taskflow-hosts 0.1.8 → 0.2.1

package/dist/grok-runner.js

@@ -0,0 +1,350 @@
+/**
+ * Grok Build subagent runner — the Grok host's `SubagentRunner` implementation.
+ *
+ * Spawns an isolated `grok -p --output-format streaming-json` process per task
+ * and folds its NDJSON event stream into the same host-neutral `RunResult` the
+ * pi/codex/claude/opencode runners produce, so the engine (runtime.ts) treats a
+ * Grok subagent identically.
+ *
+ * Official headless streaming-json schema (docs.x.ai / ~/.grok/docs/user-guide/14-headless-mode.md):
+ *   {"type":"text","data":"…"}                         ← response text chunk
+ *   {"type":"thought","data":"…"}                      ← reasoning (not answer)
+ *   {"type":"end","stopReason":"EndTurn","sessionId":"…","requestId":"…"}
+ *   {"type":"error","message":"…"}                     ← fatal
+ *   (also non-exhaustive: max_turns_reached, auto_compact_*, …)
+ *
+ * Mapping to the host-neutral contract:
+ *   - output       = concatenated `text` event data (final answer)
+ *   - lastActivity = latest text/thought chunk or end/error summary
+ *   - usage        = zeros today because Grok 0.2.93 streaming-json does not
+ *                    emit token/cost fields. The runner advertises that fact
+ *                    so budgeted MCP runs are rejected instead of silently
+ *                    running without a ceiling.
+ *   - failure      = an `error` event, or a non-zero process exit
+ *
+ * Permission mapping (codex `sandboxForTools` analogue):
+ *   - read-only whitelist → an operator-configured custom profile extending
+ *     `read-only`, a known-good `--tools` allowlist, and mutator deny rules
+ *   - mutating / no whitelist → an operator-configured custom sandbox plus
+ *     `--always-approve`. Grok's built-in profiles can warn and continue
+ *     unsandboxed on unsupported hosts; explicit custom profiles fail closed.
+ *
+ * Process handling (idle watchdog, abort, signal-kill, stderr cap, sanitize)
+ * is delegated to shared `runSubagentProcess` in taskflow-core.
+ *
+ * @see https://docs.x.ai/build/overview
+ * @see ~/.grok/docs/user-guide/14-headless-mode.md
+ * @see ~/.grok/docs/user-guide/07-mcp-servers.md
+ * @see ~/.grok/docs/user-guide/09-plugins.md
+ */
+import { runSubagentProcess, sanitizeErrorMessage, unknownAgentResult, } from "taskflow-core";
+import { emptyUsage } from "taskflow-core";
+import { filteredChildEnv } from "./child-env.js";
+/**
+ * Grok built-in tool ids a read-only phase may use. Web ids are deliberately
+ * omitted because Grok 0.2.93's allowlist parser fails open on them.
+ */
+const READ_ONLY_TOOL_MAP = {
+    read: "read_file",
+    read_file: "read_file",
+    grep: "grep",
+    glob: "list_dir",
+    ls: "list_dir",
+    list: "list_dir",
+    list_dir: "list_dir",
+};
+/**
+ * Defence in depth for Grok 0.2.93. That version warns that web_search /
+ * web_fetch are "unmappable" in `--tools` and then restores its full toolset.
+ * We therefore never put those ids in the allowlist, and also remove every
+ * known mutator after allowlist processing. `--deny` is a second, independent
+ * enforcement layer in case a future CLI regresses allowlist handling again.
+ */
+const MUTATING_GROK_TOOLS = ["run_terminal_cmd", "search_replace", "write", "write_file", "Agent"];
+/** Custom sandbox profile required for mutating Grok phases. Built-in profiles
+ * may warn and continue without enforcement when the host cannot apply them;
+ * Grok documents explicitly requested custom profiles as fail-closed. */
+export const GROK_MUTATING_SANDBOX_PROFILE_ENV = "PI_TASKFLOW_GROK_MUTATING_SANDBOX_PROFILE";
+export const GROK_READONLY_SANDBOX_PROFILE_ENV = "PI_TASKFLOW_GROK_READONLY_SANDBOX_PROFILE";
+const BUILTIN_GROK_SANDBOX_PROFILES = new Set(["off", "workspace", "devbox", "read-only", "strict"]);
+export function newGrokAccumulator(model) {
+    return { usage: emptyUsage(), model, finalText: "", lastActivity: "" };
+}
+/**
+ * Fold one Grok streaming-json NDJSON line into the accumulator. Returns a
+ * LiveUpdate when the stream produced new activity, else null. Empty/malformed
+ * lines are ignored — robust to partial buffers and noise, unit-testable
+ * without spawning a process.
