zidane 5.10.13 → 5.11.1

package/dist/contexts-BJVgG0LY.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"contexts-BJVgG0LY.js","names":["spawnChild"],"sources":["../src/contexts/process.ts","../src/contexts/sandbox.ts","../src/contexts/types.ts"],"sourcesContent":["/**\n * In-process execution context.\n *\n * Runs everything in the current Node/Bun process.\n * No isolation — fastest, used as the default.\n */\n\nimport type { Buffer } from 'node:buffer'\nimport type { ChildProcess } from 'node:child_process'\nimport type { WriteStream } from 'node:fs'\nimport type { ContextCapabilities, ExecResult, ExecutionContext, ExecutionHandle, SpawnConfig, TaskEntry, TaskExitInfo, TaskHandle, TaskStallInfo } from './types'\nimport { spawn as spawnChild } from 'node:child_process'\nimport { createWriteStream } from 'node:fs'\nimport { mkdir, readdir, readFile, writeFile } from 'node:fs/promises'\nimport { dirname, resolve } from 'node:path'\n\n/**\n * Whether the host supports POSIX process groups (the `detached: true` +\n * `process.kill(-pid)` combination). Windows doesn't — its job-object\n * model is shaped differently — so on win32 we fall back to killing the\n * shell wrapper alone (matches pre-fix behavior; better than nothing).\n */\nconst SUPPORTS_PROCESS_GROUPS = process.platform !== 'win32'\n\n/**\n * Default cap on captured stdout / stderr per child. Matches the\n * pre-fix `child_process.exec` setting so existing callers see the\n * same buffer envelope. Output beyond this is truncated and a\n * marker is appended to stderr.\n */\nconst DEFAULT_MAX_BUFFER = 10 * 1024 * 1024\n\n/**\n * How long `destroy()` waits for a SIGTERM'd background task to settle\n * before escalating to SIGKILL and abandoning the wait. Matches the MCP\n * connection's default `closeTimeout` so `agent.destroy()` stays bounded\n * by a single grace period regardless of which leg is slowest.\n */\nconst DESTROY_SIGTERM_GRACE_MS = 5_000\n\n/**\n * How long after the child's `exit` event we keep waiting for `close`\n * before settling with the output collected so far.\n *\n * `close` fires only once every stdio pipe has closed — and a\n * daemonized grandchild that inherited stdout/stderr (a dev server\n * started with `&`, `nohup` without redirection, simulator helpers, …)\n * keeps those pipes open indefinitely. Pre-fix, a foreground `exec`\n * whose command finished in milliseconds would hang until its timeout,\n * then `killProcessGroup` took the intentionally-backgrounded daemon\n * down with it. The process itself is done at `exit`; this grace only\n * exists to let normally-closing pipes flush their tail bytes.\n */\nconst EXIT_PIPE_DRAIN_GRACE_MS = 1_500\n\n/**\n * Sanitize a task id before it's joined into a filesystem path.\n *\n * We mint `bash_<n>` ids ourselves (no user input flows into the path\n * for `ProcessContext`), so this is defensive — but third-party contexts\n * MAY accept caller-provided ids, so the helper exists for them too.\n * Anything that doesn't match the expected shape is rejected — never\n * coerced — so the call site sees a clear error rather than a\n * traversal-shaped path.\n */\nconst TASK_ID_RE = /^[a-z][\\w-]*$/i\n\nfunction assertSafeTaskId(taskId: string): void {\n  if (!TASK_ID_RE.test(taskId))\n    throw new Error(`Invalid task id \"${taskId}\" — must match ${TASK_ID_RE}.`)\n}\n\n/**\n * Format `date` as `YYYYMMDD-HHMMSS-mmm` in UTC.\n *\n * Pinned to UTC so the lexical sort of two timestamps always matches\n * their chronological order (local time + DST does not). Used as the\n * per-context suffix on background-task log filenames; see the field\n * doc on `contextTimestamp` for the why.\n */\nexport function formatContextTimestamp(date: Date): string {\n  const pad2 = (n: number): string => n.toString().padStart(2, '0')\n  const pad3 = (n: number): string => n.toString().padStart(3, '0')\n  const y = date.getUTCFullYear()\n  const M = pad2(date.getUTCMonth() + 1)\n  const d = pad2(date.getUTCDate())\n  const h = pad2(date.getUTCHours())\n  const m = pad2(date.getUTCMinutes())\n  const s = pad2(date.getUTCSeconds())\n  const ms = pad3(date.getUTCMilliseconds())\n  return `${y}${M}${d}-${h}${m}${s}-${ms}`\n}\n\n/** Pattern of a background-task log filename. Used by tests + tooling. */\nexport const TASK_LOG_FILENAME_RE = /^(bash_\\d+)\\.(\\d{8}-\\d{6}-\\d{3})\\.log$/\n\nexport function createProcessContext(config?: SpawnConfig): ExecutionContext {\n  let counter = 0\n  const handles = new Map<string, ExecutionHandle>()\n  const defaultCwd = config?.cwd ?? process.cwd()\n  const defaultEnv = config?.env\n  const destroyGraceMs = config?.destroyGraceMs ?? DESTROY_SIGTERM_GRACE_MS\n\n  /**\n   * Per-context background-task registry. Entries live for the context's\n   * lifetime — even after the child exits — so the model can read output\n   * of completed tasks until `destroy()` tears everything down. Kept as\n   * a plain Map (not a class) per code-quality checklist #7: no premature\n   * abstraction. The state and the operations on it live inline.\n   */\n  const tasks = new Map<string, TaskState>()\n  let taskCounter = 0\n\n  /**\n   * Per-context UTC timestamp segment baked into every background task's\n   * log filename. Same `taskCounter` value across two contexts (e.g. a\n   * TUI restart) would otherwise re-open the SAME `bash_<n>.log` file —\n   * we open with `flags: 'a'` so the new task would APPEND into the old\n   * log, producing scrambled output. The timestamp guarantees each\n   * context owns a distinct log filename without forcing the\n   * model-facing task id (`bash_<n>`) to grow longer.\n   *\n   * Format: `YYYYMMDD-HHMMSS-mmm` in UTC.\n   *   - Sortable (lexical sort = chronological sort).\n   *   - Unambiguous (UTC sidesteps DST / locale shifts).\n   *   - Filesystem-safe (digits + hyphens only).\n   *   - Millisecond precision avoids same-second-restart collisions.\n   *\n   * The timestamp is computed once per context, NOT per task — all of a\n   * context's tasks share the same suffix so a directory listing groups\n   * cleanly by \"which run produced these\".\n   */\n  const contextTimestamp = formatContextTimestamp(new Date())\n\n  /**\n   * Last-resort orphan reaper. With `detached: true`, background tasks\n   * are in their OWN process group — when the parent (zidane TUI) dies,\n   * the OS does NOT send them SIGHUP and they keep running indefinitely.\n   * The user's \"Ctrl+C the TUI\" intent is \"stop everything I started\",\n   * not \"leak a `sleep 60` into the background\".\n   *\n   * `process.on('exit')` fires SYNCHRONOUSLY on `process.exit()` AND on\n   * natural shutdown — exactly the seam we need. The handler can only\n   * do synchronous work (Node ignores async), but `process.kill` IS\n   * synchronous, so a SIGTERM-the-group sweep lands cleanly. The kill\n   * is best-effort: already-dead children throw ESRCH (swallowed).\n   *\n   * Registered lazily on first `execBackground` so contexts that never\n   * background a task don't pay the listener cost. Deregistered in\n   * `destroy()` so reconstructed contexts don't accumulate listeners\n   * (Node warns past 10 — a long-running session that switches sessions\n   * frequently would otherwise hit that).\n   */\n  let exitHandlerRegistered = false\n  const exitHandler = (): void => {\n    for (const task of tasks.values()) {\n      if (task.status !== 'running')\n        continue\n      const pid = task.child.pid\n      if (pid === undefined)\n        continue\n      try {\n        if (SUPPORTS_PROCESS_GROUPS)\n          process.kill(-pid, 'SIGTERM')\n        else\n          process.kill(pid, 'SIGTERM')\n      }\n      catch {\n        // ESRCH (already dead) / EPERM (lost ownership). Swallow —\n        // the process either won't kill cleanly OR is already gone,\n        // both acceptable at shutdown.\n      }\n    }\n  }\n\n  return {\n    type: 'process',\n\n    capabilities: {\n      shell: true,\n      filesystem: true,\n      network: true,\n      gpu: false,\n      // Background tasks are OS children of this process's machine —\n      // they survive `agent.destroy()` reassignment games but NOT a\n      // host machine reboot, and the orphan reaper kills them on\n      // process exit. That's the 'process-lifetime' tier.\n      detachedTasks: 'process-lifetime',\n    } satisfies ContextCapabilities,\n\n    async spawn(overrides?: SpawnConfig): Promise<ExecutionHandle> {\n      const id = `process-${++counter}`\n      const cwd = overrides?.cwd ?? defaultCwd\n\n      await mkdir(cwd, { recursive: true })\n\n      const handle: ExecutionHandle = { id, type: 'process', cwd }\n      handles.set(id, handle)\n      return handle\n    },\n\n    async exec(\n      handle: ExecutionHandle,\n      command: string,\n      options?: { cwd?: string, env?: Record<string, string>, timeout?: number, signal?: AbortSignal },\n    ): Promise<ExecResult> {\n      const cwd = options?.cwd ? resolve(handle.cwd, options.cwd) : handle.cwd\n\n      // Pre-aborted fast path: skip the spawn entirely and synthesize a\n      // killed-by-signal result. Saves a spawn round-trip + dodges Node\n      // emitting an immediate `AbortError`.\n      if (options?.signal?.aborted) {\n        return { stdout: '', stderr: 'aborted by signal before spawn', exitCode: 143 }\n      }\n\n      const timeoutMs = (options?.timeout ?? config?.limits?.timeout ?? 30) * 1000\n      const maxBuffer = DEFAULT_MAX_BUFFER\n\n      return new Promise<ExecResult>((resolveP) => {\n        // Spawn as a NEW process group leader so we can kill the whole\n        // subtree on abort. Without `detached: true`, sending SIGTERM to\n        // the shell's pid only kills the shell wrapper — its child\n        // processes (the actual `sleep`, `npm`, `python`, …) get\n        // reparented to init and keep running. `process.kill(-pid, …)`\n        // with a NEGATIVE pid targets the whole process group; that's\n        // the POSIX idiom for \"shut down everything I started\".\n        //\n        // On Windows there are no process groups in the POSIX sense, so\n        // we leave `detached` off and accept the shell-only kill — the\n        // platform's job-object machinery is the path forward there if\n        // we ever need it, but it's not the bug zidane's users are\n        // hitting today.\n        const child = spawnChild('/bin/sh', ['-c', command], {\n          cwd,\n          env: { ...process.env, ...defaultEnv, ...options?.env },\n          stdio: ['ignore', 'pipe', 'pipe'],\n          detached: SUPPORTS_PROCESS_GROUPS,\n        })\n\n        let stdout = ''\n        let stderr = ''\n        // Byte accounting per slot. `maxBuffer` is a BYTE budget — comparing\n        // it against the accumulated string's UTF-16 `.length` undercounts\n        // multi-byte UTF-8 (overshooting the budget) and slicing the Buffer\n        // at a char-derived offset can split a codepoint mid-sequence.\n        let stdoutBytes = 0\n        let stderrBytes = 0\n        let bufferTruncated = false\n        let timedOut = false\n        let killedByAbort = false\n        let settled = false\n\n        const appendCapped = (slot: 'stdout' | 'stderr', chunk: Buffer): void => {\n          const used = slot === 'stdout' ? stdoutBytes : stderrBytes\n          if (used >= maxBuffer) {\n            // Buffer filled exactly on a prior chunk boundary — this chunk\n            // is data we're dropping, so it still counts as truncation.\n            if (!bufferTruncated) {\n              bufferTruncated = true\n              killProcessGroup(child, 'SIGTERM')\n            }\n            return\n          }\n          const room = maxBuffer - used\n          let piece = chunk\n          if (chunk.length > room) {\n            // Cut on a UTF-8 codepoint boundary: if the byte right after the\n            // cut is a continuation byte (0b10xxxxxx), the cut would land\n            // mid-codepoint — back off until it doesn't.\n            let end = room\n            while (end > 0 && (chunk[end] & 0xC0) === 0x80)\n              end--\n            piece = chunk.subarray(0, end)\n          }\n          if (slot === 'stdout') {\n            stdout += piece.toString('utf8')\n            stdoutBytes += piece.length\n          }\n          else {\n            stderr += piece.toString('utf8')\n            stderrBytes += piece.length\n          }\n          if (chunk.length > room) {\n            bufferTruncated = true\n            // Kill on overflow — matches `execAsync`'s `maxBuffer`\n            // behavior (which kills the child and surfaces an error).\n            killProcessGroup(child, 'SIGTERM')\n          }\n        }\n\n        child.stdout?.on('data', chunk => appendCapped('stdout', chunk as Buffer))\n        child.stderr?.on('data', chunk => appendCapped('stderr', chunk as Buffer))\n\n        const timeoutTimer = timeoutMs > 0\n          ? setTimeout(() => {\n              timedOut = true\n              killProcessGroup(child, 'SIGTERM')\n            }, timeoutMs)\n          : undefined\n\n        const onAbort = (): void => {\n          killedByAbort = true\n          killProcessGroup(child, 'SIGTERM')\n        }\n        const userSignal = options?.signal\n        if (userSignal)\n          userSignal.addEventListener('abort', onAbort, { once: true })\n\n        let exitGraceTimer: NodeJS.Timeout | undefined\n\n        const settle = (exitCode: number, extraStderr?: string): void => {\n          if (settled)\n            return\n          settled = true\n          if (timeoutTimer)\n            clearTimeout(timeoutTimer)\n          if (exitGraceTimer)\n            clearTimeout(exitGraceTimer)\n          if (userSignal)\n            userSignal.removeEventListener('abort', onAbort)\n          const finalStderr = extraStderr\n            ? (stderr ? `${stderr}\\n${extraStderr}` : extraStderr)\n            : stderr\n          resolveP({ stdout, stderr: finalStderr, exitCode })\n        }\n\n        // Shared classification ladder for `close` (fast path: pipes\n        // drained normally) and the post-`exit` grace (pipes held open\n        // by a daemonized grandchild). Order matters: killed-by-our-\n        // abort wins over timeout wins over natural exit, because the\n        // abort listener fires first when the user cancels mid-\n        // timeout-window.