titan-agent 6.1.0-beta.2 → 6.1.0-beta.21

package/dist/agent/toolRunner.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/agent/toolRunner.ts"],"sourcesContent":["/**\n * TITAN — Tool Runner\n * Executes tool calls from the LLM with sandboxing, timeouts, and result formatting.\n */\nimport type { ToolCall, ToolDefinition } from '../providers/base.js';\nimport { appendFileSync, readFileSync, existsSync } from 'fs';\nimport { TELEMETRY_EVENTS_PATH } from '../utils/constants.js';\nimport { executeToolsParallel } from './parallelTools.js';\nimport { capToolOutput } from './toolOutputCap.js';\nimport { runPreTool, runPostTool } from '../plugins/contextEngine.js';\nimport type { ContextEnginePlugin } from '../plugins/contextEngine.js';\n\n/** Tool hook plugins — set during agent initialization */\nlet toolHookPlugins: ContextEnginePlugin[] = [];\nexport function setToolHookPlugins(plugins: ContextEnginePlugin[]): void {\n    toolHookPlugins = plugins;\n}\nimport logger from '../utils/logger.js';\nimport { loadConfig } from '../config/config.js';\nimport { checkAutonomy } from './autonomy.js';\nimport { isToolSkillEnabled } from '../skills/registry.js';\nimport { redactSecrets } from '../security/secretGuard.js';\nimport { scanAndRedactPII, fullExfilScan } from '../security/exfilScan.js';\nimport { scanCommand, scanURL } from '../security/preExecScan.js';\nimport { runPreToolShellHooks, runPostToolShellHooks } from '../hooks/shellHooks.js';\nimport { createCheckpoint } from '../checkpoint/manager.js';\n\n/** Compute a lightweight unified diff between old and new file content */\nfunction computeUnifiedDiff(filePath: string, oldContent: string, newContent: string): string {\n    if (oldContent === newContent) return `// No changes to ${filePath}`;\n    const oldLines = oldContent.split('\\n');\n    const newLines = newContent.split('\\n');\n    const header = `--- ${filePath}\\n+++ ${filePath}`;\n    const hunks: string[] = [];\n    let i = 0, j = 0;\n    while (i < oldLines.length || j < newLines.length) {\n        if (i < oldLines.length && j < newLines.length && oldLines[i] === newLines[j]) {\n            i++; j++; continue;\n        }\n        const startI = i, startJ = j;\n        const removed: string[] = [];\n        const added: string[] = [];\n        while (i < oldLines.length && (j >= newLines.length || oldLines[i] !== newLines[j])) {\n            removed.push(oldLines[i++]);\n        }\n        while (j < newLines.length && (i >= oldLines.length || oldLines[i] !== newLines[j])) {\n            added.push(newLines[j++]);\n        }\n        if (removed.length || added.length) {\n            const ctxBefore = oldLines.slice(Math.max(0, startI - 2), startI);\n            const ctxAfter = oldLines.slice(i, Math.min(oldLines.length, i + 2));\n            hunks.push([\n                ...ctxBefore.map(l => ` ${l}`),\n                ...removed.map(l => `-${l}`),\n                ...added.map(l => `+${l}`),\n                ...ctxAfter.map(l => ` ${l}`),\n            ].join('\\n'));\n        }\n    }\n    const body = hunks.join('\\n---\\n');\n    return `${header}\\n${body}`;\n}\nimport { getCachedToolResult, cacheToolResult } from './trajectoryCompressor.js';\nimport { classifyProviderError, FailoverReason } from '../providers/errorTaxonomy.js';\nimport { snapshotBeforeWrite } from './shadowGit.js';\nimport { captureWrite, shouldCapture } from './selfProposals.js';\nimport { getSessionGoal } from './autonomyContext.js';\n\nconst COMPONENT = 'ToolRunner';\n\n/**\n * Tools whose entire purpose is to RETURN a data: URL for the LLM\n * to embed in downstream output. These bypass `sanitizeBase64` (which\n * would strip the very thing they were called to produce) and the\n * 30KB smart-truncation (which would chop the data URL mid-base64\n * making it unembeddable).\n *\n * v6.1.0-alpha.55 added `download_image` here. Tony spotted the bug\n * the way only Tony would: \"Why doesn't TITAN download the images\n * itself?\" → we added the tool in alpha.53 → ToolRunner sanitizer\n * stripped its output → Writer never saw the data URL → hotlinked\n * external URLs instead → alpha.52 placeholder caught them →\n * appearance of \"alpha.53 doesn't work.\" It worked perfectly. We\n * were just throwing away its output two lines later.\n *\n * If you add a new tool here, also update the 30KB truncation\n * exemption below (line ~685) since both share this list.\n */\nconst DATA_URL_PRODUCING_TOOLS = new Set([\n    'download_image',\n]);\n\n/**\n * G1: Sanitize base64 image data from tool results (OpenClaw pattern).\n * Prevents token explosion when vision/screenshot tools return raw base64.\n * Replaces data URIs with a compact placeholder showing byte count.\n *\n * v6.1.0-alpha.55 — takes optional `toolName` so we can EXEMPT the\n * tools whose entire output IS a data URL (see\n * DATA_URL_PRODUCING_TOOLS above). Default behavior unchanged for\n * every other tool.\n */\nfunction sanitizeBase64(content: string, toolName?: string): string {\n    if (toolName && DATA_URL_PRODUCING_TOOLS.has(toolName)) return content;\n    return content.replace(\n        /data:image\\/[^;]+;base64,[A-Za-z0-9+/=]{100,}/g,\n        (match) => {\n            const bytes = Math.ceil((match.length - match.indexOf(',') - 1) * 0.75);\n            return `[image: ${(bytes / 1024).toFixed(1)}KB omitted]`;\n        },\n    );\n}\n\n/**\n * v6.1.0-alpha.55 — exported alias for tests + future callers. The\n * Set is the source of truth for \"tools that intentionally return a\n * data: URL for the LLM to embed downstream.\"\n */\nexport function isDataUrlProducingTool(toolName: string): boolean {\n    return DATA_URL_PRODUCING_TOOLS.has(toolName);\n}\n\n/** Error classification for retry decisions */\nexport type ErrorClass = 'transient' | 'permanent' | 'timeout' | 'rate_limit';\n\n/** Classify an error to determine if retry is appropriate.\n * Delegates to the centralized error taxonomy, then maps back to ErrorClass\n * for backward compatibility with tool execution retry logic.\n */\nexport function classifyError(error: Error, _toolName: string): ErrorClass {\n    const classified = classifyProviderError(error);\n    switch (classified.reason) {\n        case FailoverReason.TIMEOUT:\n            return 'timeout';\n        case FailoverReason.RATE_LIMIT:\n            return 'rate_limit';\n        case FailoverReason.SERVER_ERROR:\n        case FailoverReason.NETWORK_ERROR:\n        case FailoverReason.OVERLOADED:\n        case FailoverReason.EMPTY_RESPONSE:\n            return 'transient';\n        default:\n            return classified.retryable ? 'transient' : 'permanent';\n    }\n}\n\n/** Tool execution result */\nexport interface ToolResult {\n    toolCallId: string;\n    name: string;\n    content: string;\n    success: boolean;\n    durationMs: number;\n    /** Number of retry attempts made (0 = first try succeeded/failed) */\n    retryCount?: number;\n    /** Error classification if the tool failed */\n    errorClass?: ErrorClass;\n    /** Inline unified diff for file-modifying tools (write_file, edit_file, apply_patch) */\n    diff?: string;\n    /** v5.0: True when the tool is paused waiting for human approval */\n    approvalPending?: boolean;\n    /** v5.0: Approval request ID when approvalPending is true */\n    approvalRequestId?: string;\n}\n\n/** A registered tool handler */\nexport interface ToolHandler {\n    name: string;\n    description: string;\n    parameters: Record<string, unknown>;\n    execute: (args: Record<string, unknown>) => Promise<string>;\n}\n\n/** Global tool registry */\nconst toolRegistry: Map<string, ToolHandler> = new Map();\n\n/** Register a tool */\nexport function registerTool(handler: ToolHandler): void {\n    toolRegistry.set(handler.name, handler);\n    logger.debug(COMPONENT, `Registered tool: ${handler.name}`);\n}\n\n/** Unregister a tool */\nexport function unregisterTool(name: string): void {\n    toolRegistry.delete(name);\n}\n\n/** Get all registered tools */\nexport function getRegisteredTools(): ToolHandler[] {\n    return Array.from(toolRegistry.values());\n}\n\n/** Convert registered tools to LLM tool definitions */\nexport function getToolDefinitions(): ToolDefinition[] {\n    const config = loadConfig();\n    const allowed = new Set(config.security.allowedTools);\n    const denied = new Set(config.security.deniedTools);\n\n    return Array.from(toolRegistry.values())\n        .filter((tool) => {\n            if (denied.has(tool.name)) return false;\n            if (allowed.size > 0 && !allowed.has(tool.name)) return false;\n            if (!isToolSkillEnabled(tool.name)) return false;\n            return true;\n        })\n        .map((tool) => ({\n            type: 'function' as const,\n            function: {\n                name: tool.name,\n                description: tool.description,\n                parameters: tool.parameters,\n            },\n        }));\n}\n\n/** Execute a single tool call */\nexport async function executeTool(toolCall: ToolCall, channel?: string): Promise<ToolResult> {\n    const config = loadConfig();\n    const startTime = Date.now();\n    const handler = toolRegistry.get(toolCall.function.name);\n\n    if (!handler) {\n        // LangGraph pattern: tell the LLM which tools actually exist so it can self-correct\n        const available = Array.from(toolRegistry.keys()).sort();\n        const suggestions = available.filter(t => {\n            const name = toolCall.function.name.toLowerCase();\n            return t.toLowerCase().includes(name.slice(0, 4)) || name.includes(t.slice(0, 4));\n        }).slice(0, 5);\n        const hint = suggestions.length > 0\n            ? `\\nDid you mean: ${suggestions.join(', ')}?`\n            : `\\nAvailable tools include: ${available.slice(0, 20).join(', ')}${available.length > 20 ? ` (and ${available.length - 20} more)` : ''}`;\n        return {\n            toolCallId: toolCall.id,\n            name: toolCall.function.name,\n            content: `Error: \"${toolCall.function.name}\" is not a valid tool.${hint}\\nPlease use one of the available tools.`,\n            success: false,\n            durationMs: Date.now() - startTime,\n        };\n    }\n\n    // Check permissions\n    if (config.security.deniedTools.includes(handler.name)) {\n        return {\n            toolCallId: toolCall.id,\n            name: handler.name,\n            content: `Error: Tool \"${handler.name}\" is denied by security policy`,\n            success: false,\n            durationMs: Date.now() - startTime,\n        };\n    }\n\n    // Check if parent skill is enabled\n    if (!isToolSkillEnabled(handler.name)) {\n        return {\n            toolCallId: toolCall.id,\n            name: handler.name,\n            content: `Error: Tool \"${handler.name}\" is disabled — its parent skill is turned off. Enable it in Mission Control.`,\n            success: false,\n            durationMs: Date.now() - startTime,\n        };\n    }\n\n    // Parse arguments\n    let args: Record<string, unknown> = {};\n    try {\n        args = JSON.parse(toolCall.function.arguments);\n    } catch (parseErr) {\n        logger.warn('ToolRunner', `Malformed JSON args for ${handler.name}: ${(parseErr as Error).message} — raw: ${(toolCall.function.arguments || '').slice(0, 200)}`);\n        // Try to salvage: if it looks like a truncated JSON, extract what we can\n        const salvageMatch = (toolCall.function.arguments || '').match(/\\{[\\s\\S]*/);\n        if (salvageMatch) {\n            try {\n                // Attempt to close the JSON and parse\n                const fixed = salvageMatch[0].replace(/,?\\s*$/, '}');\n                args = JSON.parse(fixed);\n                logger.info('ToolRunner', `Salvaged partial JSON args for ${handler.name}`);\n            } catch {\n                // A5: Return error instead of executing with empty args (LangGraph pattern)\n                return {\n                    toolCallId: toolCall.id,\n                    name: handler.name,\n                    content: `Error: Could not parse arguments for \"${handler.name}\". Raw: ${(toolCall.function.arguments || '').slice(0, 200)}. Please provide valid JSON arguments.`,\n                    success: false,\n                    durationMs: Date.now() - startTime,\n                };\n            }\n        }\n    }\n\n    // Schema validation: check required parameters before execution (LangGraph pattern)\n    if (handler.parameters && typeof handler.parameters === 'object') {\n        const schema = handler.parameters as { required?: string[]; properties?: Record<string, unknown> };\n        if (schema.required && Array.isArray(schema.required)) {\n            const missing = schema.required.filter(key => args[key] === undefined || args[key] === null);\n            if (missing.length > 0) {\n                const available = schema.properties ? Object.keys(schema.properties) : [];\n                logger.warn('ToolRunner', `[SchemaValidation] ${handler.name}: missing required params: ${missing.join(', ')}`);\n                return {\n                    toolCallId: toolCall.id,\n                    name: handler.name,\n                    content: `Error: Missing required parameter(s): ${missing.join(', ')}. ` +\n                        `Expected parameters: ${available.join(', ')}. Please provide all required arguments.`,\n                    success: false,\n                    durationMs: Date.now() - startTime,\n                };\n            }\n        }\n    }\n\n    // v6.1.0-alpha.11 — Worktree scope (spike).\n    //\n    // When the current async context has a worktree scope active (see\n    // src/agent/worktreeScope.ts), redirect mutating tool writes into\n    // the scope's worktree directory. Lets multiple concurrent spawns\n    // write the \"same\" filename without colliding. Pure-path-rewrite\n    // — the tool still runs, just into a different absolute path.\n    //\n    // This runs BEFORE guardrails so guardrails see the rewritten\n    // absolute path, not the LLM's original relative path (which\n    // resolves against cwd and may falsely trigger system-path\n    // protections). The self-mod scope-lock further below picks up\n    // the same rewritten path; in practice worktree paths live under\n    // ~/.titan/worktrees which isn't on the self-mod target list, so\n    // self-mod stays a no-op for worktree-scoped writes.\n    const MUTATING_TOOLS_FOR_WORKTREE = new Set(['write_file', 'edit_file', 'append_file', 'apply_patch']);\n    if (MUTATING_TOOLS_FOR_WORKTREE.has(handler.name)) {\n        try {\n            const { getCurrentWorktreeScope } = await import('./worktreeScope.js');\n            const wtScope = getCurrentWorktreeScope();\n            if (wtScope) {\n                const rawPath = (args.path || args.file_path || args.filePath) as string | undefined;\n                if (typeof rawPath === 'string' && rawPath.length > 0) {\n                    if (rawPath.startsWith('/') || rawPath.startsWith('~')) {\n                        return {\n                            toolCallId: toolCall.id,\n                            name: handler.name,\n                            content: `Error: this spawn runs in a worktree scope (${wtScope.subtaskId}). File writes must use RELATIVE paths — got \"${rawPath}\". Rewrite to something like \"output.md\" or \"src/foo.ts\" without a leading \"/\" or \"~\".`,\n                            success: false,\n                            durationMs: Date.now() - startTime,\n                        };\n                    }\n                    const { join: joinPath, dirname } = await import('path');\n                    const { mkdirSync } = await import('fs');\n                    const newPath = joinPath(wtScope.path, rawPath);\n                    if (args.path !== undefined) args.path = newPath;\n                    if (args.file_path !== undefined) args.file_path = newPath;\n                    if (args.filePath !== undefined) args.filePath = newPath;\n                    try { mkdirSync(dirname(newPath), { recursive: true }); }\n                    catch { /* best-effort */ }\n                    logger.debug(COMPONENT, `[Worktree] Redirected ${handler.name} → ${newPath} (scope: ${wtScope.goalId}/${wtScope.subtaskId})`);\n                }\n            }\n        } catch (err) {\n            logger.debug(COMPONENT, `Worktree scope check skipped: ${(err as Error).message}`);\n        }\n    }\n\n    // Guardrails: validate tool call before execution\n    try {\n        const { guardToolCall } = await import('./guardrails.js');\n        const guardResult = guardToolCall(handler.name, args);\n        if (!guardResult.allowed) {\n            logger.warn('ToolRunner', `[Guardrails] Blocked ${handler.name}: ${guardResult.reason}`);\n            return {\n                toolCallId: toolCall.id,\n                name: handler.name,\n                content: `Error: Tool call blocked by guardrails — ${guardResult.reason}`,\n                success: false,\n                durationMs: Date.now() - startTime,\n            };\n        }\n    } catch { /* guardrails unavailable — continue */ }\n\n    // Read-only tool result cache (60s TTL, helper self-gates to read-only allowlist)\n    const cacheArgKey = toolCall.function.arguments || '{}';\n    const cachedResult = getCachedToolResult(handler.name, cacheArgKey);\n    if (cachedResult !== null) {\n        logger.info(COMPONENT, `[Cache HIT] ${handler.name}`);\n        return {\n            toolCallId: toolCall.id,\n            name: handler.name,\n            content: cachedResult,\n            success: true,\n            durationMs: Date.now() - startTime,\n        };\n    }\n\n    logger.info(COMPONENT, `Executing tool: ${handler.name}`);\n\n    // v5.0: Pre-execution scanner for dangerous commands\n    if (handler.name === 'shell' || handler.name === 'code_exec') {\n        const cmdArg = (args.command || args.code || args.script || '') as string;\n        const scan = scanCommand(cmdArg);\n        if (!scan.allowed) {\n            return {\n                toolCallId: toolCall.id,\n                name: handler.name,\n                content: `Error: Pre-execution scan blocked this command\\n${scan.warnings.join('\\n')}`,\n                success: false,\n                durationMs: Date.now() - startTime,\n            };\n        }\n        if (scan.warnings.length > 0 && scan.level === 'warn') {\n            logger.warn('ToolRunner', `Pre-exec warnings for ${handler.name}: ${scan.warnings.join('; ')}`);\n        }\n    }\n    if (handler.name === 'browser_navigate' || handler.name === 'browser_auto_nav') {\n        const urlArg = (args.url || args.target || '') as string;\n        const scan = scanURL(urlArg);\n        if (!scan.allowed) {\n            return {\n                toolCallId: toolCall.id,\n                name: handler.name,\n                content: `Error: Pre-execution scan blocked this URL\\n${scan.warnings.join('\\n')}`,\n                success: false,\n                durationMs: Date.now() - startTime,\n            };\n        }\n    }\n\n    // v5.0: Shell hooks — pre-tool\n    const { getCurrentSessionId } = await import('./agent.js');\n    const sessionId = typeof getCurrentSessionId === 'function' ? getCurrentSessionId() : null;\n    const shellPre = await runPreToolShellHooks(handler.name, args, sessionId || toolCall.id, 'default', 0);\n    if (!shellPre.allow) {\n        return {\n            toolCallId: toolCall.id,\n            name: handler.name,\n            content: 'Blocked by shell hook: ' + (shellPre.reason || 'Hook denied execution'),\n            success: false,\n            durationMs: Date.now() - startTime,\n        };\n    }\n    if (shellPre.modifiedArgs) args = shellPre.modifiedArgs;\n\n    // Pre-tool hooks — plugins can block or modify args\n    if (toolHookPlugins.length > 0) {\n        const hookResult = await runPreTool(toolHookPlugins, handler.name, args);\n        if (!hookResult.allow) {\n            return {\n                toolCallId: toolCall.id,\n                name: handler.name,\n                content: 'Blocked by hook: ' + (hookResult.reason || 'Plugin denied execution'),\n                success: false,\n                durationMs: Date.now() - startTime,\n            };\n        }\n        if (hookResult.modifiedArgs) args = hookResult.modifiedArgs;\n    }\n\n    // Autonomy gate: check if the tool is permitted under current mode\n    const autonomyResult = await checkAutonomy(handler.name, args, channel);\n    if (!autonomyResult.allowed) {\n        return {\n            toolCallId: toolCall.id,\n            name: handler.name,\n            content: 'Action blocked by autonomy policy: ' + (autonomyResult.reason || 'Not permitted'),\n            success: false,\n            durationMs: Date.now() - startTime,\n        };\n    }\n\n    // Shadow git checkpoint — snapshot files before mutation (fire-and-forget)\n    const MUTATING_TOOLS = new Set(['write_file', 'edit_file', 'append_file', 'apply_patch']);\n\n    // v4.9.0-local.7: kill-switch gate for file mutations. If the kill switch\n    // is engaged, refuse write/edit/append/apply_patch so the initiative loop\n    // can't keep accumulating fix-oscillations while the human hasn't resumed.