAMa,CAAC;;;;;;;;;;;;;;;;;;;;;;kBAsBZ,CAAC;;;kDAG+B,CAAC;yDACM,CAAC;;qCAErB,CAAC,kCAAkC,CAAC;4CAC7B,CAAC,yCAAyC,CAAC;;;WAG5E,CAAC;;;;;oCAKwB,CAAC;;;;;;qBAMhB,CAAC;;;kCAGY,CAAC;;;qBAGd,CAAC;mBACH,CAAC;;;0BAGM,CAAC;qBACN,CAAC;;;qBAGD,CAAC;;;kCAGY,CAAC;;;0BAGT,CAAC;qBACN,CAAC;qBACD,CAAC;qBACD,CAAC;;;;uDAIiC,CAAC;;;iCAGvB,CAAC;yBACT,CAAC;2BACC,CAAC;yBACH,CAAC;;2CAEiB,CAAC;kCACV,CAAC;;6BAEN,CAAC;;;;yBAIL,CAAC;2BACC,CAAC;8BACE,CAAC;;;;;0BAKL,CAAC;;;;;;;CAO1B,CAAC;AACF,CAAC"}

package/dist/migrations/native-tasks-default-policy-0078.d.ts

@@ -0,0 +1,3 @@
+/** Publish the initial cluster policy separately from the frozen 0077 schema. */
+export declare function nativeTasksDefaultPolicyMigration(schema: string): string;
+//# sourceMappingURL=native-tasks-default-policy-0078.d.ts.map

package/dist/migrations/native-tasks-default-policy-0078.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-tasks-default-policy-0078.d.ts","sourceRoot":"","sources":["../../src/migrations/native-tasks-default-policy-0078.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAkBxE"}

package/dist/migrations/native-tasks-default-policy-0078.js

@@ -0,0 +1,21 @@
+/** Publish the initial cluster policy separately from the frozen 0077 schema. */
+export function nativeTasksDefaultPolicyMigration(schema) {
+    const s = `"${schema.replace(/"/g, '""')}"`;
+    return `
+UPDATE ${s}.feature_flags
+SET default_enabled = false,
+    default_allow_user_override = true,
+    revision = revision + 1
+WHERE feature_key = 'copilot.native_tasks'
+  AND (default_enabled IS DISTINCT FROM false
+       OR default_allow_user_override IS DISTINCT FROM true);
+
+INSERT INTO ${s}.feature_flag_settings
+    (feature_key, scope, user_id, enabled, allow_user_override, revision, updated_by)
+SELECT feature_key, 'cluster', NULL, false, true, revision, 'migration:0078'
+FROM ${s}.feature_flags
+WHERE feature_key = 'copilot.native_tasks'
+ON CONFLICT (feature_key) WHERE scope = 'cluster' DO NOTHING;
+`;
+}
+//# sourceMappingURL=native-tasks-default-policy-0078.js.map

package/dist/migrations/native-tasks-default-policy-0078.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-tasks-default-policy-0078.js","sourceRoot":"","sources":["../../src/migrations/native-tasks-default-policy-0078.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,MAAM,UAAU,iCAAiC,CAAC,MAAc;IAC5D,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;IAC5C,OAAO;SACF,CAAC;;;;;;;;cAQI,CAAC;;;OAGR,CAAC;;;CAGP,CAAC;AACF,CAAC"}