\n        const settleFromStatus = (code: number | null, signal: NodeJS.Signals | null): void => {\n          if (killedByAbort) {\n            settle(143, 'aborted by signal')\n            return\n          }\n          if (timedOut) {\n            settle(124, `command timed out after ${timeoutMs}ms`)\n            return\n          }\n          if (bufferTruncated) {\n            settle(143, `output exceeded ${maxBuffer}-byte buffer; process killed`)\n            return\n          }\n          if (signal) {\n            // Killed by some other signal we didn't issue. Treat as\n            // signal-killed for consumer compat.\n            settle(128 + 15, `terminated by signal ${signal}`)\n            return\n          }\n          settle(typeof code === 'number' ? code : 1)\n        }\n\n        child.on('error', (err) => {\n          // Spawn failure (ENOENT on `/bin/sh`, EACCES, …). Mirror\n          // `execAsync`'s \"rejects with an Error\" shape by surfacing\n          // the message on stderr and a non-zero exit.\n          settle(1, err.message)\n        })\n\n        child.on('close', (code, signal) => settleFromStatus(code, signal))\n\n        child.on('exit', (code, signal) => {\n          // The command is DONE here — `close` only adds \"every stdio\n          // pipe closed\", which a daemonized grandchild can block\n          // forever (see EXIT_PIPE_DRAIN_GRACE_MS). Give the pipes a\n          // short drain grace, then settle with what we have and\n          // release them. The daemon keeps running — that was the\n          // command's intent; killing the group here would be wrong.\n          exitGraceTimer = setTimeout(() => {\n            if (settled)\n              return\n            child.stdout?.destroy()\n            child.stderr?.destroy()\n            settleFromStatus(code, signal)\n          }, EXIT_PIPE_DRAIN_GRACE_MS)\n          exitGraceTimer.unref?.()\n        })\n      })\n    },\n\n    async readFile(handle: ExecutionHandle, path: string): Promise<string> {\n      return readFile(resolve(handle.cwd, path), 'utf-8')\n    },\n\n    async readFileBinary(handle: ExecutionHandle, path: string): Promise<Uint8Array> {\n      // No encoding → returns a Buffer (which is a Uint8Array). Used by\n      // read_file to ferry image / binary content into the multimodal route.\n      const buf = await readFile(resolve(handle.cwd, path))\n      return new Uint8Array(buf)\n    },\n\n    async writeFile(handle: ExecutionHandle, path: string, content: string): Promise<void> {\n      const fullPath = resolve(handle.cwd, path)\n      await mkdir(dirname(fullPath), { recursive: true })\n      await writeFile(fullPath, content, 'utf-8')\n    },\n\n    async listFiles(handle: ExecutionHandle, path: string): Promise<string[]> {\n      return readdir(resolve(handle.cwd, path))\n    },\n\n    async execBackground(\n      handle: ExecutionHandle,\n      command: string,\n      options: {\n        cwd?: string\n        env?: Record<string, string>\n        outputDir: string\n        onExit?: (info: TaskExitInfo) => void\n        maxOutputBytes?: number\n        stallTimeoutMs?: number\n        onStall?: (info: TaskStallInfo) => void\n      },\n    ): Promise<TaskHandle> {\n      const cwd = options.cwd ? resolve(handle.cwd, options.cwd) : handle.cwd\n\n      await mkdir(options.outputDir, { recursive: true })\n\n      // Mint id + path. The id is sequential per context (model-facing,\n      // short, ergonomic for `shell_kill`). The log FILENAME embeds the\n      // context's start timestamp so two contexts sharing an `outputDir`\n      // (TUI restart on the same session, concurrent zidane instances,\n      // …) never resolve to the same file — we open with `flags: 'a'`\n      // and a name collision would interleave their output. Path\n      // validation is defensive — we mint our own ids so it never trips\n      // today, but it pins the invariant for forks / third parties.\n      const taskId = `bash_${++taskCounter}`\n      assertSafeTaskId(taskId)\n      const outputPath = resolve(options.outputDir, `${taskId}.${contextTimestamp}.log`)\n\n      // Install the orphan reaper on first task. See `exitHandler`'s\n      // JSDoc for the kill-on-shutdown rationale.\n      if (!exitHandlerRegistered) {\n        process.on('exit', exitHandler)\n        exitHandlerRegistered = true\n      }\n\n      // Open the output file. The timestamped path is unique per context\n      // so a brand-new file is the expected outcome; `flags: 'a'` is kept\n      // as the safe default (preserves bytes if the path collides for any\n      // reason — same-millisecond context creation, manual pre-population,\n      // etc.) rather than blindly truncating. Streams are opened BEFORE\n      // the spawn to avoid a race where the child writes before the stream\n      // is ready — `child_process` buffers stdio until the consumer\n      // attaches, but the FS handle has to exist either way for our pipe.\n      const outputStream: WriteStream = createWriteStream(outputPath, { flags: 'a' })\n      // Surface FS errors (ENOSPC, EACCES on a remounted FS, etc.)\n      // under ZIDANE_DEBUG instead of crashing the host via an\n      // unhandled 'error' event. Without a listener Node escalates\n      // any stream-level error to an uncaughtException and the whole\n      // process exits — the model and the user would lose every\n      // unrelated in-flight piece of work to one bad task's disk\n      // hiccup. Swallow + log is the safer default for a fire-and-\n      // forget log writer; the task's exit code still reports.\n      outputStream.on('error', (err) => {\n        if (process.env.ZIDANE_DEBUG)\n          process.stderr.write(`[zidane/contexts] task ${taskId} log stream error: ${err.message}\\n`)\n      })\n\n      // Spawn as a NEW process group leader so we can kill the whole\n      // subtree on demand. Same primitive `exec` uses for foreground\n      // shells — see the long comment in that method for the\n      // process-group rationale.\n      const child = spawnChild('/bin/sh', ['-c', command], {\n        cwd,\n        env: { ...process.env, ...defaultEnv, ...options.env },\n        stdio: ['ignore', 'pipe', 'pipe'],\n        detached: SUPPORTS_PROCESS_GROUPS,\n      })\n\n      const state: TaskState = {\n        taskId,\n        handleId: handle.id,\n        pid: child.pid ?? -1,\n        command,\n        cwd,\n        startedAt: Date.now(),\n        outputPath,\n        outputStream,\n        child,\n        status: 'running',\n        bytesWritten: 0,\n        settled: false,\n        onExit: options.onExit,\n      }\n      tasks.set(taskId, state)\n\n      // Output cap (optional). Beyond the cap the process keeps\n      // running — head-priority retention: bytes already on disk stay,\n      // subsequent bytes are counted but dropped, and a structured\n      // truncation marker is appended at settle so the model can\n      // pattern-match the loss. Killing on overflow (what the\n      // foreground `exec` does) would be wrong here: long-running\n      // servers legitimately log forever.\n      const maxOutputBytes = typeof options.maxOutputBytes === 'number' && options.maxOutputBytes > 0\n        ? options.maxOutputBytes\n        : undefined\n      let droppedBytes = 0\n      // Latched on the first overflowing chunk. Without it, a codepoint-\n      // boundary backoff (below) leaves a few bytes of \"room\" that later\n      // chunks would dribble into — appending disjoint fragments from\n      // much-later output right after the cut point.\n      let capExhausted = false\n\n      // Stall watchdog (optional). One-shot per quiet period: fires\n      // `onStall` after `stallTimeoutMs` of no output, then stays quiet\n      // until fresh output re-arms it. `unref()` so a pending timer\n      // never holds the host process open.\n      const stallTimeoutMs = typeof options.stallTimeoutMs === 'number' && options.stallTimeoutMs > 0\n        ? options.stallTimeoutMs\n        : undefined\n      const onStall = options.onStall\n      let stallTimer: NodeJS.Timeout | undefined\n      let lastOutputAt = Date.now()\n      const armStallTimer = (): void => {\n        if (!stallTimeoutMs || !onStall)\n          return\n        if (stallTimer)\n          clearTimeout(stallTimer)\n        stallTimer = setTimeout(() => {\n          stallTimer = undefined\n          if (state.settled)\n            return\n          try {\n            onStall({\n              taskId,\n              command,\n              outputPath,\n              stalledForMs: Date.now() - lastOutputAt,\n              bytesWritten: state.bytesWritten,\n            })\n          }\n          catch (err) {\n            if (process.env.ZIDANE_DEBUG)\n              process.stderr.write(`[zidane/contexts] task ${taskId} onStall threw: ${err instanceof Error ? err.message : String(err)}\\n`)\n          }\n        }, stallTimeoutMs)\n        stallTimer.unref?.()\n      }\n      const clearStallTimer = (): void => {\n        if (stallTimer) {\n          clearTimeout(stallTimer)\n          stallTimer = undefined\n        }\n      }\n      armStallTimer()\n\n      // Pipe both streams into the same file. Order between stdout and\n      // stderr is preserved per-stream; cross-stream ordering depends on\n      // Node's event loop — acceptable interleaving for log-shaped\n      // output. Tracked-bytes is updated on every chunk for the\n      // listBackground UX (counted even past the cap, so the UX shows\n      // the task's TRUE output volume).\n      const appendChunk = (chunk: Buffer): void => {\n        state.bytesWritten += chunk.length\n        lastOutputAt = Date.now()\n        armStallTimer()\n        if (maxOutputBytes !== undefined) {\n          const onDisk = state.bytesWritten - droppedBytes - chunk.length\n          if (capExhausted || onDisk >= maxOutputBytes) {\n            capExhausted = true\n            droppedBytes += chunk.length\n            return\n          }\n          const room = maxOutputBytes - onDisk\n          if (chunk.length > room) {\n            capExhausted = true\n            // Cut on a UTF-8 codepoint boundary, same as the foreground\n            // exec cap: back off while the byte after the cut is a\n            // continuation byte (0b10xxxxxx) so the log never ends in a\n            // mangled half-codepoint right before the truncation marker.\n            let end = room\n            while (end > 0 && (chunk[end] & 0xC0) === 0x80)\n              end--\n            droppedBytes += chunk.length - end\n            if (end > 0)\n              outputStream.write(chunk.subarray(0, end))\n            return\n          }\n        }\n        outputStream.write(chunk)\n      }\n      child.stdout?.on('data', chunk => appendChunk(chunk as Buffer))\n      child.stderr?.on('data', chunk => appendChunk(chunk as Buffer))\n\n      // Settle path — at-most-once via `settled` flag (checklist #14).\n      // Three trigger sources: `close` (natural OR signal-killed),\n      // `error` (spawn failure), explicit `killBackground` (which\n      // routes through `close` itself after the SIGTERM lands).\n      const settle = (cause: 'close' | 'error', code: number | null, signal: NodeJS.Signals | null, errMessage?: string): void => {\n        if (state.settled)\n          return\n        state.settled = true\n        clearStallTimer()\n        state.endedAt = Date.now()\n\n        // Determine final status from cause + signal.\n        const status: TaskExitInfo['status']\n          = signal === 'SIGTERM' || state.killRequested\n            ? 'killed'\n            : 'exited'\n        // Signal-killed children report null `code` from Node; map back\n        // to the POSIX `128 + signum` convention so consumers can read\n        // an integer either way.\n        const exitCode = code !== null\n          ? code\n          : signal === 'SIGTERM'\n            ? 143\n            : signal\n              ? 128\n              : 1\n        state.status = status\n        state.exitCode = exitCode\n        if (signal)\n          state.signal = signal\n\n        // Flush + close the WriteStream BEFORE firing onExit — model\n        // may read the file in the same turn it receives the\n        // notification, and a still-open stream can hold tail bytes\n        // back from disk. `stream.end(callback)` is the documented\n        // \"all queued writes are flushed when this fires\" idiom.\n        //\n        // ORDER MATTERS: any error preamble we want in the log file\n        // (spawn failures with no stdout, buffer overflows) MUST be\n        // written BEFORE `end()` — once `end()` is called the stream\n        // is closed for writing and subsequent `.write()` calls are\n        // dropped. Earlier revisions had this reversed and silently\n        // lost ENOENT-on-`/bin/sh` messages.\n        if (errMessage) {\n          try {\n            outputStream.write(`\\n${errMessage}\\n`)\n          }\n          catch {\n            // Stream may have errored before this — best-effort only.\n          }\n        }\n        if (droppedBytes > 0) {\n          try {\n            // Structured + loud — the model can pattern-match the tag\n            // rather than misread a truncated log as the full output.\n            outputStream.write(`\\n<output-truncated bytes-dropped=\"${droppedBytes}\"/>\\n`)\n          }\n          catch {\n            // Best-effort only, same as the error preamble above.\n          }\n        }\n        outputStream.end(() => {\n          // `stateToTaskExitInfo` reads the same fields we just set\n          // on `state`, so the snapshot the consumer gets matches the\n          // post-settle state exactly. `onExit` is optional — pull-based\n          // consumers reconcile via `listBackground` instead.\n          try {\n            state.onExit?.(stateToTaskExitInfo(state))\n          }\n          catch (err) {\n            // Defensive — a buggy onExit callback shouldn't crash the\n            // host. Surface via stderr under ZIDANE_DEBUG; otherwise\n            // swallow. Matches the spawn-tool's bubbleError pattern.\n            if (process.env.ZIDANE_DEBUG)\n              process.stderr.write(`[zidane/contexts] task ${taskId} onExit threw: ${err instanceof Error ? err.message : String(err)}\\n`)\n          }\n        })\n      }\n\n      child.on('close', (code, signal) => settle('close', code, signal))\n      child.on('error', err => settle('error', null, null, `[spawn error] ${err.message}`))\n\n      child.on('exit', (code, signal) => {\n        // Same pipe-hostage hazard as foreground `exec`: a grandchild\n        // that inherited the pipes blocks `close` forever, leaving the\n        // task `running` (and any waiter parked) long after the\n        // command exited. Settle after a short drain grace; `settle`'s\n        // latch makes this a no-op when `close` already fired.