\n    // This closes the gap where `spawn_agent`, `autopilot`, and the pressure\n    // cycle were gated but the main agent's tool path was not — meaning\n    // initiative could keep rewriting the same files for hours after a kill.\n    // See kill-switch.json `history` for the trigger; resume via\n    // POST /api/safety/resume.\n    if (MUTATING_TOOLS.has(handler.name)) {\n        try {\n            const { isKilled, getState } = await import('../safety/killSwitch.js');\n            if (isKilled()) {\n                const state = getState();\n                const lastReason = state?.lastEvent?.reason ?? 'kill switch engaged';\n                logger.warn(COMPONENT, `[KillSwitch] Refusing ${handler.name} — ${lastReason}`);\n                return {\n                    toolCallId: toolCall.id,\n                    name: handler.name,\n                    content: `Error: File mutation refused — kill switch is engaged (${lastReason}). ` +\n                        `Resume via POST /api/safety/resume after investigating the trigger, ` +\n                        `then retry. Do NOT retry this tool call until resumed.`,\n                    success: false,\n                    durationMs: Date.now() - startTime,\n                };\n            }\n        } catch { /* kill switch module unavailable — fall through (fail-open on infra error) */ }\n    }\n\n    // v4.9.0-local.8: Self-mod scope lock + staging.\n    //\n    // Three-layer policy when the active session has a goal tagged as\n    // self-modifying (see config.autonomy.selfMod.tags):\n    //   1. Writes to paths OUTSIDE config.autonomy.selfMod.target are refused\n    //      (prevents LARPing self-improvement by writing to ~/titan-saas etc)\n    //   2. When staging is enabled, writes INSIDE target are diverted to a\n    //      per-goal staging directory and a `self_mod_pr` approval is filed\n    //   3. The original path is stored as `targetPath` on the staging entry\n    //      so the human sees what would land where if they approve the PR\n    //\n    // This is the deeper fix for the pattern observed 2026-04-18 where a\n    // \"self-healing framework\" goal completed 100% by writing to an unrelated\n    // Next.js app.\n    let stagedRedirect: { stagedPath: string; targetPath: string } | null = null;\n    if (MUTATING_TOOLS.has(handler.name)) {\n        const rawFilePath = (args.path || args.file_path || args.filePath) as string | undefined;\n        if (rawFilePath) {\n            try {\n                const { getCurrentSessionId } = await import('./agent.js');\n                const { decideScope } = await import('./selfModStaging.js');\n                const sid: string | null = typeof getCurrentSessionId === 'function' ? getCurrentSessionId() : null;\n                const decision = decideScope(sid, rawFilePath);\n                if (decision.action === 'reject') {\n                    logger.warn(COMPONENT, `[ScopeLock] Refusing ${handler.name}: ${decision.reason}`);\n                    return {\n                        toolCallId: toolCall.id,\n                        name: handler.name,\n                        content: `Error: ${decision.reason}\\n\\nRewrite the path to live inside the self-mod target, OR retag the goal to remove self-mod tags, OR pause the goal and create a properly-scoped one.`,\n                        success: false,\n                        durationMs: Date.now() - startTime,\n                    };\n                }\n                if (decision.action === 'stage' && decision.stagedPath && decision.targetPath) {\n                    stagedRedirect = { stagedPath: decision.stagedPath, targetPath: decision.targetPath };\n                    // Rewrite the tool args so the handler writes to staging.\n                    // Preserve both `path` and `file_path` variants since\n                    // different tools use different field names.\n                    if (args.path !== undefined) args.path = decision.stagedPath;\n                    if (args.file_path !== undefined) args.file_path = decision.stagedPath;\n                    if (args.filePath !== undefined) args.filePath = decision.stagedPath;\n                    // Ensure the staged parent dir exists; write_file may not\n                    // mkdir -p on all code paths.\n                    try {\n                        const { mkdirSync } = await import('fs');\n                        const { dirname } = await import('path');\n                        mkdirSync(dirname(decision.stagedPath), { recursive: true });\n                    } catch { /* best-effort */ }\n                    logger.info(COMPONENT, `[SelfModStaging] Diverting ${handler.name} → ${decision.stagedPath} (would land at ${decision.targetPath} on approval)`);\n                }\n            } catch (err) {\n                logger.debug(COMPONENT, `[ScopeLock] check failed (fail-open): ${(err as Error).message}`);\n            }\n        }\n    }\n\n    // v5.0: Filesystem checkpoint before destructive operations\n    if (MUTATING_TOOLS.has(handler.name)) {\n        const cpPaths: string[] = [];\n        const cpPath = (args.path || args.file_path || args.filePath) as string;\n        if (cpPath) cpPaths.push(cpPath);\n        if (cpPaths.length > 0) {\n            createCheckpoint(sessionId || toolCall.id, handler.name, args, cpPaths);\n        }\n    }\n\n    if (MUTATING_TOOLS.has(handler.name)) {\n        // Use the (potentially rewritten) path for shadow-git + fix-oscillation\n        const filePath = (args.path || args.file_path || args.filePath) as string;\n        if (filePath) {\n            snapshotBeforeWrite(handler.name, filePath).catch(err =>\n                logger.debug(COMPONENT, `Shadow checkpoint skipped: ${(err as Error).message}`),\n            );\n            // v4.9.0: fix-oscillation tracker. Same file written/edited\n            // twice within 24h flags as oscillation, which feeds the\n            // kill switch (3+ oscillations → kill). Best-effort — never\n            // blocks the write.\n            (async () => {\n                try {\n                    const { recordFixEvent } = await import('../safety/fixOscillation.js');\n                    recordFixEvent({\n                        target: filePath,\n                        kind: 'file',\n                        detail: `${handler.name} via ${channel ?? 'unknown'}`,\n                    });\n                } catch (err) {\n                    logger.debug(COMPONENT, `Fix-oscillation skipped: ${(err as Error).message}`);\n                }\n            })();\n        }\n        // v4.8.0: self-proposal capture — if this write is happening inside\n        // an autonomous Soma-driven session, stash a copy for specialist\n        // review. Fire-and-forget — never blocks tool execution.\n        captureSelfProposalIfApplicable(handler.name, args).catch(err =>\n            logger.debug(COMPONENT, `Self-proposal capture skipped: ${(err as Error).message}`),\n        );\n    }\n\n    // Per-tool timeout lookup\n    const toolTimeouts = (config.security as Record<string, unknown>).toolTimeouts as Record<string, number> | undefined;\n    const baseTimeout = toolTimeouts?.[handler.name] || config.security.commandTimeout || 30000;\n\n    // Retry config\n    const retryConfig = (config.security as Record<string, unknown>).toolRetry as { enabled?: boolean; maxRetries?: number; backoffBaseMs?: number } | undefined;\n    const retryEnabled = retryConfig?.enabled !== false;\n    const maxRetries = retryConfig?.maxRetries ?? 3;\n    const backoffBase = retryConfig?.backoffBaseMs ?? 1000;\n\n    let lastError: Error | null = null;\n    let lastErrorClass: ErrorClass = 'permanent';\n    let attempt = 0;\n\n    // Capture pre-execution file state for diff generation\n    let preContent: string | undefined;\n    let filePathForDiff: string | undefined;\n    if (['write_file', 'edit_file', 'apply_patch'].includes(handler.name)) {\n        const pathArg = args.path as string | undefined;\n        if (pathArg) {\n            filePathForDiff = pathArg;\n            try {\n                if (existsSync(pathArg)) preContent = readFileSync(pathArg, 'utf-8');\n            } catch { /* ignore read errors */ }\n        }\n    }\n\n    // Swarm invariants — hard safety rules (fail-open)\n    try {\n        const { checkInvariants } = await import('../safety/invariants.js');\n        const invariant = checkInvariants(handler.name, args);\n        if (!invariant.pass) {\n            logger.warn(COMPONENT, `[Invariant] Blocked ${handler.name}: ${invariant.reason}`);\n            return {\n                toolCallId: toolCall.id,\n                name: handler.name,\n                content: `INVARIANT_VIOLATION: ${invariant.reason}`,\n                success: false,\n                durationMs: Date.now() - startTime,\n            };\n        }\n    } catch (err) {\n        logger.warn(COMPONENT, `Invariant check failed (fail-open): ${(err as Error).message}`);\n    }\n\n    // v5.0: Approval gates — human-in-the-loop before executing dangerous tools.\n    // This wires the approval_gates.ts skill into the execution path, closing the\n    // safety gap identified during the 2026-04-28 overnight audit.\n    try {\n        const { requiresApproval, createApprovalRequest } = await import('../skills/builtin/approval_gates.js');\n        if (requiresApproval(handler.name)) {\n            logger.info(COMPONENT, `[ApprovalGate] Tool \"${handler.name}\" requires human approval — filing request`);\n            const request = createApprovalRequest(handler.name, args, sessionId || toolCall.id);\n            if (request.status === 'pending') {\n                return {\n                    toolCallId: toolCall.id,\n                    name: handler.name,\n                    content: `Awaiting approval: Tool \"${handler.name}\" requires human confirmation before execution. ` +\n                        `Request ID: ${request.id}. ` +\n                        `Approve with \"approve ${request.id}\" or deny with \"deny ${request.id}\".`,\n                    success: false,\n                    // v5.0: Signal to the loop that this is an approval pause, not a failure\n                    approvalPending: true,\n                    approvalRequestId: request.id,\n                    durationMs: Date.now() - startTime,\n                };\n            }\n            // If request was auto-denied (e.g. preference set to 'always_deny'), 'createApprovalRequest'\n            // returns a request with status 'denied' and we should abort.\n            if (request.status === 'denied') {\n                return {\n                    toolCallId: toolCall.id,\n                    name: handler.name,\n                    content: `Error: Tool \"${handler.name}\" was auto-denied by approval policy. ` +\n                        `Check approval preferences or change the request decision.`,\n                    success: false,\n                    durationMs: Date.now() - startTime,\n                };\n            }\n        }\n    } catch (approvalErr) {\n        // Approval gates module unavailable → fail-open so the agent doesn't deadlock\n        logger.warn(COMPONENT, `Approval gate check failed (fail-open): ${(approvalErr as Error).message}`);\n    }\n\n    for (; attempt <= (retryEnabled ? maxRetries : 0); attempt++) {\n        try {\n            // On timeout retry, double the timeout\n            const timeout = (attempt > 0 && lastErrorClass === 'timeout') ? baseTimeout * 2 : baseTimeout;\n\n            let result = await Promise.race([\n                handler.execute(args),\n                new Promise<string>((_, reject) =>\n                    setTimeout(() => reject(new Error(`Tool \"${handler.name}\" timed out after ${timeout}ms`)), timeout)\n                ),\n            ]);\n\n            // Secret exfiltration guard — scan tool output before it leaves\n            result = redactSecrets(result);\n\n            // v5.0: PII redaction (privacy compliance)\n            const config = loadConfig();\n            if (config.security?.redactPII) {\n                result = scanAndRedactPII(result);\n            }\n\n            // v5.0: Full exfiltration scan (layer 2-5) when configured\n            if (config.security?.secretScan?.level === 'full') {\n                const scan = fullExfilScan(result, 'tool_output');\n                if (scan.blocked) {\n                    logger.warn('ToolRunner', `Exfiltration scan blocked ${handler.name}: ${scan.findings.map(f => f.type).join(', ')}`);\n                }\n                result = scan.redacted;\n            }\n\n            const durationMs = Date.now() - startTime;\n            if (attempt > 0) {\n                logger.info(COMPONENT, `Tool ${handler.name} succeeded on retry ${attempt} in ${durationMs}ms`);\n            } else {\n                logger.info(COMPONENT, `Tool ${handler.name} completed in ${durationMs}ms`);\n            }\n\n            // G1: Strip base64 image data before size check (prevents token\n            // explosion). v6.1.0-alpha.55 — passes tool name so\n            // DATA_URL_PRODUCING_TOOLS (download_image) get exempted; for\n            // those the data URL IS the point of calling the tool.\n            let finalContent = sanitizeBase64(result, handler.name);\n\n            // Smart truncation — keep head + tail for large results (TITAN pattern).\n            // v6.1.0-alpha.55 — DATA_URL_PRODUCING_TOOLS are exempted because\n            // truncating mid-base64 produces an unusable data URL. The Writer\n            // would then fall back to hotlinking the source URL, which is\n            // exactly what Tony was seeing before alpha.55 (\"alpha.53 didn't\n            // work\" — it did, this layer was killing it).\n            if (finalContent.length > 30000 && !DATA_URL_PRODUCING_TOOLS.has(handler.name)) {\n                const head = finalContent.slice(0, 20000);\n                const tail = finalContent.slice(-5000);\n                finalContent = head + '\\n\\n[... ' + (finalContent.length - 25000) + ' chars omitted ...]\\n\\n' + tail;\n                logger.info(COMPONENT, `Tool ${handler.name} output truncated: ${result.length} → ${finalContent.length} chars`);\n            }\n\n            // v5.0: Shell hooks — post-tool\n            const shellPost = await runPostToolShellHooks(handler.name, args, finalContent, sessionId || toolCall.id, 'default', 0);\n            if (shellPost !== undefined) finalContent = shellPost;\n\n            // Post-tool hooks — plugins can modify result\n            if (toolHookPlugins.length > 0) {\n                const hookResult = await runPostTool(toolHookPlugins, handler.name, args, { content: finalContent, success: true, durationMs });\n                if (hookResult.modifiedContent !== undefined) finalContent = hookResult.modifiedContent;\n            }\n\n            // Cache the result for read-only tools (helper self-gates)\n            cacheToolResult(handler.name, cacheArgKey, finalContent);\n\n            // v4.9.0-local.8: if this write was diverted to staging, record\n            // it in the self_mod_pr bundle. Fire-and-forget — must NOT block\n            // the tool's return value or the agent loop.\n            if (stagedRedirect) {\n                (async () => {\n                    try {\n                        const { getCurrentSessionId } = await import('./agent.js');\n                        const { recordStagedWrite } = await import('./selfModStaging.js');\n                        const sid: string | null = typeof getCurrentSessionId === 'function' ? getCurrentSessionId() : null;\n                        await recordStagedWrite({\n                            sessionId: sid,\n                            toolName: handler.name,\n                            stagedPath: stagedRedirect!.stagedPath,\n                            targetPath: stagedRedirect!.targetPath,\n                        });\n                    } catch (err) {\n                        logger.debug(COMPONENT, `[SelfModStaging] recordStagedWrite failed: ${(err as Error).message}`);\n                    }\n                })();\n            }\n\n            // Fire-and-forget telemetry + activity log\n            (async () => {\n                try {\n                    const { logActivity } = await import('../telemetry/activityLog.js');\n                    logActivity({ event: 'tool_call', tool: handler.name, channel: channel ?? 'unknown' });\n                    if (MUTATING_TOOLS.has(handler.name)) {\n                        logActivity({ event: 'file_edit', tool: handler.name, path: (args.path || args.file_path || args.filePath) as string | undefined });\n                    }\n                    if (handler.name === 'web_search') {\n                        logActivity({ event: 'web_search', query: (args.query || args.q) as string | undefined });\n                    }\n                    if (handler.name === 'web_fetch') {\n                        logActivity({ event: 'web_fetch', url: (args.url || args.target) as string | undefined });\n                    }\n                    if (handler.name === 'run_eval' || handler.name === 'eval_suite') {\n                        logActivity({ event: 'eval_run', suite: (args.suite || args.name) as string | undefined });\n                    }\n                } catch { /* activity log non-critical */ }\n                const cfg = loadConfig();\n                if (cfg.telemetry?.enabled) {\n                    try {\n                        appendFileSync(TELEMETRY_EVENTS_PATH, JSON.stringify({\n                            event: 'tool_called',\n                            properties: { toolName: handler.name, success: true, durationMs, channel: channel ?? 'unknown' },\n                            timestamp: new Date().toISOString(),\n                        }) + '\\n', 'utf-8');\n                    } catch { /* non-critical */ }\n                }\n                // Remote analytics (PostHog + custom collector)\n                const { trackToolCall } = await import('../analytics/featureTracker.js');\n                const { getCurrentSessionId } = await import('./agent.js').catch(() => ({ getCurrentSessionId: () => null }));\n                const sid = typeof getCurrentSessionId === 'function' ? getCurrentSessionId() : null;\n                trackToolCall(handler.name, true, durationMs, undefined, sid ?? undefined);\n            })();\n\n            // Compute inline diff for file-modifying tools\n            let diff: string | undefined;\n            if (['write_file', 'edit_file', 'apply_patch'].includes(handler.name) && filePathForDiff && !stagedRedirect) {\n                try {\n                    const postContent = existsSync(filePathForDiff) ? readFileSync(filePathForDiff, 'utf-8') : '';\n                    diff = computeUnifiedDiff(filePathForDiff, preContent ?? '', postContent);\n                } catch { /* ignore diff errors */ }\n            }\n\n            return {\n                toolCallId: toolCall.id,\n                name: handler.name,\n                content: stagedRedirect\n                    ? `${finalContent}\\n\\n[SelfModStaging] Diverted to staging: ${stagedRedirect.stagedPath}. A human approval is pending before this lands at ${stagedRedirect.targetPath}.