+ */
+export function foldGrokEventLine(acc, line) {
+    if (!line.trim())
+        return null;
+    let event;
+    try {
+        event = JSON.parse(line);
+    }
+    catch {
+        return null;
+    }
+    let activity = "";
+    const type = typeof event.type === "string" ? event.type : "";
+    switch (type) {
+        case "text": {
+            const data = typeof event.data === "string" ? event.data : "";
+            if (data) {
+                acc.finalText += data;
+                activity = data.trim() || acc.finalText.trim();
+            }
+            break;
+        }
+        case "thought": {
+            const data = typeof event.data === "string" ? event.data : "";
+            if (data.trim())
+                activity = data.trim();
+            break;
+        }
+        case "end": {
+            acc.terminalSeen = true;
+            if (typeof event.stopReason === "string")
+                acc.stopReason = event.stopReason;
+            if (typeof event.sessionId === "string")
+                acc.sessionId = event.sessionId;
+            // Some builds may put the full text on the end event as a convenience.
+            if (typeof event.text === "string" && event.text.trim() && !acc.finalText.trim()) {
+                acc.finalText = event.text;
+            }
+            activity = acc.finalText.trim() || `end:${acc.stopReason ?? "unknown"}`;
+            break;
+        }
+        case "error": {
+            const msg = (typeof event.message === "string" && event.message.trim()) ||
+                (typeof event.data === "string" && event.data.trim()) ||
+                "grok run failed";
+            acc.fatalError = msg;
+            activity = `error: ${msg}`;
+            break;
+        }
+        case "max_turns_reached": {
+            const msg = (typeof event.message === "string" && event.message.trim()) ||
+                (typeof event.data === "string" && event.data.trim()) ||
+                "grok reached its maximum turn limit before completing the task";
+            acc.fatalError = msg;
+            acc.stopReason = "max_turns_reached";
+            activity = `error: ${msg}`;
+            break;
+        }
+        default:
+            // auto_compact_* / unknown — ignore for forward compatibility.
+            return null;
+    }
+    if (activity)
+        acc.lastActivity = activity.replace(/\s+/g, " ").trim();
+    return { text: acc.lastActivity, usage: { ...acc.usage }, model: acc.model };
+}
+/** Override the grok binary (tests / unusual installs). */
+export function grokBin() {
+    return process.env.PI_TASKFLOW_GROK_BIN || "grok";
+}
+export function grokChildEnv(source = process.env) {
+    return filteredChildEnv(source, [], ["GROK_", "XAI_", "PI_TASKFLOW_GROK_"]);
+}
+/**
+ * Map a phase's tool whitelist to Grok headless permission flags.
+ *
+ * - no whitelist / mutating tools → an operator-configured fail-closed custom
+ *   sandbox plus `--always-approve`
+ * - read-only whitelist → a fail-closed custom read-only sandbox plus a narrow
+ *   allowlist and independent deny rules (still pairs with `--always-approve`
+ *   so the remaining safe tools never block on confirm)
+ */
+export function resolveGrokMutatingSandboxProfile(env = process.env) {
+    const profile = env[GROK_MUTATING_SANDBOX_PROFILE_ENV]?.trim();
+    return profile || undefined;
+}
+export function resolveGrokReadOnlySandboxProfile(env = process.env) {
+    const profile = env[GROK_READONLY_SANDBOX_PROFILE_ENV]?.trim();
+    return profile || undefined;
+}
+function requireCustomSandbox(profile, envName, phaseKind) {
+    if (!profile) {
+        throw new Error(`${phaseKind} Grok phases require a fail-closed custom sandbox profile. ` +
+            `Define one in ~/.grok/sandbox.toml and set ${envName}=<profile>.`);
+    }
+    if (BUILTIN_GROK_SANDBOX_PROFILES.has(profile)) {
+        throw new Error(`Grok sandbox '${profile}' is built in and may continue unsandboxed when enforcement is unavailable. ` +
+            `${envName} must name a custom profile from ~/.grok/sandbox.toml.`);
+    }
+    return profile;
+}
+export function permissionArgsForGrokTools(tools, mutatingSandboxProfile, readOnlySandboxProfile) {
+    if (!tools || tools.length === 0) {
+        return ["--sandbox", requireCustomSandbox(mutatingSandboxProfile, GROK_MUTATING_SANDBOX_PROFILE_ENV, "Mutating/default"), "--always-approve"];
+    }
+    const mutating = new Set([
+        "write",
+        "write_file",
+        "edit",
+        "bash",
+        "apply_patch",
+        "run_terminal_cmd",
+        "run_terminal_command",
+        "search_replace",
+    ]);
+    const canMutate = tools.some((t) => mutating.has(t));
+    if (canMutate) {
+        return ["--sandbox", requireCustomSandbox(mutatingSandboxProfile, GROK_MUTATING_SANDBOX_PROFILE_ENV, "Mutating"), "--always-approve"];
+    }
+    const allowed = [...new Set(tools.map((t) => READ_ONLY_TOOL_MAP[t]).filter((t) => Boolean(t)))];
+    // Keep the allowlist non-empty: an empty --tools value is treated as if the
+    // flag were absent by some Grok builds, which would fail open to all tools.