package/dist/native-subagents.d.ts

@@ -0,0 +1,25 @@
+import type { CopilotSession, CustomAgentConfig, SessionHooks, Tool } from "@github/copilot-sdk";
+export type NativeSubagentMode = "off" | "sync";
+export declare function resolveNativeSubagents(value?: unknown): NativeSubagentMode;
+export declare const NATIVE_SUBAGENT_TOOLS: string[];
+export declare const NATIVE_BUILTIN_AGENTS: string[];
+export declare const NATIVE_EXCLUDED_TOOLS: string[];
+export declare const NATIVE_SUBAGENT_GUIDANCE = "\n## Native local delegation\nChoose delegation by role fit, expected lifetime, scale, execution location, and the user's intent.\nFirst consider the available user-creatable named agents. If one is customized for the required role,\nprefer spawn_agent(agent_name=<exact name>) over a generic durable agent or native task.\nUse the agent index already in context, or ps_list_agents when discovery is needed; do not invent names.\nMatch its capabilities and source access, not just a similar name. A specialist can perform its own\nintake: spawn the matching role rather than asking the user for details that role is designed to collect.\nGive named children their assignment through the contract and message_agent, not task/system_message overrides.\nUser words such as \"subagent\", \"sub-agent\", \"spawn\", or \"spin off\" are strong hints for durable spawn_agent:\ndefault to durable when the intended mechanism is otherwise ambiguous; short duration alone does not\noverride that hint. \"Spin off an agent to summarize the README\" therefore favors durable execution.\nThese are contextual hints, not literal keyword rules: \"spawn a native task\" still asks for native\nexecution when its lifetime and capabilities fit.\nPrefer durable spawn_agent for expected long-running sessions, broad scale-out across independently\nmanaged work, ongoing monitoring, work outliving this turn, recovery across restarts, or cross-worker work.\nNative tasks share this worker and the parent's turn time budget; they are not independent durable sessions.\nFilesystem sharing is only between a native task and its IMMEDIATE parent session.\nIf you are a durable child, a path reported by your durable parent or sibling is not\nyour local file. Before asking your native task to process it, use read_artifact(toFile)\nto materialize that session's published artifact in YOUR working directory, then pass\nyour local path to task. Native tasks have no artifact tools and cannot fetch it for you.\nThe presence of a producer path alongside an artifact reference does not establish\nshared storage, even when the request explicitly asks you to use a native task.\nUse native task for bounded, synchronously awaited local work that fits this turn and benefits from separate context:\ntask(agent_type=\"swarm-explore\", mode=\"sync\") for investigation, or task(agent_type=\"swarm-task\", mode=\"sync\")\nfor tests, builds, and verbose commands.\nSame-worker files and uncommitted changes favor native execution\nwhen the user has left the delegation mechanism open. Local files alone do not cancel a durable hint:\n\"use subagents in parallel to compare README.md and package.json\" favors durable children with source\naccess or artifact handoff, even though the files are small. An explicit requirement to execute in this\nexact checkout with uncommitted edits, however, favors native tasks when the work fits this turn.\nPreserve explicit topology: separate agents/sessions that themselves run native tasks means spawn_agent\nchildren, each using native tasks within its own turn. Do not collapse that into native tasks in the parent.\nResolve \"spawn separate subagents for this\" from the existing objective and results; do not ask the user\nto repeat an established task. Ask only when missing information materially blocks useful action.\nUse judgment rather than a fixed duration or agent-count threshold. Simple work without a delegation\nrequest is best done directly. A matching named role takes priority over native convenience.\nDurable children may run on another worker: provide task context and repository access or artifacts;\ndo not assume they can read this worker's local paths. Explain briefly if explicit native execution\ncannot satisfy a required lifetime or capability, and use a durable agent to meet that requirement.\nProvide full context and ask for findings/results. Simple lookups are best done directly.\nNative workers have local CLI tools only. They return results through task.\nPilotSwarm child contracts, facts, wake-ups, and complete_agent apply ONLY to spawn_agent children.\nNative background mode and write_agent are unavailable.\nswarm-explore and swarm-task inherit the parent model, reasoning effort, and context tier.\nOmit the model, reasoning_effort, and context_tier arguments; overrides are unavailable.\n";
+export declare function nativeSubagentGuidance(): string;
+export declare function nativeSubagentDefinitions(model: string): CustomAgentConfig[];
+/** Native execution remains in the CLI. Compose policy around the native tool. */
+export declare function nativeSubagentHooks(model: string, hooks?: SessionHooks, canAdmit?: () => boolean): SessionHooks;
+export declare function isNativeChildEvent(event: any): boolean;
+/** Retire reusable native agents before the worker can snapshot or release its lock.
+ * Do not waitForPending(): its ten-minute wait may schedule follow-up turns.
+ * A timeout/failure rejects the activity rather than claiming a safe boundary.
+ */
+export declare function settleNativeSubagents(session: CopilotSession, { timeoutMs, rejectRunning }?: {
+    timeoutMs?: number;
+    rejectRunning?: boolean;
+}): Promise<void>;
+/** Defense in depth if a CLI tool name collides with an external tool name.
+ * Apply both at declaration time and when per-turn handlers are refreshed.
+ */
+export declare function guardNativeExternalTools(tools: Tool<any>[], parentSessionId: string): Tool<any>[];
+//# sourceMappingURL=native-subagents.d.ts.map