\n        const exitGraceTimer = setTimeout(() => {\n          if (state.settled)\n            return\n          child.stdout?.destroy()\n          child.stderr?.destroy()\n          settle('close', code, signal)\n        }, EXIT_PIPE_DRAIN_GRACE_MS)\n        exitGraceTimer.unref?.()\n      })\n\n      return { taskId, pid: state.pid, outputPath }\n    },\n\n    async killBackground(handle: ExecutionHandle, taskId: string): Promise<TaskExitInfo | null> {\n      const state = tasks.get(taskId)\n      // Two miss cases collapse into one `null` return: unknown id, AND\n      // known-id-but-not-owned-by-this-handle. The second case is the\n      // subagent-can't-kill-parent-tasks defense; surfacing it as a\n      // distinct error would leak the existence of the parent's task\n      // to the subagent's model, which violates the per-handle\n      // isolation contract.\n      if (!state || state.handleId !== handle.id)\n        return null\n      // Already exited — return the cached info. We don't keep a\n      // separate cached exit; the state itself carries every field\n      // `TaskExitInfo` needs and `stateToTaskExitInfo` projects it.\n      if (state.status !== 'running')\n        return stateToTaskExitInfo(state)\n\n      // Mark the intent BEFORE issuing the kill so the close handler\n      // classifies the exit as `'killed'` even on platforms where the\n      // SIGTERM-via-group lands faster than the close event drains.\n      // (Checklist #14: at-most-once settle, plus correct status\n      // classification regardless of event ordering.)\n      state.killRequested = true\n\n      // Wait for the existing close listener to fire — `settle()` does\n      // all the flushing + onExit work. We just sit on a one-shot\n      // promise tied to the `child.on('close')` we already registered\n      // at spawn time.\n      const closed = new Promise<void>((resolveP) => {\n        if (state.settled) {\n          resolveP()\n          return\n        }\n        const originalOnExit = state.onExit\n        state.onExit = (info) => {\n          originalOnExit?.(info)\n          resolveP()\n        }\n      })\n\n      killProcessGroup(state.child, 'SIGTERM')\n      await closed\n      return stateToTaskExitInfo(state)\n    },\n\n    async waitBackground(\n      handle: ExecutionHandle,\n      taskId: string,\n      options?: { timeoutMs?: number, signal?: AbortSignal },\n    ): Promise<TaskExitInfo | null> {\n      const state = tasks.get(taskId)\n      // Same two-misses-collapse-to-null contract as `killBackground`:\n      // unknown id AND known-but-other-handle both return `null` so a\n      // subagent can't observe the parent's tasks through the wait seam.\n      if (!state || state.handleId !== handle.id)\n        return null\n      if (state.settled)\n        return stateToTaskExitInfo(state)\n\n      return new Promise<TaskExitInfo | null>((resolveP) => {\n        let done = false\n        let timer: NodeJS.Timeout | undefined\n        const signal = options?.signal\n        const finish = (value: TaskExitInfo | null): void => {\n          if (done)\n            return\n          done = true\n          if (timer)\n            clearTimeout(timer)\n          signal?.removeEventListener('abort', onAbort)\n          resolveP(value)\n        }\n        function onAbort(): void {\n          finish(null)\n        }\n\n        // Chain onto the live exit callback rather than replacing it —\n        // the original (notification enqueue, kill-waiter, a sibling\n        // waiter) must keep firing. The `done` latch makes a late exit\n        // after timeout a no-op for THIS waiter.\n        const originalOnExit = state.onExit\n        state.onExit = (info) => {\n          originalOnExit?.(info)\n          finish(stateToTaskExitInfo(state))\n        }\n\n        if (signal) {\n          if (signal.aborted) {\n            finish(null)\n            return\n          }\n          signal.addEventListener('abort', onAbort, { once: true })\n        }\n        const timeoutMs = options?.timeoutMs\n        if (typeof timeoutMs === 'number' && Number.isFinite(timeoutMs) && timeoutMs > 0) {\n          timer = setTimeout(finish, timeoutMs, null)\n          timer.unref?.()\n        }\n      })\n    },\n\n    async reassignBackgroundTasks(\n      fromHandle: ExecutionHandle,\n      toHandle: ExecutionHandle,\n      newOnExit?: (info: TaskExitInfo) => void,\n    ): Promise<readonly TaskEntry[]> {\n      // No-op when source = destination — keeps the spawn.ts call site\n      // unconditional without forcing it to dedupe.\n      if (fromHandle.id === toHandle.id)\n        return []\n      const promoted: TaskEntry[] = []\n      for (const state of tasks.values()) {\n        if (state.handleId !== fromHandle.id || state.status !== 'running')\n          continue\n        state.handleId = toHandle.id\n        // Replace the natural-exit callback. The original closed over\n        // the spawning agent's hook bus, which is about to be destroyed\n        // — without rewiring, the task's eventual `background:exit`\n        // fires into a torn-down hookable and the parent never learns.\n        if (newOnExit)\n          state.onExit = newOnExit\n        promoted.push(stateToTaskEntry(state))\n      }\n      return promoted\n    },\n\n    async listBackground(handle: ExecutionHandle): Promise<readonly TaskEntry[]> {\n      // Snapshot — callers must not assume the returned array stays\n      // in sync with the live registry. Sorted by startedAt so the\n      // model / UI sees consistent ordering across calls. Scoped to\n      // the calling handle so subagents don't see the parent's tasks\n      // (and vice versa) in their listing.\n      return [...tasks.values()]\n        .filter(s => s.handleId === handle.id)\n        .sort((a, b) => a.startedAt - b.startedAt)\n        .map(stateToTaskEntry)\n    },\n\n    async destroy(handle: ExecutionHandle): Promise<void> {\n      // Kill every still-running background task SPAWNED THROUGH THIS\n      // HANDLE before tearing the handle down. SIGTERM the groups,\n      // await the close + flush, THEN drop the registry entries.\n      // Sequential — destroy is one-shot teardown, the few ms of extra\n      // latency aren't worth the synchronization complexity.\n      //\n      // The handle scope matters when the same `ExecutionContext` is\n      // shared across a parent agent and its `spawn`-ed subagents (the\n      // default — `spawn.ts` passes `execution: ctx.execution`). Each\n      // agent mints its own `ExecutionHandle` and registers its\n      // background tasks under that handle's id. Without the filter,\n      // a child agent's `destroy()` (fired by `spawn.ts`'s `finally`\n      // when the subagent finishes / is cancelled) would walk the\n      // shared registry and SIGTERM the parent's tasks too. So\n      // cancelling a subagent that has its own background shells now\n      // correctly kills JUST those subagent shells, leaving the\n      // parent's intact.\n      const survivors = [...tasks.values()].filter(s => s.handleId === handle.id && !s.settled)\n      await Promise.all(survivors.map(async (state) => {\n        state.killRequested = true\n        await new Promise<void>((resolveP) => {\n          let graceTimer: NodeJS.Timeout | undefined\n          const originalOnExit = state.onExit\n          state.onExit = (info) => {\n            originalOnExit?.(info)\n            if (graceTimer)\n              clearTimeout(graceTimer)\n            resolveP()\n          }\n          killProcessGroup(state.child, 'SIGTERM')\n          // Bounded drain: a task that traps/ignores SIGTERM — or whose\n          // `close` event is held back by an escaped grandchild (setsid'd\n          // out of the process group) keeping the inherited stdio pipe\n          // open — must not wedge `agent.destroy()` forever. After the\n          // grace period, SIGKILL the group and stop waiting: `close`\n          // may STILL never fire (the pipe holder isn't in the group),\n          // so resolving here is the only way destroy() stays bounded.\n          graceTimer = setTimeout(() => {\n            killProcessGroup(state.child, 'SIGKILL')\n            // settle() normally flushes + ends the log stream, but it\n            // only runs off `close` — which we just gave up on. Tear the\n            // stream down so the fd doesn't leak into a long-lived host.\n            state.outputStream.destroy()\n            resolveP()\n          }, destroyGraceMs)\n          graceTimer.unref?.()\n        })\n      }))\n      // Drop only this handle's tasks from the registry. Other handles\n      // (siblings, parent) keep their entries.\n      for (const [taskId, state] of tasks) {\n        if (state.handleId === handle.id)\n          tasks.delete(taskId)\n      }\n      handles.delete(handle.id)\n      // Drop the orphan reaper ONLY when no handles remain — otherwise\n      // a child's `destroy()` would strip the parent's safety net. The\n      // reaper protects every still-tracked task in the context, so it\n      // sticks around until the LAST handle is gone.\n      //\n      // Without this guard, the spawn-tool sequence\n      //   parent.spawn(child) → child.run() → child.destroy() (auto)\n      // would deregister the handler mid-parent-lifetime. The parent's\n      // own subsequent Ctrl+C orphan-kill safety would silently degrade.\n      if (exitHandlerRegistered && handles.size === 0) {\n        process.off('exit', exitHandler)\n        exitHandlerRegistered = false\n      }\n    },\n  }\n}\n\n/**\n * Per-task state. Lives in the context's `tasks` registry. Fields are\n * mutated in place by the spawn / close / kill / destroy code paths —\n * the registry isn't immutable. Treat the type as a record-of-cells,\n * not a value.\n */\ninterface TaskState {\n  taskId: string\n  /**\n   * `ExecutionHandle.id` of the spawning agent. The registry is\n   * context-scoped (one Map shared across all handles a context minted),\n   * so a per-task owner tag is what scopes `listBackground` /\n   * `killBackground` / `destroy` to the calling handle's slice.\n   *\n   * Without this, a subagent spawned via `spawn` tool — which inherits\n   * the parent's `ExecutionContext` but mints its OWN handle — would\n   * see (and accidentally kill on `destroy()`) every task the parent\n   * had running. Came up the first time the model spawned a subagent\n   * that ran a background task: the subagent's run-end `destroy()`\n   * SIGTERMed the parent's `npm run dev` mid-flight.\n   */\n  handleId: string\n  pid: number\n  command: string\n  cwd: string\n  startedAt: number\n  outputPath: string\n  outputStream: WriteStream\n  child: ChildProcess\n  status: 'running' | 'exited' | 'killed'\n  exitCode?: number\n  signal?: NodeJS.Signals\n  bytesWritten: number\n  /**\n   * `at-most-once` settle latch. Multiple trigger sources (`close`,\n   * `error`, `kill`) can race; the flag dedupes so `onExit` fires\n   * exactly once per task (checklist #14).\n   */\n  settled: boolean\n  /**\n   * Set by `killBackground` / `destroy` before issuing SIGTERM so the\n   * close handler classifies the exit as `'killed'` even when the\n   * platform delivers the close event ahead of our intent record.\n   */\n  killRequested?: boolean\n  /**\n   * `Date.now()` at settle time. Lets `durationMs` (and pull-based\n   * reconcile consumers reading `TaskEntry.endedAt`) report the task's\n   * real lifetime instead of a projection-time delta.\n   */\n  endedAt?: number\n  /**\n   * Optional push-style exit callback. Undefined for pull-based\n   * consumers (remote / durable hosts reconcile via `listBackground`).\n   * Mutated in place by the kill / destroy / wait chains.\n   */\n  onExit?: (info: TaskExitInfo) => void\n}\n\n/**\n * Send `signal` to the child's whole process group. Falls back to a\n * single-process kill on Windows (no POSIX process groups). Shared\n * across the foreground `exec` path, the background spawn / kill\n * paths, and the shutdown-time orphan reaper — keeping one definition\n * so the kill semantics can't drift between them.\n */\nfunction killProcessGroup(child: ChildProcess, signal: NodeJS.Signals): void {\n  const pid = child.pid\n  if (pid === undefined)\n    return\n  try {\n    if (SUPPORTS_PROCESS_GROUPS)\n      process.kill(-pid, signal)\n    else\n      process.kill(pid, signal)\n  }\n  catch {\n    // ESRCH / EPERM — process is already gone (race with natural exit)\n    // or we lost the right to kill it. Both are safe to swallow.\n  }\n}\n\n/**\n * Project a `TaskState` to the `TaskEntry` shape `listBackground` and\n * `reassignBackgroundTasks` return. Single helper keeps the shape\n * consistent across both call sites (and a future addition of fields\n * to `TaskEntry` only needs to land here).\n */\nfunction stateToTaskEntry(state: TaskState): TaskEntry {\n  return {\n    taskId: state.taskId,\n    pid: state.pid,\n    command: state.command,\n    cwd: state.cwd,\n    startedAt: state.startedAt,\n    ...(state.endedAt !== undefined ? { endedAt: state.endedAt } : {}),\n    outputPath: state.outputPath,\n    status: state.status,\n    ...(state.exitCode !== undefined ? { exitCode: state.exitCode } : {}),\n    ...(state.signal ? { signal: state.signal } : {}),\n    bytesWritten: state.bytesWritten,\n  }\n}\n\n/**\n * Project a settled `TaskState` to the `TaskExitInfo` shape `settle()`\n * fires from `onExit` and `killBackground` returns on the\n * cached-exit path. Pre-condition: `state.status !== 'running'`\n * (callers gate on this).\n */\nfunction stateToTaskExitInfo(state: TaskState): TaskExitInfo {\n  return {\n    taskId: state.taskId,\n    status: state.status as Exclude<TaskState['status'], 'running'>,\n    exitCode: state.exitCode ?? 0,\n    ...(state.signal ? { signal: state.signal } : {}),\n    outputPath: state.outputPath,\n    // Settle-time delta when available (always set since `endedAt` was\n    // introduced); the `Date.now()` fallback covers defensive callers\n    // projecting an unsettled state.\n    durationMs: (state.endedAt ?? Date.now()) - state.startedAt,\n    command: state.command,\n  }\n}\n","/**\n * Remote sandbox execution context.\n *\n * Offloads execution to a remote sandbox API (e.g. Rivet, E2B).\n * Specific providers implement the SandboxProvider interface.