`\n                    : finalContent,\n                success: true,\n                durationMs,\n                retryCount: attempt,\n                diff,\n            };\n        } catch (error) {\n            lastError = error as Error;\n            lastErrorClass = classifyError(lastError, handler.name);\n\n            // Don't retry permanent errors\n            if (lastErrorClass === 'permanent') {\n                break;\n            }\n\n            // Don't retry if this was the last attempt\n            if (attempt >= maxRetries || !retryEnabled) {\n                break;\n            }\n\n            // Exponential backoff: 1s, 2s, 4s (capped at 8s)\n            const delay = Math.min(backoffBase * Math.pow(2, attempt), 8000);\n            logger.warn(COMPONENT, `Tool ${handler.name} failed (${lastErrorClass}, attempt ${attempt + 1}/${maxRetries + 1}): ${lastError.message} — retrying in ${delay}ms`);\n            await new Promise(resolve => setTimeout(resolve, delay));\n        }\n    }\n\n    // All retries exhausted or permanent error\n    const durationMs = Date.now() - startTime;\n    const errorMsg = lastError?.message || 'Unknown error';\n    const retryCount = attempt; // actual number of retries performed (matches success path)\n    logger.error(COMPONENT, `Tool ${handler.name} failed (${lastErrorClass}${retryCount > 0 ? `, ${retryCount} retries` : ''}): ${errorMsg}`);\n\n    // Fire-and-forget telemetry\n    (async () => {\n        const cfg = loadConfig();\n        if (cfg.telemetry?.enabled) {\n            try {\n                appendFileSync(TELEMETRY_EVENTS_PATH, JSON.stringify({\n                    event: 'tool_called',\n                    properties: { toolName: handler.name, success: false, durationMs, errorClass: lastErrorClass, channel: channel ?? 'unknown' },\n                    timestamp: new Date().toISOString(),\n                }) + '\\n', 'utf-8');\n            } catch { /* non-critical */ }\n        }\n        // Remote analytics (PostHog + custom collector)\n        const { trackToolCall } = await import('../analytics/featureTracker.js');\n        const { getCurrentSessionId } = await import('./agent.js').catch(() => ({ getCurrentSessionId: () => null }));\n        const sid = typeof getCurrentSessionId === 'function' ? getCurrentSessionId() : null;\n        trackToolCall(handler.name, false, durationMs, lastErrorClass, sid ?? undefined);\n    })();\n\n    return {\n        toolCallId: toolCall.id,\n        name: handler.name,\n        content: `Error: ${errorMsg}`,\n        success: false,\n        durationMs,\n        retryCount,\n        errorClass: lastErrorClass,\n    };\n}\n\n/** Execute multiple tool calls (in parallel where possible, with write-conflict detection) */\n/**\n * Apply the tool-output cap to every result. v5.8.0 — Anthropic's \"Writing\n * effective tools for AI agents\" recommends a 25k-token cap on tool results\n * with a tool-aware truncation hint. We do it here at the boundary so every\n * caller (agent loop, sub-agent, voice path) benefits without each having\n * to remember to wrap individually.\n * Reference: docs/HARNESS-PATTERNS.md, src/agent/toolOutputCap.ts\n */\nfunction applyOutputCaps(results: ToolResult[]): ToolResult[] {\n    return results.map((r) => {\n        const capped = capToolOutput(r.name, r.content);\n        if (!capped.truncated) return r;\n        // Only mutate when truncation actually happened, preserving identity\n        // when content was already small.\n        logger.info(COMPONENT, `[OutputCap] ${r.name} truncated ${capped.originalSize} → ${capped.content.length} chars`);\n        return { ...r, content: capped.content };\n    });\n}\n\nexport async function executeTools(toolCalls: ToolCall[], channel?: string): Promise<ToolResult[]> {\n    // Single tool — fast path\n    if (toolCalls.length <= 1) {\n        const results = await Promise.all(toolCalls.map(tc => executeTool(tc, channel)));\n        return applyOutputCaps(results);\n    }\n\n    // Multiple tools — use parallelTools engine with write-conflict detection\n    const parallelCalls = toolCalls.map(tc => {\n        let args: Record<string, unknown> = {};\n        try { args = JSON.parse(tc.function.arguments); } catch { /* use empty */ }\n        return { id: tc.id, name: tc.function.name, args };\n    });\n\n    const executor = async (name: string, args: Record<string, unknown>): Promise<string> => {\n        // Build a synthetic ToolCall for executeTool\n        const syntheticTc: ToolCall = {\n            id: '',\n            type: 'function',\n            function: { name, arguments: JSON.stringify(args) },\n        };\n        const result = await executeTool(syntheticTc, channel);\n        return result.content;\n    };\n\n    const parallelResults = await executeToolsParallel(parallelCalls, executor);\n\n    // Map back to ToolResult format with full metadata, then apply output cap.\n    const mapped: ToolResult[] = parallelResults.map(pr => ({\n        toolCallId: pr.toolCallId,\n        name: pr.name,\n        content: pr.content,\n        success: !pr.content.startsWith('Error:'),\n        durationMs: 0,\n    }));\n    return applyOutputCaps(mapped);\n}\n\n// ── Self-proposal capture helper (v4.8.0) ────────────────────────────────\n\n/**\n * If the current write is happening in an autonomous, Soma-driven session,\n * stash a copy of the written content for specialist review. Silent no-op\n * in all other cases (user-driven edits, non-autonomous mode, or when\n * selfMod.enabled is false in config).\n */\nasync function captureSelfProposalIfApplicable(\n    toolName: string,\n    args: Record<string, unknown>,\n): Promise<void> {\n    // Resolve what we can from the current autonomous context\n    const { getCurrentSessionId } = await import('./agent.js').catch(() => ({ getCurrentSessionId: () => null }));\n    const sessionId: string | null = typeof getCurrentSessionId === 'function' ? getCurrentSessionId() : null;\n    const sessionGoal = getSessionGoal(sessionId);\n    const config = loadConfig();\n    const autonomous = (config.autonomy?.mode === 'autonomous');\n    const goalProposedBy = sessionGoal?.proposedBy ?? null;\n\n    if (!shouldCapture({ toolName, autonomous, goalProposedBy })) return;\n\n    const filePath = (args.path || args.file_path || args.filePath) as string | undefined;\n    const content = (args.content || args.new_text || args.data) as string | undefined;\n    if (!filePath || !content) return;\n\n    captureWrite({\n        toolName,\n        filePath,\n        content,\n        sessionId,\n        agentId: null, // filled by downstream if needed\n        goalId: sessionGoal?.goalId ?? null,\n        goalTitle: sessionGoal?.goalTitle ?? null,\n        goalProposedBy,\n    });\n}\n"],"mappings":";AAKA,SAAS,gBAAgB,cAAc,kBAAkB;AACzD,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC,SAAS,qBAAqB;AAC9B,SAAS,YAAY,mBAAmB;AAIxC,IAAI,kBAAyC,CAAC;AACvC,SAAS,mBAAmB,SAAsC;AACrE,oBAAkB;AACtB;AACA,OAAO,YAAY;AACnB,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,0BAA0B;AACnC,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB,qBAAqB;AAChD,SAAS,aAAa,eAAe;AACrC,SAAS,sBAAsB,6BAA6B;AAC5D,SAAS,wBAAwB;AAGjC,SAAS,mBAAmB,UAAkB,YAAoB,YAA4B;AAC1F,MAAI,eAAe,WAAY,QAAO,oBAAoB,QAAQ;AAClE,QAAM,WAAW,WAAW,MAAM,IAAI;AACtC,QAAM,WAAW,WAAW,MAAM,IAAI;AACtC,QAAM,SAAS,OAAO,QAAQ;AAAA,MAAS,QAAQ;AAC/C,QAAM,QAAkB,CAAC;AACzB,MAAI,IAAI,GAAG,IAAI;AACf,SAAO,IAAI,SAAS,UAAU,IAAI,SAAS,QAAQ;AAC/C,QAAI,IAAI,SAAS,UAAU,IAAI,SAAS,UAAU,SAAS,CAAC,MAAM,SAAS,CAAC,GAAG;AAC3E;AAAK;AAAK;AAAA,IACd;AACA,UAAM,SAAS,GAAG,SAAS;AAC3B,UAAM,UAAoB,CAAC;AAC3B,UAAM,QAAkB,CAAC;AACzB,WAAO,IAAI,SAAS,WAAW,KAAK,SAAS,UAAU,SAAS,CAAC,MAAM,SAAS,CAAC,IAAI;AACjF,cAAQ,KAAK,SAAS,GAAG,CAAC;AAAA,IAC9B;AACA,WAAO,IAAI,SAAS,WAAW,KAAK,SAAS,UAAU,SAAS,CAAC,MAAM,SAAS,CAAC,IAAI;AACjF,YAAM,KAAK,SAAS,GAAG,CAAC;AAAA,IAC5B;AACA,QAAI,QAAQ,UAAU,MAAM,QAAQ;AAChC,YAAM,YAAY,SAAS,MAAM,KAAK,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM;AAChE,YAAM,WAAW,SAAS,MAAM,GAAG,KAAK,IAAI,SAAS,QAAQ,IAAI,CAAC,CAAC;AACnE,YAAM,KAAK;AAAA,QACP,GAAG,UAAU,IAAI,OAAK,IAAI,CAAC,EAAE;AAAA,QAC7B,GAAG,QAAQ,IAAI,OAAK,IAAI,CAAC,EAAE;AAAA,QAC3B,GAAG,MAAM,IAAI,OAAK,IAAI,CAAC,EAAE;AAAA,QACzB,GAAG,SAAS,IAAI,OAAK,IAAI,CAAC,EAAE;AAAA,MAChC,EAAE,KAAK,IAAI,CAAC;AAAA,IAChB;AAAA,EACJ;AACA,QAAM,OAAO,MAAM,KAAK,SAAS;AACjC,SAAO,GAAG,MAAM;AAAA,EAAK,IAAI;AAC7B;AACA,SAAS,qBAAqB,uBAAuB;AACrD,SAAS,uBAAuB,sBAAsB;AACtD,SAAS,2BAA2B;AACpC,SAAS,cAAc,qBAAqB;AAC5C,SAAS,sBAAsB;AAE/B,MAAM,YAAY;AAoBlB,MAAM,2BAA2B,oBAAI,IAAI;AAAA,EACrC;AACJ,CAAC;AAYD,SAAS,eAAe,SAAiB,UAA2B;AAChE,MAAI,YAAY,yBAAyB,IAAI,QAAQ,EAAG,QAAO;AAC/D,SAAO,QAAQ;AAAA,IACX;AAAA,IACA,CAAC,UAAU;AACP,YAAM,QAAQ,KAAK,MAAM,MAAM,SAAS,MAAM,QAAQ,GAAG,IAAI,KAAK,IAAI;AACtE,aAAO,YAAY,QAAQ,MAAM,QAAQ,CAAC,CAAC;AAAA,IAC/C;AAAA,EACJ;AACJ;AAOO,SAAS,uBAAuB,UAA2B;AAC9D,SAAO,yBAAyB,IAAI,QAAQ;AAChD;AASO,SAAS,cAAc,OAAc,WAA+B;AACvE,QAAM,aAAa,sBAAsB,KAAK;AAC9C,UAAQ,WAAW,QAAQ;AAAA,IACvB,KAAK,eAAe;AAChB,aAAO;AAAA,IACX,KAAK,eAAe;AAChB,aAAO;AAAA,IACX,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAChB,aAAO;AAAA,IACX;AACI,aAAO,WAAW,YAAY,cAAc;AAAA,EACpD;AACJ;AA8BA,MAAM,eAAyC,oBAAI,IAAI;AAGhD,SAAS,aAAa,SAA4B;AACrD,eAAa,IAAI,QAAQ,MAAM,OAAO;AACtC,SAAO,MAAM,WAAW,oBAAoB,QAAQ,IAAI,EAAE;AAC9D;AAGO,SAAS,eAAe,MAAoB;AAC/C,eAAa,OAAO,IAAI;AAC5B;AAGO,SAAS,qBAAoC;AAChD,SAAO,MAAM,KAAK,aAAa,OAAO,CAAC;AAC3C;AAGO,SAAS,qBAAuC;AACnD,QAAM,SAAS,WAAW;AAC1B,QAAM,UAAU,IAAI,IAAI,OAAO,SAAS,YAAY;AACpD,QAAM,SAAS,IAAI,IAAI,OAAO,SAAS,WAAW;AAElD,SAAO,MAAM,KAAK,aAAa,OAAO,CAAC,EAClC,OAAO,CAAC,SAAS;AACd,QAAI,OAAO,IAAI,KAAK,IAAI,EAAG,QAAO;AAClC,QAAI,QAAQ,OAAO,KAAK,CAAC,QAAQ,IAAI,KAAK,IAAI,EAAG,QAAO;AACxD,QAAI,CAAC,mBAAmB,KAAK,IAAI,EAAG,QAAO;AAC3C,WAAO;AAAA,EACX,CAAC,EACA,IAAI,CAAC,UAAU;AAAA,IACZ,MAAM;AAAA,IACN,UAAU;AAAA,MACN,MAAM,KAAK;AAAA,MACX,aAAa,KAAK;AAAA,MAClB,YAAY,KAAK;AAAA,IACrB;AAAA,EACJ,EAAE;AACV;AAGA,eAAsB,YAAY,UAAoB,SAAuC;AACzF,QAAM,SAAS,WAAW;AAC1B,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,UAAU,aAAa,IAAI,SAAS,SAAS,IAAI;AAEvD,MAAI,CAAC,SAAS;AAEV,UAAM,YAAY,MAAM,KAAK,aAAa,KAAK,CAAC,EAAE,KAAK;AACvD,UAAM,cAAc,UAAU,OAAO,OAAK;AACtC,YAAM,OAAO,SAAS,SAAS,KAAK,YAAY;AAChD,aAAO,EAAE,YAAY,EAAE,SAAS,KAAK,MAAM,GAAG,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,MAAM,GAAG,CAAC,CAAC;AAAA,IACpF,CAAC,EAAE,MAAM,GAAG,CAAC;AACb,UAAM,OAAO,YAAY,SAAS,IAC5B;AAAA,gBAAmB,YAAY,KAAK,IAAI,CAAC,MACzC;AAAA,2BAA8B,UAAU,MAAM,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,GAAG,UAAU,SAAS,KAAK,SAAS,UAAU,SAAS,EAAE,WAAW,EAAE;AAC3I,WAAO;AAAA,MACH,YAAY,SAAS;AAAA,MACrB,MAAM,SAAS,SAAS;AAAA,MACxB,SAAS,WAAW,SAAS,SAAS,IAAI,yBAAyB,IAAI;AAAA;AAAA,MACvE,SAAS;AAAA,MACT,YAAY,KAAK,IAAI,IAAI;AAAA,IAC7B;AAAA,EACJ;AAGA,MAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,IAAI,GAAG;AACpD,WAAO;AAAA,MACH,YAAY,SAAS;AAAA,MACrB,MAAM,QAAQ;AAAA,MACd,SAAS,gBAAgB,QAAQ,IAAI;AAAA,MACrC,SAAS;AAAA,MACT,YAAY,KAAK,IAAI,IAAI;AAAA,IAC7B;AAAA,EACJ;AAGA,MAAI,CAAC,mBAAmB,QAAQ,IAAI,GAAG;AACnC,WAAO;AAAA,MACH,YAAY,SAAS;AAAA,MACrB,MAAM,QAAQ;AAAA,MACd,SAAS,gBAAgB,QAAQ,IAAI;AAAA,MACrC,SAAS;AAAA,MACT,YAAY,KAAK,IAAI,IAAI;AAAA,IAC7B;AAAA,EACJ;AAGA,MAAI,OAAgC,CAAC;AACrC,MAAI;AACA,WAAO,KAAK,MAAM,SAAS,SAAS,SAAS;AAAA,EACjD,SAAS,UAAU;AACf,WAAO,KAAK,cAAc,2BAA2B,QAAQ,IAAI,KAAM,SAAmB,OAAO,iBAAY,SAAS,SAAS,aAAa,IAAI,MAAM,GAAG,GAAG,CAAC,EAAE;AAE/J,UAAM,gBAAgB,SAAS,SAAS,aAAa,IAAI,MAAM,WAAW;AAC1E,QAAI,cAAc;AACd,UAAI;AAEA,cAAM,QAAQ,aAAa,CAAC,EAAE,QAAQ,UAAU,GAAG;AACnD,eAAO,KAAK,MAAM,KAAK;AACvB,eAAO,KAAK,cAAc,kCAAkC,QAAQ,IAAI,EAAE;AAAA,MAC9E,QAAQ;AAEJ,eAAO;AAAA,UACH,YAAY,SAAS;AAAA,UACrB,MAAM,QAAQ;AAAA,UACd,SAAS,yCAAyC,QAAQ,IAAI,YAAY,SAAS,SAAS,aAAa,IAAI,MAAM,GAAG,GAAG,CAAC;AAAA,UAC1H,SAAS;AAAA,UACT,YAAY,KAAK,IAAI,IAAI;AAAA,QAC7B;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ;AAGA,MAAI,QAAQ,cAAc,OAAO,QAAQ,eAAe,UAAU;AAC9D,UAAM,SAAS,QAAQ;AACvB,QAAI,OAAO,YAAY,MAAM,QAAQ,OAAO,QAAQ,GAAG;AACnD,YAAM,UAAU,OAAO,SAAS,OAAO,SAAO,KAAK,GAAG,MAAM,UAAa,KAAK,GAAG,MAAM,IAAI;AAC3F,UAAI,QAAQ,SAAS,GAAG;AACpB,cAAM,YAAY,OAAO,aAAa,OAAO,KAAK,OAAO,UAAU,IAAI,CAAC;AACxE,eAAO,KAAK,cAAc,sBAAsB,QAAQ,IAAI,8BAA8B,QAAQ,KAAK,IAAI,CAAC,EAAE;AAC9G,eAAO;AAAA,UACH,YAAY,SAAS;AAAA,UACrB,MAAM,QAAQ;AAAA,UACd,SAAS,yCAAyC,QAAQ,KAAK,IAAI,CAAC,0BACxC,UAAU,KAAK,IAAI,CAAC;AAAA,UAChD,SAAS;AAAA,UACT,YAAY,KAAK,IAAI,IAAI;AAAA,QAC7B;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ;AAiBA,QAAM,8BAA8B,oBAAI,IAAI,CAAC,cAAc,aAAa,eAAe,aAAa,CAAC;AACrG,MAAI,4BAA4B,IAAI,QAAQ,IAAI,GAAG;AAC/C,QAAI;AACA,YAAM,EAAE,wBAAwB,IAAI,MAAM,OAAO,oBAAoB;AACrE,YAAM,UAAU,wBAAwB;AACxC,UAAI,SAAS;AACT,cAAM,UAAW,KAAK,QAAQ,KAAK,aAAa,KAAK;AACrD,YAAI,OAAO,YAAY,YAAY,QAAQ,SAAS,GAAG;AACnD,cAAI,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,GAAG,GAAG;AACpD,mBAAO;AAAA,cACH,YAAY,SAAS;AAAA,cACrB,MAAM,QAAQ;AAAA,cACd,SAAS,+CAA+C,QAAQ,SAAS,sDAAiD,OAAO;AAAA,cACjI,SAAS;AAAA,cACT,YAAY,KAAK,IAAI,IAAI;AAAA,YAC7B;AAAA,UACJ;AACA,gBAAM,EAAE,MAAM,UAAU,QAAQ,IAAI,MAAM,OAAO,MAAM;AACvD,gBAAM,EAAE,UAAU,IAAI,MAAM,OAAO,IAAI;AACvC,gBAAM,UAAU,SAAS,QAAQ,MAAM,OAAO;AAC9C,cAAI,KAAK,SAAS,OAAW,MAAK,OAAO;AACzC,cAAI,KAAK,cAAc,OAAW,MAAK,YAAY;AACnD,cAAI,KAAK,aAAa,OAAW,MAAK,WAAW;AACjD,cAAI;AAAE,sBAAU,QAAQ,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,UAAG,QAClD;AAAA,UAAoB;AAC1B,iBAAO,MAAM,WAAW,yBAAyB,QAAQ,IAAI,WAAM,OAAO,YAAY,QAAQ,MAAM,IAAI,QAAQ,SAAS,GAAG;AAAA,QAChI;AAAA,MACJ;AAAA,IACJ,SAAS,KAAK;AACV,aAAO,MAAM,WAAW,iCAAkC,IAAc,OAAO,EAAE;AAAA,IACrF;AAAA,EACJ;AAGA,MAAI;AACA,UAAM,EAAE,cAAc,IAAI,MAAM,OAAO,iBAAiB;AACxD,UAAM,cAAc,cAAc,QAAQ,MAAM,IAAI;AACpD,QAAI,CAAC,YAAY,SAAS;AACtB,aAAO,KAAK,cAAc,wBAAwB,QAAQ,IAAI,KAAK,YAAY,MAAM,EAAE;AACvF,aAAO;AAAA,QACH,YAAY,SAAS;AAAA,QACrB,MAAM,QAAQ;AAAA,QACd,SAAS,iDAA4C,YAAY,MAAM;AAAA,QACvE,SAAS;AAAA,QACT,YAAY,KAAK,IAAI,IAAI;AAAA,MAC7B;AAAA,IACJ;AAAA,EACJ,QAAQ;AAAA,EAA0C;AAGlD,QAAM,cAAc,SAAS,SAAS,aAAa;AACnD,QAAM,eAAe,oBAAoB,QAAQ,MAAM,WAAW;AAClE,MAAI,iBAAiB,MAAM;AACvB,WAAO,KAAK,WAAW,eAAe,QAAQ,IAAI,EAAE;AACpD,WAAO;AAAA,MACH,YAAY,SAAS;AAAA,MACrB,MAAM,QAAQ;AAAA,MACd,SAAS;AAAA,MACT,SAAS;AAAA,MACT,YAAY,KAAK,IAAI,IAAI;AAAA,IAC7B;AAAA,EACJ;AAEA,SAAO,KAAK,WAAW,mBAAmB,QAAQ,IAAI,EAAE;AAGxD,MAAI,QAAQ,SAAS,WAAW,QAAQ,SAAS,aAAa;AAC1D,UAAM,SAAU,KAAK,WAAW,KAAK,QAAQ,KAAK,UAAU;AAC5D,UAAM,OAAO,YAAY,MAAM;AAC/B,QAAI,CAAC,KAAK,SAAS;AACf,aAAO;AAAA,QACH,YAAY,SAAS;AAAA,QACrB,MAAM,QAAQ;AAAA,QACd,SAAS;AAAA,EAAmD,KAAK,SAAS,KAAK,IAAI,CAAC;AAAA,QACpF,SAAS;AAAA,QACT,YAAY,KAAK,IAAI,IAAI;AAAA,MAC7B;AAAA,IACJ;AACA,QAAI,KAAK,SAAS,SAAS,KAAK,KAAK,UAAU,QAAQ;AACnD,aAAO,KAAK,cAAc,yBAAyB,QAAQ,IAAI,KAAK,KAAK,SAAS,KAAK,IAAI,CAAC,EAAE;AAAA,IAClG;AAAA,EACJ;AACA,MAAI,QAAQ,SAAS,sBAAsB,QAAQ,SAAS,oBAAoB;AAC5E,UAAM,SAAU,KAAK,OAAO,KAAK,UAAU;AAC3C,UAAM,OAAO,QAAQ,MAAM;AAC3B,QAAI,CAAC,KAAK,SAAS;AACf,aAAO;AAAA,QACH,YAAY,SAAS;AAAA,QACrB,MAAM,QAAQ;AAAA,QACd,SAAS;AAAA,EAA+C,KAAK,SAAS,KAAK,IAAI,CAAC;AAAA,QAChF,SAAS;AAAA,QACT,YAAY,KAAK,IAAI,IAAI;AAAA,MAC7B;AAAA,IACJ;AAAA,EACJ;AAGA,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,YAAY;AACzD,QAAM,YAAY,OAAO,wBAAwB,aAAa,oBAAoB,IAAI;AACtF,QAAM,WAAW,MAAM,qBAAqB,QAAQ,MAAM,MAAM,aAAa,SAAS,IAAI,WAAW,CAAC;AACtG,MAAI,CAAC,SAAS,OAAO;AACjB,WAAO;AAAA,MACH,YAAY,SAAS;AAAA,MACrB,MAAM,QAAQ;AAAA,MACd,SAAS,6BAA6B,SAAS,UAAU;AAAA,MACzD,SAAS;AAAA,MACT,YAAY,KAAK,IAAI,IAAI;AAAA,IAC7B;AAAA,EACJ;AACA,MAAI,SAAS,aAAc,QAAO,SAAS;AAG3C,MAAI,gBAAgB,SAAS,GAAG;AAC5B,UAAM,aAAa,MAAM,WAAW,iBAAiB,QAAQ,MAAM,IAAI;AACvE,QAAI,CAAC,WAAW,OAAO;AACnB,aAAO;AAAA,QACH,YAAY,SAAS;AAAA,QACrB,MAAM,QAAQ;AAAA,QACd,SAAS,uBAAuB,WAAW,UAAU;AAAA,QACrD,SAAS;AAAA,QACT,YAAY,KAAK,IAAI,IAAI;AAAA,MAC7B;AAAA,IACJ;AACA,QAAI,WAAW,aAAc,QAAO,WAAW;AAAA,EACnD;AAGA,QAAM,iBAAiB,MAAM,cAAc,QAAQ,MAAM,MAAM,OAAO;AACtE,MAAI,CAAC,eAAe,SAAS;AACzB,WAAO;AAAA,MACH,YAAY,SAAS;AAAA,MACrB,MAAM,QAAQ;AAAA,MACd,SAAS,yCAAyC,eAAe,UAAU;AAAA,MAC3E,SAAS;AAAA,MACT,YAAY,KAAK,IAAI,IAAI;AAAA,IAC7B;AAAA,EACJ;AAGA,QAAM,iBAAiB,oBAAI,IAAI,CAAC,cAAc,aAAa,eAAe,aAAa,CAAC;AAUxF,MAAI,eAAe,IAAI,QAAQ,IAAI,GAAG;AAClC,QAAI;AACA,YAAM,EAAE,UAAU,SAAS,IAAI,MAAM,OAAO,yBAAyB;AACrE,UAAI,SAAS,GAAG;AACZ,cAAM,QAAQ,SAAS;AACvB,cAAM,aAAa,OAAO,WAAW,UAAU;AAC/C,eAAO,KAAK,WAAW,yBAAyB,QAAQ,IAAI,WAAM,UAAU,EAAE;AAC9E,eAAO;AAAA,UACH,YAAY,SAAS;AAAA,UACrB,MAAM,QAAQ;AAAA,UACd,SAAS,+DAA0D,UAAU;AAAA,UAG7E,SAAS;AAAA,UACT,YAAY,KAAK,IAAI,IAAI;AAAA,QAC7B;AAAA,MACJ;AAAA,IACJ,QAAQ;AAAA,IAAiF;AAAA,EAC7F;AAgBA,MAAI,iBAAoE;AACxE,MAAI,eAAe,IAAI,QAAQ,IAAI,GAAG;AAClC,UAAM,cAAe,KAAK,QAAQ,KAAK,aAAa,KAAK;AACzD,QAAI,aAAa;AACb,UAAI;AACA,cAAM,EAAE,qBAAAA,qBAAoB,IAAI,MAAM,OAAO,YAAY;AACzD,cAAM,EAAE,YAAY,IAAI,MAAM,OAAO,qBAAqB;AAC1D,cAAM,MAAqB,OAAOA,yBAAwB,aAAaA,qBAAoB,IAAI;AAC/F,cAAM,WAAW,YAAY,KAAK,WAAW;AAC7C,YAAI,SAAS,WAAW,UAAU;AAC9B,iBAAO,KAAK,WAAW,wBAAwB,QAAQ,IAAI,KAAK,SAAS,MAAM,EAAE;AACjF,iBAAO;AAAA,YACH,YAAY,SAAS;AAAA,YACrB,MAAM,QAAQ;AAAA,YACd,SAAS,UAAU,SAAS,MAAM;AAAA;AAAA;AAAA,YAClC,SAAS;AAAA,YACT,YAAY,KAAK,IAAI,IAAI;AAAA,UAC7B;AAAA,QACJ;AACA,YAAI,SAAS,WAAW,WAAW,SAAS,cAAc,SAAS,YAAY;AAC3E,2BAAiB,EAAE,YAAY,SAAS,YAAY,YAAY,SAAS,WAAW;AAIpF,cAAI,KAAK,SAAS,OAAW,MAAK,OAAO,SAAS;AAClD,cAAI,KAAK,cAAc,OAAW,MAAK,YAAY,SAAS;AAC5D,cAAI,KAAK,aAAa,OAAW,MAAK,WAAW,SAAS;AAG1D,cAAI;AACA,kBAAM,EAAE,UAAU,IAAI,MAAM,OAAO,IAAI;AACvC,kBAAM,EAAE,QAAQ,IAAI,MAAM,OAAO,MAAM;AACvC,sBAAU,QAAQ,SAAS,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,UAC/D,QAAQ;AAAA,UAAoB;AAC5B,iBAAO,KAAK,WAAW,8BAA8B,QAAQ,IAAI,WAAM,SAAS,UAAU,mBAAmB,SAAS,UAAU,eAAe;AAAA,QACnJ;AAAA,MACJ,SAAS,KAAK;AACV,eAAO,MAAM,WAAW,yCAA0C,IAAc,OAAO,EAAE;AAAA,MAC7F;AAAA,IACJ;AAAA,EACJ;AAGA,MAAI,eAAe,IAAI,QAAQ,IAAI,GAAG;AAClC,UAAM,UAAoB,CAAC;AAC3B,UAAM,SAAU,KAAK,QAAQ,KAAK,aAAa,KAAK;AACpD,QAAI,OAAQ,SAAQ,KAAK,MAAM;AAC/B,QAAI,QAAQ,SAAS,GAAG;AACpB,uBAAiB,aAAa,SAAS,IAAI,QAAQ,MAAM,MAAM,OAAO;AAAA,IAC1E;AAAA,EACJ;AAEA,MAAI,eAAe,IAAI,QAAQ,IAAI,GAAG;AAElC,UAAM,WAAY,KAAK,QAAQ,KAAK,aAAa,KAAK;AACtD,QAAI,UAAU;AACV,0BAAoB,QAAQ,MAAM,QAAQ,EAAE;AAAA,QAAM,SAC9C,OAAO,MAAM,WAAW,8BAA+B,IAAc,OAAO,EAAE;AAAA,MAClF;AAKA,OAAC,YAAY;AACT,YAAI;AACA,gBAAM,EAAE,eAAe,IAAI,MAAM,OAAO,6BAA6B;AACrE,yBAAe;AAAA,YACX,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,QAAQ,GAAG,QAAQ,IAAI,QAAQ,WAAW,SAAS;AAAA,UACvD,CAAC;AAAA,QACL,SAAS,KAAK;AACV,iBAAO,MAAM,WAAW,4BAA6B,IAAc,OAAO,EAAE;AAAA,QAChF;AAAA,MACJ,GAAG;AAAA,IACP;AAIA,oCAAgC,QAAQ,MAAM,IAAI,EAAE;AAAA,MAAM,SACtD,OAAO,MAAM,WAAW,kCAAmC,IAAc,OAAO,EAAE;AAAA,IACtF;AAAA,EACJ;AAGA,QAAM,eAAgB,OAAO,SAAqC;AAClE,QAAM,cAAc,eAAe,QAAQ,IAAI,KAAK,OAAO,SAAS,kBAAkB;AAGtF,QAAM,cAAe,OAAO,SAAqC;AACjE,QAAM,eAAe,aAAa,YAAY;AAC9C,QAAM,aAAa,aAAa,cAAc;AAC9C,QAAM,cAAc,aAAa,iBAAiB;AAElD,MAAI,YAA0B;AAC9B,MAAI,iBAA6B;AACjC,MAAI,UAAU;AAGd,MAAI;AACJ,MAAI;AACJ,MAAI,CAAC,cAAc,aAAa,aAAa,EAAE,SAAS,QAAQ,IAAI,GAAG;AACnE,UAAM,UAAU,KAAK;AACrB,QAAI,SAAS;AACT,wBAAkB;AAClB,UAAI;AACA,YAAI,WAAW,OAAO,EAAG,cAAa,aAAa,SAAS,OAAO;AAAA,MACvE,QAAQ;AAAA,MAA2B;AAAA,IACvC;AAAA,EACJ;AAGA,MAAI;AACA,UAAM,EAAE,gBAAgB,IAAI,MAAM,OAAO,yBAAyB;AAClE,UAAM,YAAY,gBAAgB,QAAQ,MAAM,IAAI;AACpD,QAAI,CAAC,UAAU,MAAM;AACjB,aAAO,KAAK,WAAW,uBAAuB,QAAQ,IAAI,KAAK,UAAU,MAAM,EAAE;AACjF,aAAO;AAAA,QACH,YAAY,SAAS;AAAA,QACrB,MAAM,QAAQ;AAAA,QACd,SAAS,wBAAwB,UAAU,MAAM;AAAA,QACjD,SAAS;AAAA,QACT,YAAY,KAAK,IAAI,IAAI;AAAA,MAC7B;AAAA,IACJ;AAAA,EACJ,SAAS,KAAK;AACV,WAAO,KAAK,WAAW,uCAAwC,IAAc,OAAO,EAAE;AAAA,EAC1F;AAKA,MAAI;AACA,UAAM,EAAE,kBAAkB,sBAAsB,IAAI,MAAM,OAAO,qCAAqC;AACtG,QAAI,iBAAiB,QAAQ,IAAI,GAAG;AAChC,aAAO,KAAK,WAAW,wBAAwB,QAAQ,IAAI,iDAA4C;AACvG,YAAM,UAAU,sBAAsB,QAAQ,MAAM,MAAM,aAAa,SAAS,EAAE;AAClF,UAAI,QAAQ,WAAW,WAAW;AAC9B,eAAO;AAAA,UACH,YAAY,SAAS;AAAA,UACrB,MAAM,QAAQ;AAAA,UACd,SAAS,4BAA4B,QAAQ,IAAI,+DAC9B,QAAQ,EAAE,2BACA,QAAQ,EAAE,wBAAwB,QAAQ,EAAE;AAAA,UACzE,SAAS;AAAA;AAAA,UAET,iBAAiB;AAAA,UACjB,mBAAmB,QAAQ;AAAA,UAC3B,YAAY,KAAK,IAAI,IAAI;AAAA,QAC7B;AAAA,MACJ;AAGA,UAAI,QAAQ,WAAW,UAAU;AAC7B,eAAO;AAAA,UACH,YAAY,SAAS;AAAA,UACrB,MAAM,QAAQ;AAAA,UACd,SAAS,gBAAgB,QAAQ,IAAI;AAAA,UAErC,SAAS;AAAA,UACT,YAAY,KAAK,IAAI,IAAI;AAAA,QAC7B;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ,SAAS,aAAa;AAElB,WAAO,KAAK,WAAW,2CAA4C,YAAsB,OAAO,EAAE;AAAA,EACtG;AAEA,SAAO,YAAY,eAAe,aAAa,IAAI,WAAW;AAC1D,QAAI;AAEA,YAAM,UAAW,UAAU,KAAK,mBAAmB,YAAa,cAAc,IAAI;AAElF,UAAI,SAAS,MAAM,QAAQ,KAAK;AAAA,QAC5B,QAAQ,QAAQ,IAAI;AAAA,QACpB,IAAI;AAAA,UAAgB,CAAC,GAAG,WACpB,WAAW,MAAM,OAAO,IAAI,MAAM,SAAS,QAAQ,IAAI,qBAAqB,OAAO,IAAI,CAAC,GAAG,OAAO;AAAA,QACtG;AAAA,MACJ,CAAC;AAGD,eAAS,cAAc,MAAM;AAG7B,YAAMC,UAAS,WAAW;AAC1B,UAAIA,QAAO,UAAU,WAAW;AAC5B,iBAAS,iBAAiB,MAAM;AAAA,MACpC;AAGA,UAAIA,QAAO,UAAU,YAAY,UAAU,QAAQ;AAC/C,cAAM,OAAO,cAAc,QAAQ,aAAa;AAChD,YAAI,KAAK,SAAS;AACd,iBAAO,KAAK,cAAc,6BAA6B,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,OAAK,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE;AAAA,QACvH;AACA,iBAAS,KAAK;AAAA,MAClB;AAEA,YAAMC,cAAa,KAAK,IAAI,IAAI;AAChC,UAAI,UAAU,GAAG;AACb,eAAO,KAAK,WAAW,QAAQ,QAAQ,IAAI,uBAAuB,OAAO,OAAOA,WAAU,IAAI;AAAA,MAClG,OAAO;AACH,eAAO,KAAK,WAAW,QAAQ,QAAQ,IAAI,iBAAiBA,WAAU,IAAI;AAAA,MAC9E;AAMA,UAAI,eAAe,eAAe,QAAQ,QAAQ,IAAI;AAQtD,UAAI,aAAa,SAAS,OAAS,CAAC,yBAAyB,IAAI,QAAQ,IAAI,GAAG;AAC5E,cAAM,OAAO,aAAa,MAAM,GAAG,GAAK;AACxC,cAAM,OAAO,aAAa,MAAM,IAAK;AACrC,uBAAe,OAAO,eAAe,aAAa,SAAS,QAAS,4BAA4B;AAChG,eAAO,KAAK,WAAW,QAAQ,QAAQ,IAAI,sBAAsB,OAAO,MAAM,WAAM,aAAa,MAAM,QAAQ;AAAA,MACnH;AAGA,YAAM,YAAY,MAAM,sBAAsB,QAAQ,MAAM,MAAM,cAAc,aAAa,SAAS,IAAI,WAAW,CAAC;AACtH,UAAI,cAAc,OAAW,gBAAe;AAG5C,UAAI,gBAAgB,SAAS,GAAG;AAC5B,cAAM,aAAa,MAAM,YAAY,iBAAiB,QAAQ,MAAM,MAAM,EAAE,SAAS,cAAc,SAAS,MAAM,YAAAA,YAAW,CAAC;AAC9H,YAAI,WAAW,oBAAoB,OAAW,gBAAe,WAAW;AAAA,MAC5E;AAGA,sBAAgB,QAAQ,MAAM,aAAa,YAAY;AAKvD,UAAI,gBAAgB;AAChB,SAAC,YAAY;AACT,cAAI;AACA,kBAAM,EAAE,qBAAAF,qBAAoB,IAAI,MAAM,OAAO,YAAY;AACzD,kBAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,qBAAqB;AAChE,kBAAM,MAAqB,OAAOA,yBAAwB,aAAaA,qBAAoB,IAAI;AAC/F,kBAAM,kBAAkB;AAAA,cACpB,WAAW;AAAA,cACX,UAAU,QAAQ;AAAA,cAClB,YAAY,eAAgB;AAAA,cAC5B,YAAY,eAAgB;AAAA,YAChC,CAAC;AAAA,UACL,SAAS,KAAK;AACV,mBAAO,MAAM,WAAW,8CAA+C,IAAc,OAAO,EAAE;AAAA,UAClG;AAAA,QACJ,GAAG;AAAA,MACP;AAGA,OAAC,YAAY;AACT,YAAI;AACA,gBAAM,EAAE,YAAY,IAAI,MAAM,OAAO,6BAA6B;AAClE,sBAAY,EAAE,OAAO,aAAa,MAAM,QAAQ,MAAM,SAAS,WAAW,UAAU,CAAC;AACrF,cAAI,eAAe,IAAI,QAAQ,IAAI,GAAG;AAClC,wBAAY,EAAE,OAAO,aAAa,MAAM,QAAQ,MAAM,MAAO,KAAK,QAAQ,KAAK,aAAa,KAAK,SAAgC,CAAC;AAAA,UACtI;AACA,cAAI,QAAQ,SAAS,cAAc;AAC/B,wBAAY,EAAE,OAAO,cAAc,OAAQ,KAAK,SAAS,KAAK,EAAyB,CAAC;AAAA,UAC5F;AACA,cAAI,QAAQ,SAAS,aAAa;AAC9B,wBAAY,EAAE,OAAO,aAAa,KAAM,KAAK,OAAO,KAAK,OAA8B,CAAC;AAAA,UAC5F;AACA,cAAI,QAAQ,SAAS,cAAc,QAAQ,SAAS,cAAc;AAC9D,wBAAY,EAAE,OAAO,YAAY,OAAQ,KAAK,SAAS,KAAK,KAA4B,CAAC;AAAA,UAC7F;AAAA,QACJ,QAAQ;AAAA,QAAkC;AAC1C,cAAM,MAAM,WAAW;AACvB,YAAI,IAAI,WAAW,SAAS;AACxB,cAAI;AACA,2BAAe,uBAAuB,KAAK,UAAU;AAAA,cACjD,OAAO;AAAA,cACP,YAAY,EAAE,UAAU,QAAQ,MAAM,SAAS,MAAM,YAAAE,aAAY,SAAS,WAAW,UAAU;AAAA,cAC/F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YACtC,CAAC,IAAI,MAAM,OAAO;AAAA,UACtB,QAAQ;AAAA,UAAqB;AAAA,QACjC;AAEA,cAAM,EAAE,cAAc,IAAI,MAAM,OAAO,gCAAgC;AACvE,cAAM,EAAE,qBAAAF,qBAAoB,IAAI,MAAM,OAAO,YAAY,EAAE,MAAM,OAAO,EAAE,qBAAqB,MAAM,KAAK,EAAE;AAC5G,cAAM,MAAM,OAAOA,yBAAwB,aAAaA,qBAAoB,IAAI;AAChF,sBAAc,QAAQ,MAAM,MAAME,aAAY,QAAW,OAAO,MAAS;AAAA,MAC7E,GAAG;AAGH,UAAI;AACJ,UAAI,CAAC,cAAc,aAAa,aAAa,EAAE,SAAS,QAAQ,IAAI,KAAK,mBAAmB,CAAC,gBAAgB;AACzG,YAAI;AACA,gBAAM,cAAc,WAAW,eAAe,IAAI,aAAa,iBAAiB,OAAO,IAAI;AAC3F,iBAAO,mBAAmB,iBAAiB,cAAc,IAAI,WAAW;AAAA,QAC5E,QAAQ;AAAA,QAA2B;AAAA,MACvC;AAEA,aAAO;AAAA,QACH,YAAY,SAAS;AAAA,QACrB,MAAM,QAAQ;AAAA,QACd,SAAS,iBACH,GAAG,YAAY;AAAA;AAAA,wCAA6C,eAAe,UAAU,sDAAsD,eAAe,UAAU,MACpK;AAAA,QACN,SAAS;AAAA,QACT,YAAAA;AAAA,QACA,YAAY;AAAA,QACZ;AAAA,MACJ;AAAA,IACJ,SAAS,OAAO;AACZ,kBAAY;AACZ,uBAAiB,cAAc,WAAW,QAAQ,IAAI;AAGtD,UAAI,mBAAmB,aAAa;AAChC;AAAA,MACJ;AAGA,UAAI,WAAW,cAAc,CAAC,cAAc;AACxC;AAAA,MACJ;AAGA,YAAM,QAAQ,KAAK,IAAI,cAAc,KAAK,IAAI,GAAG,OAAO,GAAG,GAAI;AAC/D,aAAO,KAAK,WAAW,QAAQ,QAAQ,IAAI,YAAY,cAAc,aAAa,UAAU,CAAC,IAAI,aAAa,CAAC,MAAM,UAAU,OAAO,uBAAkB,KAAK,IAAI;AACjK,YAAM,IAAI,QAAQ,aAAW,WAAW,SAAS,KAAK,CAAC;AAAA,IAC3D;AAAA,EACJ;AAGA,QAAM,aAAa,KAAK,IAAI,IAAI;AAChC,QAAM,WAAW,WAAW,WAAW;AACvC,QAAM,aAAa;AACnB,SAAO,MAAM,WAAW,QAAQ,QAAQ,IAAI,YAAY,cAAc,GAAG,aAAa,IAAI,KAAK,UAAU,aAAa,EAAE,MAAM,QAAQ,EAAE;AAGxI,GAAC,YAAY;AACT,UAAM,MAAM,WAAW;AACvB,QAAI,IAAI,WAAW,SAAS;AACxB,UAAI;AACA,uBAAe,uBAAuB,KAAK,UAAU;AAAA,UACjD,OAAO;AAAA,UACP,YAAY,EAAE,UAAU,QAAQ,MAAM,SAAS,OAAO,YAAY,YAAY,gBAAgB,SAAS,WAAW,UAAU;AAAA,UAC5H,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACtC,CAAC,IAAI,MAAM,OAAO;AAAA,MACtB,QAAQ;AAAA,MAAqB;AAAA,IACjC;AAEA,UAAM,EAAE,cAAc,IAAI,MAAM,OAAO,gCAAgC;AACvE,UAAM,EAAE,qBAAAF,qBAAoB,IAAI,MAAM,OAAO,YAAY,EAAE,MAAM,OAAO,EAAE,qBAAqB,MAAM,KAAK,EAAE;AAC5G,UAAM,MAAM,OAAOA,yBAAwB,aAAaA,qBAAoB,IAAI;AAChF,kBAAc,QAAQ,MAAM,OAAO,YAAY,gBAAgB,OAAO,MAAS;AAAA,EACnF,GAAG;AAEH,SAAO;AAAA,IACH,YAAY,SAAS;AAAA,IACrB,MAAM,QAAQ;AAAA,IACd,SAAS,UAAU,QAAQ;AAAA,IAC3B,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EAChB;AACJ;AAWA,SAAS,gBAAgB,SAAqC;AAC1D,SAAO,QAAQ,IAAI,CAAC,MAAM;AACtB,UAAM,SAAS,cAAc,EAAE,MAAM,EAAE,OAAO;AAC9C,QAAI,CAAC,OAAO,UAAW,QAAO;AAG9B,WAAO,KAAK,WAAW,eAAe,EAAE,IAAI,cAAc,OAAO,YAAY,WAAM,OAAO,QAAQ,MAAM,QAAQ;AAChH,WAAO,EAAE,GAAG,GAAG,SAAS,OAAO,QAAQ;AAAA,EAC3C,CAAC;AACL;AAEA,eAAsB,aAAa,WAAuB,SAAyC;AAE/F,MAAI,UAAU,UAAU,GAAG;AACvB,UAAM,UAAU,MAAM,QAAQ,IAAI,UAAU,IAAI,QAAM,YAAY,IAAI,OAAO,CAAC,CAAC;AAC/E,WAAO,gBAAgB,OAAO;AAAA,EAClC;AAGA,QAAM,gBAAgB,UAAU,IAAI,QAAM;AACtC,QAAI,OAAgC,CAAC;AACrC,QAAI;AAAE,aAAO,KAAK,MAAM,GAAG,SAAS,SAAS;AAAA,IAAG,QAAQ;AAAA,IAAkB;AAC1E,WAAO,EAAE,IAAI,GAAG,IAAI,MAAM,GAAG,SAAS,MAAM,KAAK;AAAA,EACrD,CAAC;AAED,QAAM,WAAW,OAAO,MAAc,SAAmD;AAErF,UAAM,cAAwB;AAAA,MAC1B,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,UAAU,EAAE,MAAM,WAAW,KAAK,UAAU,IAAI,EAAE;AAAA,IACtD;AACA,UAAM,SAAS,MAAM,YAAY,aAAa,OAAO;AACrD,WAAO,OAAO;AAAA,EAClB;AAEA,QAAM,kBAAkB,MAAM,qBAAqB,eAAe,QAAQ;AAG1E,QAAM,SAAuB,gBAAgB,IAAI,SAAO;AAAA,IACpD,YAAY,GAAG;AAAA,IACf,MAAM,GAAG;AAAA,IACT,SAAS,GAAG;AAAA,IACZ,SAAS,CAAC,GAAG,QAAQ,WAAW,QAAQ;AAAA,IACxC,YAAY;AAAA,EAChB,EAAE;AACF,SAAO,gBAAgB,MAAM;AACjC;AAUA,eAAe,gCACX,UACA,MACa;AAEb,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,YAAY,EAAE,MAAM,OAAO,EAAE,qBAAqB,MAAM,KAAK,EAAE;AAC5G,QAAM,YAA2B,OAAO,wBAAwB,aAAa,oBAAoB,IAAI;AACrG,QAAM,cAAc,eAAe,SAAS;AAC5C,QAAM,SAAS,WAAW;AAC1B,QAAM,aAAc,OAAO,UAAU,SAAS;AAC9C,QAAM,iBAAiB,aAAa,cAAc;AAElD,MAAI,CAAC,cAAc,EAAE,UAAU,YAAY,eAAe,CAAC,EAAG;AAE9D,QAAM,WAAY,KAAK,QAAQ,KAAK,aAAa,KAAK;AACtD,QAAM,UAAW,KAAK,WAAW,KAAK,YAAY,KAAK;AACvD,MAAI,CAAC,YAAY,CAAC,QAAS;AAE3B,eAAa;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA;AAAA,IACT,QAAQ,aAAa,UAAU;AAAA,IAC/B,WAAW,aAAa,aAAa;AAAA,IACrC;AAAA,EACJ,CAAC;AACL;","names":["getCurrentSessionId","config","durationMs"]}
+{"version":3,"sources":["../../src/agent/toolRunner.ts"],"sourcesContent":["/**\n * TITAN — Tool Runner\n * Executes tool calls from the LLM with sandboxing, timeouts, and result formatting.\n */\nimport type { ToolCall, ToolDefinition } from '../providers/base.js';\nimport {\n    type ToolContract,\n    ToolValidationError,\n    validateToolCall,\n    formatValidationError,\n} from './toolContract.js';\nimport { classifyToolCall, formatBreadcrumb } from './autoModeClassifier.js';\nimport { appendFileSync, readFileSync, existsSync } from 'fs';\nimport { TELEMETRY_EVENTS_PATH } from '../utils/constants.js';\nimport { executeToolsParallel } from './parallelTools.js';\nimport { capToolOutput } from './toolOutputCap.js';\nimport { runPreTool, runPostTool } from '../plugins/contextEngine.js';\nimport type { ContextEnginePlugin } from '../plugins/contextEngine.js';\nimport { run as runInIsolatedWorktree } from './worktreeExecutor.js';\n\n/** Tool hook plugins — set during agent initialization */\nlet toolHookPlugins: ContextEnginePlugin[] = [];\nexport function setToolHookPlugins(plugins: ContextEnginePlugin[]): void {\n    toolHookPlugins = plugins;\n}\nimport logger from '../utils/logger.js';\nimport { loadConfig } from '../config/config.js';\nimport { checkAutonomy } from './autonomy.js';\nimport { isToolSkillEnabled } from '../skills/registry.js';\nimport { redactSecrets } from '../security/secretGuard.js';\nimport { scanAndRedactPII, fullExfilScan } from '../security/exfilScan.js';\nimport { scanCommand, scanURL } from '../security/preExecScan.js';\nimport { runPreToolShellHooks, runPostToolShellHooks } from '../hooks/shellHooks.js';\nimport { createCheckpoint } from '../checkpoint/manager.js';\n\n/** Compute a lightweight unified diff between old and new file content */\nfunction computeUnifiedDiff(filePath: string, oldContent: string, newContent: string): string {\n    if (oldContent === newContent) return `// No changes to ${filePath}`;\n    const oldLines = oldContent.split('\\n');\n    const newLines = newContent.split('\\n');\n    const header = `--- ${filePath}\\n+++ ${filePath}`;\n    const hunks: string[] = [];\n    let i = 0, j = 0;\n    while (i < oldLines.length || j < newLines.length) {\n        if (i < oldLines.length && j < newLines.length && oldLines[i] === newLines[j]) {\n            i++; j++; continue;\n        }\n        const startI = i, startJ = j;\n        const removed: string[] = [];\n        const added: string[] = [];\n        while (i < oldLines.length && (j >= newLines.length || oldLines[i] !== newLines[j])) {\n            removed.push(oldLines[i++]);\n        }\n        while (j < newLines.length && (i >= oldLines.length || oldLines[i] !== newLines[j])) {\n            added.push(newLines[j++]);\n        }\n        if (removed.length || added.length) {\n            const ctxBefore = oldLines.slice(Math.max(0, startI - 2), startI);\n            const ctxAfter = oldLines.slice(i, Math.min(oldLines.length, i + 2));\n            hunks.push([\n                ...ctxBefore.map(l => ` ${l}`),\n                ...removed.map(l => `-${l}`),\n                ...added.map(l => `+${l}`),\n                ...ctxAfter.map(l => ` ${l}`),\n            ].join('\\n'));\n        }\n    }\n    const body = hunks.join('\\n---\\n');\n    return `${header}\\n${body}`;\n}\nimport { getCachedToolResult, cacheToolResult } from './trajectoryCompressor.js';\nimport { classifyProviderError, FailoverReason } from '../providers/errorTaxonomy.js';\nimport { snapshotBeforeWrite } from './shadowGit.js';\nimport { captureWrite, shouldCapture } from './selfProposals.js';\nimport { getSessionGoal } from './autonomyContext.js';\n\nconst COMPONENT = 'ToolRunner';\n\n/**\n * Tools whose entire purpose is to RETURN a data: URL for the LLM\n * to embed in downstream output. These bypass `sanitizeBase64` (which\n * would strip the very thing they were called to produce) and the\n * 30KB smart-truncation (which would chop the data URL mid-base64\n * making it unembeddable).\n *\n * v6.1.0-alpha.55 added `download_image` here. Tony spotted the bug\n * the way only Tony would: \"Why doesn't TITAN download the images\n * itself?\" → we added the tool in alpha.53 → ToolRunner sanitizer\n * stripped its output → Writer never saw the data URL → hotlinked\n * external URLs instead → alpha.52 placeholder caught them →\n * appearance of \"alpha.53 doesn't work.\" It worked perfectly. We\n * were just throwing away its output two lines later.\n *\n * If you add a new tool here, also update the 30KB truncation\n * exemption below (line ~685) since both share this list.\n */\nconst DATA_URL_PRODUCING_TOOLS = new Set([\n    'download_image',\n]);\n\n/**\n * G1: Sanitize base64 image data from tool results (OpenClaw pattern).\n * Prevents token explosion when vision/screenshot tools return raw base64.\n * Replaces data URIs with a compact placeholder showing byte count.\n *\n * v6.1.0-alpha.55 — takes optional `toolName` so we can EXEMPT the\n * tools whose entire output IS a data URL (see\n * DATA_URL_PRODUCING_TOOLS above). Default behavior unchanged for\n * every other tool.\n */\nfunction sanitizeBase64(content: string, toolName?: string): string {\n    if (toolName && DATA_URL_PRODUCING_TOOLS.has(toolName)) return content;\n    return content.replace(\n        /data:image\\/[^;]+;base64,[A-Za-z0-9+/=]{100,}/g,\n        (match) => {\n            const bytes = Math.ceil((match.length - match.indexOf(',') - 1) * 0.75);\n            return `[image: ${(bytes / 1024).toFixed(1)}KB omitted]`;\n        },\n    );\n}\n\n/**\n * v6.1.0-alpha.55 — exported alias for tests + future callers. The\n * Set is the source of truth for \"tools that intentionally return a\n * data: URL for the LLM to embed downstream.\"\n */\nexport function isDataUrlProducingTool(toolName: string): boolean {\n    return DATA_URL_PRODUCING_TOOLS.has(toolName);\n}\n\n/** Error classification for retry decisions */\nexport type ErrorClass = 'transient' | 'permanent' | 'timeout' | 'rate_limit';\n\n/** Classify an error to determine if retry is appropriate.\n * Delegates to the centralized error taxonomy, then maps back to ErrorClass\n * for backward compatibility with tool execution retry logic.\n */\nexport function classifyError(error: Error, _toolName: string): ErrorClass {\n    const classified = classifyProviderError(error);\n    switch (classified.reason) {\n        case FailoverReason.TIMEOUT:\n            return 'timeout';\n        case FailoverReason.RATE_LIMIT:\n            return 'rate_limit';\n        case FailoverReason.SERVER_ERROR:\n        case FailoverReason.NETWORK_ERROR:\n        case FailoverReason.OVERLOADED:\n        case FailoverReason.EMPTY_RESPONSE:\n            return 'transient';\n        default:\n            return classified.retryable ? 'transient' : 'permanent';\n    }\n}\n\n/** Tool execution result */\nexport interface ToolResult {\n    toolCallId: string;\n    name: string;\n    content: string;\n    success: boolean;\n    durationMs: number;\n    /** Number of retry attempts made (0 = first try succeeded/failed) */\n    retryCount?: number;\n    /** Error classification if the tool failed */\n    errorClass?: ErrorClass;\n    /** Inline unified diff for file-modifying tools (write_file, edit_file, apply_patch) */\n    diff?: string;\n    /** v5.0: True when the tool is paused waiting for human approval */\n    approvalPending?: boolean;\n    /** v5.0: Approval request ID when approvalPending is true */\n    approvalRequestId?: string;\n}\n\n/** A registered tool handler */\nexport interface ToolHandler {\n    name: string;\n    description: string;\n    parameters: Record<string, unknown>;\n    execute: (args: Record<string, unknown>, context?: { signal?: AbortSignal }) => Promise<string>;\n    /**\n     * beta.15 (Phase D.3) — optional declarative contract. When set,\n     * the tool runner validates incoming args against\n     * `contract.input` BEFORE calling execute() and rejects malformed\n     * calls with a clear, LLM-friendly error message. Skills without\n     * a contract continue to work unchanged — opt-in upgrade.\n     */\n    contract?: ToolContract;\n}\n\n/** Global tool registry */\nconst toolRegistry: Map<string, ToolHandler> = new Map();\n\n/** Register a tool */\nexport function registerTool(handler: ToolHandler): void {\n    toolRegistry.set(handler.name, handler);\n    logger.debug(COMPONENT, `Registered tool: ${handler.name}`);\n}\n\n/** Unregister a tool */\nexport function unregisterTool(name: string): void {\n    toolRegistry.delete(name);\n}\n\n/** Get all registered tools */\nexport function getRegisteredTools(): ToolHandler[] {\n    return Array.from(toolRegistry.values());\n}\n\n/** Convert registered tools to LLM tool definitions */\nexport function getToolDefinitions(): ToolDefinition[] {\n    const config = loadConfig();\n    const allowed = new Set(config.security.allowedTools);\n    const denied = new Set(config.security.deniedTools);\n\n    return Array.from(toolRegistry.values())\n        .filter((tool) => {\n            if (denied.has(tool.name)) return false;\n            if (allowed.size > 0 && !allowed.has(tool.name)) return false;\n            if (!isToolSkillEnabled(tool.name)) return false;\n            return true;\n        })\n        .map((tool) => ({\n            type: 'function' as const,\n            function: {\n                name: tool.name,\n                description: tool.description,\n                parameters: tool.parameters,\n            },\n        }));\n}\n\n/** Execute a single tool call */\nexport async function executeTool(toolCall: ToolCall, channel?: string): Promise<ToolResult> {\n    const config = loadConfig();\n    const startTime = Date.now();\n    const handler = toolRegistry.get(toolCall.function.name);\n\n    if (!handler) {\n        // LangGraph pattern: tell the LLM which tools actually exist so it can self-correct\n        const available = Array.from(toolRegistry.keys()).sort();\n        const suggestions = available.filter(t => {\n            const name = toolCall.function.name.toLowerCase();\n            return t.toLowerCase().includes(name.slice(0, 4)) || name.includes(t.slice(0, 4));\n        }).slice(0, 5);\n        const hint = suggestions.length > 0\n            ? `\\nDid you mean: ${suggestions.join(', ')}?`\n            : `\\nAvailable tools include: ${available.slice(0, 20).join(', ')}${available.length > 20 ? ` (and ${available.length - 20} more)` : ''}`;\n        return {\n            toolCallId: toolCall.id,\n            name: toolCall.function.name,\n            content: `Error: \"${toolCall.function.name}\" is not a valid tool.${hint}\\nPlease use one of the available tools.`,\n            success: false,\n            durationMs: Date.now() - startTime,\n        };\n    }\n\n    // Check permissions\n    if (config.security.deniedTools.includes(handler.name)) {\n        return {\n            toolCallId: toolCall.id,\n            name: handler.name,\n            content: `Error: Tool \"${handler.name}\" is denied by security policy`,\n            success: false,\n            durationMs: Date.now() - startTime,\n        };\n    }\n\n    // Check if parent skill is enabled\n    if (!isToolSkillEnabled(handler.name)) {\n        return {\n            toolCallId: toolCall.id,\n            name: handler.name,\n            content: `Error: Tool \"${handler.name}\" is disabled — its parent skill is turned off. Enable it in Mission Control.`,\n            success: false,\n            durationMs: Date.now() - startTime,\n        };\n    }\n\n    // Parse arguments\n    let args: Record<string, unknown> = {};\n    try {\n        args = JSON.parse(toolCall.function.arguments);\n    } catch (parseErr) {\n        logger.warn('ToolRunner', `Malformed JSON args for ${handler.name}: ${(parseErr as Error).message} — raw: ${(toolCall.function.arguments || '').slice(0, 200)}`);\n        // Try to salvage: if it looks like a truncated JSON, extract what we can\n        const salvageMatch = (toolCall.function.arguments || '').match(/\\{[\\s\\S]*/);\n        if (salvageMatch) {\n            try {\n                // Attempt to close the JSON and parse\n                const fixed = salvageMatch[0].replace(/,?\\s*$/, '}');\n                args = JSON.parse(fixed);\n                logger.info('ToolRunner', `Salvaged partial JSON args for ${handler.name}`);\n            } catch {\n                // A5: Return error instead of executing with empty args (LangGraph pattern)\n                return {\n                    toolCallId: toolCall.id,\n                    name: handler.name,\n                    content: `Error: Could not parse arguments for \"${handler.name}\". Raw: ${(toolCall.function.arguments || '').slice(0, 200)}. Please provide valid JSON arguments.`,\n                    success: false,\n                    durationMs: Date.now() - startTime,\n                };\n            }\n        }\n    }\n\n    // beta.15 (Phase D.3) — Zod contract validation. Runs BEFORE the\n    // legacy required-fields check below so contract-bearing skills\n    // get a precise error message. Skills without a contract fall\n    // through to the legacy check unchanged.\n    //\n    // Contracts can be attached two ways:\n    //   1. Directly on the ToolHandler (handler.contract — for new skills\n    //      that want a self-contained file).\n    //   2. Registered in the global contract registry (for retrofitting\n    //      contracts onto existing skills without touching their files).\n    // We check both, in that order.\n    let contractToUse = handler.contract;\n    if (!contractToUse) {\n        try {\n            const { getToolContract } = await import('./toolContract.js');\n            contractToUse = getToolContract(handler.name);\n        } catch { /* contract registry unavailable — skip */ }\n    }\n    if (contractToUse) {\n        try {\n            // Replace `args` with the parsed (possibly coerced) shape\n            // so execute() receives Zod-cleaned arguments — string\n            // numerics become numbers, undefined fields get defaults, etc.