subharness 0.0.4 → 0.0.7

package/dist/errors.d.ts

@@ -3,7 +3,7 @@ export declare class AgentError extends Error {
     constructor(code: string, message: string);
 }
 export type ErrorInfo = {
-    code: string;
-    message: string;
+    readonly code: string;
+    readonly message: string;
 };
 export declare function errorInfo(error: unknown): ErrorInfo;

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,UAAW,SAAQ,KAAK;IACP,IAAI;IAAhC,YAA4B,IAAY,EAAE,OAAe;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;oBADW,IAAI;QAE9B,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAID,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,UAAU;QAChC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;QAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAClG,CAAC","sourcesContent":["export class AgentError extends Error {\n  constructor(public readonly code: string, message: string) {\n    super(message);\n    this.name = \"AgentError\";\n  }\n}\n\nexport type ErrorInfo = { code: string; message: string };\n\nexport function errorInfo(error: unknown): ErrorInfo {\n  return error instanceof AgentError\n    ? { code: error.code, message: error.message }\n    : { code: \"INTERNAL_ERROR\", message: error instanceof Error ? error.message : String(error) };\n}\n"]}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,UAAW,SAAQ,KAAK;IACP,IAAI;IAAhC,YAA4B,IAAY,EAAE,OAAe;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;oBADW,IAAI;QAE9B,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAID,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,UAAU;QAChC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;QAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAClG,CAAC","sourcesContent":["export class AgentError extends Error {\n  constructor(public readonly code: string, message: string) {\n    super(message);\n    this.name = \"AgentError\";\n  }\n}\n\nexport type ErrorInfo = { readonly code: string; readonly message: string };\n\nexport function errorInfo(error: unknown): ErrorInfo {\n  return error instanceof AgentError\n    ? { code: error.code, message: error.message }\n    : { code: \"INTERNAL_ERROR\", message: error instanceof Error ? error.message : String(error) };\n}\n"]}

package/dist/index.d.ts

@@ -1,4 +1,10 @@
-export { agent, codex, claudeCode, fx } from "./sdk/definitions.js";
+export { agent, codex, claudeCode, fx, opencode, copilot, cursor } from "./sdk/definitions.js";
+export { createRunner } from "./sdk/execution.js";
+export { connect } from "./sdk/connected.js";
 export { tool, toolResult } from "./sdk/tools.js";
+export { AgentError } from "./errors.js";
+export type { ErrorInfo } from "./errors.js";
+export type { AccessConnection, AccessSelection, ApprovalAction, ApprovalGrant, ApprovalRequest, ApprovalResponse, ApprovalScope, CompleteResponse, Delivery, Page, PageOptions, Runner, RunnerOptions, PromptReceipt, SessionHandle, SessionSnapshot, SessionSummary, TaskHandle, TaskDetails, TaskResult, TaskSnapshot, TaskState, TaskSummary, TerminalState, WorkspaceInfo, } from "./sdk/execution.js";
 export type { ToolContent, ToolResult } from "./sdk/tools.js";
-export type { AgentDefinition, ClaudeCodeConfig, ClaudeCodeOptions, CodexConfig, CodexOptions, FxConfig, FxOptions, HarnessConfig, HarnessKind, ToolDefinition, } from "./sdk/types.js";
+export type { AgentSummary, Client, ConnectedSessionOptions, ConnectOptions } from "./sdk/connected.js";
+export type { AgentDefinition, ClaudeCodeConfig, ClaudeCodeOptions, CodexConfig, CodexOptions, FxConfig, FxOptions, OpencodeConfig, OpencodeOptions, CopilotConfig, CopilotOptions, CursorConfig, CursorOptions, HarnessConfig, HarnessKind, ToolDefinition, } from "./sdk/types.js";

package/dist/index.js

@@ -1,3 +1,6 @@
-export { agent, codex, claudeCode, fx } from "./sdk/definitions.js";
+export { agent, codex, claudeCode, fx, opencode, copilot, cursor } from "./sdk/definitions.js";
+export { createRunner } from "./sdk/execution.js";
+export { connect } from "./sdk/connected.js";
 export { tool, toolResult } from "./sdk/tools.js";
+export { AgentError } from "./errors.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC","sourcesContent":["export { agent, codex, claudeCode, fx } from \"./sdk/definitions.js\";\nexport { tool, toolResult } from \"./sdk/tools.js\";\nexport type { ToolContent, ToolResult } from \"./sdk/tools.js\";\nexport type {\n  AgentDefinition,\n  ClaudeCodeConfig,\n  ClaudeCodeOptions,\n  CodexConfig,\n  CodexOptions,\n  FxConfig,\n  FxOptions,\n  HarnessConfig,\n  HarnessKind,\n  ToolDefinition,\n} from \"./sdk/types.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC","sourcesContent":["export { agent, codex, claudeCode, fx, opencode, copilot, cursor } from \"./sdk/definitions.js\";\nexport { createRunner } from \"./sdk/execution.js\";\nexport { connect } from \"./sdk/connected.js\";\nexport { tool, toolResult } from \"./sdk/tools.js\";\nexport { AgentError } from \"./errors.js\";\nexport type { ErrorInfo } from \"./errors.js\";\nexport type {\n  AccessConnection,\n  AccessSelection,\n  ApprovalAction,\n  ApprovalGrant,\n  ApprovalRequest,\n  ApprovalResponse,\n  ApprovalScope,\n  CompleteResponse,\n  Delivery,\n  Page,\n  PageOptions,\n  Runner,\n  RunnerOptions,\n  PromptReceipt,\n  SessionHandle,\n  SessionSnapshot,\n  SessionSummary,\n  TaskHandle,\n  TaskDetails,\n  TaskResult,\n  TaskSnapshot,\n  TaskState,\n  TaskSummary,\n  TerminalState,\n  WorkspaceInfo,\n} from \"./sdk/execution.js\";\nexport type { ToolContent, ToolResult } from \"./sdk/tools.js\";\nexport type { AgentSummary, Client, ConnectedSessionOptions, ConnectOptions } from \"./sdk/connected.js\";\nexport type {\n  AgentDefinition,\n  ClaudeCodeConfig,\n  ClaudeCodeOptions,\n  CodexConfig,\n  CodexOptions,\n  FxConfig,\n  FxOptions,\n  OpencodeConfig,\n  OpencodeOptions,\n  CopilotConfig,\n  CopilotOptions,\n  CursorConfig,\n  CursorOptions,\n  HarnessConfig,\n  HarnessKind,\n  ToolDefinition,\n} from \"./sdk/types.js\";\n"]}

package/dist/process-diagnostics.d.ts

@@ -0,0 +1,2 @@
+/** Formats only bounded, observed child-process termination metadata. */
+export declare function processExitDescription(code: unknown, signal: unknown): string;

package/dist/process-diagnostics.js

@@ -0,0 +1,11 @@
+import { constants } from "node:os";
+/** Formats only bounded, observed child-process termination metadata. */
+export function processExitDescription(code, signal) {
+    if (typeof signal === "string" && Object.hasOwn(constants.signals, signal)) {
+        return ` (signal ${signal})`;
+    }
+    return typeof code === "number" && Number.isSafeInteger(code)
+        ? ` (exit code ${code})`
+        : "";
+}
+//# sourceMappingURL=process-diagnostics.js.map