+    if (allowed.length === 0)
+        allowed.push("read_file");
+    return [
+        "--sandbox",
+        requireCustomSandbox(readOnlySandboxProfile, GROK_READONLY_SANDBOX_PROFILE_ENV, "Read-only"),
+        "--tools",
+        allowed.join(","),
+        "--disallowed-tools",
+        MUTATING_GROK_TOOLS.join(","),
+        "--deny",
+        "Bash",
+        "--deny",
+        "Edit",
+        "--deny",
+        "Write",
+        "--deny",
+        "MCPTool",
+        "--no-subagents",
+        "--always-approve",
+    ];
+}
+/** Map Taskflow/Pi thinking levels to Grok's --reasoning-effort contract. */
+export function resolveGrokThinking(thinking) {
+    if (!thinking)
+        return undefined;
+    const normalized = thinking.trim().toLowerCase();
+    if (normalized === "off")
+        return "none";
+    if (normalized === "ultra")
+        return "max";
+    if (["none", "minimal", "low", "medium", "high", "xhigh", "max"].includes(normalized))
+        return normalized;
+    throw new Error(`Unsupported Grok thinking level '${thinking}'. Use off, none, minimal, low, medium, high, xhigh, max, or ultra.`);
+}
+/**
+ * Resolve a modelRoles/pi model id for `grok -m`, or `undefined` to let Grok
+ * use its configured default. Drop pi-provider paths (contain `/` with more
+ * than one segment is rare for grok; a single slash may be a custom model id
+ * from config.toml `[model.x]`) and unresolved `{{placeholder}}`s.
+ *
+ * Grok custom models are flat keys in `~/.grok/config.toml` (e.g. `my-model`,
+ * `grok-build`); pi-style `provider/model` paths are not valid Grok model ids
+ * unless the user defined them literally.
+ */
+export function resolveGrokModel(model) {
+    if (!model)
+        return undefined;
+    if (/^\{\{.*\}\}$/.test(model))
+        return undefined;
+    // Drop openrouter multi-segment paths (openrouter/vendor/model).
+    if ((model.match(/\//g)?.length ?? 0) >= 2)
+        return undefined;
+    // Drop pi thinking suffixes.
+    if (/:\s*(?:xhigh|high|medium|low|off)$/.test(model))
+        return undefined;
+    return model;
+}
+/**
+ * Build the full `grok -p` argv from a phase's resolved context — PURE
+ * (no process.env, no spawn). Extracted so the host's CLI flag contract is
+ * unit-testable in CI without a live Grok session.
+ *
+ *   grok -p <task> --output-format streaming-json
+ *        [--sandbox <custom-mutating> --always-approve |
+ *         --sandbox <custom-read-only> --tools … --always-approve]
+ *        [--model m] [--reasoning-effort level] [--cwd dir] [--rules systemPrompt]
+ */
+export function buildGrokArgs(ctx) {
+    const grokModel = resolveGrokModel(ctx.model);
+    const grokThinking = resolveGrokThinking(ctx.thinking);
+    const args = ["-p", ctx.task, "--output-format", "streaming-json"];
+    args.push(...permissionArgsForGrokTools(ctx.tools, ctx.mutatingSandboxProfile, ctx.readOnlySandboxProfile));
+    if (grokModel)
+        args.push("-m", grokModel);
+    if (grokThinking)
+        args.push("--reasoning-effort", grokThinking);
+    if (ctx.cwd)
+        args.push("--cwd", ctx.cwd);
+    if (ctx.systemPrompt.trim())
+        args.push("--rules", ctx.systemPrompt.trim());
+    return args;
+}
+/**
+ * Run a single subagent task via `grok -p --output-format streaming-json`.