\n            args = validateToolCall(contractToUse, args) as Record<string, unknown>;\n        } catch (validationErr) {\n            if (validationErr instanceof ToolValidationError) {\n                logger.warn(\n                    'ToolRunner',\n                    `Contract validation rejected ${handler.name}: ${validationErr.message}`,\n                );\n                return {\n                    toolCallId: toolCall.id,\n                    name: handler.name,\n                    content: formatValidationError(validationErr),\n                    success: false,\n                    durationMs: Date.now() - startTime,\n                };\n            }\n            // Unexpected non-validation error during parse — fall\n            // through and let the rest of the runner handle it.\n        }\n    }\n\n    // Schema validation: check required parameters before execution (LangGraph pattern)\n    if (handler.parameters && typeof handler.parameters === 'object') {\n        const schema = handler.parameters as { required?: string[]; properties?: Record<string, unknown> };\n        if (schema.required && Array.isArray(schema.required)) {\n            const missing = schema.required.filter(key => args[key] === undefined || args[key] === null);\n            if (missing.length > 0) {\n                const available = schema.properties ? Object.keys(schema.properties) : [];\n                logger.warn('ToolRunner', `[SchemaValidation] ${handler.name}: missing required params: ${missing.join(', ')}`);\n                return {\n                    toolCallId: toolCall.id,\n                    name: handler.name,\n                    content: `Error: Missing required parameter(s): ${missing.join(', ')}. ` +\n                        `Expected parameters: ${available.join(', ')}. Please provide all required arguments.`,\n                    success: false,\n                    durationMs: Date.now() - startTime,\n                };\n            }\n        }\n    }\n\n    // v6.1.0-alpha.11 — Worktree scope (spike).\n    //\n    // When the current async context has a worktree scope active (see\n    // src/agent/worktreeScope.ts), redirect mutating tool writes into\n    // the scope's worktree directory. Lets multiple concurrent spawns\n    // write the \"same\" filename without colliding. Pure-path-rewrite\n    // — the tool still runs, just into a different absolute path.\n    //\n    // This runs BEFORE guardrails so guardrails see the rewritten\n    // absolute path, not the LLM's original relative path (which\n    // resolves against cwd and may falsely trigger system-path\n    // protections). The self-mod scope-lock further below picks up\n    // the same rewritten path; in practice worktree paths live under\n    // ~/.titan/worktrees which isn't on the self-mod target list, so\n    // self-mod stays a no-op for worktree-scoped writes.\n    const MUTATING_TOOLS_FOR_WORKTREE = new Set(['write_file', 'edit_file', 'append_file', 'apply_patch']);\n    if (MUTATING_TOOLS_FOR_WORKTREE.has(handler.name)) {\n        try {\n            const { getCurrentWorktreeScope } = await import('./worktreeScope.js');\n            const wtScope = getCurrentWorktreeScope();\n            if (wtScope) {\n                const rawPath = (args.path || args.file_path || args.filePath) as string | undefined;\n                if (typeof rawPath === 'string' && rawPath.length > 0) {\n                    if (rawPath.startsWith('/') || rawPath.startsWith('~')) {\n                        return {\n                            toolCallId: toolCall.id,\n                            name: handler.name,\n                            content: `Error: this spawn runs in a worktree scope (${wtScope.subtaskId}). File writes must use RELATIVE paths — got \"${rawPath}\". Rewrite to something like \"output.md\" or \"src/foo.ts\" without a leading \"/\" or \"~\".`,\n                            success: false,\n                            durationMs: Date.now() - startTime,\n                        };\n                    }\n                    const { join: joinPath, dirname } = await import('path');\n                    const { mkdirSync } = await import('fs');\n                    const newPath = joinPath(wtScope.path, rawPath);\n                    if (args.path !== undefined) args.path = newPath;\n                    if (args.file_path !== undefined) args.file_path = newPath;\n                    if (args.filePath !== undefined) args.filePath = newPath;\n                    try { mkdirSync(dirname(newPath), { recursive: true }); }\n                    catch { /* best-effort */ }\n                    logger.debug(COMPONENT, `[Worktree] Redirected ${handler.name} → ${newPath} (scope: ${wtScope.goalId}/${wtScope.subtaskId})`);\n                }\n            }\n        } catch (err) {\n            logger.debug(COMPONENT, `Worktree scope check skipped: ${(err as Error).message}`);\n        }\n    }\n\n    // Guardrails: validate tool call before execution\n    try {\n        const { guardToolCall } = await import('./guardrails.js');\n        const guardResult = guardToolCall(handler.name, args);\n        if (!guardResult.allowed) {\n            logger.warn('ToolRunner', `[Guardrails] Blocked ${handler.name}: ${guardResult.reason}`);\n            return {\n                toolCallId: toolCall.id,\n                name: handler.name,\n                content: `Error: Tool call blocked by guardrails — ${guardResult.reason}`,\n                success: false,\n                durationMs: Date.now() - startTime,\n            };\n        }\n    } catch { /* guardrails unavailable — continue */ }\n\n    // Read-only tool result cache (60s TTL, helper self-gates to read-only allowlist)\n    const cacheArgKey = toolCall.function.arguments || '{}';\n    const cachedResult = getCachedToolResult(handler.name, cacheArgKey);\n    if (cachedResult !== null) {\n        logger.info(COMPONENT, `[Cache HIT] ${handler.name}`);\n        return {\n            toolCallId: toolCall.id,\n            name: handler.name,\n            content: cachedResult,\n            success: true,\n            durationMs: Date.now() - startTime,\n        };\n    }\n\n    logger.info(COMPONENT, `Executing tool: ${handler.name}`);\n\n    // v5.0: Pre-execution scanner for dangerous commands\n    if (handler.name === 'shell' || handler.name === 'code_exec') {\n        const cmdArg = (args.command || args.code || args.script || '') as string;\n        const scan = scanCommand(cmdArg);\n        if (!scan.allowed) {\n            return {\n                toolCallId: toolCall.id,\n                name: handler.name,\n                content: `Error: Pre-execution scan blocked this command\\n${scan.warnings.join('\\n')}`,\n                success: false,\n                durationMs: Date.now() - startTime,\n            };\n        }\n        if (scan.warnings.length > 0 && scan.level === 'warn') {\n            logger.warn('ToolRunner', `Pre-exec warnings for ${handler.name}: ${scan.warnings.join('; ')}`);\n        }\n    }\n    if (handler.name === 'browser_navigate' || handler.name === 'browser_auto_nav') {\n        const urlArg = (args.url || args.target || '') as string;\n        const scan = scanURL(urlArg);\n        if (!scan.allowed) {\n            return {\n                toolCallId: toolCall.id,\n                name: handler.name,\n                content: `Error: Pre-execution scan blocked this URL\\n${scan.warnings.join('\\n')}`,\n                success: false,\n                durationMs: Date.now() - startTime,\n            };\n        }\n    }\n\n    // v5.0: Shell hooks — pre-tool\n    const { getCurrentSessionId } = await import('./agent.js');\n    const sessionId = typeof getCurrentSessionId === 'function' ? getCurrentSessionId() : null;\n    const shellPre = await runPreToolShellHooks(handler.name, args, sessionId || toolCall.id, 'default', 0);\n    if (!shellPre.allow) {\n        return {\n            toolCallId: toolCall.id,\n            name: handler.name,\n            content: 'Blocked by shell hook: ' + (shellPre.reason || 'Hook denied execution'),\n            success: false,\n            durationMs: Date.now() - startTime,\n        };\n    }\n    if (shellPre.modifiedArgs) args = shellPre.modifiedArgs;\n\n    // Pre-tool hooks — plugins can block or modify args\n    if (toolHookPlugins.length > 0) {\n        const hookResult = await runPreTool(toolHookPlugins, handler.name, args);\n        if (!hookResult.allow) {\n            return {\n                toolCallId: toolCall.id,\n                name: handler.name,\n                content: 'Blocked by hook: ' + (hookResult.reason || 'Plugin denied execution'),\n                success: false,\n                durationMs: Date.now() - startTime,\n            };\n        }\n        if (hookResult.modifiedArgs) args = hookResult.modifiedArgs;\n    }\n\n    // Autonomy gate: check if the tool is permitted under current mode\n    const autonomyResult = await checkAutonomy(handler.name, args, channel);\n    if (!autonomyResult.allowed) {\n        return {\n            toolCallId: toolCall.id,\n            name: handler.name,\n            content: 'Action blocked by autonomy policy: ' + (autonomyResult.reason || 'Not permitted'),\n            success: false,\n            durationMs: Date.now() - startTime,\n        };\n    }\n\n    // Shadow git checkpoint — snapshot files before mutation (fire-and-forget)\n    const MUTATING_TOOLS = new Set(['write_file', 'edit_file', 'append_file', 'apply_patch']);\n\n    // v4.9.0-local.7: kill-switch gate for file mutations. If the kill switch\n    // is engaged, refuse write/edit/append/apply_patch so the initiative loop\n    // can't keep accumulating fix-oscillations while the human hasn't resumed.\n    // This closes the gap where `spawn_agent`, `autopilot`, and the pressure\n    // cycle were gated but the main agent's tool path was not — meaning\n    // initiative could keep rewriting the same files for hours after a kill.\n    // See kill-switch.json `history` for the trigger; resume via\n    // POST /api/safety/resume.\n    if (MUTATING_TOOLS.has(handler.name)) {\n        try {\n            const { isKilled, getState } = await import('../safety/killSwitch.js');\n            if (isKilled()) {\n                const state = getState();\n                const lastReason = state?.lastEvent?.reason ?? 'kill switch engaged';\n                logger.warn(COMPONENT, `[KillSwitch] Refusing ${handler.name} — ${lastReason}`);\n                return {\n                    toolCallId: toolCall.id,\n                    name: handler.name,\n                    content: `Error: File mutation refused — kill switch is engaged (${lastReason}). ` +\n                        `Resume via POST /api/safety/resume after investigating the trigger, ` +\n                        `then retry. Do NOT retry this tool call until resumed.`,\n                    success: false,\n                    durationMs: Date.now() - startTime,\n                };\n            }\n        } catch { /* kill switch module unavailable — fall through (fail-open on infra error) */ }\n    }\n\n    // v4.9.0-local.8: Self-mod scope lock + staging.\n    //\n    // Three-layer policy when the active session has a goal tagged as\n    // self-modifying (see config.autonomy.selfMod.tags):\n    //   1. Writes to paths OUTSIDE config.autonomy.selfMod.target are refused\n    //      (prevents LARPing self-improvement by writing to ~/titan-saas etc)\n    //   2. When staging is enabled, writes INSIDE target are diverted to a\n    //      per-goal staging directory and a `self_mod_pr` approval is filed\n    //   3. The original path is stored as `targetPath` on the staging entry\n    //      so the human sees what would land where if they approve the PR\n    //\n    // This is the deeper fix for the pattern observed 2026-04-18 where a\n    // \"self-healing framework\" goal completed 100% by writing to an unrelated\n    // Next.js app.\n    let stagedRedirect: { stagedPath: string; targetPath: string } | null = null;\n    if (MUTATING_TOOLS.has(handler.name)) {\n        const rawFilePath = (args.path || args.file_path || args.filePath) as string | undefined;\n        if (rawFilePath) {\n            try {\n                const { getCurrentSessionId } = await import('./agent.js');\n                const { decideScope } = await import('./selfModStaging.js');\n                const sid: string | null = typeof getCurrentSessionId === 'function' ? getCurrentSessionId() : null;\n                const decision = decideScope(sid, rawFilePath);\n                if (decision.action === 'reject') {\n                    logger.warn(COMPONENT, `[ScopeLock] Refusing ${handler.name}: ${decision.reason}`);\n                    return {\n                        toolCallId: toolCall.id,\n                        name: handler.name,\n                        content: `Error: ${decision.reason}\\n\\nRewrite the path to live inside the self-mod target, OR retag the goal to remove self-mod tags, OR pause the goal and create a properly-scoped one.`,\n                        success: false,\n                        durationMs: Date.now() - startTime,\n                    };\n                }\n                if (decision.action === 'stage' && decision.stagedPath && decision.targetPath) {\n                    stagedRedirect = { stagedPath: decision.stagedPath, targetPath: decision.targetPath };\n                    // Rewrite the tool args so the handler writes to staging.\n                    // Preserve both `path` and `file_path` variants since\n                    // different tools use different field names.\n                    if (args.path !== undefined) args.path = decision.stagedPath;\n                    if (args.file_path !== undefined) args.file_path = decision.stagedPath;\n                    if (args.filePath !== undefined) args.filePath = decision.stagedPath;\n                    // Ensure the staged parent dir exists; write_file may not\n                    // mkdir -p on all code paths.\n                    try {\n                        const { mkdirSync } = await import('fs');\n                        const { dirname } = await import('path');\n                        mkdirSync(dirname(decision.stagedPath), { recursive: true });\n                    } catch { /* best-effort */ }\n                    logger.info(COMPONENT, `[SelfModStaging] Diverting ${handler.name} → ${decision.stagedPath} (would land at ${decision.targetPath} on approval)`);\n                }\n            } catch (err) {\n                logger.debug(COMPONENT, `[ScopeLock] check failed (fail-open): ${(err as Error).message}`);\n            }\n        }\n    }\n\n    // v5.0: Filesystem checkpoint before destructive operations\n    if (MUTATING_TOOLS.has(handler.name)) {\n        const cpPaths: string[] = [];\n        const cpPath = (args.path || args.file_path || args.filePath) as string;\n        if (cpPath) cpPaths.push(cpPath);\n        if (cpPaths.length > 0) {\n            createCheckpoint(sessionId || toolCall.id, handler.name, args, cpPaths);\n        }\n    }\n\n    if (MUTATING_TOOLS.has(handler.name)) {\n        // Use the (potentially rewritten) path for shadow-git + fix-oscillation\n        const filePath = (args.path || args.file_path || args.filePath) as string;\n        if (filePath) {\n            snapshotBeforeWrite(handler.name, filePath).catch(err =>\n                logger.debug(COMPONENT, `Shadow checkpoint skipped: ${(err as Error).message}`),\n            );\n            // v4.9.0: fix-oscillation tracker. Same file written/edited\n            // twice within 24h flags as oscillation, which feeds the\n            // kill switch (3+ oscillations → kill). Best-effort — never\n            // blocks the write.\n            (async () => {\n                try {\n                    const { recordFixEvent } = await import('../safety/fixOscillation.js');\n                    recordFixEvent({\n                        target: filePath,\n                        kind: 'file',\n                        detail: `${handler.name} via ${channel ?? 'unknown'}`,\n                    });\n                } catch (err) {\n                    logger.debug(COMPONENT, `Fix-oscillation skipped: ${(err as Error).message}`);\n                }\n            })();\n        }\n        // v4.8.0: self-proposal capture — if this write is happening inside\n        // an autonomous Soma-driven session, stash a copy for specialist\n        // review. Fire-and-forget — never blocks tool execution.\n        captureSelfProposalIfApplicable(handler.name, args).catch(err =>\n            logger.debug(COMPONENT, `Self-proposal capture skipped: ${(err as Error).message}`),\n        );\n    }\n\n    // Per-tool timeout lookup\n    const toolTimeouts = (config.security as Record<string, unknown>).toolTimeouts as Record<string, number> | undefined;\n    const baseTimeout = toolTimeouts?.[handler.name] || config.security.commandTimeout || 30000;\n\n    // Retry config\n    const retryConfig = (config.security as Record<string, unknown>).toolRetry as { enabled?: boolean; maxRetries?: number; backoffBaseMs?: number } | undefined;\n    const retryEnabled = retryConfig?.enabled !== false;\n    const maxRetries = retryConfig?.maxRetries ?? 3;\n    const backoffBase = retryConfig?.backoffBaseMs ?? 1000;\n\n    let lastError: Error | null = null;\n    let lastErrorClass: ErrorClass = 'permanent';\n    let attempt = 0;\n\n    // Capture pre-execution file state for diff generation\n    let preContent: string | undefined;\n    let filePathForDiff: string | undefined;\n    if (['write_file', 'edit_file', 'apply_patch'].includes(handler.name)) {\n        const pathArg = args.path as string | undefined;\n        if (pathArg) {\n            filePathForDiff = pathArg;\n            try {\n                if (existsSync(pathArg)) preContent = readFileSync(pathArg, 'utf-8');\n            } catch { /* ignore read errors */ }\n        }\n    }\n\n    // Swarm invariants — hard safety rules (fail-open)\n    try {\n        const { checkInvariants } = await import('../safety/invariants.js');\n        const invariant = checkInvariants(handler.name, args);\n        if (!invariant.pass) {\n            logger.warn(COMPONENT, `[Invariant] Blocked ${handler.name}: ${invariant.reason}`);\n            return {\n                toolCallId: toolCall.id,\n                name: handler.name,\n                content: `INVARIANT_VIOLATION: ${invariant.reason}`,\n                success: false,\n                durationMs: Date.now() - startTime,\n            };\n        }\n    } catch (err) {\n        logger.warn(COMPONENT, `Invariant check failed (fail-open): ${(err as Error).message}`);\n    }\n\n    // beta.16 (Phase D.4) — auto-mode classifier + approval gate.\n    //\n    // PRECEDENCE (fixed in beta.17 after Codex P1 review):\n    //   1. USER-CONFIGURED requiresApproval(handler.name) WINS FIRST.\n    //      If the user has explicitly added this tool to their\n    //      approval list, we file the approval regardless of what\n    //      the classifier says. The classifier never overrides\n    //      explicit user policy — auto-mode is a CONVENIENCE for\n    //      contract-declared safe tools, not a license to ignore\n    //      user-configured guards.\n    //   2. THEN the classifier. If classifier says 'gate', file\n    //      approval (even if requiresApproval was false). If 'auto'\n    //      or 'notify', proceed past the gate; 'notify' logs a\n    //      breadcrumb so the autonomous action is visible.\n    //\n    // Beta.16 had these reversed: classifier short-circuited past\n    // requiresApproval. That meant the user adding `write_file` to\n    // their approval list did nothing because the classifier\n    // unilaterally decided `auto` for it. Codex caught it on\n    // review — P1 #1.\n    const classification = classifyToolCall(handler.name);\n\n    // Step 1 — user-configured approval ALWAYS runs first. The\n    // user's explicit list is the source of truth.