package/dist/process-diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-diagnostics.js","sourceRoot":"","sources":["../src/process-diagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,yEAAyE;AACzE,MAAM,UAAU,sBAAsB,CAAC,IAAa,EAAE,MAAe;IACnE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,YAAY,MAAM,GAAG,CAAC;IAC/B,CAAC;IACD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC;QAC3D,CAAC,CAAC,eAAe,IAAI,GAAG;QACxB,CAAC,CAAC,EAAE,CAAC;AACT,CAAC","sourcesContent":["import { constants } from \"node:os\";\n\n/** Formats only bounded, observed child-process termination metadata. */\nexport function processExitDescription(code: unknown, signal: unknown): string {\n  if (typeof signal === \"string\" && Object.hasOwn(constants.signals, signal)) {\n    return ` (signal ${signal})`;\n  }\n  return typeof code === \"number\" && Number.isSafeInteger(code)\n    ? ` (exit code ${code})`\n    : \"\";\n}\n"]}

package/dist/runtime/access-errors.d.ts

@@ -0,0 +1,4 @@
+import type { NativeSession } from "../adapters/types.js";
+import { AgentError } from "../errors.js";
+export declare function withAccessContext(error: AgentError, context: string): AgentError;
+export declare function withSessionAccessContext(native: NativeSession, context: string): NativeSession;

package/dist/runtime/access-errors.js

@@ -0,0 +1,25 @@
+import { AgentError } from "../errors.js";
+export function withAccessContext(error, context) {
+    return new AgentError(error.code, `${error.message}\n${context}`);
+}
+async function sessionCall(operation, context) {
+    try {
+        return await operation();
+    }
+    catch (error) {
+        if (error instanceof AgentError && error.code === "INVALID_CONFIG") {
+            throw withAccessContext(error, context);
+        }
+        throw error;
+    }
+}
+export function withSessionAccessContext(native, context) {
+    return {
+        turn: prompt => sessionCall(() => native.turn(prompt), context),
+        steer: prompt => sessionCall(() => native.steer(prompt), context),
+        interrupt: () => sessionCall(() => native.interrupt(), context),
+        resume: () => sessionCall(() => native.resume(), context),
+        close: () => sessionCall(() => native.close(), context),
+    };
+}
+//# sourceMappingURL=access-errors.js.map

package/dist/runtime/access-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-errors.js","sourceRoot":"","sources":["../../src/runtime/access-errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,UAAU,iBAAiB,CAAC,KAAiB,EAAE,OAAe;IAClE,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,SAA2B,EAAE,OAAe;IACxE,IAAI,CAAC;QAAC,OAAO,MAAM,SAAS,EAAE,CAAC;IAAC,CAAC;IACjC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACnE,MAAM,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAqB,EAAE,OAAe;IAC7E,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAC/D,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QACjE,SAAS,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC;QAC/D,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC;QACzD,KAAK,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC;KACxD,CAAC;AACJ,CAAC","sourcesContent":["import type { NativeSession } from \"../adapters/types.js\";\nimport { AgentError } from \"../errors.js\";\n\nexport function withAccessContext(error: AgentError, context: string): AgentError {\n  return new AgentError(error.code, `${error.message}\\n${context}`);\n}\n\nasync function sessionCall<T>(operation: () => Promise<T>, context: string): Promise<T> {\n  try { return await operation(); }\n  catch (error) {\n    if (error instanceof AgentError && error.code === \"INVALID_CONFIG\") {\n      throw withAccessContext(error, context);\n    }\n    throw error;\n  }\n}\n\nexport function withSessionAccessContext(native: NativeSession, context: string): NativeSession {\n  return {\n    turn: prompt => sessionCall(() => native.turn(prompt), context),\n    steer: prompt => sessionCall(() => native.steer(prompt), context),\n    interrupt: () => sessionCall(() => native.interrupt(), context),\n    resume: () => sessionCall(() => native.resume(), context),\n    close: () => sessionCall(() => native.close(), context),\n  };\n}\n"]}

package/dist/runtime/approval-registry.d.ts

@@ -1,5 +1,6 @@
 import type { ApprovalContent, NativeApprovalRequest } from '../approvals/types.js';
 import type { ApprovalRequest } from './types.js';
+import type { SdkApprovalRequest } from './task-data.js';
 type RequestIdentity = Pick<ApprovalRequest, 'requestId' | 'taskId' | 'sessionId'>;
 /** Retains pending requests and a bounded settlement-ordered outcome history. */
 export declare class ApprovalRegistry {
@@ -17,6 +18,14 @@ export declare class ApprovalRegistry {
         sessionId: string;
     };
     pendingFor(taskId: string): ApprovalRequest[];
+    sdkPendingFor(taskId: string): SdkApprovalRequest[];
+    respondSdk(id: string, response: unknown): {
+        version: 1;
+        type: 'approval_answered';
+        requestId: string;
+        taskId: string;
+        sessionId: string;
+    };
     retireTask(taskId: string): void;
     close(): void;
     private retire;