+ * Resolves the agent from `agents` by name; returns the same structured
+ * `RunResult` the other host runners do.
+ */
+export async function runGrokAgentTask(defaultCwd, agents, agentName, task, opts, globalThinking) {
+    const agent = agents.find((a) => a.name === agentName);
+    if (!agent)
+        return unknownAgentResult(agentName, task, agents);
+    const model = opts.model ?? agent.model;
+    const tools = opts.tools ?? agent.tools;
+    const thinking = opts.thinking ?? agent.thinking ?? globalThinking;
+    const cwd = opts.cwd ?? defaultCwd;
+    let args;
+    try {
+        args = buildGrokArgs({
+            systemPrompt: agent.systemPrompt,
+            task,
+            model,
+            thinking,
+            tools,
+            cwd,
+            mutatingSandboxProfile: resolveGrokMutatingSandboxProfile(),
+            readOnlySandboxProfile: resolveGrokReadOnlySandboxProfile(),
+        });
+    }
+    catch (error) {
+        const message = sanitizeErrorMessage(error instanceof Error ? error.message : String(error));
+        return {
+            agent: agentName,
+            task,
+            exitCode: 1,
+            output: "",
+            stderr: message,
+            usage: emptyUsage(),
+            model,
+            stopReason: "error",
+            errorMessage: message,
+        };
+    }
+    return runSubagentProcess({
+        agent: agentName,
+        task,
+        model,
+        bin: grokBin(),
+        args,
+        env: grokChildEnv(),
+        cwd,
+        idleTimeoutMs: opts.idleTimeoutMs,
+        signal: opts.signal,
+        onLive: opts.onLive,
+        acc: newGrokAccumulator(model),
+        foldLine: foldGrokEventLine,
+        requireTerminalEvent: true,
+        terminalEventLabel: "Grok end",
+    });
+}
+// Preserve the capability when consumers inject the bare function into
+// RuntimeDeps instead of passing the SubagentRunner object through an adapter.
+runGrokAgentTask.usageAccounting = "unavailable";
+/**
+ * The Grok host's `SubagentRunner`. Drops into `RuntimeDeps.runTask` exactly
+ * like the other host runners, so the engine runs unchanged on Grok Build.
+ */
+export const grokSubagentRunner = {
+    runTask: runGrokAgentTask,
+    usageAccounting: "unavailable",
+};
+//# sourceMappingURL=grok-runner.js.map

package/dist/grok-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-runner.js","sourceRoot":"","sources":["../src/grok-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EACN,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,GAOlB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD;;;GAGG;AACH,MAAM,kBAAkB,GAAqC;IAC5D,IAAI,EAAE,WAAW;IACjB,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,UAAU;IAChB,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,UAAU;CACpB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;AAEnG;;yEAEyE;AACzE,MAAM,CAAC,MAAM,iCAAiC,GAAG,2CAA2C,CAAC;AAC7F,MAAM,CAAC,MAAM,iCAAiC,GAAG,2CAA2C,CAAC;AAC7F,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAkBrG,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAChD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAoB,EAAE,IAAY;IACnE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,KAA8B,CAAC;IACnC,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9D,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,IAAI,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC;gBACtB,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAChD,CAAC;YACD,MAAM;QACP,CAAC;QACD,KAAK,SAAS,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,IAAI,IAAI,CAAC,IAAI,EAAE;gBAAE,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM;QACP,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACZ,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;YACxB,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;gBAAE,GAAG,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;YAC5E,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;gBAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YACzE,uEAAuE;YACvE,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClF,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC;YAC5B,CAAC;YACD,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,OAAO,GAAG,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC;YACxE,MAAM;QACP,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACd,MAAM,GAAG,GACR,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC3D,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACrD,iBAAiB,CAAC;YACnB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,QAAQ,GAAG,UAAU,GAAG,EAAE,CAAC;YAC3B,MAAM;QACP,CAAC;QACD,KAAK,mBAAmB,EAAE,CAAC;YAC1B,MAAM,GAAG,GACR,