\n    let userApprovalWantsGate = false;\n    try {\n        const { requiresApproval } = await import('../skills/builtin/approval_gates.js');\n        userApprovalWantsGate = requiresApproval(handler.name);\n    } catch (approvalErr) {\n        // Approval gates module unavailable → log + fall through.\n        // Classifier still gets to decide. Fail-open behavior preserved.\n        logger.warn(COMPONENT, `Approval-config probe failed (fail-open): ${(approvalErr as Error).message}`);\n    }\n\n    // Step 2 — file an approval if EITHER the user's list demands it\n    // OR the classifier says 'gate'. Belt + suspenders, with the user\n    // explicitly first.\n    if (userApprovalWantsGate || classification.decision === 'gate') {\n        try {\n            const { createApprovalRequest } = await import('../skills/builtin/approval_gates.js');\n            const gateReason = userApprovalWantsGate\n                ? 'user approval policy'\n                : `classifier policy=${classification.policy} risk=${classification.riskLevel ?? 'unknown'}`;\n            logger.info(COMPONENT, `[ApprovalGate] Tool \"${handler.name}\" requires human approval (${gateReason}) — filing request`);\n            const request = createApprovalRequest(handler.name, args, sessionId || toolCall.id);\n            if (request.status === 'pending') {\n                return {\n                    toolCallId: toolCall.id,\n                    name: handler.name,\n                    content: `Awaiting approval: Tool \"${handler.name}\" requires human confirmation before execution. ` +\n                        `Request ID: ${request.id}. ` +\n                        `Approve with \"approve ${request.id}\" or deny with \"deny ${request.id}\".`,\n                    success: false,\n                    approvalPending: true,\n                    approvalRequestId: request.id,\n                    durationMs: Date.now() - startTime,\n                };\n            }\n            if (request.status === 'denied') {\n                return {\n                    toolCallId: toolCall.id,\n                    name: handler.name,\n                    content: `Error: Tool \"${handler.name}\" was auto-denied by approval policy. ` +\n                        `Check approval preferences or change the request decision.`,\n                    success: false,\n                    durationMs: Date.now() - startTime,\n                };\n            }\n            // status === 'approved' or anything else → fall through to execute().\n        } catch (approvalErr) {\n            // Approval gates module unavailable → fail-open so the agent\n            // doesn't deadlock. We've already warned above.\n            logger.warn(COMPONENT, `Approval gate check failed (fail-open): ${(approvalErr as Error).message}`);\n        }\n    } else if (classification.decision === 'auto') {\n        logger.debug(COMPONENT, formatBreadcrumb(handler.name, classification));\n    } else if (classification.decision === 'notify') {\n        // Passive notification. Future hook point for Mission Canvas\n        // toasts / trajectory `note` events. Logged at info level so\n        // the autonomous action is visible in titan-gateway.log + the\n        // structured log pipeline.\n        logger.info(COMPONENT, formatBreadcrumb(handler.name, classification));\n    }\n\n    const useWorktreeIsolation =\n        config.security.useWorktreeIsolation === true &&\n        contractToUse?.sideEffects.includes('destructive') === true;\n\n    for (; attempt <= (retryEnabled ? maxRetries : 0); attempt++) {\n        try {\n            // On timeout retry, double the timeout\n            const timeout = (attempt > 0 && lastErrorClass === 'timeout') ? baseTimeout * 2 : baseTimeout;\n\n            const timeoutController = useWorktreeIsolation ? new AbortController() : undefined;\n            const timeoutError = new Error(`Tool \"${handler.name}\" timed out after ${timeout}ms`);\n            let timeoutHandle: ReturnType<typeof setTimeout> | undefined;\n            let result = await Promise.race([\n                useWorktreeIsolation\n                    ? runInIsolatedWorktree({\n                        spawnId: toolCall.id,\n                        args,\n                        execute: handler.execute,\n                        baseCwd: process.cwd(),\n                        signal: timeoutController?.signal,\n                    })\n                    : handler.execute(args),\n                new Promise<string>((_, reject) => {\n                    timeoutHandle = setTimeout(() => {\n                        timeoutController?.abort(timeoutError);\n                        reject(timeoutError);\n                    }, timeout);\n                }),\n            ]).finally(() => {\n                if (timeoutHandle) clearTimeout(timeoutHandle);\n            });\n\n            // Secret exfiltration guard — scan tool output before it leaves\n            result = redactSecrets(result);\n\n            // v5.0: PII redaction (privacy compliance)\n            const config = loadConfig();\n            if (config.security?.redactPII) {\n                result = scanAndRedactPII(result);\n            }\n\n            // v5.0: Full exfiltration scan (layer 2-5) when configured\n            if (config.security?.secretScan?.level === 'full') {\n                const scan = fullExfilScan(result, 'tool_output');\n                if (scan.blocked) {\n                    logger.warn('ToolRunner', `Exfiltration scan blocked ${handler.name}: ${scan.findings.map(f => f.type).join(', ')}`);\n                }\n                result = scan.redacted;\n            }\n\n            const durationMs = Date.now() - startTime;\n            if (attempt > 0) {\n                logger.info(COMPONENT, `Tool ${handler.name} succeeded on retry ${attempt} in ${durationMs}ms`);\n            } else {\n                logger.info(COMPONENT, `Tool ${handler.name} completed in ${durationMs}ms`);\n            }\n\n            // G1: Strip base64 image data before size check (prevents token\n            // explosion). v6.1.0-alpha.55 — passes tool name so\n            // DATA_URL_PRODUCING_TOOLS (download_image) get exempted; for\n            // those the data URL IS the point of calling the tool.\n            let finalContent = sanitizeBase64(result, handler.name);\n\n            // Smart truncation — keep head + tail for large results (TITAN pattern).\n            // v6.1.0-alpha.55 — DATA_URL_PRODUCING_TOOLS are exempted because\n            // truncating mid-base64 produces an unusable data URL. The Writer\n            // would then fall back to hotlinking the source URL, which is\n            // exactly what Tony was seeing before alpha.55 (\"alpha.53 didn't\n            // work\" — it did, this layer was killing it).\n            if (finalContent.length > 30000 && !DATA_URL_PRODUCING_TOOLS.has(handler.name)) {\n                const head = finalContent.slice(0, 20000);\n                const tail = finalContent.slice(-5000);\n                finalContent = head + '\\n\\n[... ' + (finalContent.length - 25000) + ' chars omitted ...]\\n\\n' + tail;\n                logger.info(COMPONENT, `Tool ${handler.name} output truncated: ${result.length} → ${finalContent.length} chars`);\n            }\n\n            // v5.0: Shell hooks — post-tool\n            const shellPost = await runPostToolShellHooks(handler.name, args, finalContent, sessionId || toolCall.id, 'default', 0);\n            if (shellPost !== undefined) finalContent = shellPost;\n\n            // Post-tool hooks — plugins can modify result\n            if (toolHookPlugins.length > 0) {\n                const hookResult = await runPostTool(toolHookPlugins, handler.name, args, { content: finalContent, success: true, durationMs });\n                if (hookResult.modifiedContent !== undefined) finalContent = hookResult.modifiedContent;\n            }\n\n            // Cache the result for read-only tools (helper self-gates)\n            cacheToolResult(handler.name, cacheArgKey, finalContent);\n\n            // v4.9.0-local.8: if this write was diverted to staging, record\n            // it in the self_mod_pr bundle. Fire-and-forget — must NOT block\n            // the tool's return value or the agent loop.\n            if (stagedRedirect) {\n                (async () => {\n                    try {\n                        const { getCurrentSessionId } = await import('./agent.js');\n                        const { recordStagedWrite } = await import('./selfModStaging.js');\n                        const sid: string | null = typeof getCurrentSessionId === 'function' ? getCurrentSessionId() : null;\n                        await recordStagedWrite({\n                            sessionId: sid,\n                            toolName: handler.name,\n                            stagedPath: stagedRedirect!.stagedPath,\n                            targetPath: stagedRedirect!.targetPath,\n                        });\n                    } catch (err) {\n                        logger.debug(COMPONENT, `[SelfModStaging] recordStagedWrite failed: ${(err as Error).message}`);\n                    }\n                })();\n            }\n\n            // Fire-and-forget telemetry + activity log\n            (async () => {\n                try {\n                    const { logActivity } = await import('../telemetry/activityLog.js');\n                    logActivity({ event: 'tool_call', tool: handler.name, channel: channel ?? 'unknown' });\n                    if (MUTATING_TOOLS.has(handler.name)) {\n                        logActivity({ event: 'file_edit', tool: handler.name, path: (args.path || args.file_path || args.filePath) as string | undefined });\n                    }\n                    if (handler.name === 'web_search') {\n                        logActivity({ event: 'web_search', query: (args.query || args.q) as string | undefined });\n                    }\n                    if (handler.name === 'web_fetch') {\n                        logActivity({ event: 'web_fetch', url: (args.url || args.target) as string | undefined });\n                    }\n                    if (handler.name === 'run_eval' || handler.name === 'eval_suite') {\n                        logActivity({ event: 'eval_run', suite: (args.suite || args.name) as string | undefined });\n                    }\n                } catch { /* activity log non-critical */ }\n                const cfg = loadConfig();\n                if (cfg.telemetry?.enabled) {\n                    try {\n                        appendFileSync(TELEMETRY_EVENTS_PATH, JSON.stringify({\n                            event: 'tool_called',\n                            properties: { toolName: handler.name, success: true, durationMs, channel: channel ?? 'unknown' },\n                            timestamp: new Date().toISOString(),\n                        }) + '\\n', 'utf-8');\n                    } catch { /* non-critical */ }\n                }\n                // Remote analytics (PostHog + custom collector)\n                const { trackToolCall } = await import('../analytics/featureTracker.js');\n                const { getCurrentSessionId } = await import('./agent.js').catch(() => ({ getCurrentSessionId: () => null }));\n                const sid = typeof getCurrentSessionId === 'function' ? getCurrentSessionId() : null;\n                trackToolCall(handler.name, true, durationMs, undefined, sid ?? undefined);\n            })();\n\n            // Compute inline diff for file-modifying tools\n            let diff: string | undefined;\n            if (['write_file', 'edit_file', 'apply_patch'].includes(handler.name) && filePathForDiff && !stagedRedirect) {\n                try {\n                    const postContent = existsSync(filePathForDiff) ? readFileSync(filePathForDiff, 'utf-8') : '';\n                    diff = computeUnifiedDiff(filePathForDiff, preContent ?? '', postContent);\n                } catch { /* ignore diff errors */ }\n            }\n\n            return {\n                toolCallId: toolCall.id,\n                name: handler.name,\n                content: stagedRedirect\n                    ? `${finalContent}\\n\\n[SelfModStaging] Diverted to staging: ${stagedRedirect.stagedPath}. A human approval is pending before this lands at ${stagedRedirect.targetPath}.`\n                    : finalContent,\n                success: true,\n                durationMs,\n                retryCount: attempt,\n                diff,\n            };\n        } catch (error) {\n            lastError = error as Error;\n            lastErrorClass = classifyError(lastError, handler.name);\n\n            // Don't retry permanent errors\n            if (lastErrorClass === 'permanent') {\n                break;\n            }\n\n            // Don't retry if this was the last attempt\n            if (attempt >= maxRetries || !retryEnabled) {\n                break;\n            }\n\n            // Exponential backoff: 1s, 2s, 4s (capped at 8s)\n            const delay = Math.min(backoffBase * Math.pow(2, attempt), 8000);\n            logger.warn(COMPONENT, `Tool ${handler.name} failed (${lastErrorClass}, attempt ${attempt + 1}/${maxRetries + 1}): ${lastError.message} — retrying in ${delay}ms`);\n            await new Promise(resolve => setTimeout(resolve, delay));\n        }\n    }\n\n    // All retries exhausted or permanent error\n    const durationMs = Date.now() - startTime;\n    const errorMsg = lastError?.message || 'Unknown error';\n    const retryCount = attempt; // actual number of retries performed (matches success path)\n    logger.error(COMPONENT, `Tool ${handler.name} failed (${lastErrorClass}${retryCount > 0 ? `, ${retryCount} retries` : ''}): ${errorMsg}`);\n\n    // Fire-and-forget telemetry\n    (async () => {\n        const cfg = loadConfig();\n        if (cfg.telemetry?.enabled) {\n            try {\n                appendFileSync(TELEMETRY_EVENTS_PATH, JSON.stringify({\n                    event: 'tool_called',\n                    properties: { toolName: handler.name, success: false, durationMs, errorClass: lastErrorClass, channel: channel ?? 'unknown' },\n                    timestamp: new Date().toISOString(),\n                }) + '\\n', 'utf-8');\n            } catch { /* non-critical */ }\n        }\n        // Remote analytics (PostHog + custom collector)\n        const { trackToolCall } = await import('../analytics/featureTracker.js');\n        const { getCurrentSessionId } = await import('./agent.js').catch(() => ({ getCurrentSessionId: () => null }));\n        const sid = typeof getCurrentSessionId === 'function' ? getCurrentSessionId() : null;\n        trackToolCall(handler.name, false, durationMs, lastErrorClass, sid ?? undefined);\n    })();\n\n    return {\n        toolCallId: toolCall.id,\n        name: handler.name,\n        content: `Error: ${errorMsg}`,\n        success: false,\n        durationMs,\n        retryCount,\n        errorClass: lastErrorClass,\n    };\n}\n\n/** Execute multiple tool calls (in parallel where possible, with write-conflict detection) */\n/**\n * Apply the tool-output cap to every result. v5.8.0 — Anthropic's \"Writing\n * effective tools for AI agents\" recommends a 25k-token cap on tool results\n * with a tool-aware truncation hint. We do it here at the boundary so every\n * caller (agent loop, sub-agent, voice path) benefits without each having\n * to remember to wrap individually.\n * Reference: docs/HARNESS-PATTERNS.md, src/agent/toolOutputCap.ts\n */\nfunction applyOutputCaps(results: ToolResult[]): ToolResult[] {\n    return results.map((r) => {\n        const capped = capToolOutput(r.name, r.content);\n        if (!capped.truncated) return r;\n        // Only mutate when truncation actually happened, preserving identity\n        // when content was already small.\n        logger.info(COMPONENT, `[OutputCap] ${r.name} truncated ${capped.originalSize} → ${capped.content.length} chars`);\n        return { ...r, content: capped.content };\n    });\n}\n\nexport async function executeTools(toolCalls: ToolCall[], channel?: string): Promise<ToolResult[]> {\n    // Single tool — fast path\n    if (toolCalls.length <= 1) {\n        const results = await Promise.all(toolCalls.map(tc => executeTool(tc, channel)));\n        return applyOutputCaps(results);\n    }\n\n    // Multiple tools — use parallelTools engine with write-conflict detection\n    const parallelCalls = toolCalls.map(tc => {\n        let args: Record<string, unknown> = {};\n        try { args = JSON.parse(tc.function.arguments); } catch { /* use empty */ }\n        return { id: tc.id, name: tc.function.name, args };\n    });\n\n    const executor = async (name: string, args: Record<string, unknown>): Promise<string> => {\n        // Build a synthetic ToolCall for executeTool\n        const syntheticTc: ToolCall = {\n            id: '',\n            type: 'function',\n            function: { name, arguments: JSON.stringify(args) },\n        };\n        const result = await executeTool(syntheticTc, channel);\n        return result.content;\n    };\n\n    const parallelResults = await executeToolsParallel(parallelCalls, executor);\n\n    // Map back to ToolResult format with full metadata, then apply output cap.\n    const mapped: ToolResult[] = parallelResults.map(pr => ({\n        toolCallId: pr.toolCallId,\n        name: pr.name,\n        content: pr.content,\n        success: !pr.content.startsWith('Error:'),\n        durationMs: 0,\n    }));\n    return applyOutputCaps(mapped);\n}\n\n// ── Self-proposal capture helper (v4.8.0) ────────────────────────────────\n\n/**\n * If the current write is happening in an autonomous, Soma-driven session,\n * stash a copy of the written content for specialist review. Silent no-op\n * in all other cases (user-driven edits, non-autonomous mode, or when\n * selfMod.enabled is false in config).