\n */\n\nimport type { ContextCapabilities, ExecResult, ExecutionContext, ExecutionHandle, SpawnConfig } from './types'\n\n// ---------------------------------------------------------------------------\n// Sandbox provider interface\n// ---------------------------------------------------------------------------\n\nexport interface SandboxProvider {\n  name: string\n  spawn: (config: SpawnConfig) => Promise<{ id: string, cwd: string }>\n  exec: (sandboxId: string, command: string, options?: { cwd?: string, env?: Record<string, string>, timeout?: number }) => Promise<ExecResult>\n  readFile: (sandboxId: string, path: string) => Promise<string>\n  writeFile: (sandboxId: string, path: string, content: string) => Promise<void>\n  listFiles: (sandboxId: string, path: string) => Promise<string[]>\n  destroy: (sandboxId: string) => Promise<void>\n}\n\n// ---------------------------------------------------------------------------\n// Sandbox execution context\n// ---------------------------------------------------------------------------\n\nexport function createSandboxContext(provider: SandboxProvider): ExecutionContext {\n  const sandboxes = new Map<string, string>()\n\n  function getSandboxId(handle: ExecutionHandle): string {\n    const id = sandboxes.get(handle.id)\n    if (!id)\n      throw new Error(`Sandbox ${handle.id} not found`)\n    return id\n  }\n\n  return {\n    type: 'sandbox',\n\n    capabilities: {\n      shell: true,\n      filesystem: true,\n      network: true,\n      gpu: false,\n    } satisfies ContextCapabilities,\n\n    async spawn(config?: SpawnConfig): Promise<ExecutionHandle> {\n      const result = await provider.spawn(config ?? {})\n      const handle: ExecutionHandle = { id: result.id, type: 'sandbox', cwd: result.cwd }\n      sandboxes.set(handle.id, result.id)\n      return handle\n    },\n\n    async exec(handle: ExecutionHandle, command: string, options?): Promise<ExecResult> {\n      return provider.exec(getSandboxId(handle), command, options)\n    },\n\n    async readFile(handle: ExecutionHandle, path: string): Promise<string> {\n      return provider.readFile(getSandboxId(handle), path)\n    },\n\n    async writeFile(handle: ExecutionHandle, path: string, content: string): Promise<void> {\n      return provider.writeFile(getSandboxId(handle), path, content)\n    },\n\n    async listFiles(handle: ExecutionHandle, path: string): Promise<string[]> {\n      return provider.listFiles(getSandboxId(handle), path)\n    },\n\n    async destroy(handle: ExecutionHandle): Promise<void> {\n      const id = sandboxes.get(handle.id)\n      if (!id)\n        return\n      await provider.destroy(id)\n      sandboxes.delete(handle.id)\n    },\n  }\n}\n","/**\n * Execution context types.\n *\n * An execution context defines *where* and *how* an agent's tools run.\n * The agent loop and tools interact through this interface without knowing\n * whether they're running in-process, in a Docker container, or in a\n * remote sandbox.\n */\n\n// ---------------------------------------------------------------------------\n// Capabilities\n// ---------------------------------------------------------------------------\n\n/**\n * Lifetime guarantee of background tasks started through\n * {@link ExecutionContext.execBackground}.\n *\n * - `'none'` — the context cannot detach tasks at all.\n * - `'process-lifetime'` — tasks live as long as the HOST process; a\n *   crash/restart of the host orphans or kills them (`ProcessContext`).\n * - `'durable'` — tasks live on a remote runner and survive host process\n *   death (remote execution contexts driven by durable runtimes).\n *\n * Durable-execution adapters (e.g. `zidane/restate`) consult this to\n * decide whether backgrounding is safe to expose: a `'durable'` context\n * keeps its tasks across worker crashes, so there is no reason to strip\n * the capability from the model.\n */\nexport type DetachedTasksCapability = 'none' | 'process-lifetime' | 'durable'\n\nexport interface ContextCapabilities {\n  /** Can execute shell commands */\n  shell: boolean\n  /** Can read/write files in a workspace */\n  filesystem: boolean\n  /** Can make outbound network requests */\n  network: boolean\n  /** Has GPU access */\n  gpu: boolean\n  /**\n   * Background-task lifetime guarantee. Optional for backward\n   * compatibility — when absent, callers infer `'process-lifetime'`\n   * if the context implements `execBackground`, `'none'` otherwise\n   * (see {@link resolveDetachedTasksCapability}).\n   */\n  detachedTasks?: DetachedTasksCapability\n}\n\n/**\n * Effective {@link DetachedTasksCapability} of a context, with the\n * backward-compatible inference for contexts that predate the field.\n */\nexport function resolveDetachedTasksCapability(context: ExecutionContext): DetachedTasksCapability {\n  return context.capabilities.detachedTasks\n    ?? (context.execBackground ? 'process-lifetime' : 'none')\n}\n\n// ---------------------------------------------------------------------------\n// Execution handle\n// ---------------------------------------------------------------------------\n\n/** Opaque handle to a running execution context instance */\nexport interface ExecutionHandle {\n  id: string\n  type: ContextType\n  /** Working directory within the context */\n  cwd: string\n}\n\n// ---------------------------------------------------------------------------\n// Exec result\n// ---------------------------------------------------------------------------\n\nexport interface ExecResult {\n  stdout: string\n  stderr: string\n  exitCode: number\n}\n\n// ---------------------------------------------------------------------------\n// Spawn config\n// ---------------------------------------------------------------------------\n\nexport interface SpawnConfig {\n  /** Working directory (created if it doesn't exist) */\n  cwd?: string\n  /** Environment variables */\n  env?: Record<string, string>\n  /** Docker image (only for 'docker' context) */\n  image?: string\n  /** Docker container name prefix (only for 'docker' context) */\n  name?: string\n  /** Host paths mounted into the context (only for 'docker' context today) */\n  mounts?: ContextMount[]\n  /** Resource limits */\n  limits?: {\n    /** Memory limit in MB */\n    memory?: number\n    /** CPU limit (e.g. '1.0' = 1 core) */\n    cpu?: string\n    /** Timeout in seconds for the entire context lifetime */\n    timeout?: number\n  }\n  /** Sandbox provider config (only for 'sandbox' context) */\n  sandbox?: {\n    provider: string\n    apiKey?: string\n    [key: string]: unknown\n  }\n\n  /**\n   * How long `destroy()` waits for a SIGTERM'd background task to settle\n   * before escalating to SIGKILL and abandoning the wait (process context\n   * only). Bounds `agent.destroy()` against tasks that trap SIGTERM or\n   * whose stdio pipes are held open by escaped grandchildren.\n   *\n   * Default: `5000`.\n   */\n  destroyGraceMs?: number\n\n  /**\n   * Publish container ports on the host (docker context only).\n   *\n   * Each entry maps a container port to either an explicit host port or\n   * (when `host` is omitted) a Docker-assigned random port. Retrieve the\n   * actual host port at runtime via `getMappedPort(container)` on the\n   * docker context.\n   */\n  ports?: Array<{ container: number, host?: number, proto?: 'tcp' | 'udp' }>\n\n  /**\n   * UID/GID the container should run as (docker context only).\n   *\n   * Accepts the same forms Docker's `--user` does: `uid`, `uid:gid`, or a\n   * named user that exists in the image. Default is the image's default\n   * user (typically root). Setting this to the host user's `uid:gid`\n   * avoids the EACCES-on-cleanup problem when sharing a workspace via\n   * a `shared` mount.\n   */\n  user?: string\n\n  /**\n   * User-defined Docker network to join (docker context only).\n   *\n   * Defaults to Docker's default bridge. Use a user network when you\n   * need multiple sibling containers (e.g. agent + database + dev\n   * server) to discover each other by name.\n   */\n  network?: string\n\n  /**\n   * Docker labels to attach to the container (docker context only).\n   *\n   * Useful for ownership tracking — callers can sweep abandoned\n   * containers (e.g. from a crashed parent process) by filtering on\n   * a label they own: `docker ps -aq --filter label=my-app=true`.\n   */\n  labels?: Record<string, string>\n}\n\nexport interface ContextMount {\n  /** Absolute host path to mount. */\n  source: string\n  /** Absolute path inside the execution context. */\n  target: string\n  /** Mount read-only. Defaults to false for Docker's native bind behavior. */\n  readonly?: boolean\n  /**\n   * Apply the SELinux shared label (`:z`) so the host user and the container\n   * user can both read/write the mount (docker context only). No-op on\n   * non-SELinux hosts. Combine with `SpawnConfig.user` to avoid root-owned\n   * files leaking onto the host. Mutually exclusive with `readonly`.\n   */\n  shared?: boolean\n}\n\n// ---------------------------------------------------------------------------\n// Execution context interface\n// ---------------------------------------------------------------------------\n\nexport type ContextType = 'process' | 'docker' | 'sandbox'\n\nexport interface ExecutionContext {\n  /** Context type identifier */\n  readonly type: ContextType\n\n  /** What this context supports */\n  readonly capabilities: ContextCapabilities\n\n  /** Spawn a new execution environment */\n  spawn: (config?: SpawnConfig) => Promise<ExecutionHandle>\n\n  /**\n   * Execute a shell command in the context.\n   *\n   * `signal` propagates abort all the way down to the underlying child\n   * process — the implementation is expected to wire it into whatever\n   * spawn primitive it uses so the OS receives a SIGTERM (or equivalent)\n   * when the caller aborts. Without it, a cancelled tool returns its\n   * cancellation marker to the model but the underlying process keeps\n   * running in the background, orphaning compute / locks / IO. Pass\n   * `ctx.signal` from a tool body to inherit the per-call + run-level\n   * abort union; pass a freshly-built one for a host-driven kill.\n   *\n   * Implementations are free to ignore `signal` (the contract degrades\n   * gracefully — the process simply won't be killed), but the in-process\n   * default DOES honor it via `child_process.exec`'s native `signal`\n   * option.\n   */\n  exec: (handle: ExecutionHandle, command: string, options?: { cwd?: string, env?: Record<string, string>, timeout?: number, signal?: AbortSignal }) => Promise<ExecResult>\n\n  /**\n   * Start a process in the background. Settles as soon as `spawn` returns\n   * — does NOT wait for the child to exit. Stdout + stderr stream\n   * interleaved to the file at the returned `outputPath`. The caller\n   * (typically the agent) reads incremental output via the regular\n   * {@link ExecutionContext.readFile} seam.\n   *\n   * Optional — contexts without background support (some remote sandboxes)\n   * just don't implement it. The shell tool surfaces a clean\n   * \"background mode is not supported in this execution context\" error\n   * when this is undefined.\n   *\n   * `onExit` is called once when the child terminates (natural, killed,\n   * or error). The same instance that called `execBackground` is the\n   * exclusive owner of the callback — it's not a multi-cast bus. Hosts\n   * wire this to the agent's pending-notification queue so the model\n   * gets a `<task-notification>` on its next turn.\n   *\n   * `onExit` is OPTIONAL: remote / durable contexts may have no legal\n   * way to push a callback from a timer back into the host (a Restate\n   * journal, for instance, forbids out-of-band writes). Such contexts\n   * simply record the exit in their registry; the agent loop reconciles\n   * by polling {@link ExecutionContext.listBackground} at run\n   * boundaries, where a host journal wrapper is legal (the\n   * `background:reconcile` hook is the journalable seam).\n   *\n   * See `docs/RUN_IN_BACKGROUND.md` for the broader design contract\n   * (file location, replay semantics, suppression rules).\n   */\n  execBackground?: (\n    handle: ExecutionHandle,\n    command: string,\n    options: {\n      cwd?: string\n      env?: Record<string, string>\n      /**\n       * Absolute directory the context appends `<task-id>.log` to. The\n       * agent owns this path because it carries session-shaped knowledge\n       * (`<userDir>/<sessionId>/tasks/`) the context can't synthesize.\n       * Must already exist OR be creatable by the context — the\n       * implementation handles `mkdir -p` defensively.\n       */\n      outputDir: string\n      /** Push-style exit callback. Optional — see the method doc. */\n      onExit?: (info: TaskExitInfo) => void\n      /**\n       * Cap on bytes written to the output file. Beyond the cap the\n       * process KEEPS RUNNING; further output is counted but dropped,\n       * and a `<output-truncated bytes-dropped=\"N\"/>` marker is\n       * appended when the task settles. Unset / non-positive = no cap.\n       */\n      maxOutputBytes?: number\n      /**\n       * Stall watchdog: when the task produces no output for this many\n       * milliseconds, `onStall` fires ONCE (one-shot — re-arms only\n       * after fresh output arrives). The process is NOT killed; the\n       * consumer decides (typically by telling the model the task may\n       * be stuck at an interactive prompt). Unset = no watchdog.\n       */\n      stallTimeoutMs?: number\n      /** One-shot stall callback — see `stallTimeoutMs`. */\n      onStall?: (info: TaskStallInfo) => void\n    },\n  ) => Promise<TaskHandle>\n\n  /**\n   * SIGTERM the whole process group of a running background task.\n   * Idempotent — second call returns `null` (or the cached exit info).\n   * Resolves once the process has exited AND its output stream has\n   * been flushed + closed.\n   *\n   * `null` return on miss (unknown id, already cleaned up) so the\n   * shell_kill tool can surface a clean \"no such task\" message\n   * without throwing.\n   */\n  killBackground?: (\n    handle: ExecutionHandle,\n    taskId: string,\n  ) => Promise<TaskExitInfo | null>\n\n  /**\n   * Snapshot of every task in the context's registry — running AND\n   * terminated (entries remain until the next context destroy, so\n   * the model can still read output of exited tasks).\n   */\n  listBackground?: (\n    handle: ExecutionHandle,\n  ) => Promise<readonly TaskEntry[]>\n\n  /**\n   * Block until a background task terminates, then resolve with its\n   * exit info. Resolves immediately for already-terminated tasks.\n   *\n   * Returns `null` when:\n   *   - the task id is unknown (or owned by another handle — same\n   *     isolation contract as `killBackground`), OR\n   *   - `timeoutMs` elapsed / `signal` aborted before the task exited.