package/dist/native-subagents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-subagents.d.ts","sourceRoot":"","sources":["../src/native-subagents.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAEjG,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,MAAM,CAAC;AAEhD,wBAAgB,sBAAsB,CAAC,KAAK,GAAE,OAAiD,GAAG,kBAAkB,CAInH;AAID,eAAO,MAAM,qBAAqB,UAAoI,CAAC;AACvK,eAAO,MAAM,qBAAqB,UAAmH,CAAC;AACtJ,eAAO,MAAM,qBAAqB,UAAwE,CAAC;AAI3G,eAAO,MAAM,wBAAwB,wvIA+CpC,CAAC;AAEF,wBAAgB,sBAAsB,IAAI,MAAM,CAAqC;AAErF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAO5E;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,EAAE,QAAQ,GAAE,MAAM,OAAoB,GAAG,YAAY,CAoC3H;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,GAAG,GAAG,OAAO,CAEtD;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,SAAiB,EAAE,aAAqB,EAAE,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAoCtL;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAcjG"}

package/dist/native-subagents.js

@@ -0,0 +1,186 @@
+export function resolveNativeSubagents(value = process.env.PILOTSWARM_NATIVE_SUBAGENTS) {
+    if (value == null || value === "" || value === "off")
+        return "off";
+    if (value === "sync")
+        return "sync";
+    throw new Error("nativeSubagents / PILOTSWARM_NATIVE_SUBAGENTS must be off or sync");
+}
+// Scope native workers to CLI tools. In particular, do not inherit the
+// parent's PilotSwarm tools or loaded durable-agent definitions.
+export const NATIVE_SUBAGENT_TOOLS = ["view", "grep", "rg", "glob", "bash", "powershell", "read_bash", "read_powershell", "list_bash", "stop_bash", "stop_powershell"];
+export const NATIVE_BUILTIN_AGENTS = ["explore", "task", "general-purpose", "code-review", "research", "security-review", "rubber-duck", "rem-agent"];
+export const NATIVE_EXCLUDED_TOOLS = ["write_agent", "manage_schedule", "run_factory", "factories_manage"];
+const names = new Set(["swarm-explore", "swarm-task"]);
+const childTools = new Set(NATIVE_SUBAGENT_TOOLS);
+export const NATIVE_SUBAGENT_GUIDANCE = `
+## Native local delegation
+Choose delegation by role fit, expected lifetime, scale, execution location, and the user's intent.
+First consider the available user-creatable named agents. If one is customized for the required role,
+prefer spawn_agent(agent_name=<exact name>) over a generic durable agent or native task.
+Use the agent index already in context, or ps_list_agents when discovery is needed; do not invent names.
+Match its capabilities and source access, not just a similar name. A specialist can perform its own
+intake: spawn the matching role rather than asking the user for details that role is designed to collect.
+Give named children their assignment through the contract and message_agent, not task/system_message overrides.
+User words such as "subagent", "sub-agent", "spawn", or "spin off" are strong hints for durable spawn_agent:
+default to durable when the intended mechanism is otherwise ambiguous; short duration alone does not
+override that hint. "Spin off an agent to summarize the README" therefore favors durable execution.
+These are contextual hints, not literal keyword rules: "spawn a native task" still asks for native
+execution when its lifetime and capabilities fit.
+Prefer durable spawn_agent for expected long-running sessions, broad scale-out across independently
+managed work, ongoing monitoring, work outliving this turn, recovery across restarts, or cross-worker work.
+Native tasks share this worker and the parent's turn time budget; they are not independent durable sessions.
+Filesystem sharing is only between a native task and its IMMEDIATE parent session.
+If you are a durable child, a path reported by your durable parent or sibling is not
+your local file. Before asking your native task to process it, use read_artifact(toFile)
+to materialize that session's published artifact in YOUR working directory, then pass
+your local path to task. Native tasks have no artifact tools and cannot fetch it for you.
+The presence of a producer path alongside an artifact reference does not establish
+shared storage, even when the request explicitly asks you to use a native task.
+Use native task for bounded, synchronously awaited local work that fits this turn and benefits from separate context:
+task(agent_type="swarm-explore", mode="sync") for investigation, or task(agent_type="swarm-task", mode="sync")
+for tests, builds, and verbose commands.