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC3D,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACrD,gEAAgE,CAAC;YAClE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,UAAU,GAAG,mBAAmB,CAAC;YACrC,QAAQ,GAAG,UAAU,GAAG,EAAE,CAAC;YAC3B,MAAM;QACP,CAAC;QACD;YACC,+DAA+D;YAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ;QAAE,GAAG,CAAC,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AAC9E,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,OAAO;IACtB,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAM,GAAsB,OAAO,CAAC,GAAG;IACnE,OAAO,gBAAgB,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iCAAiC,CAChD,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,GAAG,CAAC,iCAAiC,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/D,OAAO,OAAO,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,iCAAiC,CAChD,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,GAAG,CAAC,iCAAiC,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/D,OAAO,OAAO,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED,SAAS,oBAAoB,CAAC,OAA2B,EAAE,OAAe,EAAE,SAAiB;IAC5F,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACd,GAAG,SAAS,6DAA6D;YACxE,8CAA8C,OAAO,aAAa,CACnE,CAAC;IACH,CAAC;IACD,IAAI,6BAA6B,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACd,iBAAiB,OAAO,8EAA8E;YACrG,GAAG,OAAO,wDAAwD,CACnE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACzC,KAA2B,EAC3B,sBAA+B,EAC/B,sBAA+B;IAE/B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,WAAW,EAAE,oBAAoB,CAAC,sBAAsB,EAAE,iCAAiC,EAAE,kBAAkB,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC/I,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;QACxB,OAAO;QACP,YAAY;QACZ,MAAM;QACN,MAAM;QACN,aAAa;QACb,kBAAkB;QAClB,sBAAsB;QACtB,gBAAgB;KAChB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,WAAW,EAAE,oBAAoB,CAAC,sBAAsB,EAAE,iCAAiC,EAAE,UAAU,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACvI,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7G,4EAA4E;IAC5E,4EAA4E;IAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,OAAO;QACN,WAAW;QACX,oBAAoB,CAAC,sBAAsB,EAAE,iCAAiC,EAAE,WAAW,CAAC;QAC5F,SAAS;QACT,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QACjB,oBAAoB;QACpB,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7B,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,OAAO;QACP,QAAQ;QACR,SAAS;QACT,gBAAgB;QAChB,kBAAkB;KAClB,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAAC,QAA4B;IAC/D,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IACzG,MAAM,IAAI,KAAK,CACd,oCAAoC,QAAQ,qEAAqE,CACjH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACzD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,iEAAiE;IACjE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7D,6BAA6B;IAC7B,IAAI,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,OAAO,KAAK,CAAC;AACd,CAAC;AAiBD;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,GAAgB;IAC7C,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,IAAI,GAAa,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;IAC7E,IAAI,CAAC,IAAI,CAAC,GAAG,0BAA0B,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,sBAAsB,EAAE,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAC5G,IAAI,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,YAAY;QAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC;IAChE,IAAI,GAAG,CAAC,GAAG;QAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,UAAkB,EAClB,MAAqB,EACrB,SAAiB,EACjB,IAAY,EACZ,IAAgB,EAChB,cAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,kBAAkB,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,IAAI,cAAc,CAAC;IAEnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACnC,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACJ,IAAI,GAAG,aAAa,CAAC;YACpB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI;YACJ,KAAK;YACL,QAAQ;YACR,KAAK;YACL,GAAG;YACH,sBAAsB,EAAE,iCAAiC,EAAE;YAC3D,sBAAsB,EAAE,iCAAiC,EAAE;SAC3D,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7F,OAAO;YACN,KAAK,EAAE,SAAS;YAChB,IAAI;YACJ,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,UAAU,EAAE;YACnB,KAAK;YACL,UAAU,EAAE,OAAO;YACnB,YAAY,EAAE,OAAO;SACrB,CAAC;IACH,CAAC;IAED,OAAO,kBAAkB,CAAC;QACzB,KAAK,EAAE,SAAS;QAChB,IAAI;QACJ,KAAK;QACL,GAAG,EAAE,OAAO,EAAE;QACd,IAAI;QACJ,GAAG,EAAE,YAAY,EAAE;QACnB,GAAG;QACH,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC;QAC9B,QAAQ,EAAE,iBAAiB;QAC3B,oBAAoB,EAAE,IAAI;QAC1B,kBAAkB,EAAE,UAAU;KAC9B,CAAC,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,+EAA+E;AAC9E,gBAAiF,CAAC,eAAe,GAAG,aAAa,CAAC;AAEnH;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAgC;IAC9D,OAAO,EAAE,gBAAgB;IACzB,eAAe,EAAE,aAAa;CAC9B,CAAC"}

package/dist/index.d.ts

@@ -1,20 +1,21 @@
 /**
  * taskflow-hosts — the shared collection of host-runner implementations.