\n   *\n   * Callers that need to distinguish \"unknown\" from \"still running\"\n   * should consult `listBackground` first (the `wait_task` tool does).\n   *\n   * This is the injectable wait seam for the `wait_task` tool:\n   * in-process contexts implement it on the existing `onExit`\n   * machinery; durable hosts implement it as an awakeable park\n   * (runner fires task-exit over their bridge → resolveAwakeable).\n   */\n  waitBackground?: (\n    handle: ExecutionHandle,\n    taskId: string,\n    options?: { timeoutMs?: number, signal?: AbortSignal },\n  ) => Promise<TaskExitInfo | null>\n\n  /**\n   * Transfer ownership of every still-running task from `fromHandle`\n   * to `toHandle`. Used by the spawn tool to \"promote\" a subagent's\n   * background tasks up to the parent's handle so they outlive the\n   * subagent's destroy() — matching shell semantics, where a `&`-ed\n   * command outlives the parent process.\n   *\n   * Side effects:\n   *   - The task's `handleId` is rewritten, so subsequent\n   *     `listBackground(toHandle)` / `killBackground(toHandle, …)` /\n   *     `destroy(toHandle)` see it (and `fromHandle`-scoped operations\n   *     don't).\n   *   - When `newOnExit` is provided, the original `onExit` is\n   *     REPLACED with it. Critical: the task's natural exit callback\n   *     was captured against the spawning agent's hook bus, which is\n   *     about to be destroyed; without rewiring, the parent never\n   *     learns when the task terminates. Pass a closure that fires\n   *     the parent agent's `background:exit` hook.\n   *\n   * Returns the entries that were actually reassigned (running tasks\n   * only; terminated ones stay where they are). Implementations that\n   * don't support reassignment can leave this undefined; the caller\n   * (spawn.ts) falls back to the current behavior of killing child\n   * tasks at subagent shutdown.\n   */\n  reassignBackgroundTasks?: (\n    fromHandle: ExecutionHandle,\n    toHandle: ExecutionHandle,\n    newOnExit?: (info: TaskExitInfo) => void,\n  ) => Promise<readonly TaskEntry[]>\n\n  /** Read a file from the context's filesystem */\n  readFile: (handle: ExecutionHandle, path: string) => Promise<string>\n\n  /**\n   * Read a file from the context's filesystem as raw bytes.\n   *\n   * Used by `read_file` to dispatch image / binary files into the multimodal\n   * `ToolResultContent[]` route. Optional — when not implemented, the tool\n   * falls back to `base64 < path` via the `exec` seam, which works in any\n   * shell-capable context. Implementations that already have a native\n   * binary read (in-process `fs.readFile` without encoding, container API,\n   * sandbox SDK) should override for the latency win.\n   */\n  readFileBinary?: (handle: ExecutionHandle, path: string) => Promise<Uint8Array>\n\n  /** Write a file to the context's filesystem */\n  writeFile: (handle: ExecutionHandle, path: string, content: string) => Promise<void>\n\n  /** List files in a directory */\n  listFiles: (handle: ExecutionHandle, path: string) => Promise<string[]>\n\n  /**\n   * Resolve the host-side port that a container port was published on\n   * (docker context only, and only when the matching entry was created\n   * with `host` omitted in `SpawnConfig.ports`).\n   *\n   * Resolves to `null` if the container port isn't published. Other\n   * contexts (process, sandbox) don't implement this; they don't have\n   * a port-mapping concept.\n   */\n  getMappedPort?: (handle: ExecutionHandle, containerPort: number) => Promise<number | null>\n\n  /** Destroy the execution environment and clean up resources */\n  destroy: (handle: ExecutionHandle) => Promise<void>\n}\n\n// ---------------------------------------------------------------------------\n// Background task types\n// ---------------------------------------------------------------------------\n\n/**\n * Lifecycle status of a background task.\n *\n * - `'running'` — process is still live; `exitCode` / `signal` unset.\n * - `'exited'` — process terminated on its own (clean or non-zero exit).\n * - `'killed'` — the host issued `killBackground` (SIGTERM to the group).\n *\n * The status is a coarse-grained signal; the exit code carries the\n * fine-grained detail (e.g. `143 = SIGTERM` for `'killed'`).\n */\nexport type BackgroundTaskStatus = 'running' | 'exited' | 'killed'\n\n/**\n * Returned synchronously by `execBackground` — the handle the model and\n * the framework use to refer to the task until it terminates.\n *\n * `outputPath` is an absolute path to the log file the context is\n * appending stdout + stderr to (interleaved by emit order). The model\n * reads it via the normal `read_file` tool; no special tool is required.\n */\nexport interface TaskHandle {\n  /**\n   * Stable id minted by the context — typically `bash_<n>` for\n   * `ProcessContext`. Sequential within a single context instance,\n   * resets when a new context is constructed. Forwarded to `killBackground` /\n   * `listBackground` and stamped into every `<task-notification>` block.\n   */\n  taskId: string\n  /** OS pid of the spawned shell wrapper (process-group leader on POSIX). */\n  pid: number\n  /** Absolute path to the log file the context is streaming output into. */\n  outputPath: string\n}\n\n/**\n * Fired exactly once per task when the child process terminates, via\n * `execBackground`'s `onExit` callback. The agent layer translates this\n * into a queued `<task-notification>` for the next turn.\n *\n * `signal` is set when the child was terminated by a signal (e.g.\n * SIGTERM from our own kill-tree, SIGKILL from oom-killer); absent on\n * natural exit. `exitCode` is `128 + signal-number` on signal-killed\n * children, matching POSIX shell conventions — `143` for SIGTERM, etc.\n */\nexport interface TaskExitInfo {\n  taskId: string\n  status: Exclude<BackgroundTaskStatus, 'running'>\n  exitCode: number\n  signal?: NodeJS.Signals\n  outputPath: string\n  /** `Date.now()` delta between spawn and exit. */\n  durationMs: number\n  /** The original command string the model invoked — useful for telemetry / banner summary. */\n  command: string\n}\n\n/**\n * One row in `listBackground`'s snapshot. Living entries (status `'running'`)\n * have `exitCode` / `signal` / `endedAt` unset; terminated entries carry the\n * same data `TaskExitInfo` returned at exit time.\n */\nexport interface TaskEntry {\n  taskId: string\n  pid: number\n  command: string\n  cwd: string\n  startedAt: number\n  /**\n   * Set when the task terminated. Lets pull-based consumers (the agent's\n   * run-boundary reconcile) derive `durationMs = endedAt - startedAt`\n   * without depending on when the snapshot was taken.\n   */\n  endedAt?: number\n  outputPath: string\n  status: BackgroundTaskStatus\n  exitCode?: number\n  signal?: NodeJS.Signals\n  /** Total bytes written to the output file so far — useful for \"task X has produced N KB\" UX hints. */\n  bytesWritten: number\n}\n\n/**\n * Fired by the optional stall watchdog (see `execBackground`'s\n * `stallTimeoutMs`) when a running task has produced no output for the\n * configured window. The process is still alive — this is a signal, not\n * a state transition.\n */\nexport interface TaskStallInfo {\n  taskId: string\n  command: string\n  outputPath: string\n  /** Milliseconds since the last output chunk (>= the configured window). */\n  stalledForMs: number\n  /** Total bytes the task has written so far. */\n  bytesWritten: number\n}\n"],"mappings":";;;;;;;;;;;AAsBA,MAAM,0BAA0B,QAAQ,aAAa;;;;;;;AAQrD,MAAM,qBAAqB,KAAK,OAAO;;;;;;;AAQvC,MAAM,2BAA2B;;;;;;;;;;;;;;AAejC,MAAM,2BAA2B;;;;;;;;;;;AAYjC,MAAM,aAAa;AAEnB,SAAS,iBAAiB,QAAsB;CAC9C,IAAI,CAAC,WAAW,KAAK,MAAM,GACzB,MAAM,IAAI,MAAM,oBAAoB,OAAO,iBAAiB,WAAW,EAAE;AAC7E;;;;;;;;;AAUA,SAAgB,uBAAuB,MAAoB;CACzD,MAAM,QAAQ,MAAsB,EAAE,SAAS,EAAE,SAAS,GAAG,GAAG;CAChE,MAAM,QAAQ,MAAsB,EAAE,SAAS,EAAE,SAAS,GAAG,GAAG;CAQhE,OAAO,GAPG,KAAK,eAOL,IANA,KAAK,KAAK,YAAY,IAAI,CAMtB,IALJ,KAAK,KAAK,WAAW,CAKb,EAAE,GAJV,KAAK,KAAK,YAAY,CAIT,IAHb,KAAK,KAAK,cAAc,CAGP,IAFjB,KAAK,KAAK,cAAc,CAEH,EAAE,GADtB,KAAK,KAAK,mBAAmB,CACH;AACvC;AAKA,SAAgB,qBAAqB,QAAwC;CAC3E,IAAI,UAAU;CACd,MAAM,0BAAU,IAAI,IAA6B;CACjD,MAAM,aAAa,QAAQ,OAAO,QAAQ,IAAI;CAC9C,MAAM,aAAa,QAAQ;CAC3B,MAAM,iBAAiB,QAAQ,kBAAkB;;;;;;;;CASjD,MAAM,wBAAQ,IAAI,IAAuB;CACzC,IAAI,cAAc;;;;;;;;;;;;;;;;;;;;CAqBlB,MAAM,mBAAmB,uCAAuB,IAAI,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;CAqB1D,IAAI,wBAAwB;CAC5B,MAAM,oBAA0B;EAC9B,KAAK,MAAM,QAAQ,MAAM,OAAO,GAAG;GACjC,IAAI,KAAK,WAAW,WAClB;GACF,MAAM,MAAM,KAAK,MAAM;GACvB,IAAI,QAAQ,KAAA,GACV;GACF,IAAI;IACF,IAAI,yBACF,QAAQ,KAAK,CAAC,KAAK,SAAS;SAE5B,QAAQ,KAAK,KAAK,SAAS;GAC/B,QACM,CAIN;EACF;CACF;CAEA,OAAO;EACL,MAAM;EAEN,cAAc;GACZ,OAAO;GACP,YAAY;GACZ,SAAS;GACT,KAAK;GAKL,eAAe;EACjB;EAEA,MAAM,MAAM,WAAmD;GAC7D,MAAM,KAAK,WAAW,EAAE;GACxB,MAAM,MAAM,WAAW,OAAO;GAE9B,MAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;GAEpC,MAAM,SAA0B;IAAE;IAAI,MAAM;IAAW;GAAI;GAC3D,QAAQ,IAAI,IAAI,MAAM;GACtB,OAAO;EACT;EAEA,MAAM,KACJ,QACA,SACA,SACqB;GACrB,MAAM,MAAM,SAAS,MAAM,QAAQ,OAAO,KAAK,QAAQ,GAAG,IAAI,OAAO;GAKrE,IAAI,SAAS,QAAQ,SACnB,OAAO;IAAE,QAAQ;IAAI,QAAQ;IAAkC,UAAU;GAAI;GAG/E,MAAM,aAAa,SAAS,WAAW,QAAQ,QAAQ,WAAW,MAAM;GACxE,MAAM,YAAY;GAElB,OAAO,IAAI,SAAqB,aAAa;IAc3C,MAAM,QAAQA,MAAW,WAAW,CAAC,MAAM,OAAO,GAAG;KACnD;KACA,KAAK;MAAE,GAAG,QAAQ;MAAK,GAAG;MAAY,GAAG,SAAS;KAAI;KACtD,OAAO;MAAC;MAAU;MAAQ;KAAM;KAChC,UAAU;IACZ,CAAC;IAED,IAAI,SAAS;IACb,IAAI,SAAS;IAKb,IAAI,cAAc;IAClB,IAAI,cAAc;IAClB,IAAI,kBAAkB;IACtB,IAAI,WAAW;IACf,IAAI,gBAAgB;IACpB,IAAI,UAAU;IAEd,MAAM,gBAAgB,MAA2B,UAAwB;KACvE,MAAM,OAAO,SAAS,WAAW,cAAc;KAC/C,IAAI,QAAQ,WAAW;MAGrB,IAAI,CAAC,iBAAiB;OACpB,kBAAkB;OAClB,iBAAiB,OAAO,SAAS;MACnC;MACA;KACF;KACA,MAAM,OAAO,YAAY;KACzB,IAAI,QAAQ;KACZ,IAAI,MAAM,SAAS,MAAM;MAIvB,IAAI,MAAM;MACV,OAAO,MAAM,MAAM,MAAM,OAAO,SAAU,KACxC;MACF,QAAQ,MAAM,SAAS,GAAG,GAAG;KAC/B;KACA,IAAI,SAAS,UAAU;MACrB,UAAU,MAAM,SAAS,MAAM;MAC/B,eAAe,MAAM;KACvB,OACK;MACH,UAAU,MAAM,SAAS,MAAM;MAC/B,eAAe,MAAM;KACvB;KACA,IAAI,MAAM,SAAS,MAAM;MACvB,kBAAkB;MAGlB,iBAAiB,OAAO,SAAS;KACnC;IACF;IAEA,MAAM,QAAQ,GAAG,SAAQ,UAAS,aAAa,UAAU,KAAe,CAAC;IACzE,MAAM,QAAQ,GAAG,SAAQ,UAAS,aAAa,UAAU,KAAe,CAAC;IAEzE,MAAM,eAAe,YAAY,IAC7B,iBAAiB;KACf,WAAW;KACX,iBAAiB,OAAO,SAAS;IACnC,GAAG,SAAS,IACZ,KAAA;IAEJ,MAAM,gBAAsB;KAC1B,gBAAgB;KAChB,iBAAiB,OAAO,SAAS;IACnC;IACA,MAAM,aAAa,SAAS;IAC5B,IAAI,YACF,WAAW,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;IAE9D,IAAI;IAEJ,MAAM,UAAU,UAAkB,gBAA+B;KAC/D,IAAI,SACF;KACF,UAAU;KACV,IAAI,cACF,aAAa,YAAY;KAC3B,IAAI,gBACF,aAAa,cAAc;KAC7B,IAAI,YACF,WAAW,oBAAoB,SAAS,OAAO;KACjD,MAAM,cAAc,cACf,SAAS,GAAG,OAAO,IAAI,gBAAgB,cACxC;KACJ,SAAS;MAAE;MAAQ,QAAQ;MAAa;KAAS,CAAC;IACpD;IAQA,MAAM,oBAAoB,MAAqB,WAAwC;KACrF,IAAI,eAAe;MACjB,OAAO,KAAK,mBAAmB;MAC/B;KACF;KACA,IAAI,UAAU;MACZ,OAAO,KAAK,2BAA2B,UAAU,GAAG;MACpD;KACF;KACA,IAAI,iBAAiB;MACnB,OAAO,KAAK,mBAAmB,UAAU,6BAA6B;MACtE;KACF;KACA,IAAI,QAAQ;MAGV,OAAO,KAAU,wBAAwB,QAAQ;MACjD;KACF;KACA,OAAO,OAAO,SAAS,WAAW,OAAO,CAAC;IAC5C;IAEA,MAAM,GAAG,UAAU,QAAQ;KAIzB,OAAO,GAAG,IAAI,OAAO;IACvB,CAAC;IAED,MAAM,GAAG,UAAU,MAAM,WAAW,iBAAiB,MAAM,MAAM,CAAC;IAElE,MAAM,GAAG,SAAS,MAAM,WAAW;KAOjC,iBAAiB,iBAAiB;MAChC,IAAI,SACF;MACF,MAAM,QAAQ,QAAQ;MACtB,MAAM,QAAQ,QAAQ;MACtB,iBAAiB,MAAM,MAAM;KAC/B,GAAG,wBAAwB;KAC3B,eAAe,QAAQ;IACzB,CAAC;GACH,CAAC;EACH;EAEA,MAAM,SAAS,QAAyB,MAA+B;GACrE,OAAO,SAAS,QAAQ,OAAO,KAAK,IAAI,GAAG,OAAO;EACpD;EAEA,MAAM,eAAe,QAAyB,MAAmC;GAG/E,MAAM,MAAM,MAAM,SAAS,QAAQ,OAAO,KAAK,IAAI,CAAC;GACpD,OAAO,IAAI,WAAW,GAAG;EAC3B;EAEA,MAAM,UAAU,QAAyB,MAAc,SAAgC;GACrF,MAAM,WAAW,QAAQ,OAAO,KAAK,IAAI;GACzC,MAAM,MAAM,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;GAClD,MAAM,UAAU,UAAU,SAAS,OAAO;EAC5C;EAEA,MAAM,UAAU,QAAyB,MAAiC;GACxE,OAAO,QAAQ,QAAQ,OAAO,KAAK,IAAI,CAAC;EAC1C;EAEA,MAAM,eACJ,QACA,SACA,SASqB;GACrB,MAAM,MAAM,QAAQ,MAAM,QAAQ,OAAO,KAAK,QAAQ,GAAG,IAAI,OAAO;GAEpE,MAAM,MAAM,QAAQ,WAAW,EAAE,WAAW,KAAK,CAAC;GAUlD,MAAM,SAAS,QAAQ,EAAE;GACzB,iBAAiB,MAAM;GACvB,MAAM,aAAa,QAAQ,QAAQ,WAAW,GAAG,OAAO,GAAG,iBAAiB,KAAK;GAIjF,IAAI,CAAC,uBAAuB;IAC1B,QAAQ,GAAG,QAAQ,WAAW;IAC9B,wBAAwB;GAC1B;GAUA,MAAM,eAA4B,kBAAkB,YAAY,EAAE,OAAO,IAAI,CAAC;GAS9E,aAAa,GAAG,UAAU,QAAQ;IAChC,IAAI,QAAQ,IAAI,cACd,QAAQ,OAAO,MAAM,0BAA0B,OAAO,qBAAqB,IAAI,QAAQ,GAAG;GAC9F,CAAC;GAMD,MAAM,QAAQA,MAAW,WAAW,CAAC,MAAM,OAAO,GAAG;IACnD;IACA,KAAK;KAAE,GAAG,QAAQ;KAAK,GAAG;KAAY,GAAG,QAAQ;IAAI;IACrD,OAAO;KAAC;KAAU;KAAQ;IAAM;IAChC,UAAU;GACZ,CAAC;GAED,MAAM,QAAmB;IACvB;IACA,UAAU,OAAO;IACjB,KAAK,MAAM,OAAO;IAClB;IACA;IACA,WAAW,KAAK,IAAI;IACpB;IACA;IACA;IACA,QAAQ;IACR,cAAc;IACd,SAAS;IACT,QAAQ,QAAQ;GAClB;GACA,MAAM,IAAI,QAAQ,KAAK;GASvB,MAAM,iBAAiB,OAAO,QAAQ,mBAAmB,YAAY,QAAQ,iBAAiB,IAC1F,QAAQ,iBACR,KAAA;GACJ,IAAI,eAAe;GAKnB,IAAI,eAAe;GAMnB,MAAM,iBAAiB,OAAO,QAAQ,mBAAmB,YAAY,QAAQ,iBAAiB,IAC1F,QAAQ,iBACR,KAAA;GACJ,MAAM,UAAU,QAAQ;GACxB,IAAI;GACJ,IAAI,eAAe,KAAK,IAAI;GAC5B,MAAM,sBAA4B;IAChC,IAAI,CAAC,kBAAkB,CAAC,SACtB;IACF,IAAI,YACF,aAAa,UAAU;IACzB,aAAa,iBAAiB;KAC5B,aAAa,KAAA;KACb,IAAI,MAAM,SACR;KACF,IAAI;MACF,QAAQ;OACN;OACA;OACA;OACA,cAAc,KAAK,IAAI,IAAI;OAC3B,cAAc,MAAM;MACtB,CAAC;KACH,SACO,KAAK;MACV,IAAI,QAAQ,IAAI,cACd,QAAQ,OAAO,MAAM,0BAA0B,OAAO,kBAAkB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,GAAG;KAChI;IACF,GAAG,cAAc;IACjB,WAAW,QAAQ;GACrB;GACA,MAAM,wBAA8B;IAClC,IAAI,YAAY;KACd,aAAa,UAAU;KACvB,aAAa,KAAA;IACf;GACF;GACA,cAAc;GAQd,MAAM,eAAe,UAAwB;IAC3C,MAAM,gBAAgB,MAAM;IAC5B,eAAe,KAAK,IAAI;IACxB,cAAc;IACd,IAAI,mBAAmB,KAAA,GAAW;KAChC,MAAM,SAAS,MAAM,eAAe,eAAe,MAAM;KACzD,IAAI,gBAAgB,UAAU,gBAAgB;MAC5C,eAAe;MACf,gBAAgB,MAAM;MACtB;KACF;KACA,MAAM,OAAO,iBAAiB;KAC9B,IAAI,MAAM,SAAS,MAAM;MACvB,eAAe;MAKf,IAAI,MAAM;MACV,OAAO,MAAM,MAAM,MAAM,OAAO,SAAU,KACxC;MACF,gBAAgB,MAAM,SAAS;MAC/B,IAAI,MAAM,GACR,aAAa,MAAM,MAAM,SAAS,GAAG,GAAG,CAAC;MAC3C;KACF;IACF;IACA,aAAa,MAAM,KAAK;GAC1B;GACA,MAAM,QAAQ,GAAG,SAAQ,UAAS,YAAY,KAAe,CAAC;GAC9D,MAAM,QAAQ,GAAG,SAAQ,UAAS,YAAY,KAAe,CAAC;GAM9D,MAAM,UAAU,OAA0B,MAAqB,QAA+B,eAA8B;IAC1H,IAAI,MAAM,SACR;IACF,MAAM,UAAU;IAChB,gBAAgB;IAChB,MAAM,UAAU,KAAK,IAAI;IAGzB,MAAM,SACF,WAAW,aAAa,MAAM,gBAC5B,WACA;IAIN,MAAM,WAAW,SAAS,OACtB,OACA,WAAW,YACT,MACA,SACE,MACA;IACR,MAAM,SAAS;IACf,MAAM,WAAW;IACjB,IAAI,QACF,MAAM,SAAS;IAcjB,IAAI,YACF,IAAI;KACF,aAAa,MAAM,KAAK,WAAW,GAAG;IACxC,QACM,CAEN;IAEF,IAAI,eAAe,GACjB,IAAI;KAGF,aAAa,MAAM,sCAAsC,aAAa,MAAM;IAC9E,QACM,CAEN;IAEF,aAAa,UAAU;KAKrB,IAAI;MACF,MAAM,SAAS,oBAAoB,KAAK,CAAC;KAC3C,SACO,KAAK;MAIV,IAAI,QAAQ,IAAI,cACd,QAAQ,OAAO,MAAM,0BAA0B,OAAO,iBAAiB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,GAAG;KAC/H;IACF,CAAC;GACH;GAEA,MAAM,GAAG,UAAU,MAAM,WAAW,OAAO,SAAS,MAAM,MAAM,CAAC;GACjE,MAAM,GAAG,UAAS,QAAO,OAAO,SAAS,MAAM,MAAM,iBAAiB,IAAI,SAAS,CAAC;GAEpF,MAAM,GAAG,SAAS,MAAM,WAAW;IAajC,iBAPwC;KACtC,IAAI,MAAM,SACR;KACF,MAAM,QAAQ,QAAQ;KACtB,MAAM,QAAQ,QAAQ;KACtB,OAAO,SAAS,MAAM,MAAM;IAC9B,GAAG,wBACU,EAAE,QAAQ;GACzB,CAAC;GAED,OAAO;IAAE;IAAQ,KAAK,MAAM;IAAK;GAAW;EAC9C;EAEA,MAAM,eAAe,QAAyB,QAA8C;GAC1F,MAAM,QAAQ,MAAM,IAAI,MAAM;GAO9B,IAAI,CAAC,SAAS,MAAM,aAAa,OAAO,IACtC,OAAO;GAIT,IAAI,MAAM,WAAW,WACnB,OAAO,oBAAoB,KAAK;GAOlC,MAAM,gBAAgB;GAMtB,MAAM,SAAS,IAAI,SAAe,aAAa;IAC7C,IAAI,MAAM,SAAS;KACjB,SAAS;KACT;IACF;IACA,MAAM,iBAAiB,MAAM;IAC7B,MAAM,UAAU,SAAS;KACvB,iBAAiB,IAAI;KACrB,SAAS;IACX;GACF,CAAC;GAED,iBAAiB,MAAM,OAAO,SAAS;GACvC,MAAM;GACN,OAAO,oBAAoB,KAAK;EAClC;EAEA,MAAM,eACJ,QACA,QACA,SAC8B;GAC9B,MAAM,QAAQ,MAAM,IAAI,MAAM;GAI9B,IAAI,CAAC,SAAS,MAAM,aAAa,OAAO,IACtC,OAAO;GACT,IAAI,MAAM,SACR,OAAO,oBAAoB,KAAK;GAElC,OAAO,IAAI,SAA8B,aAAa;IACpD,IAAI,OAAO;IACX,IAAI;IACJ,MAAM,SAAS,SAAS;IACxB,MAAM,UAAU,UAAqC;KACnD,IAAI,MACF;KACF,OAAO;KACP,IAAI,OACF,aAAa,KAAK;KACpB,QAAQ,oBAAoB,SAAS,OAAO;KAC5C,SAAS,KAAK;IAChB;IACA,SAAS,UAAgB;KACvB,OAAO,IAAI;IACb;IAMA,MAAM,iBAAiB,MAAM;IAC7B,MAAM,UAAU,SAAS;KACvB,iBAAiB,IAAI;KACrB,OAAO,oBAAoB,KAAK,CAAC;IACnC;IAEA,IAAI,QAAQ;KACV,IAAI,OAAO,SAAS;MAClB,OAAO,IAAI;MACX;KACF;KACA,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;IAC1D;IACA,MAAM,YAAY,SAAS;IAC3B,IAAI,OAAO,cAAc,YAAY,OAAO,SAAS,SAAS,KAAK,YAAY,GAAG;KAChF,QAAQ,WAAW,QAAQ,WAAW,IAAI;KAC1C,MAAM,QAAQ;IAChB;GACF,CAAC;EACH;EAEA,MAAM,wBACJ,YACA,UACA,WAC+B;GAG/B,IAAI,WAAW,OAAO,SAAS,IAC7B,OAAO,CAAC;GACV,MAAM,WAAwB,CAAC;GAC/B,KAAK,MAAM,SAAS,MAAM,OAAO,GAAG;IAClC,IAAI,MAAM,aAAa,WAAW,MAAM,MAAM,WAAW,WACvD;IACF,MAAM,WAAW,SAAS;IAK1B,IAAI,WACF,MAAM,SAAS;IACjB,SAAS,KAAK,iBAAiB,KAAK,CAAC;GACvC;GACA,OAAO;EACT;EAEA,MAAM,eAAe,QAAwD;GAM3E,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,EACtB,QAAO,MAAK,EAAE,aAAa,OAAO,EAAE,EACpC,MAAM,GAAG,MAAM,EAAE,YAAY,EAAE,SAAS,EACxC,IAAI,gBAAgB;EACzB;EAEA,MAAM,QAAQ,QAAwC;GAkBpD,MAAM,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,QAAO,MAAK,EAAE,aAAa,OAAO,MAAM,CAAC,EAAE,OAAO;GACxF,MAAM,QAAQ,IAAI,UAAU,IAAI,OAAO,UAAU;IAC/C,MAAM,gBAAgB;IACtB,MAAM,IAAI,SAAe,aAAa;KACpC,IAAI;KACJ,MAAM,iBAAiB,MAAM;KAC7B,MAAM,UAAU,SAAS;MACvB,iBAAiB,IAAI;MACrB,IAAI,YACF,aAAa,UAAU;MACzB,SAAS;KACX;KACA,iBAAiB,MAAM,OAAO,SAAS;KAQvC,aAAa,iBAAiB;MAC5B,iBAAiB,MAAM,OAAO,SAAS;MAIvC,MAAM,aAAa,QAAQ;MAC3B,SAAS;KACX,GAAG,cAAc;KACjB,WAAW,QAAQ;IACrB,CAAC;GACH,CAAC,CAAC;GAGF,KAAK,MAAM,CAAC,QAAQ,UAAU,OAC5B,IAAI,MAAM,aAAa,OAAO,IAC5B,MAAM,OAAO,MAAM;GAEvB,QAAQ,OAAO,OAAO,EAAE;GAUxB,IAAI,yBAAyB,QAAQ,SAAS,GAAG;IAC/C,QAAQ,IAAI,QAAQ,WAAW;IAC/B,wBAAwB;GAC1B;EACF;CACF;AACF;;;;;;;;AAoEA,SAAS,iBAAiB,OAAqB,QAA8B;CAC3E,MAAM,MAAM,MAAM;CAClB,IAAI,QAAQ,KAAA,GACV;CACF,IAAI;EACF,IAAI,yBACF,QAAQ,KAAK,CAAC,KAAK,MAAM;OAEzB,QAAQ,KAAK,KAAK,MAAM;CAC5B,QACM,CAGN;AACF;;;;;;;AAQA,SAAS,iBAAiB,OAA6B;CACrD,OAAO;EACL,QAAQ,MAAM;EACd,KAAK,MAAM;EACX,SAAS,MAAM;EACf,KAAK,MAAM;EACX,WAAW,MAAM;EACjB,GAAI,MAAM,YAAY,KAAA,IAAY,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;EAChE,YAAY,MAAM;EAClB,QAAQ,MAAM;EACd,GAAI,MAAM,aAAa,KAAA,IAAY,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;EACnE,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;EAC/C,cAAc,MAAM;CACtB;AACF;;;;;;;AAQA,SAAS,oBAAoB,OAAgC;CAC3D,OAAO;EACL,QAAQ,MAAM;EACd,QAAQ,MAAM;EACd,UAAU,MAAM,YAAY;EAC5B,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;EAC/C,YAAY,MAAM;EAIlB,aAAa,MAAM,WAAW,KAAK,IAAI,KAAK,MAAM;EAClD,SAAS,MAAM;CACjB;AACF;;;ACl+BA,SAAgB,qBAAqB,UAA6C;CAChF,MAAM,4BAAY,IAAI,IAAoB;CAE1C,SAAS,aAAa,QAAiC;EACrD,MAAM,KAAK,UAAU,IAAI,OAAO,EAAE;EAClC,IAAI,CAAC,IACH,MAAM,IAAI,MAAM,WAAW,OAAO,GAAG,WAAW;EAClD,OAAO;CACT;CAEA,OAAO;EACL,MAAM;EAEN,cAAc;GACZ,OAAO;GACP,YAAY;GACZ,SAAS;GACT,KAAK;EACP;EAEA,MAAM,MAAM,QAAgD;GAC1D,MAAM,SAAS,MAAM,SAAS,MAAM,UAAU,CAAC,CAAC;GAChD,MAAM,SAA0B;IAAE,IAAI,OAAO;IAAI,MAAM;IAAW,KAAK,OAAO;GAAI;GAClF,UAAU,IAAI,OAAO,IAAI,OAAO,EAAE;GAClC,OAAO;EACT;EAEA,MAAM,KAAK,QAAyB,SAAiB,SAA+B;GAClF,OAAO,SAAS,KAAK,aAAa,MAAM,GAAG,SAAS,OAAO;EAC7D;EAEA,MAAM,SAAS,QAAyB,MAA+B;GACrE,OAAO,SAAS,SAAS,aAAa,MAAM,GAAG,IAAI;EACrD;EAEA,MAAM,UAAU,QAAyB,MAAc,SAAgC;GACrF,OAAO,SAAS,UAAU,aAAa,MAAM,GAAG,MAAM,OAAO;EAC/D;EAEA,MAAM,UAAU,QAAyB,MAAiC;GACxE,OAAO,SAAS,UAAU,aAAa,MAAM,GAAG,IAAI;EACtD;EAEA,MAAM,QAAQ,QAAwC;GACpD,MAAM,KAAK,UAAU,IAAI,OAAO,EAAE;GAClC,IAAI,CAAC,IACH;GACF,MAAM,SAAS,QAAQ,EAAE;GACzB,UAAU,OAAO,OAAO,EAAE;EAC5B;CACF;AACF;;;;;;;AC1BA,SAAgB,+BAA+B,SAAoD;CACjG,OAAO,QAAQ,aAAa,kBACtB,QAAQ,iBAAiB,qBAAqB;AACtD"}

package/dist/index-BIo67xLV.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index-BIo67xLV.d.ts","names":[],"sources":["../src/skills/allowed-tools.ts","../src/skills/catalog.ts","../src/skills/discovery.ts","../src/skills/interpolate.ts","../src/skills/resolve.ts","../src/skills/validate.ts","../src/skills/writer.ts","../src/skills/index.ts"],"mappings":";;;;;;cAuBa,8BAAA;;;;;;AAkBgB;;;;ACrB7B;iBDmBgB,uBAAA,CACd,KAAA,EAAO,QAAA,CAAS,UAAA,GAChB,KAAA,EAAO,oBAAA;;;UCrBQ,mBAAA;EDoBR;;;;;ECdP,oBAAA;EDe2B;;;;ECV3B,YAAY;AAAA;;;AAAA;iBAME,YAAA,CACd,MAAA,EAAQ,WAAA,IACR,OAAA,GAAS,mBAAwB;;;UC4EzB,eAAA;EACR,WAAA,EAAa,MAAA;EACb,IAAA;EACA,WAAA,EAAa,eAAe;AAAA;;;;;;;;AF7ED;;;;ACrB7B;;;;AAWc;iBC0GE,gBAAA,CAAiB,OAAA,WAAkB,eAAe;AAAA,UAuUxD,iBAAA;;EAER,MAAA,GAAS,WAAW;AAAA;;;;;AD3aa;;;;AC3BoD;;;iBAodjE,cAAA,CACpB,QAAA,UACA,OAAA,GAAS,iBAAA,GACR,OAAA,CAAQ,WAAA;;UAqNM,eAAA;EACf,IAAA;EACA,MAAA,EAAQ,WAAW;AAAA;;AApkBS;AAmB9B;;;iBAyjBgB,mBAAA,CAAA,GAAuB,eAAe;AAzjBY;AAiHjE;;;AAjHiE,iBA0kBlD,WAAA,CAAY,IAAA,WAAe,WAAW;AAjQhC;AActB;;;;;;;;;AAdsB,iBAmRA,cAAA,CACpB,KAAA,EAAO,eAAA,IACP,MAAA,GAAS,WAAA,GACR,OAAA,CAAQ,WAAA;;;;;;;;;;iBC/sBK,wBAAA,CAAyB,YAAoB;AAAA,UAI5C,+BAAA;EHYR;;;AAAoB;;;EGL3B,SAAA,IAAa,OAAA,UAAiB,WAAA;AAAA;;;;AFLlB;AAMd;;;;;;;;;iBEesB,wBAAA,CACpB,YAAA,UACA,SAAA,EAAW,gBAAA,EACX,MAAA,EAAQ,eAAA,EACR,OAAA,GAAS,+BAAA,GACR,OAAA;;;AHlCH;;;;AAIC;AAYD;;;;AAhBA,UIGiB,oBAAA;EACf,MAAA,EAAQ,WAAW;EACnB,OAAA;AAAA;;;;;;;AJa2B;;;;ACrB7B;;;;AAWc;AAMd;;;iBGYsB,aAAA,CAAc,MAAA,EAAQ,YAAA,GAAe,OAAA,CAAQ,oBAAA;;;;;AJtBlE;AAYD;;UKEiB,oBAAA;ELDC;EKGhB,IAAA;ELFO;EKIP,OAAA;ELJ2B;EKM3B,KAAA;AAAA;AAAA,UAGe,qBAAA;EACf,KAAA;EACA,MAAA,EAAQ,oBAAoB;AAAA;ALXD;;;;ACrB7B;;;;AAWc;AAMd;ADI6B,iBK4Bb,iBAAA,CAAkB,IAAY;;;;;;iBAmB9B,qBAAA,CAAsB,KAAA,EAAO,WAAA,GAAc,qBAAqB;;AJjD7C;;;;AC3BoD;;;;;;iBGkLvE,oBAAA,CACd,OAAA,UACA,OAAA;EACG,KAAA;EAAa,YAAA;AAAA;EAA2B,KAAA;EAAc,KAAA;AAAA;;;AHxDO;AAiHjE;;;;AAwNqB;AActB;;;;;;iBG7OsB,wBAAA,CACpB,OAAA,UACA,OAAA,WACC,OAAO;EAAG,KAAA;EAAa,YAAA;AAAA;EAA2B,KAAA;EAAc,KAAA;AAAA;;AH6O7C;AAqNtB;;;;;iBG/ZgB,uBAAA,CAAwB,KAAA;EAAkB,IAAA;EAAc,SAAA;AAAA;AHyaxE;;;;AAAsD;AAiBtD;;;;AAAsD;AAkBtD;;;;AAnCA,iBG5YgB,kBAAA,CACd,WAAA,UACA,KAAA,EAAO,MAAM,mBACb,OAAA;;;;;;iBAyBc,oBAAA,CACd,WAAA,UACA,KAAA,EAAO,MAAM,mBACb,KAAA;;;;;AL1TD;AAYD;;;;;iBM8BgB,gBAAA,CAAiB,KAAA,EAAO,WAAW,EAAE,SAAA;;;;;;iBAoCrC,iBAAA,CAAkB,MAAA,EAAQ,WAAW,IAAI,SAAA;;;;;;;;;iBCjDzC,WAAA,CAAY,MAAA,EAAQ,IAAA,CAAK,WAAA;EAA2B,MAAA,GAAS,WAAA;AAAA,IAA0B,WAAA"}

package/dist/index-C4aT2kO_.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index-C4aT2kO_.d.ts","names":[],"sources":["../src/cache-telemetry.ts","../src/compact/messages.ts","../src/compact/prompt.ts","../src/compact/errors.ts","../src/compact/compact.ts","../src/compact/restore.ts","../src/compact/utils.ts","../src/run-summary.ts","../src/tools/edit.ts","../src/tools/glob.ts","../src/tools/grep.ts","../src/tools/interaction.ts","../src/tools/list-files.ts","../src/tools/multi-edit.ts","../src/tools/read-file.ts","../src/tools/shell.ts","../src/tools/shell-kill.ts","../src/tools/skills-read.ts","../src/tools/skills-run-script.ts","../src/tools/skills-use.ts","../src/tools/spawn.ts","../src/tools/tool-search.ts","../src/tools/validation.ts","../src/tools/wait-task.ts","../src/tools/write-file.ts","../src/headless.ts","../src/eval.ts","../src/logger.ts","../src/loop.ts","../src/loop-persistence.ts","../src/mcp/oauth-provider.ts","../src/mcp/login.ts","../src/mcp/oauth-callback.ts","../src/metrics.ts","../src/repeat-guard.ts","../src/stats.ts","../src/system-prompt.ts","../src/tracing.ts","../src/zod.ts","../src/presets/basic.ts","../src/presets/index.ts"],"mappings":";;;;;;;;;;AA0EqD;AAIrD;;;;AAA8B;AAW9B;UArCiB,sBAAA;;EAEf,UAAA;EAyCA;EAvCA,WAAA;EA6CA;EA3CA,SAAA;EAqDmB;EAnDnB,UAAA;EA0Ec;EAxEd,KAAA;;EAEA,QAAA;EAsE+B;EApE/B,cAAA;AAAA;;UAIe,kBAAA;EAmFgC;EAjF/C,OAAA,WAAkB,kBAAA;EAiF6C;EA/E/D,OAAA,EAAS,QAAA,CAAS,OAAA,CAAQ,MAAA,CAAO,kBAAA;AAAA;AAwGnC;AAAA,KApGY,kBAAA;AAAA,UAWK,uBAAA;EA0FT;;;;;EApFN,GAAA,IAAO,IAAA;EAoFP;;;;;EA9EA,OAAA;EA2Ic;;;;;;;;;EAjId,mBAAA;AAAA;;;;AAmIqC;;;;AC1NvC;;;;;;iBD8GgB,OAAA,CAAQ,CAAS;;;AC1GJ;AAE7B;;;;iBD2HgB,uBAAA,CAAwB,OAAA,EAAS,aAAA,GAAgB,sBAAsB;;;;;ACvHtD;AAiBjC;;;iBD+HgB,mBAAA,CACd,IAAA,EAAM,sBAAA,EACN,IAAA,EAAM,sBAAA,GACL,kBAAA;;;;;;;;;;;;AC9He;AAuElB;;;;;;;;AAAgF;AA4EhF;;iBDsCgB,uBAAA,CACd,KAAA,EAAO,QAAA,CAAS,UAAA,GAChB,OAAA,GAAS,uBAAA;;;AA9LX;;;;;;;;AAAA,KC5BY,YAAA;EAGJ,IAAA;EAAc,MAAA;AAAA;EACd,IAAA;EAAe,MAAA;AAAA;AAAA,UAEN,eAAA;ED0CG;ECxClB,WAAA,WAAsB,WAAA;ED0CI;ECxC1B,SAAA,WAAoB,WAAW;AAAA;;;;;;;;;;;ADwCoB;AAIrD;;;iBC3BgB,kBAAA,CACd,KAAA,WAAgB,WAAA,IAChB,KAAA,EAAO,YAAA,EACP,SAAA,WACC,eAAA;ADuB2B;AAW9B;;;;;;;;;AAsBqB;AAuBrB;;;;AAxD8B,iBCgDd,oBAAA,CAAqB,KAAA,WAAgB,WAAA,KAAgB,WAAW;AD2BhF;;;;;;;;AAAuF;AAyBvF;;;;;;;;;;AAzBA,iBCiDgB,uBAAA,CAAwB,KAAA,WAAgB,WAAA,KAAgB,WAAW;;;;ADrB9D;AA2DrB;;cC2Ea,wBAAA;;;;;;iBAOG,gBAAA,CAAiB,IAAiB,EAAX,WAAW;;;;;;ADhFX;;;;AC1NvC;UAgUiB,kBAAA;;EAEf,OAAA;EA/TM;EAiUN,eAAA;EAhUM;EAkUN,KAAA;EAlU2B;EAoU3B,KAAA,EAAO,SAAS;EAlUD;EAoUf,WAAA;AAAA;;;;;;;AAhU+B;AAiBjC;;;;;;;;;;;;;;;iBAwUgB,aAAA,CAAc,KAAA,EAAO,kBAAA,GAAqB,WAAW;;;;;;;;;;;ADvUrE;;;;;;;;KEnCY,gBAAA;AAAA,UAEK,oBAAA;EACf,SAAA,EAAW,gBAAgB;EF8Cb;AAAA;AAIhB;;;;EE3CE,aAAA;AAAA;;;;;;KAQU,oBAAA,IAAwB,IAA0B,EAApB,oBAAoB;;;;;;cAajD,iBAAA;AF0BwC;AAIrD;;;;AAJqD,cEdxC,iBAAA;AF6Bb;AAAA,cEDa,OAAA;AAAA,iBAmCG,sBAAA,CAAA;AAAA,iBAIA,sBAAA,CAAA;AAAA,iBAIA,sBAAA,CAAuB,aAAqB;AAAA,iBAI5C,sBAAA,CAAuB,aAAqB;;;;AFxBvC;AAuBrB;;;cEYa,kBAAA,EAAoB,oBAmBhC;;;;;;;;;;;AFjHD;;;;;;;;;cGlCa,wBAAA,SAAiC,KAAK;cACrC,OAAA;AAAA;AH+CE;AAIhB;;;;;AAJgB,cGnCH,yBAAA,SAAkC,KAAK;EAAA,SACL,UAAA;cAAjC,OAAA,UAAiC,UAAA;AAAA;;;UCgB9B,cAAA;EJ0BW;EIxB1B,QAAA,EAAU,QAAA;EJwBD;EItBT,KAAA,WAAgB,WAAA;EJsBC;;;;EIjBjB,KAAA,GAAQ,YAAA;EJiBU;;;;AAAiC;EIXnD,SAAA;EJe4B;EIb5B,KAAA;EJa4B;AAAA;AAW9B;;;EIlBE,eAAA;EJwBA;EItBA,QAAA,GAAW,aAAA;EJ4BX;EI1BA,MAAA,GAAS,WAAA;EJoCU;AAAA;AAuBrB;;;EIrDE,aAAA;EJqD+B;AAmBjC;;;;EIlEE,MAAA,GAAS,oBAAA;EJkE6B;;;AAA+C;AAyBvF;;EIpFE,SAAA,IAAa,KAAA;IAAS,OAAA;IAAiB,IAAA;EAAA;AAAA;AAAA,UAgBxB,aAAA;EJqET;EInEN,OAAA;EJoEM;EIlEN,KAAA,EAAO,SAAA;EJmEN;EIjED,KAAA;EJiEmB;EI/DnB,UAAA;EJ0HqC;;;;;;;;EIjHrC,iBAAA;EJkHA;;;;AACqC;;;;AC1NvC;;;;EGoHE,eAAA;EHjHoB;EGmHpB,cAAA,WAAyB,WAAW;EHlHf;EGoHrB,WAAA;EHpH2B;EGsH3B,UAAA;AAAA;AAAA,iBA2BoB,mBAAA,CAAoB,IAAA,EAAM,cAAA,GAAiB,OAAA,CAAQ,aAAA;;;;UCjGxD,UAAA;ELmCI;EKjCnB,IAAA;ELwDqB;EKtDrB,OAAO;AAAA;AAAA,UAGQ,yBAAA;ELsED;;;;;;;EK5Dd,WAAA,YAAuB,UAAA;EL4D8D;AAyBvF;;;;EK9EE,YAAA,YAAwB,WAAA;ELiFvB;;;;;EKxED,SAAA,GAAY,gBAAA;EACZ,MAAA,GAAS,eAAA;ELuER;;AAAkB;AA2DrB;;;;;EKtHE,gBAAA;ELwHqC;;;;EKnHrC,iBAAA;ELmHS;EK9GT,eAAA;EL8GqC;EK5GrC,mBAAA;;EAEA,iBAAA;;EAGA,gBAAA;EJnHsB;EIqHtB,qBAAA;EJrHsB;;;;;EI8HtB,YAAA;EJ1H2B;AAE7B;;;;EIiIE,KAAA;AAAA;;;;AJ7H+B;AAiBjC;UIoHiB,sBAAA;;;;;;;EAOf,KAAA,WAAgB,WAAW;EJ1H3B;EI4HA,aAAA;EJ3HA;EI6HA,cAAA;EJ3HC;EI6HD,eAAA;AAAA;AJtDF;;;;;;;;AAAgF;AA4EhF;;;;;AA5EA,iBI2EgB,wBAAA,CACd,SAAA,EAAW,WAAA;EAAsB,OAAA;AAAA,IACjC,GAAA,WACC,UAAU;AJFsE;AAiHnF;;;;AAAqC;AAOrC;;;;AAAkD;AAsBlD;;;;;;AA9ImF,iBIoCnE,sBAAA,CACd,OAAA,EAAS,OAAA,EACT,GAAA,WACC,UAAU;;;;;AJiHA;AAyBb;;iBI9HgB,iBAAA,CACd,KAAA,WAAgB,UAAA,IAChB,IAAA;EAAQ,QAAA;EAAkB,YAAA;AAAA,IACzB,UAAU;;;AJ2HwD;;;;AC1WrE;;;;AAA4B;AAE5B;;;iBGoXsB,2BAAA,CACpB,IAAA,EAAM,yBAAA,GACL,OAAA,CAAQ,sBAAA;;;;;;;;;;;ALrVX;;;;;;;;;;;iBMhCgB,cAAA,CAAe,IAAY;AN8C3B;AAAA,cMtBH,eAAA;;;;;;;;;;;;;iBAcG,cAAA,CAAe,IAAY;;;UCxB1B,gBAAA;EACf,KAAA;EACA,MAAA;EACA,SAAA;EACA,aAAA;EACA,IAAA;EPiCkB;EO/BlB,MAAA;AAAA;AAAA,UAGe,iBAAA;EACf,OAAA;EACA,KAAA;EACA,MAAA;EACA,SAAA;EACA,aAAA;EACA,IAAA;EACA,KAAA;AAAA;AAAA,UAGe,eAAA;EACf,IAAA;EACA,OAAA;EACA,SAAA;EACA,MAAA;EACA,MAAA;EACA,MAAA;EACA,QAAA;EACA,OAAA;EACA,UAAA;EACA,SAAA;AAAA;AAAA,UAGe,eAAA;EACf,MAAA;EACA,QAAA;EACA,OAAA;EACA,MAAA;AAAA;AAAA,UAGe,oBAAA;EACf,MAAA;EACA,QAAA;EACA,MAAA;AAAA;AAAA,UAGe,gBAAA;EACf,IAAA;EPiGc;EO/Fd,QAAA;;EAEA,IAAA;EACA,QAAA;EACA,KAAA;EACA,MAAA;AAAA;AAAA,UAGe,qBAAA;EACf,QAAA;EPwFM;EOtFN,KAAA;EACA,SAAA;EACA,MAAA;EACA,MAAA;AAAA;;;;;;UAQe,UAAA;EACf,KAAA;EACA,WAAA;EACA,KAAA;EACA,SAAA;EACA,SAAA;EACA,OAAA;EACA,UAAA;EACA,MAAA;EACA,KAAA;EACA,MAAA,EAAQ,gBAAA;EACR,OAAA,EAAS,iBAAA;EACT,MAAA,EAAQ,eAAA;EACR,MAAA,EAAQ,eAAA;EACR,iBAAA,EAAmB,oBAAA;EACnB,YAAA,EAAc,gBAAA;EN7FR;;;;;EMmGN,iBAAA,EAAmB,qBAAA;ENhGJ;EMkGf,cAAA,EAAgB,MAAA;;;;;EAKhB,QAAA,GAAW,UAAA;AAAA;AAAA,UAOI,0BAAA;EN1GgB;AAiBjC;;;EM8FE,SAAA,IAAa,OAAA,EAAS,UAAU;AAAA;AAAA,UAGjB,mBAAA;EN7FC;EM+FhB,OAAA,GAAU,KAAA,EAAO,QAAA,CAAS,UAAA;ENlGV;EMoGhB,MAAA,QAAc,UAAA;AAAA;;;;;ANjGE;AAuElB;;;;;;;;AAAgF;AA4EhF;;;iBM9BgB,yBAAA,CACd,OAAA,GAAS,0BAAA,GACR,mBAAmB;;;;;;;;;;AP1HtB;cQrCa,IAAA,EAAM,OAsHlB;;;cClDY,IAAA,EAAM,OA4DlB;;;cC5FY,IAAA,EAAM,OAsClB;;;UCrEgB,sBAAA;EX8CD;EW5Cd,MAAA,EAAQ,MAAA;EXgDO;EW9Cf,IAAA;;EAEA,WAAA;EXgDiC;EW9CjC,SAAA,GAAY,OAAA,EAAS,MAAA,mBAAyB,GAAA,EAAK,WAAA,KAAgB,OAAA,CAAQ,MAAA;AAAA;;;;;;;;iBAU7D,qBAAA,CAAsB,OAAA,EAAS,sBAAA,GAAyB,OAAO;;;cCpClE,SAAA,EAAW,OAuBvB;;;cCuDY,SAAA,EAAW,OAiMvB;;;cC7OY,QAAA,EAAU,OA0QtB;;;UCnBgB,sBAAA;EfjNW;;;;;;;;;;Ee4N1B,eAAA;Ef5NiC;;AAAkB;AAIrD;;;;AAA8B;AAW9B;;;;;;Ee6NE,oBAAA,GAAuB,WAAA;EfvMvB;;AAAmB;AAuBrB;;;;EeyLE,WAAA,GAAc,MAAM;AAAA;;;;;;;;AftKiE;AAyBvF;;;;;iBe6JgB,eAAA,CAAgB,IAAA,GAAM,sBAAA,GAA8B,OAAO;;;;;;;;;Af1JtD;AA2DrB;;;ce+Na,KAAA,EAAO,OAAoD;;;cC5b3D,SAAA,EAAW,OAuCvB;;;UC1CgB,qBAAA;EACf,OAAA,WAAkB,WAAA;EAClB,KAAA,EAAO,oBAAoB;AAAA;AAAA,iBAGb,oBAAA,CAAqB,OAAA,EAAS,qBAAA,GAAwB,OAAO;;;UCL5D,0BAAA;EACf,OAAA,WAAkB,WAAA;EAClB,KAAA,EAAO,oBAAoB;ElBwC3B;EkBtCA,eAAA;AAAA;AAAA,iBAMc,yBAAA,CAA0B,OAAA,EAAS,0BAAA,GAA6B,OAAO;;;UCKtE,oBAAA;EnB2CN;EmBzCT,OAAA,WAAkB,WAAA;EnByCD;EmBvCjB,KAAA,EAAO,oBAAA;EnBqCW;EmBnClB,KAAA,EAAO,QAAA,CAAS,UAAA;EnBqCP;;;;;AAA0C;AAIrD;;EmBhCE,uBAAA;AAAA;AnBgC4B;AAW9B;;;;;;;AAX8B,iBmBkBd,mBAAA,CAAoB,OAAA,EAAS,oBAAA,GAAuB,OAAO;;;UC9C1D,UAAA;EACf,EAAA;EACA,IAAA;EACA,SAAA;;EAEA,KAAA;AAAA;AAAA,UAGe,cAAA;EpB+BuB;EAAA,SoB7B7B,QAAA,EAAU,WAAA,SAAoB,UAAA;EpB6BD;;;;;;AAsBnB;AAuBrB;;;;EA7CwC,SoBjB7B,eAAA,EAAiB,QAAA,CAAS,UAAA;AAAA;AAAA,UAoXpB,gBAAA;;EAEf,aAAA;EpBrS+C;;;;AAAsC;AAyBvF;EoBmRE,QAAA;;;;;;EAMA,KAAA;EpBxRM;EoB0RN,MAAA;EpBzRM;EoB2RN,QAAA;EpB1RC;EoB4RD,MAAA,GAAS,MAAA;EpB5RU;AA2DrB;;;;EoBuOE,SAAA;EpBrOS;;;;;;;;;AAA4B;;;;AC1NvC;;;EmBgdE,OAAA;EnB7cM;;;;;AACqB;AAE7B;;;;;;;EmBwdE,cAAA;EnBpd+B;AAAA;AAiBjC;;;EmBycE,YAAA;EnBvcO;EmBycP,OAAA,IAAW,KAAA,EAAO,UAAA;EnBvcF;EmBychB,UAAA,IAAc,KAAA,EAAO,UAAA,EAAY,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,WAAA,CAAY,aAAA;EnB5cxD;;;;;;;AAGA;AAuElB;;;;;;;;AAAgF;AA4EhF;;;;;;;;AAAmF;AAiHnF;EmBiOE,SAAA,GAAY,gBAAA;AAAA;;AnBjOuB;AAOrC;;;;UmBmOiB,WAAA;EnB7MA;;;;;EmBmNf,MAAA;EnB7MA;;;;;AAIW;AAyBb;;;;;;EmB6LE,KAAA;EnB7LmE;AAAA;;;;AC1