\n */\nasync function captureSelfProposalIfApplicable(\n    toolName: string,\n    args: Record<string, unknown>,\n): Promise<void> {\n    // Resolve what we can from the current autonomous context\n    const { getCurrentSessionId } = await import('./agent.js').catch(() => ({ getCurrentSessionId: () => null }));\n    const sessionId: string | null = typeof getCurrentSessionId === 'function' ? getCurrentSessionId() : null;\n    const sessionGoal = getSessionGoal(sessionId);\n    const config = loadConfig();\n    const autonomous = (config.autonomy?.mode === 'autonomous');\n    const goalProposedBy = sessionGoal?.proposedBy ?? null;\n\n    if (!shouldCapture({ toolName, autonomous, goalProposedBy })) return;\n\n    const filePath = (args.path || args.file_path || args.filePath) as string | undefined;\n    const content = (args.content || args.new_text || args.data) as string | undefined;\n    if (!filePath || !content) return;\n\n    captureWrite({\n        toolName,\n        filePath,\n        content,\n        sessionId,\n        agentId: null, // filled by downstream if needed\n        goalId: sessionGoal?.goalId ?? null,\n        goalTitle: sessionGoal?.goalTitle ?? null,\n        goalProposedBy,\n    });\n}\n"],"mappings":";AAKA;AAAA,EAEI;AAAA,EACA;AAAA,EACA;AAAA,OACG;AACP,SAAS,kBAAkB,wBAAwB;AACnD,SAAS,gBAAgB,cAAc,kBAAkB;AACzD,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC,SAAS,qBAAqB;AAC9B,SAAS,YAAY,mBAAmB;AAExC,SAAS,OAAO,6BAA6B;AAG7C,IAAI,kBAAyC,CAAC;AACvC,SAAS,mBAAmB,SAAsC;AACrE,oBAAkB;AACtB;AACA,OAAO,YAAY;AACnB,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,0BAA0B;AACnC,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB,qBAAqB;AAChD,SAAS,aAAa,eAAe;AACrC,SAAS,sBAAsB,6BAA6B;AAC5D,SAAS,wBAAwB;AAGjC,SAAS,mBAAmB,UAAkB,YAAoB,YAA4B;AAC1F,MAAI,eAAe,WAAY,QAAO,oBAAoB,QAAQ;AAClE,QAAM,WAAW,WAAW,MAAM,IAAI;AACtC,QAAM,WAAW,WAAW,MAAM,IAAI;AACtC,QAAM,SAAS,OAAO,QAAQ;AAAA,MAAS,QAAQ;AAC/C,QAAM,QAAkB,CAAC;AACzB,MAAI,IAAI,GAAG,IAAI;AACf,SAAO,IAAI,SAAS,UAAU,IAAI,SAAS,QAAQ;AAC/C,QAAI,IAAI,SAAS,UAAU,IAAI,SAAS,UAAU,SAAS,CAAC,MAAM,SAAS,CAAC,GAAG;AAC3E;AAAK;AAAK;AAAA,IACd;AACA,UAAM,SAAS,GAAG,SAAS;AAC3B,UAAM,UAAoB,CAAC;AAC3B,UAAM,QAAkB,CAAC;AACzB,WAAO,IAAI,SAAS,WAAW,KAAK,SAAS,UAAU,SAAS,CAAC,MAAM,SAAS,CAAC,IAAI;AACjF,cAAQ,KAAK,SAAS,GAAG,CAAC;AAAA,IAC9B;AACA,WAAO,IAAI,SAAS,WAAW,KAAK,SAAS,UAAU,SAAS,CAAC,MAAM,SAAS,CAAC,IAAI;AACjF,YAAM,KAAK,SAAS,GAAG,CAAC;AAAA,IAC5B;AACA,QAAI,QAAQ,UAAU,MAAM,QAAQ;AAChC,YAAM,YAAY,SAAS,MAAM,KAAK,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM;AAChE,YAAM,WAAW,SAAS,MAAM,GAAG,KAAK,IAAI,SAAS,QAAQ,IAAI,CAAC,CAAC;AACnE,YAAM,KAAK;AAAA,QACP,GAAG,UAAU,IAAI,OAAK,IAAI,CAAC,EAAE;AAAA,QAC7B,GAAG,QAAQ,IAAI,OAAK,IAAI,CAAC,EAAE;AAAA,QAC3B,GAAG,MAAM,IAAI,OAAK,IAAI,CAAC,EAAE;AAAA,QACzB,GAAG,SAAS,IAAI,OAAK,IAAI,CAAC,EAAE;AAAA,MAChC,EAAE,KAAK,IAAI,CAAC;AAAA,IAChB;AAAA,EACJ;AACA,QAAM,OAAO,MAAM,KAAK,SAAS;AACjC,SAAO,GAAG,MAAM;AAAA,EAAK,IAAI;AAC7B;AACA,SAAS,qBAAqB,uBAAuB;AACrD,SAAS,uBAAuB,sBAAsB;AACtD,SAAS,2BAA2B;AACpC,SAAS,cAAc,qBAAqB;AAC5C,SAAS,sBAAsB;AAE/B,MAAM,YAAY;AAoBlB,MAAM,2BAA2B,oBAAI,IAAI;AAAA,EACrC;AACJ,CAAC;AAYD,SAAS,eAAe,SAAiB,UAA2B;AAChE,MAAI,YAAY,yBAAyB,IAAI,QAAQ,EAAG,QAAO;AAC/D,SAAO,QAAQ;AAAA,IACX;AAAA,IACA,CAAC,UAAU;AACP,YAAM,QAAQ,KAAK,MAAM,MAAM,SAAS,MAAM,QAAQ,GAAG,IAAI,KAAK,IAAI;AACtE,aAAO,YAAY,QAAQ,MAAM,QAAQ,CAAC,CAAC;AAAA,IAC/C;AAAA,EACJ;AACJ;AAOO,SAAS,uBAAuB,UAA2B;AAC9D,SAAO,yBAAyB,IAAI,QAAQ;AAChD;AASO,SAAS,cAAc,OAAc,WAA+B;AACvE,QAAM,aAAa,sBAAsB,KAAK;AAC9C,UAAQ,WAAW,QAAQ;AAAA,IACvB,KAAK,eAAe;AAChB,aAAO;AAAA,IACX,KAAK,eAAe;AAChB,aAAO;AAAA,IACX,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAChB,aAAO;AAAA,IACX;AACI,aAAO,WAAW,YAAY,cAAc;AAAA,EACpD;AACJ;AAsCA,MAAM,eAAyC,oBAAI,IAAI;AAGhD,SAAS,aAAa,SAA4B;AACrD,eAAa,IAAI,QAAQ,MAAM,OAAO;AACtC,SAAO,MAAM,WAAW,oBAAoB,QAAQ,IAAI,EAAE;AAC9D;AAGO,SAAS,eAAe,MAAoB;AAC/C,eAAa,OAAO,IAAI;AAC5B;AAGO,SAAS,qBAAoC;AAChD,SAAO,MAAM,KAAK,aAAa,OAAO,CAAC;AAC3C;AAGO,SAAS,qBAAuC;AACnD,QAAM,SAAS,WAAW;AAC1B,QAAM,UAAU,IAAI,IAAI,OAAO,SAAS,YAAY;AACpD,QAAM,SAAS,IAAI,IAAI,OAAO,SAAS,WAAW;AAElD,SAAO,MAAM,KAAK,aAAa,OAAO,CAAC,EAClC,OAAO,CAAC,SAAS;AACd,QAAI,OAAO,IAAI,KAAK,IAAI,EAAG,QAAO;AAClC,QAAI,QAAQ,OAAO,KAAK,CAAC,QAAQ,IAAI,KAAK,IAAI,EAAG,QAAO;AACxD,QAAI,CAAC,mBAAmB,KAAK,IAAI,EAAG,QAAO;AAC3C,WAAO;AAAA,EACX,CAAC,EACA,IAAI,CAAC,UAAU;AAAA,IACZ,MAAM;AAAA,IACN,UAAU;AAAA,MACN,MAAM,KAAK;AAAA,MACX,aAAa,KAAK;AAAA,MAClB,YAAY,KAAK;AAAA,IACrB;AAAA,EACJ,EAAE;AACV;AAGA,eAAsB,YAAY,UAAoB,SAAuC;AACzF,QAAM,SAAS,WAAW;AAC1B,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,UAAU,aAAa,IAAI,SAAS,SAAS,IAAI;AAEvD,MAAI,CAAC,SAAS;AAEV,UAAM,YAAY,MAAM,KAAK,aAAa,KAAK,CAAC,EAAE,KAAK;AACvD,UAAM,cAAc,UAAU,OAAO,OAAK;AACtC,YAAM,OAAO,SAAS,SAAS,KAAK,YAAY;AAChD,aAAO,EAAE,YAAY,EAAE,SAAS,KAAK,MAAM,GAAG,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,MAAM,GAAG,CAAC,CAAC;AAAA,IACpF,CAAC,EAAE,MAAM,GAAG,CAAC;AACb,UAAM,OAAO,YAAY,SAAS,IAC5B;AAAA,gBAAmB,YAAY,KAAK,IAAI,CAAC,MACzC;AAAA,2BAA8B,UAAU,MAAM,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,GAAG,UAAU,SAAS,KAAK,SAAS,UAAU,SAAS,EAAE,WAAW,EAAE;AAC3I,WAAO;AAAA,MACH,YAAY,SAAS;AAAA,MACrB,MAAM,SAAS,SAAS;AAAA,MACxB,SAAS,WAAW,SAAS,SAAS,IAAI,yBAAyB,IAAI;AAAA;AAAA,MACvE,SAAS;AAAA,MACT,YAAY,KAAK,IAAI,IAAI;AAAA,IAC7B;AAAA,EACJ;AAGA,MAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,IAAI,GAAG;AACpD,WAAO;AAAA,MACH,YAAY,SAAS;AAAA,MACrB,MAAM,QAAQ;AAAA,MACd,SAAS,gBAAgB,QAAQ,IAAI;AAAA,MACrC,SAAS;AAAA,MACT,YAAY,KAAK,IAAI,IAAI;AAAA,IAC7B;AAAA,EACJ;AAGA,MAAI,CAAC,mBAAmB,QAAQ,IAAI,GAAG;AACnC,WAAO;AAAA,MACH,YAAY,SAAS;AAAA,MACrB,MAAM,QAAQ;AAAA,MACd,SAAS,gBAAgB,QAAQ,IAAI;AAAA,MACrC,SAAS;AAAA,MACT,YAAY,KAAK,IAAI,IAAI;AAAA,IAC7B;AAAA,EACJ;AAGA,MAAI,OAAgC,CAAC;AACrC,MAAI;AACA,WAAO,KAAK,MAAM,SAAS,SAAS,SAAS;AAAA,EACjD,SAAS,UAAU;AACf,WAAO,KAAK,cAAc,2BAA2B,QAAQ,IAAI,KAAM,SAAmB,OAAO,iBAAY,SAAS,SAAS,aAAa,IAAI,MAAM,GAAG,GAAG,CAAC,EAAE;AAE/J,UAAM,gBAAgB,SAAS,SAAS,aAAa,IAAI,MAAM,WAAW;AAC1E,QAAI,cAAc;AACd,UAAI;AAEA,cAAM,QAAQ,aAAa,CAAC,EAAE,QAAQ,UAAU,GAAG;AACnD,eAAO,KAAK,MAAM,KAAK;AACvB,eAAO,KAAK,cAAc,kCAAkC,QAAQ,IAAI,EAAE;AAAA,MAC9E,QAAQ;AAEJ,eAAO;AAAA,UACH,YAAY,SAAS;AAAA,UACrB,MAAM,QAAQ;AAAA,UACd,SAAS,yCAAyC,QAAQ,IAAI,YAAY,SAAS,SAAS,aAAa,IAAI,MAAM,GAAG,GAAG,CAAC;AAAA,UAC1H,SAAS;AAAA,UACT,YAAY,KAAK,IAAI,IAAI;AAAA,QAC7B;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ;AAaA,MAAI,gBAAgB,QAAQ;AAC5B,MAAI,CAAC,eAAe;AAChB,QAAI;AACA,YAAM,EAAE,gBAAgB,IAAI,MAAM,OAAO,mBAAmB;AAC5D,sBAAgB,gBAAgB,QAAQ,IAAI;AAAA,IAChD,QAAQ;AAAA,IAA6C;AAAA,EACzD;AACA,MAAI,eAAe;AACf,QAAI;AAIA,aAAO,iBAAiB,eAAe,IAAI;AAAA,IAC/C,SAAS,eAAe;AACpB,UAAI,yBAAyB,qBAAqB;AAC9C,eAAO;AAAA,UACH;AAAA,UACA,gCAAgC,QAAQ,IAAI,KAAK,cAAc,OAAO;AAAA,QAC1E;AACA,eAAO;AAAA,UACH,YAAY,SAAS;AAAA,UACrB,MAAM,QAAQ;AAAA,UACd,SAAS,sBAAsB,aAAa;AAAA,UAC5C,SAAS;AAAA,UACT,YAAY,KAAK,IAAI,IAAI;AAAA,QAC7B;AAAA,MACJ;AAAA,IAGJ;AAAA,EACJ;AAGA,MAAI,QAAQ,cAAc,OAAO,QAAQ,eAAe,UAAU;AAC9D,UAAM,SAAS,QAAQ;AACvB,QAAI,OAAO,YAAY,MAAM,QAAQ,OAAO,QAAQ,GAAG;AACnD,YAAM,UAAU,OAAO,SAAS,OAAO,SAAO,KAAK,GAAG,MAAM,UAAa,KAAK,GAAG,MAAM,IAAI;AAC3F,UAAI,QAAQ,SAAS,GAAG;AACpB,cAAM,YAAY,OAAO,aAAa,OAAO,KAAK,OAAO,UAAU,IAAI,CAAC;AACxE,eAAO,KAAK,cAAc,sBAAsB,QAAQ,IAAI,8BAA8B,QAAQ,KAAK,IAAI,CAAC,EAAE;AAC9G,eAAO;AAAA,UACH,YAAY,SAAS;AAAA,UACrB,MAAM,QAAQ;AAAA,UACd,SAAS,yCAAyC,QAAQ,KAAK,IAAI,CAAC,0BACxC,UAAU,KAAK,IAAI,CAAC;AAAA,UAChD,SAAS;AAAA,UACT,YAAY,KAAK,IAAI,IAAI;AAAA,QAC7B;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ;AAiBA,QAAM,8BAA8B,oBAAI,IAAI,CAAC,cAAc,aAAa,eAAe,aAAa,CAAC;AACrG,MAAI,4BAA4B,IAAI,QAAQ,IAAI,GAAG;AAC/C,QAAI;AACA,YAAM,EAAE,wBAAwB,IAAI,MAAM,OAAO,oBAAoB;AACrE,YAAM,UAAU,wBAAwB;AACxC,UAAI,SAAS;AACT,cAAM,UAAW,KAAK,QAAQ,KAAK,aAAa,KAAK;AACrD,YAAI,OAAO,YAAY,YAAY,QAAQ,SAAS,GAAG;AACnD,cAAI,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,GAAG,GAAG;AACpD,mBAAO;AAAA,cACH,YAAY,SAAS;AAAA,cACrB,MAAM,QAAQ;AAAA,cACd,SAAS,+CAA+C,QAAQ,SAAS,sDAAiD,OAAO;AAAA,cACjI,SAAS;AAAA,cACT,YAAY,KAAK,IAAI,IAAI;AAAA,YAC7B;AAAA,UACJ;AACA,gBAAM,EAAE,MAAM,UAAU,QAAQ,IAAI,MAAM,OAAO,MAAM;AACvD,gBAAM,EAAE,UAAU,IAAI,MAAM,OAAO,IAAI;AACvC,gBAAM,UAAU,SAAS,QAAQ,MAAM,OAAO;AAC9C,cAAI,KAAK,SAAS,OAAW,MAAK,OAAO;AACzC,cAAI,KAAK,cAAc,OAAW,MAAK,YAAY;AACnD,cAAI,KAAK,aAAa,OAAW,MAAK,WAAW;AACjD,cAAI;AAAE,sBAAU,QAAQ,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,UAAG,QAClD;AAAA,UAAoB;AAC1B,iBAAO,MAAM,WAAW,yBAAyB,QAAQ,IAAI,WAAM,OAAO,YAAY,QAAQ,MAAM,IAAI,QAAQ,SAAS,GAAG;AAAA,QAChI;AAAA,MACJ;AAAA,IACJ,SAAS,KAAK;AACV,aAAO,MAAM,WAAW,iCAAkC,IAAc,OAAO,EAAE;AAAA,IACrF;AAAA,EACJ;AAGA,MAAI;AACA,UAAM,EAAE,cAAc,IAAI,MAAM,OAAO,iBAAiB;AACxD,UAAM,cAAc,cAAc,QAAQ,MAAM,IAAI;AACpD,QAAI,CAAC,YAAY,SAAS;AACtB,aAAO,KAAK,cAAc,wBAAwB,QAAQ,IAAI,KAAK,YAAY,MAAM,EAAE;AACvF,aAAO;AAAA,QACH,YAAY,SAAS;AAAA,QACrB,MAAM,QAAQ;AAAA,QACd,SAAS,iDAA4C,YAAY,MAAM;AAAA,QACvE,SAAS;AAAA,QACT,YAAY,KAAK,IAAI,IAAI;AAAA,MAC7B;AAAA,IACJ;AAAA,EACJ,QAAQ;AAAA,EAA0C;AAGlD,QAAM,cAAc,SAAS,SAAS,aAAa;AACnD,QAAM,eAAe,oBAAoB,QAAQ,MAAM,WAAW;AAClE,MAAI,iBAAiB,MAAM;AACvB,WAAO,KAAK,WAAW,eAAe,QAAQ,IAAI,EAAE;AACpD,WAAO;AAAA,MACH,YAAY,SAAS;AAAA,MACrB,MAAM,QAAQ;AAAA,MACd,SAAS;AAAA,MACT,SAAS;AAAA,MACT,YAAY,KAAK,IAAI,IAAI;AAAA,IAC7B;AAAA,EACJ;AAEA,SAAO,KAAK,WAAW,mBAAmB,QAAQ,IAAI,EAAE;AAGxD,MAAI,QAAQ,SAAS,WAAW,QAAQ,SAAS,aAAa;AAC1D,UAAM,SAAU,KAAK,WAAW,KAAK,QAAQ,KAAK,UAAU;AAC5D,UAAM,OAAO,YAAY,MAAM;AAC/B,QAAI,CAAC,KAAK,SAAS;AACf,aAAO;AAAA,QACH,YAAY,SAAS;AAAA,QACrB,MAAM,QAAQ;AAAA,QACd,SAAS;AAAA,EAAmD,KAAK,SAAS,KAAK,IAAI,CAAC;AAAA,QACpF,SAAS;AAAA,QACT,YAAY,KAAK,IAAI,IAAI;AAAA,MAC7B;AAAA,IACJ;AACA,QAAI,KAAK,SAAS,SAAS,KAAK,KAAK,UAAU,QAAQ;AACnD,aAAO,KAAK,cAAc,yBAAyB,QAAQ,IAAI,KAAK,KAAK,SAAS,KAAK,IAAI,CAAC,EAAE;AAAA,IAClG;AAAA,EACJ;AACA,MAAI,QAAQ,SAAS,sBAAsB,QAAQ,SAAS,oBAAoB;AAC5E,UAAM,SAAU,KAAK,OAAO,KAAK,UAAU;AAC3C,UAAM,OAAO,QAAQ,MAAM;AAC3B,QAAI,CAAC,KAAK,SAAS;AACf,aAAO;AAAA,QACH,YAAY,SAAS;AAAA,QACrB,MAAM,QAAQ;AAAA,QACd,SAAS;AAAA,EAA+C,KAAK,SAAS,KAAK,IAAI,CAAC;AAAA,QAChF,SAAS;AAAA,QACT,YAAY,KAAK,IAAI,IAAI;AAAA,MAC7B;AAAA,IACJ;AAAA,EACJ;AAGA,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,YAAY;AACzD,QAAM,YAAY,OAAO,wBAAwB,aAAa,oBAAoB,IAAI;AACtF,QAAM,WAAW,MAAM,qBAAqB,QAAQ,MAAM,MAAM,aAAa,SAAS,IAAI,WAAW,CAAC;AACtG,MAAI,CAAC,SAAS,OAAO;AACjB,WAAO;AAAA,MACH,YAAY,SAAS;AAAA,MACrB,MAAM,QAAQ;AAAA,MACd,SAAS,6BAA6B,SAAS,UAAU;AAAA,MACzD,SAAS;AAAA,MACT,YAAY,KAAK,IAAI,IAAI;AAAA,IAC7B;AAAA,EACJ;AACA,MAAI,SAAS,aAAc,QAAO,SAAS;AAG3C,MAAI,gBAAgB,SAAS,GAAG;AAC5B,UAAM,aAAa,MAAM,WAAW,iBAAiB,QAAQ,MAAM,IAAI;AACvE,QAAI,CAAC,WAAW,OAAO;AACnB,aAAO;AAAA,QACH,YAAY,SAAS;AAAA,QACrB,MAAM,QAAQ;AAAA,QACd,SAAS,uBAAuB,WAAW,UAAU;AAAA,QACrD,SAAS;AAAA,QACT,YAAY,KAAK,IAAI,IAAI;AAAA,MAC7B;AAAA,IACJ;AACA,QAAI,WAAW,aAAc,QAAO,WAAW;AAAA,EACnD;AAGA,QAAM,iBAAiB,MAAM,cAAc,QAAQ,MAAM,MAAM,OAAO;AACtE,MAAI,CAAC,eAAe,SAAS;AACzB,WAAO;AAAA,MACH,YAAY,SAAS;AAAA,MACrB,MAAM,QAAQ;AAAA,MACd,SAAS,yCAAyC,eAAe,UAAU;AAAA,MAC3E,SAAS;AAAA,MACT,YAAY,KAAK,IAAI,IAAI;AAAA,IAC7B;AAAA,EACJ;AAGA,QAAM,iBAAiB,oBAAI,IAAI,CAAC,cAAc,aAAa,eAAe,aAAa,CAAC;AAUxF,MAAI,eAAe,IAAI,QAAQ,IAAI,GAAG;AAClC,QAAI;AACA,YAAM,EAAE,UAAU,SAAS,IAAI,MAAM,OAAO,yBAAyB;AACrE,UAAI,SAAS,GAAG;AACZ,cAAM,QAAQ,SAAS;AACvB,cAAM,aAAa,OAAO,WAAW,UAAU;AAC/C,eAAO,KAAK,WAAW,yBAAyB,QAAQ,IAAI,WAAM,UAAU,EAAE;AAC9E,eAAO;AAAA,UACH,YAAY,SAAS;AAAA,UACrB,MAAM,QAAQ;AAAA,UACd,SAAS,+DAA0D,UAAU;AAAA,UAG7E,SAAS;AAAA,UACT,YAAY,KAAK,IAAI,IAAI;AAAA,QAC7B;AAAA,MACJ;AAAA,IACJ,QAAQ;AAAA,IAAiF;AAAA,EAC7F;AAgBA,MAAI,iBAAoE;AACxE,MAAI,eAAe,IAAI,QAAQ,IAAI,GAAG;AAClC,UAAM,cAAe,KAAK,QAAQ,KAAK,aAAa,KAAK;AACzD,QAAI,aAAa;AACb,UAAI;AACA,cAAM,EAAE,qBAAAA,qBAAoB,IAAI,MAAM,OAAO,YAAY;AACzD,cAAM,EAAE,YAAY,IAAI,MAAM,OAAO,qBAAqB;AAC1D,cAAM,MAAqB,OAAOA,yBAAwB,aAAaA,qBAAoB,IAAI;AAC/F,cAAM,WAAW,YAAY,KAAK,WAAW;AAC7C,YAAI,SAAS,WAAW,UAAU;AAC9B,iBAAO,KAAK,WAAW,wBAAwB,QAAQ,IAAI,KAAK,SAAS,MAAM,EAAE;AACjF,iBAAO;AAAA,YACH,YAAY,SAAS;AAAA,YACrB,MAAM,QAAQ;AAAA,YACd,SAAS,UAAU,SAAS,MAAM;AAAA;AAAA;AAAA,YAClC,SAAS;AAAA,YACT,YAAY,KAAK,IAAI,IAAI;AAAA,UAC7B;AAAA,QACJ;AACA,YAAI,SAAS,WAAW,WAAW,SAAS,cAAc,SAAS,YAAY;AAC3E,2BAAiB,EAAE,YAAY,SAAS,YAAY,YAAY,SAAS,WAAW;AAIpF,cAAI,KAAK,SAAS,OAAW,MAAK,OAAO,SAAS;AAClD,cAAI,KAAK,cAAc,OAAW,MAAK,YAAY,SAAS;AAC5D,cAAI,KAAK,aAAa,OAAW,MAAK,WAAW,SAAS;AAG1D,cAAI;AACA,kBAAM,EAAE,UAAU,IAAI,MAAM,OAAO,IAAI;AACvC,kBAAM,EAAE,QAAQ,IAAI,MAAM,OAAO,MAAM;AACvC,sBAAU,QAAQ,SAAS,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,UAC/D,QAAQ;AAAA,UAAoB;AAC5B,iBAAO,KAAK,WAAW,8BAA8B,QAAQ,IAAI,WAAM,SAAS,UAAU,mBAAmB,SAAS,UAAU,eAAe;AAAA,QACnJ;AAAA,MACJ,SAAS,KAAK;AACV,eAAO,MAAM,WAAW,yCAA0C,IAAc,OAAO,EAAE;AAAA,MAC7F;AAAA,IACJ;AAAA,EACJ;AAGA,MAAI,eAAe,IAAI,QAAQ,IAAI,GAAG;AAClC,UAAM,UAAoB,CAAC;AAC3B,UAAM,SAAU,KAAK,QAAQ,KAAK,aAAa,KAAK;AACpD,QAAI,OAAQ,SAAQ,KAAK,MAAM;AAC/B,QAAI,QAAQ,SAAS,GAAG;AACpB,uBAAiB,aAAa,SAAS,IAAI,QAAQ,MAAM,MAAM,OAAO;AAAA,IAC1E;AAAA,EACJ;AAEA,MAAI,eAAe,IAAI,QAAQ,IAAI,GAAG;AAElC,UAAM,WAAY,KAAK,QAAQ,KAAK,aAAa,KAAK;AACtD,QAAI,UAAU;AACV,0BAAoB,QAAQ,MAAM,QAAQ,EAAE;AAAA,QAAM,SAC9C,OAAO,MAAM,WAAW,8BAA+B,IAAc,OAAO,EAAE;AAAA,MAClF;AAKA,OAAC,YAAY;AACT,YAAI;AACA,gBAAM,EAAE,eAAe,IAAI,MAAM,OAAO,6BAA6B;AACrE,yBAAe;AAAA,YACX,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,QAAQ,GAAG,QAAQ,IAAI,QAAQ,WAAW,SAAS;AAAA,UACvD,CAAC;AAAA,QACL,SAAS,KAAK;AACV,iBAAO,MAAM,WAAW,4BAA6B,IAAc,OAAO,EAAE;AAAA,QAChF;AAAA,MACJ,GAAG;AAAA,IACP;AAIA,oCAAgC,QAAQ,MAAM,IAAI,EAAE;AAAA,MAAM,SACtD,OAAO,MAAM,WAAW,kCAAmC,IAAc,OAAO,EAAE;AAAA,IACtF;AAAA,EACJ;AAGA,QAAM,eAAgB,OAAO,SAAqC;AAClE,QAAM,cAAc,eAAe,QAAQ,IAAI,KAAK,OAAO,SAAS,kBAAkB;AAGtF,QAAM,cAAe,OAAO,SAAqC;AACjE,QAAM,eAAe,aAAa,YAAY;AAC9C,QAAM,aAAa,aAAa,cAAc;AAC9C,QAAM,cAAc,aAAa,iBAAiB;AAElD,MAAI,YAA0B;AAC9B,MAAI,iBAA6B;AACjC,MAAI,UAAU;AAGd,MAAI;AACJ,MAAI;AACJ,MAAI,CAAC,cAAc,aAAa,aAAa,EAAE,SAAS,QAAQ,IAAI,GAAG;AACnE,UAAM,UAAU,KAAK;AACrB,QAAI,SAAS;AACT,wBAAkB;AAClB,UAAI;AACA,YAAI,WAAW,OAAO,EAAG,cAAa,aAAa,SAAS,OAAO;AAAA,MACvE,QAAQ;AAAA,MAA2B;AAAA,IACvC;AAAA,EACJ;AAGA,MAAI;AACA,UAAM,EAAE,gBAAgB,IAAI,MAAM,OAAO,yBAAyB;AAClE,UAAM,YAAY,gBAAgB,QAAQ,MAAM,IAAI;AACpD,QAAI,CAAC,UAAU,MAAM;AACjB,aAAO,KAAK,WAAW,uBAAuB,QAAQ,IAAI,KAAK,UAAU,MAAM,EAAE;AACjF,aAAO;AAAA,QACH,YAAY,SAAS;AAAA,QACrB,MAAM,QAAQ;AAAA,QACd,SAAS,wBAAwB,UAAU,MAAM;AAAA,QACjD,SAAS;AAAA,QACT,YAAY,KAAK,IAAI,IAAI;AAAA,MAC7B;AAAA,IACJ;AAAA,EACJ,SAAS,KAAK;AACV,WAAO,KAAK,WAAW,uCAAwC,IAAc,OAAO,EAAE;AAAA,EAC1F;AAsBA,QAAM,iBAAiB,iBAAiB,QAAQ,IAAI;AAIpD,MAAI,wBAAwB;AAC5B,MAAI;AACA,UAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,qCAAqC;AAC/E,4BAAwB,iBAAiB,QAAQ,IAAI;AAAA,EACzD,SAAS,aAAa;AAGlB,WAAO,KAAK,WAAW,6CAA8C,YAAsB,OAAO,EAAE;AAAA,EACxG;AAKA,MAAI,yBAAyB,eAAe,aAAa,QAAQ;AAC7D,QAAI;AACA,YAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,qCAAqC;AACpF,YAAM,aAAa,wBACb,yBACA,qBAAqB,eAAe,MAAM,SAAS,eAAe,aAAa,SAAS;AAC9F,aAAO,KAAK,WAAW,wBAAwB,QAAQ,IAAI,8BAA8B,UAAU,yBAAoB;AACvH,YAAM,UAAU,sBAAsB,QAAQ,MAAM,MAAM,aAAa,SAAS,EAAE;AAClF,UAAI,QAAQ,WAAW,WAAW;AAC9B,eAAO;AAAA,UACH,YAAY,SAAS;AAAA,UACrB,MAAM,QAAQ;AAAA,UACd,SAAS,4BAA4B,QAAQ,IAAI,+DAC9B,QAAQ,EAAE,2BACA,QAAQ,EAAE,wBAAwB,QAAQ,EAAE;AAAA,UACzE,SAAS;AAAA,UACT,iBAAiB;AAAA,UACjB,mBAAmB,QAAQ;AAAA,UAC3B,YAAY,KAAK,IAAI,IAAI;AAAA,QAC7B;AAAA,MACJ;AACA,UAAI,QAAQ,WAAW,UAAU;AAC7B,eAAO;AAAA,UACH,YAAY,SAAS;AAAA,UACrB,MAAM,QAAQ;AAAA,UACd,SAAS,gBAAgB,QAAQ,IAAI;AAAA,UAErC,SAAS;AAAA,UACT,YAAY,KAAK,IAAI,IAAI;AAAA,QAC7B;AAAA,MACJ;AAAA,IAEJ,SAAS,aAAa;AAGlB,aAAO,KAAK,WAAW,2CAA4C,YAAsB,OAAO,EAAE;AAAA,IACtG;AAAA,EACJ,WAAW,eAAe,aAAa,QAAQ;AAC3C,WAAO,MAAM,WAAW,iBAAiB,QAAQ,MAAM,cAAc,CAAC;AAAA,EAC1E,WAAW,eAAe,aAAa,UAAU;AAK7C,WAAO,KAAK,WAAW,iBAAiB,QAAQ,MAAM,cAAc,CAAC;AAAA,EACzE;AAEA,QAAM,uBACF,OAAO,SAAS,yBAAyB,QACzC,eAAe,YAAY,SAAS,aAAa,MAAM;AAE3D,SAAO,YAAY,eAAe,aAAa,IAAI,WAAW;AAC1D,QAAI;AAEA,YAAM,UAAW,UAAU,KAAK,mBAAmB,YAAa,cAAc,IAAI;AAElF,YAAM,oBAAoB,uBAAuB,IAAI,gBAAgB,IAAI;AACzE,YAAM,eAAe,IAAI,MAAM,SAAS,QAAQ,IAAI,qBAAqB,OAAO,IAAI;AACpF,UAAI;AACJ,UAAI,SAAS,MAAM,QAAQ,KAAK;AAAA,QAC5B,uBACM,sBAAsB;AAAA,UACpB,SAAS,SAAS;AAAA,UAClB;AAAA,UACA,SAAS,QAAQ;AAAA,UACjB,SAAS,QAAQ,IAAI;AAAA,UACrB,QAAQ,mBAAmB;AAAA,QAC/B,CAAC,IACC,QAAQ,QAAQ,IAAI;AAAA,QAC1B,IAAI,QAAgB,CAAC,GAAG,WAAW;AAC/B,0BAAgB,WAAW,MAAM;AAC7B,+BAAmB,MAAM,YAAY;AACrC,mBAAO,YAAY;AAAA,UACvB,GAAG,OAAO;AAAA,QACd,CAAC;AAAA,MACL,CAAC,EAAE,QAAQ,MAAM;AACb,YAAI,cAAe,cAAa,aAAa;AAAA,MACjD,CAAC;AAGD,eAAS,cAAc,MAAM;AAG7B,YAAMC,UAAS,WAAW;AAC1B,UAAIA,QAAO,UAAU,WAAW;AAC5B,iBAAS,iBAAiB,MAAM;AAAA,MACpC;AAGA,UAAIA,QAAO,UAAU,YAAY,UAAU,QAAQ;AAC/C,cAAM,OAAO,cAAc,QAAQ,aAAa;AAChD,YAAI,KAAK,SAAS;AACd,iBAAO,KAAK,cAAc,6BAA6B,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,OAAK,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE;AAAA,QACvH;AACA,iBAAS,KAAK;AAAA,MAClB;AAEA,YAAMC,cAAa,KAAK,IAAI,IAAI;AAChC,UAAI,UAAU,GAAG;AACb,eAAO,KAAK,WAAW,QAAQ,QAAQ,IAAI,uBAAuB,OAAO,OAAOA,WAAU,IAAI;AAAA,MAClG,OAAO;AACH,eAAO,KAAK,WAAW,QAAQ,QAAQ,IAAI,iBAAiBA,WAAU,IAAI;AAAA,MAC9E;AAMA,UAAI,eAAe,eAAe,QAAQ,QAAQ,IAAI;AAQtD,UAAI,aAAa,SAAS,OAAS,CAAC,yBAAyB,IAAI,QAAQ,IAAI,GAAG;AAC5E,cAAM,OAAO,aAAa,MAAM,GAAG,GAAK;AACxC,cAAM,OAAO,aAAa,MAAM,IAAK;AACrC,uBAAe,OAAO,eAAe,aAAa,SAAS,QAAS,4BAA4B;AAChG,eAAO,KAAK,WAAW,QAAQ,QAAQ,IAAI,sBAAsB,OAAO,MAAM,WAAM,aAAa,MAAM,QAAQ;AAAA,MACnH;AAGA,YAAM,YAAY,MAAM,sBAAsB,QAAQ,MAAM,MAAM,cAAc,aAAa,SAAS,IAAI,WAAW,CAAC;AACtH,UAAI,cAAc,OAAW,gBAAe;AAG5C,UAAI,gBAAgB,SAAS,GAAG;AAC5B,cAAM,aAAa,MAAM,YAAY,iBAAiB,QAAQ,MAAM,MAAM,EAAE,SAAS,cAAc,SAAS,MAAM,YAAAA,YAAW,CAAC;AAC9H,YAAI,WAAW,oBAAoB,OAAW,gBAAe,WAAW;AAAA,MAC5E;AAGA,sBAAgB,QAAQ,MAAM,aAAa,YAAY;AAKvD,UAAI,gBAAgB;AAChB,SAAC,YAAY;AACT,cAAI;AACA,kBAAM,EAAE,qBAAAF,qBAAoB,IAAI,MAAM,OAAO,YAAY;AACzD,kBAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,qBAAqB;AAChE,kBAAM,MAAqB,OAAOA,yBAAwB,aAAaA,qBAAoB,IAAI;AAC/F,kBAAM,kBAAkB;AAAA,cACpB,WAAW;AAAA,cACX,UAAU,QAAQ;AAAA,cAClB,YAAY,eAAgB;AAAA,cAC5B,YAAY,eAAgB;AAAA,YAChC,CAAC;AAAA,UACL,SAAS,KAAK;AACV,mBAAO,MAAM,WAAW,8CAA+C,IAAc,OAAO,EAAE;AAAA,UAClG;AAAA,QACJ,GAAG;AAAA,MACP;AAGA,OAAC,YAAY;AACT,YAAI;AACA,gBAAM,EAAE,YAAY,IAAI,MAAM,OAAO,6BAA6B;AAClE,sBAAY,EAAE,OAAO,aAAa,MAAM,QAAQ,MAAM,SAAS,WAAW,UAAU,CAAC;AACrF,cAAI,eAAe,IAAI,QAAQ,IAAI,GAAG;AAClC,wBAAY,EAAE,OAAO,aAAa,MAAM,QAAQ,MAAM,MAAO,KAAK,QAAQ,KAAK,aAAa,KAAK,SAAgC,CAAC;AAAA,UACtI;AACA,cAAI,QAAQ,SAAS,cAAc;AAC/B,wBAAY,EAAE,OAAO,cAAc,OAAQ,KAAK,SAAS,KAAK,EAAyB,CAAC;AAAA,UAC5F;AACA,cAAI,QAAQ,SAAS,aAAa;AAC9B,wBAAY,EAAE,OAAO,aAAa,KAAM,KAAK,OAAO,KAAK,OAA8B,CAAC;AAAA,UAC5F;AACA,cAAI,QAAQ,SAAS,cAAc,QAAQ,SAAS,cAAc;AAC9D,wBAAY,EAAE,OAAO,YAAY,OAAQ,KAAK,SAAS,KAAK,KAA4B,CAAC;AAAA,UAC7F;AAAA,QACJ,QAAQ;AAAA,QAAkC;AAC1C,cAAM,MAAM,WAAW;AACvB,YAAI,IAAI,WAAW,SAAS;AACxB,cAAI;AACA,2BAAe,uBAAuB,KAAK,UAAU;AAAA,cACjD,OAAO;AAAA,cACP,YAAY,EAAE,UAAU,QAAQ,MAAM,SAAS,MAAM,YAAAE,aAAY,SAAS,WAAW,UAAU;AAAA,cAC/F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YACtC,CAAC,IAAI,MAAM,OAAO;AAAA,UACtB,QAAQ;AAAA,UAAqB;AAAA,QACjC;AAEA,cAAM,EAAE,cAAc,IAAI,MAAM,OAAO,gCAAgC;AACvE,cAAM,EAAE,qBAAAF,qBAAoB,IAAI,MAAM,OAAO,YAAY,EAAE,MAAM,OAAO,EAAE,qBAAqB,MAAM,KAAK,EAAE;AAC5G,cAAM,MAAM,OAAOA,yBAAwB,aAAaA,qBAAoB,IAAI;AAChF,sBAAc,QAAQ,MAAM,MAAME,aAAY,QAAW,OAAO,MAAS;AAAA,MAC7E,GAAG;AAGH,UAAI;AACJ,UAAI,CAAC,cAAc,aAAa,aAAa,EAAE,SAAS,QAAQ,IAAI,KAAK,mBAAmB,CAAC,gBAAgB;AACzG,YAAI;AACA,gBAAM,cAAc,WAAW,eAAe,IAAI,aAAa,iBAAiB,OAAO,IAAI;AAC3F,iBAAO,mBAAmB,iBAAiB,cAAc,IAAI,WAAW;AAAA,QAC5E,QAAQ;AAAA,QAA2B;AAAA,MACvC;AAEA,aAAO;AAAA,QACH,YAAY,SAAS;AAAA,QACrB,MAAM,QAAQ;AAAA,QACd,SAAS,iBACH,GAAG,YAAY;AAAA;AAAA,wCAA6C,eAAe,UAAU,sDAAsD,eAAe,UAAU,MACpK;AAAA,QACN,SAAS;AAAA,QACT,YAAAA;AAAA,QACA,YAAY;AAAA,QACZ;AAAA,MACJ;AAAA,IACJ,SAAS,OAAO;AACZ,kBAAY;AACZ,uBAAiB,cAAc,WAAW,QAAQ,IAAI;AAGtD,UAAI,mBAAmB,aAAa;AAChC;AAAA,MACJ;AAGA,UAAI,WAAW,cAAc,CAAC,cAAc;AACxC;AAAA,MACJ;AAGA,YAAM,QAAQ,KAAK,IAAI,cAAc,KAAK,IAAI,GAAG,OAAO,GAAG,GAAI;AAC/D,aAAO,KAAK,WAAW,QAAQ,QAAQ,IAAI,YAAY,cAAc,aAAa,UAAU,CAAC,IAAI,aAAa,CAAC,MAAM,UAAU,OAAO,uBAAkB,KAAK,IAAI;AACjK,YAAM,IAAI,QAAQ,aAAW,WAAW,SAAS,KAAK,CAAC;AAAA,IAC3D;AAAA,EACJ;AAGA,QAAM,aAAa,KAAK,IAAI,IAAI;AAChC,QAAM,WAAW,WAAW,WAAW;AACvC,QAAM,aAAa;AACnB,SAAO,MAAM,WAAW,QAAQ,QAAQ,IAAI,YAAY,cAAc,GAAG,aAAa,IAAI,KAAK,UAAU,aAAa,EAAE,MAAM,QAAQ,EAAE;AAGxI,GAAC,YAAY;AACT,UAAM,MAAM,WAAW;AACvB,QAAI,IAAI,WAAW,SAAS;AACxB,UAAI;AACA,uBAAe,uBAAuB,KAAK,UAAU;AAAA,UACjD,OAAO;AAAA,UACP,YAAY,EAAE,UAAU,QAAQ,MAAM,SAAS,OAAO,YAAY,YAAY,gBAAgB,SAAS,WAAW,UAAU;AAAA,UAC5H,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACtC,CAAC,IAAI,MAAM,OAAO;AAAA,MACtB,QAAQ;AAAA,MAAqB;AAAA,IACjC;AAEA,UAAM,EAAE,cAAc,IAAI,MAAM,OAAO,gCAAgC;AACvE,UAAM,EAAE,qBAAAF,qBAAoB,IAAI,MAAM,OAAO,YAAY,EAAE,MAAM,OAAO,EAAE,qBAAqB,MAAM,KAAK,EAAE;AAC5G,UAAM,MAAM,OAAOA,yBAAwB,aAAaA,qBAAoB,IAAI;AAChF,kBAAc,QAAQ,MAAM,OAAO,YAAY,gBAAgB,OAAO,MAAS;AAAA,EACnF,GAAG;AAEH,SAAO;AAAA,IACH,YAAY,SAAS;AAAA,IACrB,MAAM,QAAQ;AAAA,IACd,SAAS,UAAU,QAAQ;AAAA,IAC3B,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EAChB;AACJ;AAWA,SAAS,gBAAgB,SAAqC;AAC1D,SAAO,QAAQ,IAAI,CAAC,MAAM;AACtB,UAAM,SAAS,cAAc,EAAE,MAAM,EAAE,OAAO;AAC9C,QAAI,CAAC,OAAO,UAAW,QAAO;AAG9B,WAAO,KAAK,WAAW,eAAe,EAAE,IAAI,cAAc,OAAO,YAAY,WAAM,OAAO,QAAQ,MAAM,QAAQ;AAChH,WAAO,EAAE,GAAG,GAAG,SAAS,OAAO,QAAQ;AAAA,EAC3C,CAAC;AACL;AAEA,eAAsB,aAAa,WAAuB,SAAyC;AAE/F,MAAI,UAAU,UAAU,GAAG;AACvB,UAAM,UAAU,MAAM,QAAQ,IAAI,UAAU,IAAI,QAAM,YAAY,IAAI,OAAO,CAAC,CAAC;AAC/E,WAAO,gBAAgB,OAAO;AAAA,EAClC;AAGA,QAAM,gBAAgB,UAAU,IAAI,QAAM;AACtC,QAAI,OAAgC,CAAC;AACrC,QAAI;AAAE,aAAO,KAAK,MAAM,GAAG,SAAS,SAAS;AAAA,IAAG,QAAQ;AAAA,IAAkB;AAC1E,WAAO,EAAE,IAAI,GAAG,IAAI,MAAM,GAAG,SAAS,MAAM,KAAK;AAAA,EACrD,CAAC;AAED,QAAM,WAAW,OAAO,MAAc,SAAmD;AAErF,UAAM,cAAwB;AAAA,MAC1B,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,UAAU,EAAE,MAAM,WAAW,KAAK,UAAU,IAAI,EAAE;AAAA,IACtD;AACA,UAAM,SAAS,MAAM,YAAY,aAAa,OAAO;AACrD,WAAO,OAAO;AAAA,EAClB;AAEA,QAAM,kBAAkB,MAAM,qBAAqB,eAAe,QAAQ;AAG1E,QAAM,SAAuB,gBAAgB,IAAI,SAAO;AAAA,IACpD,YAAY,GAAG;AAAA,IACf,MAAM,GAAG;AAAA,IACT,SAAS,GAAG;AAAA,IACZ,SAAS,CAAC,GAAG,QAAQ,WAAW,QAAQ;AAAA,IACxC,YAAY;AAAA,EAChB,EAAE;AACF,SAAO,gBAAgB,MAAM;AACjC;AAUA,eAAe,gCACX,UACA,MACa;AAEb,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,YAAY,EAAE,MAAM,OAAO,EAAE,qBAAqB,MAAM,KAAK,EAAE;AAC5G,QAAM,YAA2B,OAAO,wBAAwB,aAAa,oBAAoB,IAAI;AACrG,QAAM,cAAc,eAAe,SAAS;AAC5C,QAAM,SAAS,WAAW;AAC1B,QAAM,aAAc,OAAO,UAAU,SAAS;AAC9C,QAAM,iBAAiB,aAAa,cAAc;AAElD,MAAI,CAAC,cAAc,EAAE,UAAU,YAAY,eAAe,CAAC,EAAG;AAE9D,QAAM,WAAY,KAAK,QAAQ,KAAK,aAAa,KAAK;AACtD,QAAM,UAAW,KAAK,WAAW,KAAK,YAAY,KAAK;AACvD,MAAI,CAAC,YAAY,CAAC,QAAS;AAE3B,eAAa;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA;AAAA,IACT,QAAQ,aAAa,UAAU;AAAA,IAC/B,WAAW,aAAa,aAAa;AAAA,IACrC;AAAA,EACJ,CAAC;AACL;","names":["getCurrentSessionId","config","durationMs"]}

package/dist/agent/trajectoryRecorder.js

@@ -0,0 +1,185 @@
+#!/usr/bin/env node
+import { mkdirSync, appendFileSync, existsSync, readFileSync, readdirSync, statSync } from "fs";
+import { join } from "path";
+import { TITAN_HOME } from "../utils/constants.js";
+const TRAJECTORY_DIR = join(TITAN_HOME, "trajectories");
+const MAX_ARGS_BYTES = 2 * 1024;
+const MAX_RESULT_BYTES = 4 * 1024;
+function dayBucket(d = /* @__PURE__ */ new Date()) {
+  return d.toISOString().slice(0, 10);
+}