  *
- * Each non-pi host (codex / claude / opencode) has two halves:
+ * Each non-pi host (codex / claude / opencode / grok) has two halves:
  *   1. the **runner** — a `SubagentRunner` that spawns that host's CLI, folds
  *      its event stream, and classifies the outcome into a host-neutral
  *      `RunResult`. PLUS the pure argv builders (`buildXxxArgs`) and
  *      permission/model helpers.
  *   2. the **delivery** — the per-host MCP server + bin + plugin scaffold,
  *      which lives in that host's own package (codex-taskflow /
- *      claude-taskflow / opencode-taskflow) because it's the host-ecosystem
- *      install target (`codex plugin add`, `claude plugin install`, …).
+ *      claude-taskflow / opencode-taskflow / grok-taskflow) because it's the
+ *      host-ecosystem install target (`codex plugin add`, `claude plugin
+ *      install`, `grok plugin install`, …).
  *
  * This package holds only #1 — the runners — so all host runners live in one
  * place. A new host adds a `<host>-runner.ts` here; its delivery package
- * imports the runner from `taskflow-hosts`. The three legacy host packages
- * re-export from here (or import the runner directly into their `mcp/server`).
+ * imports the runner from `taskflow-hosts`. Host delivery packages re-export
+ * from here (or import the runner directly into their `mcp/server`).
  *
  * The barrel re-exports the full public surface of each runner so a consumer
  * can `import { codexSubagentRunner, buildCodexArgs } from "taskflow-hosts"`,
@@ -23,4 +24,5 @@
 export * from "./codex-runner.ts";
 export * from "./claude-runner.ts";
 export * from "./opencode-runner.ts";
+export * from "./grok-runner.ts";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC"}

package/dist/index.js

@@ -1,20 +1,21 @@
 /**
  * taskflow-hosts — the shared collection of host-runner implementations.
  *
- * Each non-pi host (codex / claude / opencode) has two halves:
+ * Each non-pi host (codex / claude / opencode / grok) has two halves:
  *   1. the **runner** — a `SubagentRunner` that spawns that host's CLI, folds
  *      its event stream, and classifies the outcome into a host-neutral
  *      `RunResult`. PLUS the pure argv builders (`buildXxxArgs`) and
  *      permission/model helpers.
  *   2. the **delivery** — the per-host MCP server + bin + plugin scaffold,
  *      which lives in that host's own package (codex-taskflow /
- *      claude-taskflow / opencode-taskflow) because it's the host-ecosystem
- *      install target (`codex plugin add`, `claude plugin install`, …).
+ *      claude-taskflow / opencode-taskflow / grok-taskflow) because it's the
+ *      host-ecosystem install target (`codex plugin add`, `claude plugin
+ *      install`, `grok plugin install`, …).
  *
  * This package holds only #1 — the runners — so all host runners live in one
  * place. A new host adds a `<host>-runner.ts` here; its delivery package
- * imports the runner from `taskflow-hosts`. The three legacy host packages
- * re-export from here (or import the runner directly into their `mcp/server`).
+ * imports the runner from `taskflow-hosts`. Host delivery packages re-export
+ * from here (or import the runner directly into their `mcp/server`).
  *
  * The barrel re-exports the full public surface of each runner so a consumer
  * can `import { codexSubagentRunner, buildCodexArgs } from "taskflow-hosts"`,
@@ -23,4 +24,5 @@
 export * from "./codex-runner.js";
 export * from "./claude-runner.js";
 export * from "./opencode-runner.js";
+export * from "./grok-runner.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC"}

package/dist/opencode-runner.d.ts

@@ -36,6 +36,15 @@
  * error sanitization) mirrors the other runners so behavior is uniform.