WrE;;;;EkBijBE,QAAA;ElB/iBe;;;;;EkBqjBf,WAAA;AAAA;;AlB7iBa;AAQf;;;;AAA8D;KkB+iBlD,gBAAA,GAAmB,MAAM,SAAS,WAAA;;;;AlBliBhB;AAY9B;;;;iBkBgiBgB,eAAA,CAAgB,OAAA,GAAS,gBAAA,GAAwB,OAAA,GAAU,cAAA;;;UCpkB1D,aAAA;ErB8CkB;;;;;EqBxCjC,IAAA;ErB4CS;;;;;EqBtCT,aAAA;EACA,WAAA;EACA,WAAA,EAAa,MAAM;ErBoCO;EqBlC1B,MAAA;AAAA;AAAA,UAGe,qBAAA;ErBmCL;;;;EqB9BV,OAAA,WAAkB,aAAA;ErByCH;;;;;;;;;AAsBI;AAuBrB;;;EqBxEE,QAAA,EAAU,GAAG;ErBwEkB;AAmBjC;;;;;;;;AAAuF;EqBhFrF,SAAA,IAAa,SAAA;ErByGoB;EqBvGjC,YAAA;AAAA;;;ApB/C2B;AAE7B;;iBoBsOgB,oBAAA,CAAqB,OAAA,EAAS,qBAAA,GAAwB,OAAO;;;;;;;;;;;ArBhN7E;;;;;;;;;;;;UsB/BiB,gBAAA;EACf,KAAA;EtBgDiC;EsB9CjC,KAAA;EtBgDkB;;;;;EsB1ClB,YAAA,GAAe,MAAA;EtB4CE;;;;;EsBtCjB,SAAA;EtBsC0B;;;AAAyB;AAIrD;;EsBnCE,YAAA,GAAe,QAAA,CAAS,MAAA;AAAA;AAAA,iBA+EV,gBAAA,CACd,KAAA,EAAO,MAAA,mBACP,MAAA,EAAQ,MAAA,oBACP,gBAAA;;;;AtB3Da;AAIhB;;;cuB3Ca,0BAAA;AAAA,cAKA,QAAA,EAAU,OA2DtB;;;;;;;;;;AvBvCD;;;;;;;;cwB/Ba,SAAA,EAAW,OAkEvB;;;KCrCW,cAAA;AAAA,UAEK,aAAA;EACf,KAAA;EACA,MAAA;EACA,SAAA;EACA,aAAA;EzBgBkB;EyBdlB,IAAA;AAAA;AAAA,UAGe,iBAAA;EACf,OAAA;EzBYiC;EyBVjC,IAAI;AAAA;AzBcN;;;;AAA8B;AAW9B;AAXA,UyBLiB,cAAA;EACf,MAAA,EAAQ,cAAA;EzBe8B;EyBbtC,SAAA;EzBmBO;EyBjBP,MAAA,GAAS,MAAA;EACT,KAAA,EAAO,aAAA;EACP,KAAA;EACA,UAAA;EzBqDc;EyBnDd,YAAA;;EAEA,YAAA,GAAe,gBAAA;EACf,KAAA,GAAQ,iBAAA;EACR,SAAA;EzBkEqC;EyBhErC,OAAA,GAAU,UAAA;EzBgE2E;EyB9DrF,UAAA,EAAY,WAAA;AAAA;AAAA,KAGF,oBAAA;AAAA,KAEA,wBAAA;AAAA,KAEA,uBAAA,GACN,cAAc;AAAA,KAGR,0BAAA,GACN,OAAO,CAAC,aAAA;EAAiB,IAAA;AAAA;AAAA,iBAGf,yBAAA,CAA0B,MAAsB,EAAd,cAAc;;;;;KAcpD,aAAA;EACJ,IAAA;EAAe,KAAA;EAAe,QAAA;AAAA;EAC9B,IAAA;EAAc,KAAA;AAAA;EACd,IAAA;EAAkB,KAAA;AAAA;EAClB,IAAA;EAAmB,MAAA;EAAgB,IAAA;EAAc,KAAA,EAAO,MAAA;AAAA;EACxD,IAAA;EAAqB,MAAA;EAAgB,IAAA;EAAc,MAAA;EAAgB,OAAA;AAAA;EACnE,IAAA;EAAc,KAAA;EAAe,IAAA,EAAM,WAAA;AAAA;EACnC,IAAA;EAAe,KAAA;EAAwC,EAAA;EAAY,IAAA,GAAO,MAAA;AAAA;EAC1E,IAAA;EAAe,OAAA;EAAiB,SAAA;AAAA;EAChC,IAAA;EAAgB,MAAA,EAAQ,cAAA;AAAA;;iBAGhB,oBAAA,CAAqB,KAAoB,EAAb,aAAa;AAAA,iBAIzC,iCAAA,CAAkC,KAAiC,EAA1B,0BAA0B;AAAA,iBAInE,mCAAA,CAAoC,YAAA,WAAuB,wBAAwB;AAAA,iBAInF,4BAAA,CACd,KAAA,EAAO,WAAW,IAClB,YAAA;AAAA,iBAWc,oBAAA,CACd,MAAA,EAAQ,cAAA,EACR,OAAA;EAAW,MAAA,EAAQ,oBAAA;EAAsB,YAAA;AAAA,IACxC,uBAAA;AAAA,iBAMa,uBAAA,CACd,KAAA,EAAO,OAAA,CAAQ,aAAA;EAAiB,IAAA;AAAA,IAChC,OAAA;EAAW,MAAA,EAAQ,oBAAA;EAAsB,YAAA;AAAA,IACxC,0BAAA;AAAA,UAMc,eAAA;ExB3Hf;EwB6HA,MAAA,WAAiB,UAAA;ExB5HjB;EwB8HA,QAAA,EAAU,QAAA;EACV,KAAA;ExB7HgB;EwB+HhB,MAAA;EACA,QAAA,GAAW,aAAA;EACX,QAAA;EACA,SAAA;ExB3D8E;EwB6D9E,SAAA;ExB7DmC;EwB+DnC,MAAA,GAAS,WAAA;ExB/DqE;EwBiE9E,MAAA,GAAS,MAAA;ExBWK;EwBTd,QAAA,GAAW,YAAA;;EAEX,KAAA,GAAQ,MAAA,SAAe,OAAA;EACvB,UAAA,GAAa,eAAA;EACb,MAAA,GAAS,YAAA;ExBK6D;EwBHtE,SAAA,GAAY,gBAAA;ExBGqE;EwBDjF,GAAA;ExBkHmC;EwBhHnC,OAAA,GAAU,OAAA;ExBgHyB;EwB9GnC,KAAA,GAAQ,YAAA;ExBqHM;EwBnHd,eAAA;;EAEA,OAAA,IAAW,KAAA,EAAO,aAAA;AAAA;AxBuIpB;;;;;AAAA,iBwB3HsB,WAAA,CAAY,IAAA,EAAM,eAAA,GAAkB,OAAA,CAAQ,cAAA;AAAA,UAqIjD,iBAAA;EACf,IAAA;EACA,OAAA,kBAAyB,qBAAA;EACzB,UAAA,GAAa,KAAK;IAAG,EAAA;IAAY,IAAA;IAAkB,QAAA;MAAY,IAAA;MAAc,SAAA;IAAA;EAAA;EAC7E,YAAA;AAAA;AAAA,KAGU,qBAAA;EACJ,IAAA;EAAc,IAAA;AAAA;EACd,IAAA;EAAmB,SAAA;IAAa,GAAA;EAAA;AAAA;AvB1VZ;AAE5B;;;;;;;;AAQe;AAQf;AAlB4B,iBuBuWZ,0BAAA,CACd,KAAA,EAAO,WAAA,IACP,OAAA;EAAW,iBAAA;AAAA,IACV,iBAAiB;AAAA,iBA6LJ,2BAAA,CACd,KAAA,EAAO,QAAA,CAAS,UAAA,GAChB,OAAA,GAAU,KAAA,EAAO,aAAA;;;UC5iBF,oBAAA;;;A1BsCjB;;;;;;E0B7BE,GAAA;E1BqCA;;;;;E0B/BA,OAAA;E1ByCe;E0BvCf,UAAA;;EAEA,OAAA;E1ByCiC;E0BvCjC,YAAA;E1BuCkB;E0BrClB,MAAA;AAAA;AAAA,UAGe,iBAAA;EACf,IAAA;EACA,IAAA;EACA,OAAA;EACA,SAAA;EACA,MAAA;AAAA;AAAA,UAGe,qBAAA;EACf,GAAA;EACA,KAAA,EAAO,iBAAiB;AAAA;AAAA,UAGT,SAAA;EACf,IAAA;EACA,MAAA;EACA,KAAA;EACA,OAAA,YAAmB,MAAM;AAAA;AAAA,KAGf,eAAA;;UAGK,UAAA;EACf,GAAA;EACA,GAAA;EACA,SAAA,EAAW,eAAe;E1B6CP;E0B3CnB,IAAA;EACA,WAAA;AAAA;AAAA,KAGU,aAAA,GAAgB,MAAM,SAAS,UAAA;;UAG1B,UAAA;EACf,EAAA;EACA,GAAA;EACA,UAAA;EACA,SAAA,EAAW,eAAe;EAC1B,GAAA;EACA,GAAA;EACA,IAAA;EACA,WAAA;E1BsEqF;AAyBvF;;;;E0BzFE,OAAA;AAAA;;KAIU,aAAA,IAAiB,EAAA,UAAY,GAAW;AAAA,UAEnC,iBAAA;EACf,EAAA;EACA,KAAA;EACA,IAAA;EACA,MAAA,EAAQ,cAAA;EACR,MAAA,WAAiB,aAAA;EACjB,SAAA,GAAY,qBAAA;EACZ,WAAA;E1B0IqC;E0BxIrC,MAAA,EAAQ,aAAA;AAAA;AAAA,KAGE,UAAA,IAAc,GAAA,EAAK,iBAAA,KAAsB,SAAA,GAAY,OAAA,CAAQ,SAAA;;;;;;;iBAQzD,aAAA,WAAwB,aAAA,CAAA,CAAe,IAAA,EAAM,CAAA,GAAI,CAAA;;cAKpD,kBAAA;;;;;;;;;;;;;;;;;;;;;;;iBAMG,eAAA,CAAgB,GAAA,UAAa,IAAA,EAAM,UAAU;AAAA,UAS5C,eAAA;EACf,IAAA;EACA,QAAA,EAAU,QAAA;EACV,KAAA;EACA,MAAA;EACA,MAAA;EACA,SAAA;EzBtFgB;EyBwFhB,SAAA;EzB3FgB;EyB6FhB,KAAA,IAAS,GAAA,EAAK,iBAAiB;EzB5FxB;EyB8FP,MAAA;AAAA;;;AzB5FgB;AAuElB;;;cyB8Ba,eAAA,SAAwB,KAAK;cAC5B,OAAA;AAAA;AAAA,UAMG,wBAAA;EzBrC+D;AAAA;AA4EhF;;;EyBjCE,SAAA,EAAW,gBAAA;EzBiC2C;EyB/BtD,OAAA,QAAe,OAAA;EzB+BuD;EyB7BtE,MAAA,QAAc,eAAA;AAAA;AzB8IhB;;;;AAAqC;AAArC,iByBtIgB,8BAAA,CAA+B,IAAA,EAAM,gBAAA,GAAmB,wBAAwB;AAAA,UAmD/E,iBAAA,SAA0B,YAAY;EACrD,UAAA;EACA,KAAA;EACA,SAAA;AAAA;AAAA,UAGe,cAAA,SAAuB,YAAY;;EAElD,IAAA;EzB0GA;EyBxGA,KAAA;EzB4GA;EyB1GA,SAAA;EzB4GO;EyB1GP,UAAA;AAAA;AAAA,UAGe,kBAAA;EzBkID;EyBhId,MAAA,EAAQ,cAAA;;EAER,KAAA,EAAO,iBAAA;EzB8H4B;EyB5HnC,aAAA,EAAe,WAAA;AAAA;AAAA,KAGL,mBAAA,YACG,eAAA,qBACO,eAAA,KAAoB,OAAA,UAAiB,eAAA;AAAA,UAE1C,sBAAA,SAA+B,IAAA,CAAK,eAAA;EACnD,QAAA,EAAU,QAAA;;;AxBtPZ;;EwB2PE,GAAA;ExB3P0B;AAAA;AAE5B;;EwB8PE,SAAA,GAAY,gBAAA;ExB7Pe;EwB+P3B,OAAA,GAAU,OAAA;ExB/PC;EwBiQX,KAAA,GAAQ,YAAA;ExB1PK;EwB4Pb,UAAA,GAAa,mBAAA;ExBpPH;EwBsPV,OAAA,IAAW,KAAA,EAAO,aAAA;AAAA;AAAA,UAGH,mBAAA,SAA4B,IAAA,CAAK,eAAA;EAChD,MAAA,EAAQ,eAAA;AAAA;AAAA,UAGO,SAAA;EACf,GAAA,GAAM,OAAA,EAAS,mBAAA,KAAwB,OAAA,CAAQ,kBAAA;EAAA,SACtC,KAAA,EAAO,cAAA;EAChB,OAAA,QAAe,OAAA,CAAQ,OAAA;EACvB,OAAA,QAAe,OAAA;EAAA,CACd,MAAA,CAAO,YAAA,SAAqB,OAAA;AAAA;;AxBzOD;AA4B9B;;;iBwBqNgB,eAAA,CAAgB,OAAA,EAAS,sBAAA,GAAyB,SAAS;AAAA,KAkH/D,kBAAA;AxBpSZ;;;;AAAsC;AAItC;;;AAJA,UwB8SiB,cAAA;EACf,IAAA,EAAM,kBAAkB;ExBvSV;EwBySd,IAAA;;EAEA,KAAA;ExB3S0D;EwB6S1D,UAAA;AAAA;AAAA,UAGe,UAAA;EACf,KAAA,EAAO,cAAc;ExB7SqC;EwB+S1D,WAAA;AAAA;;;AxBjRD;;;;iBwB0Re,eAAA,CAAgB,UAAA,EAAY,WAAA,KAAgB,UAAU;;iBA2CtD,oBAAA,CAAqB,UAAsB,EAAV,UAAU;AAAA,UAS1C,aAAA;EACf,GAAA;EACA,MAAA;EACA,MAAA;EACA,UAAA;EACA,SAAA;AAAA;AAAA,UAGe,cAAA;EACf,EAAA;EACA,KAAA;EvB9d6C;EuBge7C,OAAA;EACA,IAAA;EACA,MAAA,EAAQ,cAAA;EvBjeqC;EuBme7C,KAAA;EvBne+D;EuBqe/D,MAAA;EACA,MAAA,EAAQ,SAAA;;EAER,OAAA,EAAS,UAAA;EtBxdoB;EsB0d7B,SAAA,EAAW,MAAA;EtBxdD;EsB0dV,UAAA,EAAY,UAAA;EACZ,MAAA,EAAQ,aAAA;EACR,SAAA,GAAY,aAAA;EACZ,SAAA,GAAY,qBAAA;EACZ,cAAA;EtBzb6B;EsB2b7B,UAAA;AAAA;AAAA,UAGe,eAAA,SAAwB,IAAA,CAAK,eAAA;EAC5C,EAAA;EACA,KAAA;EtB9dA;;;;;;EsBqeA,OAAA;EACA,IAAA;EACA,WAAA;EACA,SAAA,GAAY,oBAAA;EACZ,OAAA,GAAU,UAAA;EtB3cD;;;;;EsBidT,OAAA,GAAU,aAAA;EACV,OAAA,IAAW,KAAA,EAAO,aAAA;EtB3bH;EsB6bf,UAAA;AAAA;AAAA,UAGe,YAAA;EACf,KAAA;EACA,MAAA;EACA,SAAA;EACA,aAAA;EACA,IAAA;AAAA;AAAA,UAGe,kBAAA;EACf,EAAA;EACA,KAAA;EACA,OAAA;EACA,MAAA;EACA,KAAA;EACA,MAAA,EAAQ,cAAA;EACR,UAAA;EACA,MAAA,EAAQ,SAAA;EACR,OAAA,EAAS,UAAA;EACT,SAAA,EAAW,MAAA;EACX,UAAA,EAAY,UAAA;AAAA;AAAA,UAGG,WAAA;EACf,IAAA;EACA,GAAA;EACA,GAAA;EACA,GAAA;EACA,GAAA;EACA,SAAA;EACA,MAAA;AAAA;AAAA,UAGe,sBAAA;EACf,EAAA;EACA,SAAA,EAAW,eAAA;EACX,IAAA;EACA,GAAA,EAAK,WAAA;EACL,UAAA,EAAY,WAAA;AAAA;ArBhgBd;AAAA,UqBogBiB,kBAAA;EACf,OAAA;EACA,KAAA;EACA,MAAA;EACA,KAAA;EACA,UAAA;EACA,KAAA,EAAO,YAAY;AAAA;AAAA,UAGJ,cAAA;EACf,KAAA;EACA,MAAA;EACA,KAAA;EACA,UAAA;EACA,KAAA,EAAO,YAAA;EACP,KAAA,EAAO,kBAAA;ErBxfE;EqB0fT,OAAA,EAAS,sBAAA;ErBzeT;EqB2eA,SAAA,EAAW,MAAA;ErBpeX;EqBseA,QAAA,GAAW,kBAAA;AAAA;AAAA,UAGI,sBAAA;ErBzdf;EqB2dA,SAAA;ErBldK;EqBodL,KAAK;AAAA;AAAA,UAGU,eAAA;EAAA,SACN,OAAA,WAAkB,cAAA;EAC3B,MAAA,GAAS,MAAA,EAAQ,cAAA,KAAmB,OAAA;EACpC,KAAA,QAAa,OAAA,CAAQ,cAAA;EACrB,MAAA;AAAA;;UAIe,qBAAA;ErB1cA;EqB4cf,QAAA,EAAU,QAAA;ErBvbI;EqBybd,KAAA,EAAO,QAAQ;;EAEf,KAAA;ErB1bW;EqB4bX,UAAA;AAAA;AAAA,KAGU,cAAA,IAAkB,GAAA,EAAK,qBAAA,KAA0B,eAAe;;;ArB7b/D;AAkCb;;;;;;iBqBybgB,UAAA,CAAW,MAAA,EAAQ,cAAA,GAAiB,cAAc;;iBAWlD,oBAAA,CAAqB,GAAA,EAAK,qBAAA,GAAwB,eAAe;ArBjcpE;AAAA,iBqBscG,oBAAA,CAAA;AAAA,iBAqCM,WAAA,CAAY,OAAA,EAAS,eAAA,GAAkB,OAAA,CAAQ,cAAA;AAAA,iBAwGrD,eAAA,CAAgB,IAAA,YAA4B,UAAU;AAAA,iBAStD,UAAA,CAAW,IAAA,UAAc,IAAA,YAA+B,UAAU;AAAA,iBAYlE,eAAA,CAAgB,KAAA,YAAiB,IAAA,YAA+C,UAAU;AAAA,iBAY1F,YAAA,CAAa,IAAA,UAAc,QAAA,WAAmB,MAAA,EAAQ,IAAA,YAAiC,UAAU;AAAA,iBAkBjG,kBAAA,CACd,IAAA,UACA,QAAA,UACA,IAAA,YACC,UAAU;AAAA,iBAgCG,QAAA,CAAS,OAAA,EAAS,eAAA,GAAkB,UAAU;;;;ArB3pBjD;iBqB0vBG,mBAAA,CAAoB,QAAA,UAAkB,OAAA,EAAS,UAAA,IAAc,IAAA,YAAkB,UAAU;AAAA,iBAezF,qBAAA,CAAsB,MAAsB,EAAd,cAAc;AAAA,iBAsC5C,oBAAA,CAAqB,OAAkC,WAAhB,cAAc;;UAKpD,cAAA;EACf,EAAA,GAAK,IAAA,UAAc,EAAA,QAAU,OAAA;EAC7B,QAAA,GAAW,EAAA,QAAU,OAAO;AAAA;AAAA,UAGb,wBAAA;EACf,KAAA,EAAO,eAAA;EACP,MAAA,EAAQ,cAAA;EACR,QAAA,GAAW,eAAA;EACX,WAAA;ErBprB+B;;;;ACrXjC;EoB+iCE,gBAAA;;EAEA,YAAA;EpBjjCyC;EoBmjCzC,MAAA;EpB3hC0B;EoB6hC1B,OAAA,SAAgB,OAAA;EpB7hCU;AAAA;AAc5B;;EoBohCE,WAAA;AAAA;ApBphCyC;;;;ACxB3C;;;ADwB2C,iBoB8hC3B,iBAAA,CAAkB,OAAA,EAAS,wBAAA,GAA2B,eAAe;AAAA,iBAqFrE,qBAAA,CAAsB,OAAA,GAAS,sBAAA,GAA8B,eAAe;AAAA,iBAoD5E,mBAAA,CAAoB,KAAA,WAAgB,cAAA,KAAmB,cAAc;AAAA,iBA+pBrE,sBAAA,CAAuB,MAAA,EAAQ,cAAA,GAAiB,MAAA,cAAoB,kBAAA;AAAA,iBAYpE,qBAAA,CAAsB,IAAA,EAAM,aAAA,EAAe,MAAA,EAAQ,cAAc;AAAA,iBAMjE,mBAAA,CACd,KAAA,EAAO,aAAA,EACP,GAAA,EAAK,GAAA,mBACJ,UAAA;AAAA,iBAqBa,oBAAA,CAAqB,OAAA,EAAS,UAAA,KAAe,MAAM;AAAA,iBAkSnD,YAAA,CAAa,IAAA,UAAc,MAAA,EAAQ,cAAc;AAAA,iBAIjD,oBAAA,CAAqB,IAAA,UAAc,IAAY;;;KChrEnD,QAAA;AAAA,UAEK,SAAA;EACf,KAAA,EAAO,QAAA;E3BuCU;E2BrCjB,SAAA;E3BmCA;E2BjCA,OAAA;E3BmCA;E2BjCA,KAAA,EAAO,MAAM;AAAA;AAAA,UAGE,OAAA;EACf,IAAA,GAAO,MAAA,EAAQ,SAAS;AAAA;AAAA,UAGT,MAAA;EACf,KAAA,GAAQ,OAAA,UAAiB,KAAA,GAAQ,MAAA;EACjC,IAAA,GAAO,OAAA,UAAiB,KAAA,GAAQ,MAAA;EAChC,IAAA,GAAO,OAAA,UAAiB,KAAA,GAAQ,MAAA;EAChC,KAAA,GAAQ,OAAA,UAAiB,KAAA,GAAQ,MAAA;E3B0BL;AAW9B;;;;E2B/BE,IAAA,GAAO,KAAA,EAAO,MAAA,sBAA4B,MAAA;E3BqCnC;;;;EAAA,S2BhCE,cAAA,EAAgB,QAAA,CAAS,MAAA;AAAA;;;;A3BuEH;iB2B5DjB,YAAA,CACd,IAAA,EAAM,OAAA,EACN,cAAA,GAAgB,QAAA,CAAS,MAAA,qBACxB,MAAA;AAAA,UA6Bc,kBAAA;;;;;;EAMf,QAAA,GAAW,QAAQ;E3ByCkE;E2BvCrF,MAAA;IAAW,KAAA,GAAQ,KAAA;EAAA;AAAA;;;;;;;;iBAiBL,WAAA,CAAY,OAAA,GAAS,kBAAA,GAA0B,OAAO;;;A3BkDjD;AA2DrB;iB2BxFgB,QAAA,CAAS,OAAA,GAAS,kBAAA,GAA0B,OAAO;AAAA,UAqBlD,mBAAA;EACf,MAAA,EAAQ,MAAA;E3BmED;;;;;E2B7DP,KAAA,GAAQ,QAAQ;E3B6DhB;;;;AACqC;;;E2BtDrC,gBAAA;AAAA;AAAA,UAGe,cAAA;EACf,OAAA,GAAU,KAAA,EAAO,QAAQ,CAAC,UAAA;AAAA;;;;;;A1BpKC;AAE7B;;;;;;;;iB0BmLgB,kBAAA,CAAmB,OAAA,EAAS,mBAAA,GAAsB,cAAc;;;;;AzBlF1C;AAItC;;;;AAA4D;c0B8H/C,8BAAA;;;;A1B1H+C;AAW5D;;;c0BwHa,wBAAA;A1BrGZ;;;;ACnJD;;;;;;;;ADmJC,c0BmHY,0BAAA;AzBzPb;;;;;;;AAAA,cyBqQa,4BAAA;;;;;;A5B1NwC;AAIrD;;;;AAA8B;AAW9B;;c6BlCa,yBAAA;;;;;;;A7BwDQ;AAuBrB;;;;c6BlEa,qBAAA;A7BqFb;;;;;;;AAAA,iB6BhEgB,iBAAA,CAAkB,IAAA;EAAQ,OAAA;EAAiB,SAAA;AAAA;;;;;;;;;;iBAiB3C,eAAA,CAAgB,IAAA;EAAQ,OAAA;EAAiB,SAAA;AAAA;;;;A7BwIlB;;U6B5GtB,YAAA;;EAEf,QAAA;E5BhHsB;E4BkHtB,MAAA;E5BlHsB;E4BoHtB,MAAA,WAAiB,iBAAiB;E5BjHd;E4BmHpB,SAAA;E5BlHqB;E4BoHrB,YAAA;E5BpH2B;E4BsH3B,UAAA;E5BpH8B;;;;;;;;AAIC;AAiBjC;;;;;;;E4BgHE,QAAA;AAAA;AAAA,KAGU,cAAA;EACJ,IAAA;EAAc,MAAA;AAAA;EACd,IAAA;EAAmB,MAAA;EAAgB,aAAA;EAAuB,aAAA;EAAuB,OAAA;IAAY,KAAA;IAAe,KAAA;EAAA;AAAA;EAC5G,IAAA;EAAe,MAAA;EAAwB,KAAA,EAAO,KAAK;AAAA;;;;;;;;A5BiCwB;AAiHnF;;;;AAAqC;iB4BnIf,sBAAA,CAAuB,KAAA,EAAO,YAAA,GAAe,OAAA,CAAQ,cAAA;AAAA,UA2LjE,cAAA;EACR,QAAA;EACA,aAAA;EACA,aAAA;EACA,MAAA;AAAA;;;;A3BvU4B;AAY9B;;;;AAA8B;AA4B9B;;;;AAAoB;AAmCpB;;;;AAAsC;iB2BkRtB,kBAAA,CAAmB,KAAqB,EAAd,cAAc;;;;A3B9QlB;AAItC;;;;AAA4D;AAI5D;iB2BgSsB,uBAAA,CAAwB,WAAA,WAAsB,OAAO;;;;;A7B7VtB;AAIrD;;U8B3BiB,kBAAA;EACf,MAAA,GAAS,WAAA;EACT,iBAAA,GAAoB,2BAAA;EACpB,cAAA,GAAiB,mBAAA;AAAA;AAAA,UAGF,kBAAA;EACf,IAAA,GAAO,IAAA,aAAiB,kBAAA;EACxB,IAAA,GAAO,IAAA,UAAc,KAAA,EAAO,kBAAkB;EAC9C,MAAA,GAAS,IAAA;AAAA;;;A9BmDU;AAuBrB;iB8BnEgB,8BAAA,CAA+B,IAAA,GAAO,MAAA,SAAe,kBAAA,IAAsB,kBAAA;AAAA,UAS1E,uBAAA;E9B0DgB;E8BxD/B,IAAA;E9B2Ec;E8BzEd,KAAA,EAAO,kBAAA;;;;;EAKP,WAAA;E9BoEqF;AAAA;AAyBvF;;;;E8BtFE,kBAAA,IAAsB,GAAA,EAAK,GAAA,YAAe,OAAA;E9ByFzC;;;;E8BpFD,UAAA;E9BmFM;;;;E8B9EN,KAAA;AAAA;AAAA,cAKW,gBAAA,YAA4B,mBAAA;EAAA,iBACtB,IAAA;EAAA,iBACA,KAAA;EAAA,iBACA,YAAA;EAAA,iBACA,kBAAA;EAAA,iBACA,UAAA;EAAA,iBACA,MAAA;EAAA,QAIT,iBAAA;cAEI,IAAA,EAAM,uBAAA;EAAA,IASd,WAAA,CAAA,YAAwB,GAAA;EAAA,IAIxB,cAAA,CAAA,GAAkB,mBAAA;EAgBtB,MAAA,CAAA,GAAU,WAAA;EAIV,UAAA,CAAW,MAAA,EAAQ,WAAA;EAInB,iBAAA,CAAA,GAAqB,2BAAA;EAIrB,qBAAA,CAAsB,IAAA,EAAM,2BAAA;EAI5B,cAAA,CAAA,GAAkB,mBAAA;EAIlB,kBAAA,CAAmB,KAAA,EAAO,mBAAA;EAI1B,gBAAA,CAAiB,QAAA;EAIjB,YAAA,CAAA;EAYM,uBAAA,CAAwB,GAAA,EAAK,GAAA,GAAM,OAAA;E7BpKnB;;;;;;AAIK;AAE7B;;E6B2KQ,qBAAA,CAAsB,KAAA,2DAAgE,OAAA;EAAA,QA4BpF,KAAA;AAAA;;;;;A7BnMuB;AAiBjC;;;iB6BgMgB,sBAAA,CAAuB,OAA2C,EAAlC,MAAM;;;UCpNrC,qBAAA;E/B2CkB;E+BzCjC,KAAA,EAAO,kBAAA;E/ByCW;;;;;;;E+BjClB,kBAAA,IAAsB,GAAA,EAAK,GAAA,YAAe,OAAA;E/BiCxB;E+B/BlB,MAAA,GAAS,WAAA;E/B+BwB;E+B7BjC,KAAA,GAAQ,QAAA,CAAS,UAAA;E/B6BkC;E+B3BnD,UAAA;E/B+B4B;E+B7B5B,KAAA;E/B6B4B;AAAA;AAW9B;;E+BnCE,YAAA;E/BmCsC;;;;E+B9BtC,SAAA;AAAA;AAAA,UAGe,oBAAA;E/BwED;E+BtEd,MAAA,EAAQ,WAAA,CAAY,UAAA,CAAW,gBAAA;;;A/BsEA;AAmBjC;;;;E+BjFE,KAAA,EAAO,KAAA;IAAQ,IAAA;IAAc,WAAA;IAA6B,WAAA;EAAA;AAAA;;;;;;;;;;;;;;A/B6GvC;iB+B1FC,cAAA,CACpB,MAAA,EAAQ,eAAA,EACR,OAAA,EAAS,qBAAA,GACR,OAAA,CAAQ,oBAAA;;;;;;;;;;;A/B1CX;;;;;;;;;;;;AAcgB;AAIhB;;;;;;;;UgCrCiB,mBAAA;EACf,IAAA;EACA,KAAK;AAAA;AAAA,UAGU,mBAAA;EhCoCN;;;;;EgC9BT,WAAA;EhCkCU;;;;AAAkB;AAW9B;;;;;EgClCE,OAAA,EAAS,OAAA,CAAQ,mBAAA;EhC8CjB;;;AAUmB;AAuBrB;EgCzEE,KAAA,QAAa,OAAA;AAAA;AAAA,UAGE,oBAAA;EhCsEgB;EgCpE/B,MAAA,GAAS,WAAW;EhCuFiB;;;;;EgCjFrC,IAAA;EhCiFqF;AAAA;AAyBvF;;;EgCpGE,IAAA;EhCsGM;;;;;EgChGN,IAAA;AAAA;;;;AhCiGmB;AA2DrB;;;;;iBgCjHsB,kBAAA,CACpB,IAAA,GAAM,oBAAA,GACL,OAAA,CAAQ,mBAAA;;;KCxEC,gBAAA,GAAmB,MAAM;AAAA,UAEpB,OAAA;EACf,GAAA,GAAM,KAAA,UAAe,UAAA,GAAa,gBAAgB;AAAA;AAAA,UAGnC,SAAA;EACf,MAAA,GAAS,KAAA,UAAe,UAAA,GAAa,gBAAgB;AAAA;AAAA,UAGtC,aAAA;EACf,GAAA,GAAM,KAAA,UAAe,UAAA,GAAa,gBAAgB;AAAA;AAAA,UAGnC,iBAAA;EACf,WAAA;EACA,IAAI;AAAA;;;;AjCgFiF;AAyBvF;UiCjGiB,KAAA;EACf,aAAA,GAAgB,IAAA,UAAc,OAAA,GAAU,iBAAA,KAAsB,OAAA;EAC9D,eAAA,GAAkB,IAAA,UAAc,OAAA,GAAU,iBAAA,KAAsB,SAAA;EAChE,mBAAA,GAAsB,IAAA,UAAc,OAAA,GAAU,iBAAA,KAAsB,aAAA;AAAA;AAAA,UAOrD,mBAAA;EACf,KAAA,EAAO,KAAA;EjCuFD;;;;;;EiChFN,SAAA;EjC6Ic;;;;;EiCvId,cAAA,GAAiB,gBAAgB;EjCyII;;;;;EiCnIrC,OAAA,IAAW,IAAA,UAAc,GAAA;AAAA;AAAA,UAGV,cAAA;EACf,OAAA,GAAU,KAAA,EAAO,QAAQ,CAAC,UAAA;AAAA;;;AhC3F5B;;;;;;;;;AAI6B;AAE7B;iBgC2IgB,kBAAA,CAAmB,OAAA,EAAS,mBAAA,GAAsB,cAAc;;;AjCnChF;;;;AAAiC;AAmBjC;AAnBA,iBkC/DgB,yBAAA,CAA0B,IAAY;;;;;;;AlCkFiC;AAyBvF;;;;;;;;iBkCzDgB,qBAAA,CAAsB,OAAe;;;;;;AlC4DhC;AA2DrB;iBkCzFgB,2BAAA,CACd,IAAA,UACA,KAAA,EAAO,MAAM;;iBAuBC,eAAA,CAAgB,KAAc;;;;;;;;AlC9G9B;AAIhB;UmCvCiB,UAAA;EACf,KAAA;EACA,MAAA;EACA,IAAA;EACA,SAAA;EACA,aAAA;EACA,KAAA;AAAA;;;;;;AnCgJmB;AA2DrB;;;;iBmCtGgB,YAAA,CAAa,KAAA,EAAO,UAAA,GAAa,SAAS;;;;;;;;;;iBAwB1C,YAAA,CAAa,KAAA,EAAO,UAAA,GAAa,GAAA,SAAY,UAAA;;;;;;;;;;;AnC9G7D;;;;;;;;;;;;AAcgB;AAIhB;;;;;;;;;;;;;;;;;;AAIqD;AAIrD;;;;coCjCa,sBAAA;ApC4Cb;AAAA,UoCzCiB,iBAAA;;EAEf,MAAA;EpC6CA;EoC3CA,OAAO;AAAA;;;ApC2DY;AAuBrB;;;;AAAiC;AAmBjC;;;;;;;;AAAuF;AAyBvF;;;iBoCvGgB,iBAAA,CAAkB,MAAA,WAAiB,iBAAiB;;;;;;;;;;;ApC0G/C;iBoC5EL,gBAAA,CAAiB,UAAA,UAAoB,WAAmB;;;;;;;;;;;;;iBAoBxD,mBAAA,CAAoB,MAAA,UAAgB,KAAa;ApCqH1B;;;;AC1NvC;;;;;;;;;AD0NuC,iBoChGvB,oBAAA,CAAqB,MAAA,UAAgB,KAAa;AnCpHlE;;;;;;;AAAA,iBmCmIgB,qBAAA,CAAsB,MAAA,UAAgB,IAAY;;AnC/HjC;AAiBjC;;;;;;;;;;iBmC+HgB,mBAAA,CAAoB,MAAc;;iBAYlC,uBAAA,CAAwB,MAAc;;;;UClIrC,IAAA;ErC0EgB;EqCxE/B,GAAA;ErC2Fc;EqCzFd,aAAA,IAAiB,KAAA,EAAO,MAAA;;;;;;;ArCyF6D;EqCjFrF,QAAA,IAAY,IAAA,UAAc,KAAA,GAAQ,MAAM;AAAA;;;;;;;;;;;;KAc9B,SAAA,IACV,IAAA,UACA,KAAA,GAAQ,MAAA,mBACR,aAAA,GAAgB,QAAA,CAAS,MAAA,sBACtB,IAAA;AAAA,KAEO,kBAAA;AAAA,UAEK,mBAAA;ErCkJsB;EqChJrC,SAAA,EAAW,SAAA;ErCiJK;;;;;;EqC1IhB,SAAA;ErC0IA;;;;AACqC;;;;AC1NvC;;;;EoC4FE,WAAA,GAAc,kBAAA;EpCzFM;;;;AACO;AAE7B;;;;;;;EoCmGE,qBAAA;EpC/F+B;AAAA;AAiBjC;;;;;EoCsFE,gBAAA;EpClFgB;;;;;;;;;AAAA;EoC6FhB,OAAA,IAAW,IAAA,UAAc,GAAA;EpCtBS;;;;;;;AAA4C;AA4EhF;;;;;;;;AAAmF;AAiHnF;;;EoClJE,qBAAA,SAA8B,QAAA,CAAS,MAAA;EpCkJJ;AAOrC;;;;AAAkD;AAsBlD;;;;;;;EoCjKE,MAAA,IAAU,IAAA,UAAc,KAAA,UAAe,IAAA,GAAO,QAAA,CAAS,MAAA;AAAA;;UAIxC,cAAA;EpCuKJ;AAyBb;;;;;EoCzLE,OAAA,GAAU,KAAA,EAAO,QAAQ,CAAC,UAAA;AAAA;;ApCyLyC;;;;AC1WrE;;;;AAA4B;AAE5B;;;;;;;;AAQe;AAQf;;;;AAA8D;AAa9D;;;;AAA8B;AAY9B;;iBmCkdgB,kBAAA,CAAmB,OAAA,EAAS,mBAAA,GAAsB,cAAc;;AnCldlD;AA4B9B;;;;cmCorCa,iBAAA;EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ArCxtCb;;;;;;;;;iBsClCgB,eAAA,CAAgB,UAAA,EAAY,MAAA,oBAA0B,MAAM;;;;;;;;;;;AtCkC5E;cuCvCa,UAAA;SAA4F,OAAA;;;;;;;;;cAAA,QAAA;;;;;;;;;AvCuCzG;;;;;;;;;;;;AAcgB;AAIhB;;;;KwC3CY,MAAA,GAAS,IAAA,CAAK,OAAA,CAAQ,YAAA;;;;iBAKlB,YAAA,CAAa,MAAA,EAAQ,MAAA,GAAS,MAAM;;;;;;;;;;AxC0CC;AAIrD;;;;AAA8B;AAW9B;;;;;;;;;AAsBqB;AAuBrB;iBwCxEgB,cAAA,CAAA,GAAkB,OAAA,EAAS,MAAA,KAAW,MAAM"}