+Same-worker files and uncommitted changes favor native execution
+when the user has left the delegation mechanism open. Local files alone do not cancel a durable hint:
+"use subagents in parallel to compare README.md and package.json" favors durable children with source
+access or artifact handoff, even though the files are small. An explicit requirement to execute in this
+exact checkout with uncommitted edits, however, favors native tasks when the work fits this turn.
+Preserve explicit topology: separate agents/sessions that themselves run native tasks means spawn_agent
+children, each using native tasks within its own turn. Do not collapse that into native tasks in the parent.
+Resolve "spawn separate subagents for this" from the existing objective and results; do not ask the user
+to repeat an established task. Ask only when missing information materially blocks useful action.
+Use judgment rather than a fixed duration or agent-count threshold. Simple work without a delegation
+request is best done directly. A matching named role takes priority over native convenience.
+Durable children may run on another worker: provide task context and repository access or artifacts;
+do not assume they can read this worker's local paths. Explain briefly if explicit native execution
+cannot satisfy a required lifetime or capability, and use a durable agent to meet that requirement.
+Provide full context and ask for findings/results. Simple lookups are best done directly.
+Native workers have local CLI tools only. They return results through task.
+PilotSwarm child contracts, facts, wake-ups, and complete_agent apply ONLY to spawn_agent children.
+Native background mode and write_agent are unavailable.
+swarm-explore and swarm-task inherit the parent model, reasoning effort, and context tier.
+Omit the model, reasoning_effort, and context_tier arguments; overrides are unavailable.
+`;
+export function nativeSubagentGuidance() { return NATIVE_SUBAGENT_GUIDANCE; }
+export function nativeSubagentDefinitions(model) {
+    return [
+        { name: "swarm-explore", description: "Explore the local workspace and return concise source-backed findings.",
+            prompt: "Investigate the delegated question in the local workspace. Return concise findings with file references. Do not edit files. If you need user input or durable tools, report that to the parent. Complete the assigned investigation and return.", },
+        { name: "swarm-task", description: "Run local tests, builds, and commands; summarize success and include failure details.",
+            prompt: "Perform the delegated commands in the local workspace. Return a concise outcome; include actionable error details on failure. Await your commands; do not detach processes or schedule later work. If you need user input or durable tools, report that to the parent.", },
+    ].map(agent => ({ ...agent, model, tools: [...NATIVE_SUBAGENT_TOOLS], infer: true }));
+}
+/** Native execution remains in the CLI. Compose policy around the native tool. */
+export function nativeSubagentHooks(model, hooks, canAdmit = () => true) {
+    return {
+        ...hooks,
+        onPreToolUse: async (input, invocation) => {
+            const previous = await hooks?.onPreToolUse?.(input, invocation);
+            if (previous?.permissionDecision === "deny")
+                return previous;
+            const deny = (reason) => ({ ...previous, permissionDecision: "deny", permissionDecisionReason: reason });
+            const isChild = Boolean(input.sessionId && input.sessionId !== invocation.sessionId);
+            if (isChild && !childTools.has(input.toolName)) {
+                return deny("Native workers can use only local CLI tools. Return this request to your PilotSwarm parent.");
+            }
+            if (NATIVE_EXCLUDED_TOOLS.includes(input.toolName)) {
+                return deny("Detached native work is unavailable. Use task with mode=sync or PilotSwarm spawn_agent.");
+            }
+            const args = previous?.modifiedArgs ?? input.toolArgs;
+            if (isChild && (input.toolName === "bash" || input.toolName === "powershell")) {
+                const shell = args;
+                if (shell?.detach === true || (shell?.mode !== undefined && shell.mode !== "sync")) {
+                    return deny("Native workers must await commands; detached/background shells are unavailable.");
+                }
+            }
+            if (input.toolName !== "task")