package/dist/runtime/approval-registry.js

@@ -31,16 +31,29 @@ export class ApprovalRegistry {
         catch {
             throw new AgentError('INPUT_REQUIRED', 'The native permission request cannot be represented within 64 KiB.');
         }
-        if (copy.kind !== 'permission' || !['codex', 'claudeCode', 'fx'].includes(copy.harness) || typeof copy.message !== 'string')
+        if (copy.kind !== 'permission' || !['codex', 'claudeCode', 'fx', 'opencode', 'copilot', 'cursor'].includes(copy.harness) || typeof copy.message !== 'string')
             throw new AgentError('INPUT_REQUIRED', 'The native permission request cannot be represented.');
         validateApprovalSchema(copy.requestedSchema);
         const requestId = `req_${randomUUID()}`;
         const snapshot = { ...copy, requestId, taskId, sessionId };
         if (Buffer.byteLength(JSON.stringify(snapshot)) > 64 * 1024)
             throw new AgentError('INPUT_REQUIRED', 'The native permission request cannot be represented within 64 KiB.');
+        let sdk;
+        let actions;
+        try {
+            const normalized = normalize(snapshot);
+            sdk = normalized.request;
+            actions = normalized.actions;
+        }
+        catch (error) {
+            if (!(error instanceof AgentError) || error.code !== 'INPUT_REQUIRED')
+                throw error;
+            sdk = error;
+            actions = new Map();
+        }
         const answer = new Promise((resolve, reject) => {
             const abort = () => this.retire(requestId);
-            this.pending.set(requestId, { outcome: 'pending', request: snapshot,
+            this.pending.set(requestId, { outcome: 'pending', request: snapshot, sdk, actions,
                 continuation: { resolve, reject, cleanup: () => signal.removeEventListener('abort', abort) } });
             signal.addEventListener('abort', abort, { once: true });
         });
@@ -65,16 +78,24 @@ export class ApprovalRegistry {
             if (settled.outcome === 'withdrawn')
                 throw expired();
             this.validateBoundedContent(content);
-            if (!isDeepStrictEqual(settled.answer, content))
+            let answer;
+            try {
+                answer = canonicalBySchema(settled.schema, validateApprovalContent(settled.schema, content));
+            }
+            catch {
+                invalidResponse();
+            }
+            if (!isDeepStrictEqual(settled.answer, answer))
                 throw new AgentError('INVALID_APPROVAL_RESPONSE', 'This permission request already has a different answer.');
             return this.receipt(settled.identity);
         }
         this.validateBoundedContent(content);
-        const answer = validateApprovalContent(pending.request.requestedSchema, content);
+        const answer = canonicalBySchema(pending.request.requestedSchema, validateApprovalContent(pending.request.requestedSchema, content));
         const requestIdentity = identity(pending.request);
         this.pending.delete(id);
         pending.continuation.cleanup();
-        this.retain({ outcome: 'answered', identity: requestIdentity, answer: structuredClone(answer) });
+        this.retain({ outcome: 'answered', identity: requestIdentity, answer: structuredClone(answer),
+            schema: structuredClone(pending.request.requestedSchema), actions: pending.actions });
         pending.continuation.resolve(answer);
         this.changed(requestIdentity.taskId);
         return this.receipt(requestIdentity);
@@ -83,6 +104,41 @@ export class ApprovalRegistry {
         return [...this.pending.values()].filter(entry => entry.request.taskId === taskId)
             .map(entry => structuredClone(entry.request));
     }
+    sdkPendingFor(taskId) {
+        return [...this.pending.values()].filter(entry => entry.request.taskId === taskId)
+            .map(entry => {
+            if (entry.sdk instanceof AgentError)
+                throw new AgentError(entry.sdk.code, entry.sdk.message);
+            return structuredClone(entry.sdk);
+        });
+    }
+    respondSdk(id, response) {
+        const entry = this.pending.get(id) ?? this.settled.get(id);
+        if (!entry)
+            throw unknown();
+        if (entry.outcome === 'withdrawn')
+            throw expired();
+        this.validateBoundedContent(response);
+        if (!plain(response) || Reflect.ownKeys(response).some(key => typeof key !== 'string' || !['actionId', 'grants'].includes(key))
+            || typeof response.actionId !== 'string')
+            invalidResponse();
+        const mapping = entry.actions.get(response.actionId);
+        if (!mapping)
+            invalidResponse();
+        const submitted = response;
+        let native = structuredClone(mapping.native);
+        if (mapping.grants) {
+            if (mapping.action.decision !== 'allow' || !Array.isArray(submitted.grants)
+                || submitted.grants.some(value => typeof value !== 'string') || new Set(submitted.grants).size !== submitted.grants.length
+                || submitted.grants.some(value => !mapping.grants.includes(value)))
+                invalidResponse();
+            const selected = new Set(submitted.grants);
+            native = { ...native, grants: mapping.grants.filter(id => selected.has(id)) };
+        }
+        else if (Object.hasOwn(response, 'grants'))
+            invalidResponse();
+        return this.respond(id, native);
+    }
     retireTask(taskId) {
         for (const [id, entry] of this.pending)
             if (entry.request.taskId === taskId)
@@ -123,4 +179,87 @@ export class ApprovalRegistry {
             taskId: request.taskId, sessionId: request.sessionId };
     }
 }
+function invalidResponse() {
+    throw new AgentError('INVALID_APPROVAL_RESPONSE', 'The approval response does not match the requested actions.');
+}
+function plain(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value)
+        && [Object.prototype, null].includes(Object.getPrototypeOf(value));
+}
+function normalize(request) {
+    const actions = new Map();
+    const grantsField = request.requestedSchema.properties.grants;
+    const scopeField = request.requestedSchema.properties.scope;
+    let grants;
+    if (grantsField?.type === 'array' && grantsField.items.anyOf && scopeField?.type === 'string' && scopeField.oneOf) {
+        grants = grantsField.items.anyOf.map(choice => ({ id: choice.const, label: choice.title }));
+        for (const choice of scopeField.oneOf) {
+            const scope = choice.const === 'session' ? 'session' : 'turn';
+            const action = { id: `act_${randomUUID()}`, label: `Allow for this ${scope}`, decision: 'allow', scope };
+            actions.set(action.id, { action, native: { scope: choice.const }, grants: grants.map(grant => grant.id) });
+        }
+    }
+    else {
+        const decision = request.requestedSchema.properties.decision;
+        const choices = decision?.type === 'string'
+            ? (decision.oneOf ?? decision.enum?.map(value => ({ const: value, title: value }))) : undefined;
+        if (!choices?.length)
+            invalidNative();
+        for (const choice of choices) {
+            const metadata = decisionMetadata(request, choice.const);
+            const action = metadata.decision === 'cancel'
+                ? { id: `act_${randomUUID()}`, label: choice.title, decision: 'cancel' }
+                : { id: `act_${randomUUID()}`, label: choice.title, decision: metadata.decision, scope: metadata.scope,
+                    ...(metadata.scope === 'session' ? { description: 'Applies to this native conversation.' } : {}) };
+            actions.set(action.id, { action, native: { decision: choice.const } });
+        }
+    }
+    if (!actions.size)
+        invalidNative();
+    const groups = new Map();
+    for (const mapping of actions.values()) {
+        const key = mapping.action.decision === 'cancel' ? 'cancel' : `${mapping.action.decision}:${mapping.action.scope}`;
+        const group = groups.get(key) ?? [];
+        group.push(mapping);
+        groups.set(key, group);
+    }
+    for (const group of groups.values())
+        if (group.length > 1)
+            for (const mapping of group) {
+                const native = typeof mapping.native.decision === 'string' ? mapping.native.decision : String(mapping.native.scope);
+                mapping.action = { ...mapping.action, description: [mapping.action.description, `Native option: ${native}`].filter(Boolean).join(' ') };
+            }
+    return { request: { id: request.requestId, taskId: request.taskId, sessionId: request.sessionId, harness: request.harness,
+            message: request.message, actions: [...actions.values()].map(value => value.action),
+            ...(grants ? { grants } : {}), ...(request.context ? { context: structuredClone(request.context) } : {}) }, actions };
+}
+function invalidNative() {
+    throw new AgentError('INPUT_REQUIRED', 'The native permission request cannot be represented.');
+}
+function decisionMetadata(request, value) {
+    const options = Array.isArray(request.context?.options) ? request.context.options : [];
+    const offered = options.find(option => plain(option) && (option.optionId === value));
+    const kind = plain(offered) && typeof offered.kind === 'string' ? offered.kind : value;
+    if (kind === 'cancel')
+        return { decision: 'cancel' };
+    if (['acceptForSession', 'allow_session', 'allow_always'].includes(kind))
+        return { decision: 'allow', scope: 'session' };
+    if (kind === 'reject_always')
+        return { decision: 'deny', scope: 'session' };
+    if (['accept', 'allow', 'allow_once', 'once', 'approve-once'].includes(kind))
+        return { decision: 'allow', scope: 'once' };
+    if (['decline', 'deny', 'reject', 'reject_once'].includes(kind))
+        return { decision: 'deny', scope: 'once' };
+    invalidNative();
+}
+function canonicalBySchema(schema, answer) {
+    if (!Array.isArray(answer.grants))
+        return answer;
+    const field = schema.properties.grants;
+    if (field?.type !== 'array')
+        return answer;
+    const order = (field.items.anyOf ?? field.items.enum?.map(value => ({ const: value, title: value })) ?? []).map(choice => choice.const);
+    const selected = new Set(answer.grants);
+    return { ...answer, grants: order.filter(value => selected.has(value)) };
+}
 //# sourceMappingURL=approval-registry.js.map

package/dist/runtime/approval-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval-registry.js","sourceRoot":"","sources":["../../src/runtime/approval-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAmBzF,MAAM,oBAAoB,GAAG,KAAK,CAAC;AACnC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,iBAAiB,EAAC,qDAAqD,CAAC,CAAC;AAC9G,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,iBAAiB,EAAC,wDAAwD,CAAC,CAAC;AACjH,MAAM,QAAQ,GAAG,CAAC,OAAwB,EAAmB,EAAE,CAAC,CAAC;IAC/D,SAAS,EAAC,OAAO,CAAC,SAAS,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,SAAS,EAAC,OAAO,CAAC,SAAS;CAC9E,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,OAAO,gBAAgB;IAGE,OAAO;IAF5B,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzC,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,YAA6B,OAAiC;uBAAjC,OAAO;IAA6B,CAAC;IAElE,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,SAAiB,EAAE,OAA8B,EAAE,MAAmB;QACnG,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,OAAO,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,EAAE;YACtC,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAC,yDAAyD,CAAC,CAAC;QACnG,IAAI,IAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YACjE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAA0B,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAC,oEAAoE,CAAC,CAAC;QAAC,CAAC;QACxH,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,OAAO,EAAC,YAAY,EAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YACvH,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAC,sDAAsD,CAAC,CAAC;QAChG,sBAAsB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,OAAO,UAAU,EAAE,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAoB,EAAC,GAAG,IAAI,EAAC,SAAS,EAAC,MAAM,EAAC,SAAS,EAAC,CAAC;QACvE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI;YACzD,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAC,oEAAoE,CAAC,CAAC;QAC9G,MAAM,MAAM,GAAG,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAC,MAAM,EAAE,EAAE;YAC7D,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAC,EAAC,OAAO,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ;gBAC5D,YAAY,EAAC,EAAC,OAAO,EAAC,MAAM,EAAC,OAAO,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,EAAC,EAAC,CAAC,CAAC;YAC1F,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,OAAO;YAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,MAAM,OAAO,EAAE,CAAC;QAC9B,OAAO,EAAC,GAAG,OAAO,CAAC,QAAQ,EAAC,CAAC;IAC/B,CAAC;IAED,OAAO,CAAC,EAAU,EAAE,OAAgB;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO;gBAAE,MAAM,OAAO,EAAE,CAAC;YAC9B,IAAI,OAAO,CAAC,OAAO,KAAK,WAAW;gBAAE,MAAM,OAAO,EAAE,CAAC;YACrD,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAC,OAAO,CAAC;gBAC5C,MAAM,IAAI,UAAU,CAAC,2BAA2B,EAAC,yDAAyD,CAAC,CAAC;YAC9G,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,EAAC,OAAO,CAAC,CAAC;QAChF,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxB,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,UAAU,EAAC,QAAQ,EAAC,eAAe,EAAC,MAAM,EAAC,eAAe,CAAC,MAAM,CAAC,EAAC,CAAC,CAAC;QAC1F,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;aAC/E,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,KAAK,MAAM,CAAC,EAAE,EAAC,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM;gBAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,KAAK,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAE/D,MAAM,CAAC,EAAU;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxB,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,WAAW,EAAC,QAAQ,EAAC,eAAe,EAAC,CAAC,CAAC;QAC5D,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAEO,MAAM,CAAC,KAAmB;QAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAC,KAAK,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,oBAAoB,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAChD,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAEO,sBAAsB,CAAC,OAAgB;QAC7C,IAAI,UAA8B,CAAC;QACnC,IAAI,CAAC;YAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;QACvF,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI;YAC1D,MAAM,IAAI,UAAU,CAAC,2BAA2B,EAAC,uDAAuD,CAAC,CAAC;IAC9G,CAAC;IAEO,OAAO,CAAC,OAAwB;QACtC,OAAO,EAAC,OAAO,EAAC,CAAU,EAAC,IAAI,EAAC,mBAA4B,EAAC,SAAS,EAAC,OAAO,CAAC,SAAS;YACtF,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,SAAS,EAAC,OAAO,CAAC,SAAS,EAAC,CAAC;IACvD,CAAC;CACF","sourcesContent":["import { randomUUID } from 'node:crypto';\nimport { isDeepStrictEqual } from 'node:util';\nimport { AgentError } from '../errors.js';\nimport { validateApprovalContent, validateApprovalSchema } from '../approvals/schema.js';\nimport type { ApprovalContent, NativeApprovalRequest } from '../approvals/types.js';\nimport type { ApprovalRequest } from './types.js';\n\ntype RequestIdentity = Pick<ApprovalRequest,'requestId'|'taskId'|'sessionId'>;\ninterface Continuation {\n  resolve(content: ApprovalContent): void;\n  reject(error: AgentError): void;\n  cleanup(): void;\n}\ninterface PendingEntry {\n  outcome: 'pending';\n  request: ApprovalRequest;\n  continuation: Continuation;\n}\ninterface AnsweredEntry { outcome: 'answered'; identity: RequestIdentity; answer: ApprovalContent }\ninterface WithdrawnEntry { outcome: 'withdrawn'; identity: RequestIdentity }\ntype SettledEntry = AnsweredEntry | WithdrawnEntry;\n\nconst MAX_SETTLED_REQUESTS = 1_024;\nconst expired = () => new AgentError('REQUEST_EXPIRED','The native permission request is no longer pending.');\nconst unknown = () => new AgentError('UNKNOWN_REQUEST','Permission request is unavailable in this coordinator.');\nconst identity = (request: ApprovalRequest): RequestIdentity => ({\n  requestId:request.requestId,taskId:request.taskId,sessionId:request.sessionId,\n});\n\n/** Retains pending requests and a bounded settlement-ordered outcome history. */\nexport class ApprovalRegistry {\n  private pending = new Map<string,PendingEntry>();\n  private settled = new Map<string,SettledEntry>();\n  constructor(private readonly changed: (taskId: string) => void) {}\n\n  async register(taskId: string, sessionId: string, request: NativeApprovalRequest, signal: AbortSignal): Promise<ApprovalContent> {\n    if (signal.aborted) throw expired();\n    if (this.pendingFor(taskId).length >= 32)\n      throw new AgentError('INPUT_REQUIRED','A task cannot wait on more than 32 permission requests.');\n    let copy: NativeApprovalRequest;\n    try {\n      const serialized = JSON.stringify(request);\n      if (Buffer.byteLength(serialized) > 64 * 1024) throw new Error();\n      copy = JSON.parse(serialized) as NativeApprovalRequest;\n    } catch { throw new AgentError('INPUT_REQUIRED','The native permission request cannot be represented within 64 KiB.'); }\n    if (copy.kind !== 'permission' || !['codex','claudeCode','fx'].includes(copy.harness) || typeof copy.message !