+function trajectoryPathFor(spawnId, when = /* @__PURE__ */ new Date()) {
+  return join(TRAJECTORY_DIR, dayBucket(when), `${spawnId}.jsonl`);
+}
+function recordingEnabled() {
+  return process.env.TITAN_TRAJECTORY_RECORD !== "0";
+}
+function writeEvent(path, event) {
+  try {
+    const line = JSON.stringify(event) + "\n";
+    appendFileSync(path, line, "utf-8");
+  } catch {
+  }
+}
+function startSpawnTrajectory(fields) {
+  const startedAt = Date.now();
+  if (!recordingEnabled()) {
+    return { spawnId: fields.spawnId, path: "", startedAt, disabled: true };
+  }
+  const path = trajectoryPathFor(fields.spawnId);
+  try {
+    const dir = join(path, "..");
+    if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+  } catch {
+  }
+  writeEvent(path, {
+    kind: "start",
+    at: startedAt,
+    spawnId: fields.spawnId,
+    data: fields
+  });
+  return { spawnId: fields.spawnId, path, startedAt, disabled: false };
+}
+function recordRound(handle, fields) {
+  if (handle.disabled) return;
+  writeEvent(handle.path, {
+    kind: "round",
+    at: Date.now(),
+    spawnId: handle.spawnId,
+    data: fields
+  });
+}
+function recordToolCall(handle, fields) {
+  if (handle.disabled) return;
+  writeEvent(handle.path, {
+    kind: "tool_call",
+    at: Date.now(),
+    spawnId: handle.spawnId,
+    data: {
+      ...fields,
+      args: capString(fields.args, MAX_ARGS_BYTES)
+    }
+  });
+}
+function recordToolResult(handle, fields) {
+  if (handle.disabled) return;
+  writeEvent(handle.path, {
+    kind: "tool_result",
+    at: Date.now(),
+    spawnId: handle.spawnId,
+    data: {
+      ...fields,
+      content: capString(fields.content, MAX_RESULT_BYTES)
+    }
+  });
+}
+function recordNote(handle, text) {
+  if (handle.disabled) return;
+  writeEvent(handle.path, {
+    kind: "note",
+    at: Date.now(),
+    spawnId: handle.spawnId,
+    data: { text }
+  });
+}
+function finishSpawnTrajectory(handle, fields) {
+  if (handle.disabled) return;
+  writeEvent(handle.path, {
+    kind: "finish",
+    at: Date.now(),
+    spawnId: handle.spawnId,
+    data: {
+      ...fields,
+      durationMs: Date.now() - handle.startedAt
+    }
+  });
+}
+function loadTrajectory(spawnId) {
+  if (!existsSync(TRAJECTORY_DIR)) return null;
+  let days;
+  try {
+    days = readdirSync(TRAJECTORY_DIR);
+  } catch {
+    return null;
+  }
+  for (const day of days) {
+    const path = join(TRAJECTORY_DIR, day, `${spawnId}.jsonl`);
+    if (existsSync(path)) {
+      return readJsonl(path);
+    }
+  }
+  return null;
+}
+function listTrajectories(opts = {}) {
+  if (!existsSync(TRAJECTORY_DIR)) return [];
+  const out = [];
+  let days;
+  try {
+    days = readdirSync(TRAJECTORY_DIR).sort().reverse();
+  } catch {
+    return [];
+  }
+  for (const day of days) {
+    const dayDir = join(TRAJECTORY_DIR, day);
+    let files;
+    try {
+      files = readdirSync(dayDir);
+    } catch {
+      continue;
+    }
+    for (const f of files) {
+      if (!f.endsWith(".jsonl")) continue;
+      const path = join(dayDir, f);
+      const events = readJsonl(path);
+      const start = events.find((e) => e.kind === "start");
+      if (!start || start.kind !== "start") continue;
+      if (opts.since && start.at < opts.since) continue;
+      if (opts.goalId && start.data.goalId !== opts.goalId) continue;
+      try {
+        const sizeBytes = statSync(path).size;
+        out.push({
+          spawnId: start.spawnId,
+          startedAt: start.at,
+          specialist: start.data.specialist,
+          model: start.data.model,
+          goalId: start.data.goalId,
+          path,
+          sizeBytes
+        });
+      } catch {
+      }
+      if (opts.limit && out.length >= opts.limit) return out;
+    }
+  }
+  return out;
+}
+function readJsonl(path) {
+  try {
+    const raw = readFileSync(path, "utf-8");
+    return raw.split("\n").filter(Boolean).map((line) => JSON.parse(line));
+  } catch {
+    return [];
+  }
+}
+function capString(s, maxBytes) {
+  const bytes = Buffer.byteLength(s, "utf-8");
+  if (bytes <= maxBytes) return s;
+  let cap = s;
+  while (Buffer.byteLength(cap, "utf-8") > maxBytes - 20) {
+    cap = cap.slice(0, Math.floor(cap.length * 0.9));
+  }
+  return cap + `
+\u2026[truncated to ${maxBytes}b]`;
+}
+export {
+  finishSpawnTrajectory,
+  listTrajectories,
+  loadTrajectory,
+  recordNote,
+  recordRound,
+  recordToolCall,
+  recordToolResult,
+  startSpawnTrajectory,
+  trajectoryPathFor
+};
+//# sourceMappingURL=trajectoryRecorder.js.map

package/dist/agent/trajectoryRecorder.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/agent/trajectoryRecorder.ts"],"sourcesContent":["/**\n * TITAN — Trajectory Recorder (v6.1.0-beta.13, Phase D.1)\n *\n * Records every sub-agent spawn as a per-spawn JSONL file on disk so\n * the runtime can be replayed, scored, and debugged after the fact.\n *\n * SISTER MODULE: `trajectory.ts` does BULK dataset capture (whole\n * conversations to a single jsonl for fine-tuning input). This module\n * does PER-SPAWN granular event streams — start, each round, each\n * tool call + result, finish. Same concept, different shapes,\n * different consumers.\n *\n * WHY this module exists:\n *\n *   - Every reliable agent harness on the Picrew/awesome-agent-harness\n *     catalog records trajectories: Inspect Evals, LangSmith, LangWatch,\n *     Symphony, hankweave. The pattern is universal because the\n *     alternative — debugging a flaky spawn from stdout fragments — is\n *     untenable at scale.\n *\n *   - The beta.9/10 verification ring tells us WHETHER a write\n *     succeeded. Trajectories tell us HOW the spawn got there: which\n *     model, which prompt, which tool calls in what order, how long\n *     each round took. Pair them and a \"stuck mission\" becomes\n *     diagnosable.\n *\n * DESIGN:\n *\n *   - One JSONL file per spawn at\n *     `~/.titan/trajectories/<YYYY-MM-DD>/<spawnId>.jsonl`.\n *   - Append-only writes via `appendFileSync` (atomic on local FS).\n *   - First line is always a `start` event; last is always `finish`.\n *   - In-between events: `round`, `tool_call`, `tool_result`, `note`.\n *\n *   - Recording is on by default; opt out via `TITAN_TRAJECTORY_RECORD=0`.\n *\n *   - Failure is silent: if the disk is full or the dir isn't\n *     writable, the recorder swallows the error and the spawn\n *     continues. We don't fail real work to capture an audit trail.\n *\n * TRADE-OFFS:\n *\n *   - JSONL files accumulate. A companion `titan trajectory prune`\n *     CLI command (follow-up) will handle retention. Single spawn ≈\n *     10–50 KB so a year of heavy use is still O(GB) at worst.\n *\n *   - Tool args + results are capped at 2 KB and 4 KB respectively\n *     so a single 50 MB HTML-report write doesn't bloat trajectories.\n *\n * FOLLOW-UP:\n *\n *   - SSE endpoint `/api/trajectories/stream` for live UI tailing.\n *   - Mission Canvas trajectory pane.\n *   - `titan trajectory replay <spawnId>` for A/B model comparison.\n */\n\nimport { mkdirSync, appendFileSync, existsSync, readFileSync, readdirSync, statSync } from 'fs';\nimport { join } from 'path';\nimport { TITAN_HOME } from '../utils/constants.js';\n\n/* ───────────────────────────  Types  ─────────────────────────── */\n\nexport type TrajectoryEventKind =\n    | 'start' | 'round' | 'tool_call' | 'tool_result' | 'note' | 'finish';\n\nexport interface TrajectoryStartFields {\n    spawnId: string;\n    specialist?: string;\n    model: string;\n    task: string;\n    goalId?: string;\n    toolNames?: string[];\n}\n\nexport interface TrajectoryRoundFields {\n    roundNum: number;\n    promptBytes: number;\n    response: string;\n    tokensUsed?: number;\n    durationMs?: number;\n}\n\nexport interface TrajectoryToolCallFields {\n    roundNum: number;\n    callId: string;\n    toolName: string;\n    args: string;\n}\n\nexport interface TrajectoryToolResultFields {\n    callId: string;\n    content: string;\n    error?: string;\n}\n\nexport interface TrajectoryNoteFields {\n    text: string;\n}\n\nexport interface TrajectoryFinishFields {\n    status: 'done' | 'failed' | 'needs_info' | 'blocked' | 'aborted';\n    content: string;\n    durationMs: number;\n    totalRounds: number;\n    toolsUsed: string[];\n}\n\nexport type TrajectoryEvent =\n    | { kind: 'start'; at: number; spawnId: string; data: TrajectoryStartFields }\n    | { kind: 'round'; at: number; spawnId: string; data: TrajectoryRoundFields }\n    | { kind: 'tool_call'; at: number; spawnId: string; data: TrajectoryToolCallFields }\n    | { kind: 'tool_result'; at: number; spawnId: string; data: TrajectoryToolResultFields }\n    | { kind: 'note'; at: number; spawnId: string; data: TrajectoryNoteFields }\n    | { kind: 'finish'; at: number; spawnId: string; data: TrajectoryFinishFields };\n\nexport interface TrajectoryHandle {\n    spawnId: string;\n    path: string;\n    startedAt: number;\n    disabled: boolean;\n}\n\n/* ───────────────────────────  Constants  ─────────────────────────── */\n\nconst TRAJECTORY_DIR = join(TITAN_HOME, 'trajectories');\nconst MAX_ARGS_BYTES = 2 * 1024;\nconst MAX_RESULT_BYTES = 4 * 1024;\n\n/* ───────────────────────────  Path helpers  ─────────────────────────── */\n\nfunction dayBucket(d = new Date()): string {\n    return d.toISOString().slice(0, 10);\n}\n\n/** Resolves the canonical JSONL path for a spawn. Exposed so tests +\n *  CLI tools can drill in without re-implementing the layout. */\nexport function trajectoryPathFor(spawnId: string, when: Date = new Date()): string {\n    return join(TRAJECTORY_DIR, dayBucket(when), `${spawnId}.jsonl`);\n}\n\n/* ───────────────────────────  Opt-out  ─────────────────────────── */\n\nfunction recordingEnabled(): boolean {\n    return process.env.TITAN_TRAJECTORY_RECORD !== '0';\n}\n\n/* ───────────────────────────  Writer  ─────────────────────────── */\n\nfunction writeEvent(path: string, event: TrajectoryEvent): void {\n    try {\n        const line = JSON.stringify(event) + '\\n';\n        appendFileSync(path, line, 'utf-8');\n    } catch { /* recorder MUST NEVER fail the actual spawn */ }\n}\n\n/* ───────────────────────────  Public API  ─────────────────────────── */\n\n/**\n * Begin a trajectory. Creates the day-bucket directory on demand,\n * writes the `start` event, and returns a handle the caller threads\n * through subsequent record* calls.\n *\n * Cheap when recording is disabled — returns a no-op handle without\n * touching disk.\n */\nexport function startSpawnTrajectory(fields: TrajectoryStartFields): TrajectoryHandle {\n    const startedAt = Date.now();\n    if (!recordingEnabled()) {\n        return { spawnId: fields.spawnId, path: '', startedAt, disabled: true };\n    }\n    const path = trajectoryPathFor(fields.spawnId);\n    try {\n        const dir = join(path, '..');\n        if (!existsSync(dir)) mkdirSync(dir, { recursive: true });\n    } catch { /* writeEvent will silently fail if dir creation didn't take */ }\n    writeEvent(path, {\n        kind: 'start',\n        at: startedAt,\n        spawnId: fields.spawnId,\n        data: fields,\n    });\n    return { spawnId: fields.spawnId, path, startedAt, disabled: false };\n}\n\nexport function recordRound(handle: TrajectoryHandle, fields: TrajectoryRoundFields): void {\n    if (handle.disabled) return;\n    writeEvent(handle.path, {\n        kind: 'round',\n        at: Date.now(),\n        spawnId: handle.spawnId,\n        data: fields,\n    });\n}\n\nexport function recordToolCall(handle: TrajectoryHandle, fields: TrajectoryToolCallFields): void {\n    if (handle.disabled) return;\n    writeEvent(handle.path, {\n        kind: 'tool_call',\n        at: Date.now(),\n        spawnId: handle.spawnId,\n        data: {\n            ...fields,\n            args: capString(fields.args, MAX_ARGS_BYTES),\n        },\n    });\n}\n\nexport function recordToolResult(handle: TrajectoryHandle, fields: TrajectoryToolResultFields): void {\n    if (handle.disabled) return;\n    writeEvent(handle.path, {\n        kind: 'tool_result',\n        at: Date.now(),\n        spawnId: handle.spawnId,\n        data: {\n            ...fields,\n            content: capString(fields.content, MAX_RESULT_BYTES),\n        },\n    });\n}\n\nexport function recordNote(handle: TrajectoryHandle, text: string): void {\n    if (handle.disabled) return;\n    writeEvent(handle.path, {\n        kind: 'note',\n        at: Date.now(),\n        spawnId: handle.spawnId,\n        data: { text },\n    });\n}\n\n/** Close out the trajectory. Always called from the spawn's finally\n *  block, so even an aborted spawn produces a terminal event. */\nexport function finishSpawnTrajectory(\n    handle: TrajectoryHandle,\n    fields: Omit<TrajectoryFinishFields, 'durationMs'>,\n): void {\n    if (handle.disabled) return;\n    writeEvent(handle.path, {\n        kind: 'finish',\n        at: Date.now(),\n        spawnId: handle.spawnId,\n        data: {\n            ...fields,\n            durationMs: Date.now() - handle.startedAt,\n        },\n    });\n}\n\n/* ───────────────────────────  Reader API  ─────────────────────────── */\n\n/**\n * Load a single spawn's trajectory from disk. Returns the events in\n * insertion order, or null if the file is missing.\n *\n * Searches across all day-bucket directories — callers don't have to\n * know which day a spawn happened on.\n */\nexport function loadTrajectory(spawnId: string): TrajectoryEvent[] | null {\n    if (!existsSync(TRAJECTORY_DIR)) return null;\n    let days: string[];\n    try { days = readdirSync(TRAJECTORY_DIR); } catch { return null; }\n    for (const day of days) {\n        const path = join(TRAJECTORY_DIR, day, `${spawnId}.jsonl`);\n        if (existsSync(path)) {\n            return readJsonl(path);\n        }\n    }\n    return null;\n}\n\nexport interface TrajectoryListing {\n    spawnId: string;\n    startedAt: number;\n    specialist?: string;\n    model: string;\n    goalId?: string;\n    path: string;\n    sizeBytes: number;\n}\n\n/**\n * List trajectory headers across all day-bucket directories. Used by\n * the trajectory list UI / CLI. Newest day first; pass `limit` to\n * cap the scan.\n */\nexport function listTrajectories(\n    opts: { since?: number; limit?: number; goalId?: string } = {},\n): TrajectoryListing[] {\n    if (!existsSync(TRAJECTORY_DIR)) return [];\n    const out: TrajectoryListing[] = [];\n    let days: string[];\n    try { days = readdirSync(TRAJECTORY_DIR).sort().reverse(); } catch { return []; }\n    for (const day of days) {\n        const dayDir = join(TRAJECTORY_DIR, day);\n        let files: string[];\n        try { files = readdirSync(dayDir); } catch { continue; }\n        for (const f of files) {\n            if (!f.endsWith('.jsonl')) continue;\n            const path = join(dayDir, f);\n            const events = readJsonl(path);\n            const start = events.find(e => e.kind === 'start');\n            if (!start || start.kind !== 'start') continue;\n            if (opts.since && start.at < opts.since) continue;\n            if (opts.goalId && start.data.goalId !== opts.goalId) continue;\n            try {\n                const sizeBytes = statSync(path).size;\n                out.push({\n                    spawnId: start.spawnId,\n                    startedAt: start.at,\n                    specialist: start.data.specialist,\n                    model: start.data.model,\n                    goalId: start.data.goalId,\n                    path,\n                    sizeBytes,\n                });\n            } catch { /* unreadable — skip */ }\n            if (opts.limit && out.length >= opts.limit) return out;\n        }\n    }\n    return out;\n}\n\n/* ───────────────────────────  Helpers  ─────────────────────────── */\n\nfunction readJsonl(path: string): TrajectoryEvent[] {\n    try {\n        const raw = readFileSync(path, 'utf-8');\n        return raw.split('\\n').filter(Boolean).map(line => JSON.parse(line) as TrajectoryEvent);\n    } catch {\n        return [];\n    }\n}\n\nfunction capString(s: string, maxBytes: number): string {\n    const bytes = Buffer.byteLength(s, 'utf-8');\n    if (bytes <= maxBytes) return s;\n    let cap = s;\n    while (Buffer.byteLength(cap, 'utf-8') > maxBytes - 20) {\n        cap = cap.slice(0, Math.floor(cap.length * 0.9));\n    }\n    return cap + `\\n…[truncated to ${maxBytes}b]`;\n}\n"],"mappings":";AAwDA,SAAS,WAAW,gBAAgB,YAAY,cAAc,aAAa,gBAAgB;AAC3F,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAkE3B,MAAM,iBAAiB,KAAK,YAAY,cAAc;AACtD,MAAM,iBAAiB,IAAI;AAC3B,MAAM,mBAAmB,IAAI;AAI7B,SAAS,UAAU,IAAI,oBAAI,KAAK,GAAW;AACvC,SAAO,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AACtC;AAIO,SAAS,kBAAkB,SAAiB,OAAa,oBAAI,KAAK,GAAW;AAChF,SAAO,KAAK,gBAAgB,UAAU,IAAI,GAAG,GAAG,OAAO,QAAQ;AACnE;AAIA,SAAS,mBAA4B;AACjC,SAAO,QAAQ,IAAI,4BAA4B;AACnD;AAIA,SAAS,WAAW,MAAc,OAA8B;AAC5D,MAAI;AACA,UAAM,OAAO,KAAK,UAAU,KAAK,IAAI;AACrC,mBAAe,MAAM,MAAM,OAAO;AAAA,EACtC,QAAQ;AAAA,EAAkD;AAC9D;AAYO,SAAS,qBAAqB,QAAiD;AAClF,QAAM,YAAY,KAAK,IAAI;AAC3B,MAAI,CAAC,iBAAiB,GAAG;AACrB,WAAO,EAAE,SAAS,OAAO,SAAS,MAAM,IAAI,WAAW,UAAU,KAAK;AAAA,EAC1E;AACA,QAAM,OAAO,kBAAkB,OAAO,OAAO;AAC7C,MAAI;AACA,UAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,QAAI,CAAC,WAAW,GAAG,EAAG,WAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AAAA,EAC5D,QAAQ;AAAA,EAAkE;AAC1E,aAAW,MAAM;AAAA,IACb,MAAM;AAAA,IACN,IAAI;AAAA,IACJ,SAAS,OAAO;AAAA,IAChB,MAAM;AAAA,EACV,CAAC;AACD,SAAO,EAAE,SAAS,OAAO,SAAS,MAAM,WAAW,UAAU,MAAM;AACvE;AAEO,SAAS,YAAY,QAA0B,QAAqC;AACvF,MAAI,OAAO,SAAU;AACrB,aAAW,OAAO,MAAM;AAAA,IACpB,MAAM;AAAA,IACN,IAAI,KAAK,IAAI;AAAA,IACb,SAAS,OAAO;AAAA,IAChB,MAAM;AAAA,EACV,CAAC;AACL;AAEO,SAAS,eAAe,QAA0B,QAAwC;AAC7F,MAAI,OAAO,SAAU;AACrB,aAAW,OAAO,MAAM;AAAA,IACpB,MAAM;AAAA,IACN,IAAI,KAAK,IAAI;AAAA,IACb,SAAS,OAAO;AAAA,IAChB,MAAM;AAAA,MACF,GAAG;AAAA,MACH,MAAM,UAAU,OAAO,MAAM,cAAc;AAAA,IAC/C;AAAA,EACJ,CAAC;AACL;AAEO,SAAS,iBAAiB,QAA0B,QAA0C;AACjG,MAAI,OAAO,SAAU;AACrB,aAAW,OAAO,MAAM;AAAA,IACpB,MAAM;AAAA,IACN,IAAI,KAAK,IAAI;AAAA,IACb,SAAS,OAAO;AAAA,IAChB,MAAM;AAAA,MACF,GAAG;AAAA,MACH,SAAS,UAAU,OAAO,SAAS,gBAAgB;AAAA,IACvD;AAAA,EACJ,CAAC;AACL;AAEO,SAAS,WAAW,QAA0B,MAAoB;AACrE,MAAI,OAAO,SAAU;AACrB,aAAW,OAAO,MAAM;AAAA,IACpB,MAAM;AAAA,IACN,IAAI,KAAK,IAAI;AAAA,IACb,SAAS,OAAO;AAAA,IAChB,MAAM,EAAE,KAAK;AAAA,EACjB,CAAC;AACL;AAIO,SAAS,sBACZ,QACA,QACI;AACJ,MAAI,OAAO,SAAU;AACrB,aAAW,OAAO,MAAM;AAAA,IACpB,MAAM;AAAA,IACN,IAAI,KAAK,IAAI;AAAA,IACb,SAAS,OAAO;AAAA,IAChB,MAAM;AAAA,MACF,GAAG;AAAA,MACH,YAAY,KAAK,IAAI,IAAI,OAAO;AAAA,IACpC;AAAA,EACJ,CAAC;AACL;AAWO,SAAS,eAAe,SAA2C;AACtE,MAAI,CAAC,WAAW,cAAc,EAAG,QAAO;AACxC,MAAI;AACJ,MAAI;AAAE,WAAO,YAAY,cAAc;AAAA,EAAG,QAAQ;AAAE,WAAO;AAAA,EAAM;AACjE,aAAW,OAAO,MAAM;AACpB,UAAM,OAAO,KAAK,gBAAgB,KAAK,GAAG,OAAO,QAAQ;AACzD,QAAI,WAAW,IAAI,GAAG;AAClB,aAAO,UAAU,IAAI;AAAA,IACzB;AAAA,EACJ;AACA,SAAO;AACX;AAiBO,SAAS,iBACZ,OAA4D,CAAC,GAC1C;AACnB,MAAI,CAAC,WAAW,cAAc,EAAG,QAAO,CAAC;AACzC,QAAM,MAA2B,CAAC;AAClC,MAAI;AACJ,MAAI;AAAE,WAAO,YAAY,cAAc,EAAE,KAAK,EAAE,QAAQ;AAAA,EAAG,QAAQ;AAAE,WAAO,CAAC;AAAA,EAAG;AAChF,aAAW,OAAO,MAAM;AACpB,UAAM,SAAS,KAAK,gBAAgB,GAAG;AACvC,QAAI;AACJ,QAAI;AAAE,cAAQ,YAAY,MAAM;AAAA,IAAG,QAAQ;AAAE;AAAA,IAAU;AACvD,eAAW,KAAK,OAAO;AACnB,UAAI,CAAC,EAAE,SAAS,QAAQ,EAAG;AAC3B,YAAM,OAAO,KAAK,QAAQ,CAAC;AAC3B,YAAM,SAAS,UAAU,IAAI;AAC7B,YAAM,QAAQ,OAAO,KAAK,OAAK,EAAE,SAAS,OAAO;AACjD,UAAI,CAAC,SAAS,MAAM,SAAS,QAAS;AACtC,UAAI,KAAK,SAAS,MAAM,KAAK,KAAK,MAAO;AACzC,UAAI,KAAK,UAAU,MAAM,KAAK,WAAW,KAAK,OAAQ;AACtD,UAAI;AACA,cAAM,YAAY,SAAS,IAAI,EAAE;AACjC,YAAI,KAAK;AAAA,UACL,SAAS,MAAM;AAAA,UACf,WAAW,MAAM;AAAA,UACjB,YAAY,MAAM,KAAK;AAAA,UACvB,OAAO,MAAM,KAAK;AAAA,UAClB,QAAQ,MAAM,KAAK;AAAA,UACnB;AAAA,UACA;AAAA,QACJ,CAAC;AAAA,MACL,QAAQ;AAAA,MAA0B;AAClC,UAAI,KAAK,SAAS,IAAI,UAAU,KAAK,MAAO,QAAO;AAAA,IACvD;AAAA,EACJ;AACA,SAAO;AACX;AAIA,SAAS,UAAU,MAAiC;AAChD,MAAI;AACA,UAAM,MAAM,aAAa,MAAM,OAAO;AACtC,WAAO,IAAI,MAAM,IAAI,EAAE,OAAO,OAAO,EAAE,IAAI,UAAQ,KAAK,MAAM,IAAI,CAAoB;AAAA,EAC1F,QAAQ;AACJ,WAAO,CAAC;AAAA,EACZ;AACJ;AAEA,SAAS,UAAU,GAAW,UAA0B;AACpD,QAAM,QAAQ,OAAO,WAAW,GAAG,OAAO;AAC1C,MAAI,SAAS,SAAU,QAAO;AAC9B,MAAI,MAAM;AACV,SAAO,OAAO,WAAW,KAAK,OAAO,IAAI,WAAW,IAAI;AACpD,UAAM,IAAI,MAAM,GAAG,KAAK,MAAM,IAAI,SAAS,GAAG,CAAC;AAAA,EACnD;AACA,SAAO,MAAM;AAAA,sBAAoB,QAAQ;AAC7C;","names":[]}