+                return previous;
+            if (!canAdmit())
+                return deny("Native tasks are disabled by current feature policy for this turn. Use a durable spawn_agent if needed.");
+            if (!args || typeof args !== "object" || Array.isArray(args))
+                return deny("task arguments must be an object");
+            const task = args;
+            if (!names.has(String(task.agent_type)))
+                return deny("Use the native swarm-explore or swarm-task agent.");
+            if (task.mode !== undefined && task.mode !== "sync")
+                return deny("Use task(mode=sync). Background native tasks are unavailable on this worker.");
+            if (task.model !== undefined && task.model !== model)
+                return deny("Native workers must use the parent session model; omit the model override.");
+            if (task.reasoning_effort !== undefined || task.context_tier !== undefined) {
+                return deny("Native reasoning/context settings are managed by the worker; omit overrides.");
+            }
+            // Pin the admitted parent model rather than allowing runtime-specific
+            // specialist defaults or an application hook to change providers.
+            return { ...previous, modifiedArgs: { ...task, mode: "sync", model } };
+        },
+    };
+}
+export function isNativeChildEvent(event) {
+    return Boolean(event?.agentId || event?.data?.nativeAgentId || event?.data?.parentToolCallId);
+}
+/** Retire reusable native agents before the worker can snapshot or release its lock.
+ * Do not waitForPending(): its ten-minute wait may schedule follow-up turns.
+ * A timeout/failure rejects the activity rather than claiming a safe boundary.
+ */
+export async function settleNativeSubagents(session, { timeoutMs = 5_000, rejectRunning = false } = {}) {
+    let timer;
+    let expired = false;
+    const timeoutError = () => new Error("Native subagent cleanup timed out; turn cannot commit");
+    const checked = async (operation) => {
+        const result = await operation;
+        // A timed-out RPC can resolve later. It must never continue into a
+        // subsequent turn and cancel that turn's newly created native agents.
+        if (expired)
+            throw timeoutError();
+        return result;
+    };
+    const settle = async () => {
+        const tasks = (await checked(session.rpc.tasks.list())).tasks.filter(task => task.type === "agent");
+        const hadRunning = tasks.some(task => task.status === "running");
+        for (const task of tasks) {
+            if (task.status === "running" || task.status === "idle") {
+                await checked(session.rpc.tasks.cancel({ id: task.id }));
+            }
+        }
+        const remaining = (await checked(session.rpc.tasks.list())).tasks.filter(task => task.type === "agent");
+        if (remaining.some(task => task.status === "running" || task.status === "idle")) {
+            throw new Error("Native subagent cleanup failed: a native agent is still active");
+        }
+        for (const task of remaining)
+            await checked(session.rpc.tasks.remove({ id: task.id }));
+        if (rejectRunning && hadRunning) {
+            throw new Error("Native execution contract violated: agent was still running after parent completion (cancelled)");
+        }
+    };
+    try {
+        await Promise.race([
+            settle(),
+            new Promise((_, reject) => {
+                timer = setTimeout(() => { expired = true; reject(timeoutError()); }, timeoutMs);
+            }),
+        ]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+/** Defense in depth if a CLI tool name collides with an external tool name.
+ * Apply both at declaration time and when per-turn handlers are refreshed.
+ */
+export function guardNativeExternalTools(tools, parentSessionId) {
+    return tools.map(tool => {
+        const handler = tool.handler;
+        if (!handler)
+            return tool;
+        return {
+            ...tool,
+            handler: (args, invocation) => {
+                if (invocation.sessionId !== parentSessionId) {
+                    throw new Error("Native workers cannot invoke PilotSwarm external tools; return the request to the parent.");
+                }
+                return handler(args, invocation);
+            },
+        };
+    });
+}
+//# sourceMappingURL=native-subagents.js.map