== 'string')\n      throw new AgentError('INPUT_REQUIRED','The native permission request cannot be represented.');\n    validateApprovalSchema(copy.requestedSchema);\n    const requestId = `req_${randomUUID()}`;\n    const snapshot: ApprovalRequest = {...copy,requestId,taskId,sessionId};\n    if (Buffer.byteLength(JSON.stringify(snapshot)) > 64 * 1024)\n      throw new AgentError('INPUT_REQUIRED','The native permission request cannot be represented within 64 KiB.');\n    const answer = new Promise<ApprovalContent>((resolve,reject) => {\n      const abort = () => this.retire(requestId);\n      this.pending.set(requestId,{outcome:'pending',request:snapshot,\n        continuation:{resolve,reject,cleanup:() => signal.removeEventListener('abort',abort)}});\n      signal.addEventListener('abort',abort,{once:true});\n    });\n    this.changed(taskId);\n    return answer;\n  }\n\n  request(id: string): RequestIdentity {\n    const pending = this.pending.get(id);\n    if (pending) return identity(pending.request);\n    const settled = this.settled.get(id);\n    if (!settled) throw unknown();\n    return {...settled.identity};\n  }\n\n  respond(id: string, content: unknown) {\n    const pending = this.pending.get(id);\n    if (!pending) {\n      const settled = this.settled.get(id);\n      if (!settled) throw unknown();\n      if (settled.outcome === 'withdrawn') throw expired();\n      this.validateBoundedContent(content);\n      if (!isDeepStrictEqual(settled.answer,content))\n        throw new AgentError('INVALID_APPROVAL_RESPONSE','This permission request already has a different answer.');\n      return this.receipt(settled.identity);\n    }\n    this.validateBoundedContent(content);\n    const answer = validateApprovalContent(pending.request.requestedSchema,content);\n    const requestIdentity = identity(pending.request);\n    this.pending.delete(id);\n    pending.continuation.cleanup();\n    this.retain({outcome:'answered',identity:requestIdentity,answer:structuredClone(answer)});\n    pending.continuation.resolve(answer);\n    this.changed(requestIdentity.taskId);\n    return this.receipt(requestIdentity);\n  }\n\n  pendingFor(taskId: string): ApprovalRequest[] {\n    return [...this.pending.values()].filter(entry => entry.request.taskId === taskId)\n      .map(entry => structuredClone(entry.request));\n  }\n\n  retireTask(taskId: string) {\n    for (const [id,entry] of this.pending) if (entry.request.taskId === taskId) this.retire(id);\n  }\n\n  close() { for (const id of [...this.pending.keys()]) this.retire(id); }\n\n  private retire(id: string) {\n    const entry = this.pending.get(id);\n    if (!entry) return;\n    const requestIdentity = identity(entry.request);\n    this.pending.delete(id);\n    entry.continuation.cleanup();\n    this.retain({outcome:'withdrawn',identity:requestIdentity});\n    entry.continuation.reject(expired());\n    this.changed(requestIdentity.taskId);\n  }\n\n  private retain(entry: SettledEntry) {\n    this.settled.set(entry.identity.requestId,entry);\n    while (this.settled.size > MAX_SETTLED_REQUESTS) {\n      const oldest = this.settled.keys().next().value;\n      if (oldest !== undefined) this.settled.delete(oldest);\n    }\n  }\n\n  private validateBoundedContent(content: unknown) {\n    let serialized: string | undefined;\n    try { serialized = JSON.stringify(content); } catch { /* Report no submitted data. */ }\n    if (!serialized || Buffer.byteLength(serialized) > 16 * 1024)\n      throw new AgentError('INVALID_APPROVAL_RESPONSE','Approval content must be a JSON object within 16 KiB.');\n  }\n\n  private receipt(request: RequestIdentity) {\n    return {version:1 as const,type:'approval_answered' as const,requestId:request.requestId,\n      taskId:request.taskId,sessionId:request.sessionId};\n  }\n}\n"]}
+{"version":3,"file":"approval-registry.js","sourceRoot":"","sources":["../../src/runtime/approval-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAuBzF,MAAM,oBAAoB,GAAG,KAAK,CAAC;AACnC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,iBAAiB,EAAC,qDAAqD,CAAC,CAAC;AAC9G,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,iBAAiB,EAAC,wDAAwD,CAAC,CAAC;AACjH,MAAM,QAAQ,GAAG,CAAC,OAAwB,EAAmB,EAAE,CAAC,CAAC;IAC/D,SAAS,EAAC,OAAO,CAAC,SAAS,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,SAAS,EAAC,OAAO,CAAC,SAAS;CAC9E,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,OAAO,gBAAgB;IAGE,OAAO;IAF5B,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzC,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,YAA6B,OAAiC;uBAAjC,OAAO;IAA6B,CAAC;IAElE,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,SAAiB,EAAE,OAA8B,EAAE,MAAmB;QACnG,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,OAAO,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,EAAE;YACtC,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAC,yDAAyD,CAAC,CAAC;QACnG,IAAI,IAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YACjE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAA0B,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAC,oEAAoE,CAAC,CAAC;QAAC,CAAC;QACxH,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,OAAO,EAAC,YAAY,EAAC,IAAI,EAAC,UAAU,EAAC,SAAS,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YACrJ,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAC,sDAAsD,CAAC,CAAC;QAChG,sBAAsB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,OAAO,UAAU,EAAE,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAoB,EAAC,GAAG,IAAI,EAAC,SAAS,EAAC,MAAM,EAAC,SAAS,EAAC,CAAC;QACvE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI;YACzD,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAC,oEAAoE,CAAC,CAAC;QAC9G,IAAI,GAAiC,CAAC;QACtC,IAAI,OAAiC,CAAC;QACtC,IAAI,CAAC;YAAC,MAAM,UAAU,GAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAAC,GAAG,GAAC,UAAU,CAAC,OAAO,CAAC;YAAC,OAAO,GAAC,UAAU,CAAC,OAAO,CAAC;QAAC,CAAC;QACjG,OAAM,KAAK,EAAE,CAAC;YACZ,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;gBAAE,MAAM,KAAK,CAAC;YACnF,GAAG,GAAC,KAAK,CAAC;YAAC,OAAO,GAAC,IAAI,GAAG,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAC,MAAM,EAAE,EAAE;YAC7D,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAC,EAAC,OAAO,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,GAAG,EAAC,OAAO;gBACxE,YAAY,EAAC,EAAC,OAAO,EAAC,MAAM,EAAC,OAAO,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,EAAC,EAAC,CAAC,CAAC;YAC1F,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,OAAO;YAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,MAAM,OAAO,EAAE,CAAC;QAC9B,OAAO,EAAC,GAAG,OAAO,CAAC,QAAQ,EAAC,CAAC;IAC/B,CAAC;IAED,OAAO,CAAC,EAAU,EAAE,OAAgB;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO;gBAAE,MAAM,OAAO,EAAE,CAAC;YAC9B,IAAI,OAAO,CAAC,OAAO,KAAK,WAAW;gBAAE,MAAM,OAAO,EAAE,CAAC;YACrD,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,MAAsB,CAAC;YAC3B,IAAI,CAAC;gBAAC,MAAM,GAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAC,uBAAuB,CAAC,OAAO,CAAC,MAAM,EAAC,OAAO,CAAC,CAAC,CAAC;YAAC,CAAC;YACjG,MAAM,CAAC;gBAAC,eAAe,EAAE,CAAC;YAAC,CAAC;YAC5B,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAC,MAAM,CAAC;gBAC3C,MAAM,IAAI,UAAU,CAAC,2BAA2B,EAAC,yDAAyD,CAAC,CAAC;YAC9G,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,EAAC,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,EAAC,OAAO,CAAC,CAAC,CAAC;QACnI,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxB,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,UAAU,EAAC,QAAQ,EAAC,eAAe,EAAC,MAAM,EAAC,eAAe,CAAC,MAAM,CAAC;YACrF,MAAM,EAAC,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAC,OAAO,EAAC,OAAO,CAAC,OAAO,EAAC,CAAC,CAAC;QACpF,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;aAC/E,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