  */
 import { type AgentConfig, type LiveUpdate, type RunOptions, type RunResult, type SubagentRunner, type UsageStats } from "taskflow-core";
+/** The permission policy injected (via OPENCODE_CONFIG_CONTENT) for a read-only
+ *  phase: deny every mutating capability so a listed-tools phase without
+ *  write/edit/bash cannot change the workspace. */
+export declare const OPENCODE_READ_ONLY_CONFIG: string;
+/** Explicit operator acknowledgement required before OpenCode may use its
+ * unsandboxed `--auto` mode for mutating/default-capable phases. */
+export declare const OPENCODE_UNSAFE_AUTO_ENV = "PI_TASKFLOW_OPENCODE_UNSAFE_AUTO";
+export declare function opencodeUnsafeAutoEnabled(env?: NodeJS.ProcessEnv): boolean;
+export declare function opencodeChildEnv(source?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
 /** Accumulated state folded from an opencode JSON event stream. */
 export interface OpencodeAccumulator {
     usage: UsageStats;
@@ -45,6 +54,7 @@ export interface OpencodeAccumulator {
     lastActivity: string;
     /** Set when the stream reported a fatal `error` event. */
     fatalError?: string;
+    terminalSeen?: boolean;
 }
 export declare function newOpencodeAccumulator(model?: string): OpencodeAccumulator;
 /**
@@ -74,14 +84,20 @@ export declare function isReadOnlyPhase(tools: string[] | undefined): boolean;
  * A clean `provider/model` passes straight through.
  */
 export declare function resolveOpencodeModel(model: string | undefined): string | undefined;
+/** Normalize Taskflow aliases before OpenCode resolves the provider-specific variant. */
+export declare function resolveOpencodeThinking(thinking: string | undefined): string | undefined;
 /** Context for {@link buildOpencodeArgs} — the pure inputs to argv construction. */
 export interface OpencodeArgsCtx {
     systemPrompt: string;
     task: string;
     /** Already-resolved model (opts.model ?? agent.model). */
     model?: string;
+    /** Resolved phase -> agent -> global reasoning variant. */
+    thinking?: string;
     tools?: string[];
     cwd?: string;
+    /** Explicit acknowledgement for OpenCode's unsandboxed `--auto` mode. */
+    allowUnsafeAuto?: boolean;
 }
 /** Result of {@link buildOpencodeArgs}: the argv plus whether a read-only
  *  permission policy should be injected via OPENCODE_CONFIG_CONTENT (the env

package/dist/opencode-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"opencode-runner.d.ts","sourceRoot":"","sources":["../src/opencode-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAIN,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,MAAM,eAAe,CAAC;AAQvB,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,sBAAsB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAE1E;AAcD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAwD/F;AAED,+DAA+D;AAC/D,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,OAAO,CAIpE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CASlF;AAED,oFAAoF;AACpF,MAAM,WAAW,eAAe;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;oEAEoE;AACpE,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,iFAAiF;IACjF,QAAQ,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,eAAe,GAAG,YAAY,CAWpE;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACzC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,WAAW,EAAE,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAChB,cAAc,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,SAAS,CAAC,CAiCpB;AAED;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,cAAc,CAAC,WAAW,CAE9D,CAAC"}
+{"version":3,"file":"opencode-runner.d.ts","sourceRoot":"","sources":["../src/opencode-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAKN,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,MAAM,eAAe,CAAC;AAIvB;;mDAEmD;AACnD,eAAO,MAAM,yBAAyB,QAQpC,CAAC;AAEH;oEACoE;AACpE,eAAO,MAAM,wBAAwB,qCAAqC,CAAC;AAE3E,wBAAgB,yBAAyB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEvF;AAED,wBAAgB,gBAAgB,CAAC,MAAM,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAM3F;AAED,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,wBAAgB,sBAAsB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAE1E;AAcD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CA8D/F;AAED,+DAA+D;AAC/D,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,OAAO,CAIpE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CASlF;AAED,yFAAyF;AACzF,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CASxF;AAED,oFAAoF;AACpF,MAAM,WAAW,eAAe;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,eAAe,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;oEAEoE;AACpE,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,iFAAiF;IACjF,QAAQ,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,eAAe,GAAG,YAAY,CAqBpE;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACzC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,WAAW,EAAE,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAChB,cAAc,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,SAAS,CAAC,CAuDpB;AAED;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,cAAc,CAAC,WAAW,CAE9D,CAAC"}