package/dist/native-subagents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-subagents.js","sourceRoot":"","sources":["../src/native-subagents.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,sBAAsB,CAAC,QAAiB,OAAO,CAAC,GAAG,CAAC,2BAA2B;IAC3F,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACpC,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;AACzF,CAAC;AAED,uEAAuE;AACvE,iEAAiE;AACjE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;AACvK,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;AACtJ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,kBAAkB,CAAC,CAAC;AAC3G,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;AACvD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC;AAElD,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+CvC,CAAC;AAEF,MAAM,UAAU,sBAAsB,KAAa,OAAO,wBAAwB,CAAC,CAAC,CAAC;AAErF,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACnD,OAAO;QACH,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,wEAAwE;YAC1G,MAAM,EAAE,iPAAiP,GAAG;QAChQ,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,uFAAuF;YACtH,MAAM,EAAE,wQAAwQ,GAAG;KAC1R,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,KAAoB,EAAE,WAA0B,GAAG,EAAE,CAAC,IAAI;IACzG,OAAO;QACH,GAAG,KAAK;QACR,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YACtC,MAAM,QAAQ,GAAG,MAAM,KAAK,EAAE,YAAY,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAChE,IAAI,QAAQ,EAAE,kBAAkB,KAAK,MAAM;gBAAE,OAAO,QAAQ,CAAC;YAC7D,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,kBAAkB,EAAE,MAAe,EAAE,wBAAwB,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1H,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS,CAAC,CAAC;YACrF,IAAI,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7C,OAAO,IAAI,CAAC,6FAA6F,CAAC,CAAC;YAC/G,CAAC;YACD,IAAI,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjD,OAAO,IAAI,CAAC,yFAAyF,CAAC,CAAC;YAC3G,CAAC;YACD,MAAM,IAAI,GAAG,QAAQ,EAAE,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC;YACtD,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,YAAY,CAAC,EAAE,CAAC;gBAC5E,MAAM,KAAK,GAAG,IAA2C,CAAC;gBAC1D,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;oBACjF,OAAO,IAAI,CAAC,iFAAiF,CAAC,CAAC;gBACnG,CAAC;YACL,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM;gBAAE,OAAO,QAAQ,CAAC;YAC/C,IAAI,CAAC,QAAQ,EAAE;gBAAE,OAAO,IAAI,CAAC,yGAAyG,CAAC,CAAC;YACxI,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAC9G,MAAM,IAAI,GAAG,IAA+B,CAAC;YAC7C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,mDAAmD,CAAC,CAAC;YAC1G,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,8EAA8E,CAAC,CAAC;YACjJ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC,4EAA4E,CAAC,CAAC;YAChJ,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACzE,OAAO,IAAI,CAAC,8EAA8E,CAAC,CAAC;YAChG,CAAC;YACD,sEAAsE;YACtE,kEAAkE;YAClE,OAAO,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3E,CAAC;KACJ,CAAC;AACN,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAU;IACzC,OAAO,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,KAAK,EAAE,IAAI,EAAE,aAAa,IAAI,KAAK,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;AAClG,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAuB,EAAE,EAAE,SAAS,GAAG,KAAK,EAAE,aAAa,GAAG,KAAK,KAAsD,EAAE;IACnK,IAAI,KAAgD,CAAC;IACrD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,KAAK,EAAM,SAAqB,EAAc,EAAE;QAC5D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;QAC/B,mEAAmE;QACnE,sEAAsE;QACtE,IAAI,OAAO;YAAE,MAAM,YAAY,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACtB,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QACpG,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QACjE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtD,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC7D,CAAC;QACL,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QACxG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACtF,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,SAAS;YAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACvF,IAAI,aAAa,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAC;QACvH,CAAC;IACL,CAAC,CAAC;IACF,IAAI,CAAC;QACD,MAAM,OAAO,CAAC,IAAI,CAAC;YACf,MAAM,EAAE;YACR,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC7B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACrF,CAAC,CAAC;SACL,CAAC,CAAC;IACP,CAAC;YAAS,CAAC;QAAC,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAkB,EAAE,eAAuB;IAChF,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO;YACH,GAAG,IAAI;YACP,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE;gBAC1B,IAAI,UAAU,CAAC,SAAS,KAAK,eAAe,EAAE,CAAC;oBAC3C,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;gBACjH,CAAC;gBACD,OAAO,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACrC,CAAC;SACJ,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}