,aAAa,CAAC,MAAc;QAC1B,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;aAC/E,GAAG,CAAC,KAAK,CAAC,EAAE;YACX,IAAI,KAAK,CAAC,GAAG,YAAY,UAAU;gBAAE,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5F,OAAO,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,UAAU,CAAC,EAAU,EAAE,QAAiB;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK;YAAE,MAAM,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW;YAAE,MAAM,OAAO,EAAE,CAAC;QACnD,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;eACzH,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ;YAAE,eAAe,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO;YAAE,eAAe,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,QAAuC,CAAC;QAC1D,IAAI,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;mBACtE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,CAAC,MAAM;mBACvH,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAAE,eAAe,EAAE,CAAC;YACzF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,GAAG,EAAC,GAAG,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAC,CAAC;QAC9E,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAC,QAAQ,CAAC;YAAE,eAAe,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,KAAK,MAAM,CAAC,EAAE,EAAC,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM;gBAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,KAAK,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAE/D,MAAM,CAAC,EAAU;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxB,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,WAAW,EAAC,QAAQ,EAAC,eAAe,EAAC,CAAC,CAAC;QAC5D,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAEO,MAAM,CAAC,KAAmB;QAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAC,KAAK,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,oBAAoB,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAChD,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAEO,sBAAsB,CAAC,OAAgB;QAC7C,IAAI,UAA8B,CAAC;QACnC,IAAI,CAAC;YAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;QACvF,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI;YAC1D,MAAM,IAAI,UAAU,CAAC,2BAA2B,EAAC,uDAAuD,CAAC,CAAC;IAC9G,CAAC;IAEO,OAAO,CAAC,OAAwB;QACtC,OAAO,EAAC,OAAO,EAAC,CAAU,EAAC,IAAI,EAAC,mBAA4B,EAAC,SAAS,EAAC,OAAO,CAAC,SAAS;YACtF,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,SAAS,EAAC,OAAO,CAAC,SAAS,EAAC,CAAC;IACvD,CAAC;CACF;AAED,SAAS,eAAe;IACtB,MAAM,IAAI,UAAU,CAAC,2BAA2B,EAAC,6DAA6D,CAAC,CAAC;AAClH,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WACtE,CAAC,MAAM,CAAC,SAAS,EAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,SAAS,CAAC,OAAwB;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC;IAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC;IAC5D,IAAI,MAA8C,CAAC;IACnD,IAAI,WAAW,EAAE,IAAI,KAAK,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,IAAI,UAAU,EAAE,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QAClH,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAC,EAAE,EAAC,MAAM,CAAC,KAAK,EAAC,KAAK,EAAC,MAAM,CAAC,KAAK,EAAC,CAAC,CAAC,CAAC;QACvF,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;YAC9D,MAAM,MAAM,GAAmB,EAAC,EAAE,EAAC,OAAO,UAAU,EAAE,EAAE,EAAC,KAAK,EAAC,kBAAkB,KAAK,EAAE,EAAC,QAAQ,EAAC,OAAO,EAAC,KAAK,EAAC,CAAC;YACjH,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,EAAC,KAAK,EAAC,MAAM,CAAC,KAAK,EAAC,EAAC,MAAM,EAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,EAAE,CAAC,EAAC,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC7D,MAAM,OAAO,GAAC,QAAQ,EAAE,IAAI,KAAK,QAAQ;YACvC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAA,EAAE,CAAA,CAAC,EAAC,KAAK,EAAC,KAAK,EAAC,KAAK,EAAC,KAAK,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3F,IAAI,CAAC,OAAO,EAAE,MAAM;YAAE,aAAa,EAAE,CAAC;QACtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxD,MAAM,MAAM,GAAmB,QAAQ,CAAC,QAAQ,KAAK,QAAQ;gBAC3D,CAAC,CAAC,EAAC,EAAE,EAAC,OAAO,UAAU,EAAE,EAAE,EAAC,KAAK,EAAC,MAAM,CAAC,KAAK,EAAC,QAAQ,EAAC,QAAQ,EAAC;gBACjE,CAAC,CAAC,EAAC,EAAE,EAAC,OAAO,UAAU,EAAE,EAAE,EAAC,KAAK,EAAC,MAAM,CAAC,KAAK,EAAC,QAAQ,EAAC,QAAQ,CAAC,QAAQ,EAAC,KAAK,EAAC,QAAQ,CAAC,KAAK;oBAC1F,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAC,WAAW,EAAC,sCAAsC,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAC,CAAC;YACrG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,EAAC,QAAQ,EAAC,MAAM,CAAC,KAAK,EAAC,EAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,aAAa,EAAE,CAAC;IACnC,MAAM,MAAM,GAAC,IAAI,GAAG,EAA0B,CAAC;IAC/C,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACjH,MAAM,KAAK,GAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAC,KAAK,CAAC,CAAC;IAChF,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;gBACvF,MAAM,MAAM,GAAC,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAClH,OAAO,CAAC,MAAM,GAAC,EAAC,GAAG,OAAO,CAAC,MAAM,EAAC,WAAW,EAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,CAAC;YACnI,CAAC;IACD,OAAO,EAAC,OAAO,EAAC,EAAC,EAAE,EAAC,OAAO,CAAC,SAAS,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,SAAS,EAAC,OAAO,CAAC,SAAS,EAAC,OAAO,EAAC,OAAO,CAAC,OAAO;YAC7G,OAAO,EAAC,OAAO,CAAC,OAAO,EAAC,OAAO,EAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,MAAM,CAAC;YAC9E,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,MAAM,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAC,OAAO,EAAC,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAC,EAAC,OAAO,EAAC,CAAC;AACjH,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAC,sDAAsD,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAwB,EAAE,KAAa;IAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IACvF,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAC,QAAQ,EAAC,QAAQ,EAAC,CAAC;IAClD,IAAI,CAAC,kBAAkB,EAAC,eAAe,EAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAC,QAAQ,EAAC,OAAO,EAAC,KAAK,EAAC,SAAS,EAAC,CAAC;IAClH,IAAI,IAAI,KAAK,eAAe;QAAE,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,KAAK,EAAC,SAAS,EAAC,CAAC;IACvE,IAAI,CAAC,QAAQ,EAAC,OAAO,EAAC,YAAY,EAAC,MAAM,EAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAC,QAAQ,EAAC,OAAO,EAAC,KAAK,EAAC,MAAM,EAAC,CAAC;IACjH,IAAI,CAAC,SAAS,EAAC,MAAM,EAAC,QAAQ,EAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,KAAK,EAAC,MAAM,EAAC,CAAC;IACpG,aAAa,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAqB,EAAC,MAAsB;IACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACjD,MAAM,KAAK,GAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;IACrC,IAAI,KAAK,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAC3C,MAAM,KAAK,GAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAA,EAAE,CAAA,CAAC,EAAC,KAAK,EAAC,KAAK,EAAC,KAAK,EAAC,KAAK,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAA,EAAE,CAAA,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7H,MAAM,QAAQ,GAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,EAAC,GAAG,MAAM,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAA,EAAE,CAAA,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAC,CAAC;AACrE,CAAC","sourcesContent":["import { randomUUID } from 'node:crypto';\nimport { isDeepStrictEqual } from 'node:util';\nimport { AgentError } from '../errors.js';\nimport { validateApprovalContent, validateApprovalSchema } from '../approvals/schema.js';\nimport type { ApprovalContent, ApprovalSchema, NativeApprovalRequest } from '../approvals/types.js';\nimport type { ApprovalRequest } from './types.js';\nimport type { ApprovalAction, ApprovalResponse, SdkApprovalRequest } from './task-data.js';\n\ntype RequestIdentity = Pick<ApprovalRequest,'requestId'|'taskId'|'sessionId'>;\ninterface Continuation {\n  resolve(content: ApprovalContent): void;\n  reject(error: AgentError): void;\n  cleanup(): void;\n}\ninterface PendingEntry {\n  outcome: 'pending';\n  request: ApprovalRequest;\n  continuation: Continuation;\n  sdk: SdkApprovalRequest | AgentError;\n  actions: Map<string, ActionMapping>;\n}\ninterface AnsweredEntry { outcome: 'answered'; identity: RequestIdentity; answer: ApprovalContent; schema: ApprovalSchema; actions: Map<string, ActionMapping> }\ninterface WithdrawnEntry { outcome: 'withdrawn'; identity: RequestIdentity }\ntype SettledEntry = AnsweredEntry | WithdrawnEntry;\ninterface ActionMapping { action: ApprovalAction; native: ApprovalContent; grants?: readonly string[] }\n\nconst MAX_SETTLED_REQUESTS = 1_024;\nconst expired = () => new AgentError('REQUEST_EXPIRED','The native permission request is no longer pending.');\nconst unknown = () => new AgentError('UNKNOWN_REQUEST','Permission request is unavailable in this coordinator.');\nconst identity = (request: ApprovalRequest): RequestIdentity => ({\n  requestId:request.requestId,taskId:request.taskId,sessionId:request.sessionId,\n});\n\n/** Retains pending requests and a bounded settlement-ordered outcome history. */\nexport class ApprovalRegistry {\n  private pending = new Map<string,PendingEntry>();\n  private settled = new Map<string,SettledEntry>();\n  constructor(private readonly changed: (taskId: string) => void) {}\n\n  async register(taskId: string, sessionId: string, request: NativeApprovalRequest, signal: AbortSignal): Promise<ApprovalContent> {\n    if (signal.aborted) throw expired();\n    if (this.pendingFor(taskId).length >= 32)\n      throw new AgentError('INPUT_REQUIRED','A task cannot wait on more than 32 permission requests.');\n    let copy: NativeApprovalRequest;\n    try {\n      const serialized = JSON.stringify(request);\n      if (Buffer.byteLength(serialized) > 64 * 1024) throw new Error();\n      copy = JSON.parse(serialized) as NativeApprovalRequest;\n    } catch { throw new AgentError('INPUT_REQUIRED','The native permission request cannot be represented within 64 KiB.'); }\n    if (copy.kind !== 'permission' || !['codex','claudeCode','fx','opencode','copilot','cursor'].includes(copy.harness) || typeof copy.message !== 'string')\n      throw new AgentError('INPUT_REQUIRED','The native permission request cannot be represented.');\n    validateApprovalSchema(copy.requestedSchema);\n    const requestId = `req_${randomUUID()}`;\n    const snapshot: ApprovalRequest = {...copy,requestId,taskId,sessionId};\n    if (Buffer.byteLength(JSON.stringify(snapshot)) > 64 * 1024)\n      throw new AgentError('INPUT_REQUIRED','The native permission request cannot be represented within 64 KiB.');\n    let sdk:SdkApprovalRequest|AgentError;\n    let actions:Map<string,ActionMapping>;\n    try { const normalized=normalize(snapshot); sdk=normalized.request; actions=normalized.actions; }\n    catch(error) {\n      if (!(error instanceof AgentError) || error.code !== 'INPUT_REQUIRED') throw error;\n      sdk=error; actions=new Map();\n    }\n    const answer = new Promise<ApprovalContent>((resolve,reject) => {\n      const abort = () => this.retire(requestId);\n      this.pending.set(requestId,{outcome:'pending',request:snapshot,sdk,actions,\n        continuation:{resolve,reject,cleanup:() => signal.removeEventListener('abort',abort)}});\n      signal.addEventListener('abort',abort,{once:true});\n    });\n    this.changed(taskId);\n    return answer;\n  }\n\n  request(id: string): RequestIdentity {\n    const pending = this.pending.get(id);\n    if (pending) return identity(pending.request);\n    const settled = this.settled.get(id);\n    if (!settled) throw unknown();\n    return {...settled.identity};\n  }\n\n  respond(id: string, content: unknown) {\n    const pending = this.pending.get(id);\n    if (!pending) {\n      const settled = this.settled.get(id);\n      if (!settled) throw unknown();\n      if (settled.outcome === 'withdrawn') throw expired();\n      this.validateBoundedContent(content);\n      let answer:ApprovalContent;\n      try { answer=canonicalBySchema(settled.schema,validateApprovalContent(settled.schema,content)); }\n      catch { invalidResponse(); }\n      if (!isDeepStrictEqual(settled.answer,answer))\n        throw new AgentError('INVALID_APPROVAL_RESPONSE','This permission request already has a different answer.');\n      return this.receipt(settled.identity);\n    }\n    this.validateBoundedContent(content);\n    const answer = canonicalBySchema(pending.request.requestedSchema,validateApprovalContent(pending.request.requestedSchema,content));\n    const requestIdentity = identity(pending.request);\n    this.pending.delete(id);\n    pending.continuation.cleanup();\n    this.retain({outcome:'answered',identity:requestIdentity,answer:structuredClone(answer),\n      schema:structuredClone(pending.request.requestedSchema),actions:pending.actions});\n    pending.continuation.resolve(answer);\n    this.changed(requestIdentity.taskId);\n    return this.receipt(requestIdentity);\n  }\n\n  pendingFor(taskId: string): ApprovalRequest[] {\n    return [...this.pending.values()].filter(entry => entry.request.taskId === taskId)\n      .map(entry => structuredClone(entry.request));\n  }\n\n  sdkPendingFor(taskId: string): SdkApprovalRequest[] {\n    return [...this.pending.values()].filter(entry => entry.request.taskId === taskId)\n      .map(entry => {\n        if (entry.sdk instanceof AgentError) throw new AgentError(entry.sdk.code,entry.sdk.message);\n        return structuredClone(entry.sdk);\n      });\n  }\n\n  respondSdk(id: string, response: unknown) {\n    const entry = this.pending.get(id) ?? this.settled.get(id);\n    if (!entry) throw unknown();\n    if (entry.outcome === 'withdrawn') throw expired();\n    this.validateBoundedContent(response);\n    if (!plain(response) || Reflect.ownKeys(response).some(key => typeof key !== 'string' || !['actionId','grants'].includes(key))\n      || typeof response.actionId !== 'string') invalidResponse();\n    const mapping = entry.actions.get(response.actionId);\n    if (!mapping) invalidResponse();\n    const submitted = response as unknown as ApprovalResponse;\n    let native = structuredClone(mapping.native);\n    if (mapping.grants) {\n      if (mapping.action.decision !== 'allow' || !Array.isArray(submitted.grants)\n        || submitted.grants.some(value => typeof value !== 'string') || new Set(submitted.grants).size !== submitted.grants.length\n        || submitted.grants.some(value => !mapping.grants!.includes(value))) invalidResponse();\n      const selected = new Set(submitted.grants);\n      native = {...native, grants: mapping.grants.filter(id => selected.has(id))};\n    } else if (Object.hasOwn(response,'grants')) invalidResponse();\n    return this.respond(id,native);\n  }\n\n  retireTask(taskId: string) {\n    for (const [id,entry] of this.pending) if (entry.request.taskId === taskId) this.retire(id);\n  }\n\n  close() { for (const id of [...this.pending.keys()]) this.retire(id); }\n\n  private retire(id: string) {\n    const entry = this.pending.get(id);\n    if (!entry) return;\n    const requestIdentity = identity(entry.request);\n    this.pending.delete(id);\n    entry.continuation.cleanup();\n    this.retain({outcome:'withdrawn',identity:requestIdentity});\n    entry.continuation.reject(expired());\n    this.changed(requestIdentity.taskId);\n  }\n\n  private retain(entry: SettledEntry) {\n    this.settled.set(entry.identity.requestId,entry);\n    while (this.settled.size > MAX_SETTLED_REQUESTS) {\n      const oldest = this.settled.keys().next().value;\n      if (oldest !== undefined) this.settled.delete(oldest);\n    }\n  }\n\n  private validateBoundedContent(content: unknown) {\n    let serialized: string | undefined;\n    try { serialized = JSON.stringify(content); } catch { /* Report no submitted data. */ }\n    if (!serialized || Buffer.byteLength(serialized) > 16 * 1024)\n      throw new AgentError('INVALID_APPROVAL_RESPONSE','Approval content must be a JSON object within 16 KiB.');\n  }\n\n  private receipt(request: RequestIdentity) {\n    return {version:1 as const,type:'approval_answered' as const,requestId:request.requestId,\n      taskId:request.taskId,sessionId:request.sessionId};\n  }\n}\n\nfunction invalidResponse(): never {\n  throw new AgentError('INVALID_APPROVAL_RESPONSE','The approval response does not match the requested actions.');\n}\n\nfunction plain(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value)\n    && [Object.prototype,null].includes(Object.getPrototypeOf(value));\n}\n\nfunction normalize(request: ApprovalRequest): {request: SdkApprovalRequest; actions: Map<string,ActionMapping>} {\n  const actions = new Map<string,ActionMapping>();\n  const grantsField = request.requestedSchema.properties.grants;\n  const scopeField = request.requestedSchema.properties.scope;\n  let grants: {id:string;label:string}[] | undefined;\n  if (grantsField?.type === 'array' && grantsField.items.anyOf && scopeField?.type === 'string' && scopeField.oneOf) {\n    grants = grantsField.items.anyOf.map(choice => ({id:choice.const,label:choice.title}));\n    for (const choice of scopeField.oneOf) {\n      const scope = choice.const === 'session' ? 'session' : 'turn';\n      const action: ApprovalAction = {id:`act_${randomUUID()}`,label:`Allow for this ${scope}`,decision:'allow',scope};\n      actions.set(action.id,{action,native:{scope:choice.const},grants:grants.map(grant=>grant.id)});\n    }\n  } else {\n    const decision = request.requestedSchema.properties.decision;\n    const choices=decision?.type === 'string'\n      ? (decision.oneOf ?? decision.enum?.map(value=>({const:value,title:value}))) : undefined;\n    if (!choices?.length) invalidNative();\n    for (const choice of choices) {\n      const metadata = decisionMetadata(request,choice.const);\n      const action: ApprovalAction = metadata.decision === 'cancel'\n        ? {id:`act_${randomUUID()}`,label:choice.title,decision:'cancel'}\n        : {id:`act_${randomUUID()}`,label:choice.title,decision:metadata.decision,scope:metadata.scope,\n            ...(metadata.scope === 'session' ? {description:'Applies to this native conversation.'} : {})};\n      actions.set(action.id,{action,native:{decision:choice.const}});\n    }\n  }\n  if (!actions.size) invalidNative();\n  const groups=new Map<string,ActionMapping[]>();\n  for (const mapping of actions.values()) {\n    const key=mapping.action.decision === 'cancel' ? 'cancel' : `${mapping.action.decision}:${mapping.action.scope}`;\n    const group=groups.get(key) ?? []; group.push(mapping); groups.set(key,group);\n  }\n  for (const group of groups.values()) if (group.length > 1) for (const mapping of group) {\n    const native=typeof mapping.native.decision === 'string' ? mapping.native.decision : String(mapping.native.scope);\n    mapping.action={...mapping.action,description:[mapping.action.description,`Native option: ${native}`].filter(Boolean).join(' ')};\n  }\n  return {request:{id:request.requestId,taskId:request.taskId,sessionId:request.sessionId,harness:request.harness,\n    message:request.message,actions:[...actions.values()].map(value=>value.action),\n    ...(grants ? {grants} : {}),...(request.context ? {context:structuredClone(request.context)} : {})},actions};\n}\n\nfunction invalidNative(): never {\n  throw new AgentError('INPUT_REQUIRED','The native permission request cannot be represented.');\n}\n\nfunction decisionMetadata(request: ApprovalRequest, value: string): {decision:'allow'|'deny';scope:'once'|'session'} | {decision:'cancel'} {\n  const options = Array.isArray(request.context?.options) ? request.context.options : [];\n  const offered = options.find(option => plain(option) && (option.optionId === value));\n  const kind = plain(offered) && typeof offered.kind === 'string' ? offered.kind : value;\n  if (kind === 'cancel') return {decision:'cancel'};\n  if (['acceptForSession','allow_session','allow_always'].includes(kind)) return {decision:'allow',scope:'session'};\n  if (kind === 'reject_always') return {decision:'deny',scope:'session'};\n  if (['accept','allow','allow_once','once','approve-once'].includes(kind)) return {decision:'allow',scope:'once'};\n  if (['decline','deny','reject','reject_once'].includes(kind)) return {decision:'deny',scope:'once'};\n  invalidNative();\n}\n\nfunction canonicalBySchema(schema:ApprovalSchema,answer:ApprovalContent):ApprovalContent {\n  if (!Array.isArray(answer.grants)) return answer;\n  const field=schema.properties.grants;\n  if (field?.type !== 'array') return answer;\n  const order=(field.items.anyOf ?? field.items.enum?.map(value=>({const:value,title:value})) ?? []).map(choice=>choice.const);\n  const selected=new Set(answer.grants);\n  return {...answer,grants:order.filter(value=>selected.has(value))};\n}\n"]}

package/dist/runtime/capture.d.ts

@@ -0,0 +1,22 @@
+import type { HarnessConfig } from '../sdk/types.js';
+import type { CatalogEnvironment } from './catalog.js';
+import type { ExecutionReference, PreparedExecution } from './types.js';
+export interface CapturedChild {
+    readonly name: string;
+    readonly description: string;
+}
+export interface CapturedExecution {
+    readonly reference: ExecutionReference;
+    readonly prepared: PreparedExecution;
+    readonly children: readonly CapturedChild[];
+    child(name: string): Promise<CapturedExecution>;
+}
+interface CaptureOptions {
+    workerModule?: URL;
+    shutdownTimeoutMs?: number;
+}
+export declare function captureExecution(agent: string | HarnessConfig, input: CatalogEnvironment, options?: CaptureOptions): Promise<CapturedExecution>;
+/** Captures an already resolved private CLI reference without applying public connected validation. */
+export declare function captureReference(reference: ExecutionReference, input: CatalogEnvironment, options?: CaptureOptions): Promise<CapturedExecution>;
+export declare function checkCapturedExecution(captured: CapturedExecution, input: CatalogEnvironment): Promise<void>;
+export {};