package/dist/login-0jP1pnSJ.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"login-0jP1pnSJ.js","names":[],"sources":["../src/compact/errors.ts","../src/compact/messages.ts","../src/compact/prompt.ts","../src/compact/compact.ts","../src/compact/restore.ts","../src/logger.ts","../src/mcp/oauth-callback.ts","../src/mcp/login.ts"],"sourcesContent":["/**\n * Typed errors thrown by the compaction helper.\n *\n * Lives in its own file so both the runner and the pure messages module\n * can import without circular dependencies.\n */\n\n/**\n * Raised when the caller's inputs make compaction meaningless before any\n * API call is attempted. Common cases:\n *   - empty `turns`\n *   - `keepTurns >= turns.length` (no older content to summarize)\n *   - `'from'` / `'up_to'` anchor id not found in `turns`\n *   - the resolved `toSummarize` slice has no text-bearing content\n *\n * Synchronous — thrown from `compactConversation()` before the provider\n * call so the caller can recover without a network round-trip.\n */\nexport class CompactInvalidInputError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'CompactInvalidInputError'\n  }\n}\n\n/**\n * Raised when the provider rejects the compaction request with\n * `prompt_too_long` (or an equivalent) and the head-truncation retry\n * budget has been exhausted. Callers can inspect `ptlRetries` to log\n * how far the retry loop got before giving up.\n */\nexport class CompactPromptTooLongError extends Error {\n  constructor(message: string, public readonly ptlRetries: number) {\n    super(message)\n    this.name = 'CompactPromptTooLongError'\n  }\n}\n","/**\n * Pure helpers for compaction — slicing, image stripping, head-truncation\n * on `prompt_too_long`, and the synthetic-turn builder.\n *\n * Everything in this file is total and side-effect-free. Inputs are never\n * mutated; helpers return fresh arrays whenever they modify content.\n */\n\nimport type {\n  SessionContentBlock,\n  SessionTurn,\n  ToolResultContent,\n  TurnUsage,\n} from '../types'\nimport { CompactInvalidInputError } from './errors'\n\n/**\n * What to summarize and what to preserve verbatim.\n *\n * - `'full'`         — summarize everything, no preserved tail.\n * - `'tail'`         — summarize everything before the last `keepTurns` turns.\n * - `{ kind: 'from',  turnId }` — summarize from the anchor turn onward.\n * - `{ kind: 'up_to', turnId }` — summarize up to (and including) the anchor.\n */\nexport type CompactScope\n  = | 'full'\n    | 'tail'\n    | { kind: 'from', turnId: string }\n    | { kind: 'up_to', turnId: string }\n\nexport interface CompactionSlice {\n  /** The portion of the conversation that will be summarized. */\n  toSummarize: readonly SessionTurn[]\n  /** The portion that stays verbatim in the post-compact history. */\n  preserved: readonly SessionTurn[]\n}\n\n/**\n * Partition `turns` into `(toSummarize, preserved)` according to `scope`.\n *\n * Throws {@link CompactInvalidInputError} on degenerate inputs so the\n * caller doesn't pay for a doomed provider call:\n *   - empty `turns`\n *   - `scope: 'tail'` with `keepTurns >= turns.length` (nothing to summarize)\n *   - `scope: { from | up_to }` with an anchor id that isn't in `turns`\n *   - the resulting `toSummarize` slice contains no text-bearing content\n *     (only system turns or empty content)\n *\n * Pure. Returns references to the original `SessionTurn` objects — the\n * caller can compare by identity (=== Object.is) to confirm.\n */\nexport function sliceForCompaction(\n  turns: readonly SessionTurn[],\n  scope: CompactScope,\n  keepTurns: number,\n): CompactionSlice {\n  if (turns.length === 0)\n    throw new CompactInvalidInputError('No turns to compact.')\n\n  let toSummarize: readonly SessionTurn[]\n  let preserved: readonly SessionTurn[]\n\n  if (scope === 'full') {\n    toSummarize = turns\n    preserved = []\n  }\n  else if (scope === 'tail') {\n    const keep = Math.max(0, keepTurns)\n    if (keep >= turns.length) {\n      throw new CompactInvalidInputError(\n        `Nothing to compact: keepTurns (${keep}) covers the entire conversation (${turns.length} turns).`,\n      )\n    }\n    const safeCut = findSafeRoundBoundary(turns, turns.length - keep)\n    toSummarize = turns.slice(0, safeCut)\n    preserved = turns.slice(safeCut)\n  }\n  else if (scope.kind === 'from') {\n    const idx = turns.findIndex(t => t.id === scope.turnId)\n    if (idx < 0)\n      throw new CompactInvalidInputError(`Anchor turn not found: \"${scope.turnId}\".`)\n    // 'from' summarizes the recent portion (anchor onward); everything\n    // before stays verbatim. Walk the anchor BACKWARD to the start of\n    // the round containing it so neither half ends mid-round (avoids\n    // orphan `tool_use` in `preserved` AND orphan `tool_result` at\n    // the head of `toSummarize`).\n    const safeIdx = findSafeRoundBoundary(turns, idx)\n    preserved = turns.slice(0, safeIdx)\n    toSummarize = turns.slice(safeIdx)\n  }\n  else {\n    // 'up_to' summarizes the older portion (up to and including the anchor);\n    // everything after stays verbatim. Same `tool_use ↔ tool_result`\n    // adjacency rule as 'tail': cut backward if the proposed boundary\n    // would orphan a `tool_use` at the end of `toSummarize`.\n    const idx = turns.findIndex(t => t.id === scope.turnId)\n    if (idx < 0)\n      throw new CompactInvalidInputError(`Anchor turn not found: \"${scope.turnId}\".`)\n    const safeCut = findSafeRoundBoundary(turns, idx + 1)\n    toSummarize = turns.slice(0, safeCut)\n    preserved = turns.slice(safeCut)\n  }\n\n  if (toSummarize.length === 0)\n    throw new CompactInvalidInputError('Compaction scope resolved to zero turns.')\n  if (!hasTextBearingContent(toSummarize))\n    throw new CompactInvalidInputError('Compaction scope contains no text-bearing turns to summarize.')\n\n  return { toSummarize, preserved }\n}\n\n/**\n * Replace every attachment block in `turns` with a short text marker.\n *\n * Covers two shapes:\n *   - Top-level `{ type: 'image', ... }` content blocks on user turns.\n *   - Image entries inside `tool_result.output` array form (multimodal\n *     tool results — e.g. an MCP browser screenshot).\n *\n * Unconditional by design: even on vision-capable models, the summary\n * call doesn't benefit from raw image bytes (the model can't refer to\n * them after the summary lands), and stripping uniformly avoids\n * `prompt_too_long` on image-heavy sessions.\n *\n * Returns a fresh array; input turns / blocks are never mutated.\n */\nexport function stripImagesFromTurns(turns: readonly SessionTurn[]): SessionTurn[] {\n  return turns.map(turn => stripImagesFromTurn(turn))\n}\n\nfunction stripImagesFromTurn(turn: SessionTurn): SessionTurn {\n  let touched = false\n  const nextContent: SessionContentBlock[] = []\n  for (const block of turn.content) {\n    if (block.type === 'image') {\n      touched = true\n      nextContent.push({ type: 'text', text: '[image]' })\n      continue\n    }\n    if (block.type === 'document') {\n      touched = true\n      nextContent.push({ type: 'text', text: '[document]' })\n      continue\n    }\n    if (block.type === 'tool_result' && Array.isArray(block.output)) {\n      const flat = stripAttachmentsFromToolResult(block.output)\n      if (flat) {\n        touched = true\n        nextContent.push({ ...block, output: flat })\n        continue\n      }\n    }\n    nextContent.push(block)\n  }\n  return touched ? { ...turn, content: nextContent } : turn\n}\n\n/**\n * Return a fresh `ToolResultContent[]` with images flattened to `[image]`\n * text placeholders, or `null` when no image blocks were present (caller\n * keeps the original input). Returning a new mutable array — never the\n * input — keeps the `tool_result.output` slot's mutable type contract\n * satisfied without leaky `as`-casts at the call site.\n */\nfunction stripAttachmentsFromToolResult(parts: readonly ToolResultContent[]): ToolResultContent[] | null {\n  let touched = false\n  const out: ToolResultContent[] = []\n  for (const part of parts) {\n    if (part.type === 'image') {\n      touched = true\n      out.push({ type: 'text', text: '[image]' })\n    }\n    else if (part.type === 'document') {\n      touched = true\n      out.push({ type: 'text', text: '[document]' })\n    }\n    else {\n      out.push(part)\n    }\n  }\n  return touched ? out : null\n}\n\n/**\n * Drop the oldest \"round\" from `turns` and return a fresh array. Used by\n * the PTL retry path to shrink the prompt one round at a time.\n *\n * A round is a contiguous `[user, assistant?, tool_results?]` group. The\n * function walks forward from index 0, advances through the user turn\n * and any trailing assistant + tool-result turns belonging to the same\n * exchange, and returns the remainder.\n *\n * Adjacency-safe: when the oldest user turn carries `tool_result` blocks\n * answering an assistant turn ahead of it (rare — happens during\n * resume), the function keeps walking until the next clean boundary so\n * the resulting array still respects every provider's `tool_use ↔\n * tool_result` adjacency rule.\n *\n * Returns `turns` unchanged when only one round (or less) remains — the\n * caller is expected to interpret that as \"cannot shrink further\" and\n * give up the retry loop.\n */\nexport function truncateHeadForPtlRetry(turns: readonly SessionTurn[]): SessionTurn[] {\n  if (turns.length <= 1)\n    return turns.slice()\n\n  // Find the first turn that opens a clean conversational round we can\n  // drop ending on — start with the first `user` turn (it's the natural\n  // start-of-round marker).\n  const firstUserIdx = turns.findIndex(t => t.role === 'user')\n  if (firstUserIdx < 0)\n    return turns.slice()\n\n  // Skip past every turn that belongs to this round: the user turn\n  // itself, the assistant reply (if any), and the next user turn whose\n  // content is *only* tool_result blocks (an immediate follow-up that\n  // closes out tool calls). Stop when we reach the next round-opening\n  // user turn (i.e. one that carries non-tool_result content).\n  let cursor = firstUserIdx + 1\n  while (cursor < turns.length) {\n    const turn = turns[cursor]\n    if (turn.role === 'assistant') {\n      cursor++\n      continue\n    }\n    if (turn.role === 'user' && isToolResultsOnlyTurn(turn)) {\n      cursor++\n      continue\n    }\n    break\n  }\n\n  // If the cursor walked all the way to the end, refuse to truncate —\n  // the remaining slice would be empty, which is never useful.\n  if (cursor >= turns.length)\n    return turns.slice()\n\n  return turns.slice(cursor)\n}\n\nfunction isToolResultsOnlyTurn(turn: SessionTurn): boolean {\n  if (turn.content.length === 0)\n    return false\n  return turn.content.every(block => block.type === 'tool_result')\n}\n\n/**\n * Walk `proposedCut` backward to the nearest position where splitting at\n * that index produces a round-boundary-clean partition — i.e. neither\n * half breaks the `tool_use ↔ tool_result` adjacency rule that every\n * provider (most strictly Anthropic) enforces.\n *\n * The hazardous case: the proposed cut lands BETWEEN an assistant turn\n * carrying `tool_call` blocks and the user turn carrying the matching\n * `tool_result` blocks. Then `toSummarize` ends with an orphan\n * `tool_use` (provider 400 on the summarization request) AND `preserved`\n * starts with an orphan `tool_result` (provider 400 on the next live\n * agent run against the wire-level cutoff output).\n *\n * Algorithm: keep walking `cut` backward as long as `turns[cut - 1]`\n * is an assistant turn with at least one `tool_call` block. The walk\n * stops when:\n *  - we reach `cut = 0` (slice would be empty; caller's existing\n *    \"scope resolved to zero turns\" guard handles it), or\n *  - the trailing turn is user-role (clean — model emits no pending\n *    tool_use from user turns), or\n *  - the trailing turn is assistant text without tool_use (clean —\n *    text-only response is a complete round).\n *\n * Returning the adjusted cut over-preserves the tail relative to the\n * caller's request — `keepTurns` is interpreted as the MINIMUM number\n * of turns kept verbatim, not the exact count.\n */\nfunction findSafeRoundBoundary(turns: readonly SessionTurn[], proposedCut: number): number {\n  let cut = Math.max(0, Math.min(turns.length, proposedCut))\n  while (cut > 0 && hasPendingToolUse(turns[cut - 1]))\n    cut--\n  return cut\n}\n\n/** Does this turn end with any unanswered `tool_use` blocks? */\nfunction hasPendingToolUse(turn: SessionTurn): boolean {\n  if (turn.role !== 'assistant')\n    return false\n  for (const block of turn.content) {\n    if (block.type === 'tool_call')\n      return true\n  }\n  return false\n}\n\nfunction hasTextBearingContent(turns: readonly SessionTurn[]): boolean {\n  for (const turn of turns) {\n    if (turn.role === 'system')\n      continue\n    for (const block of turn.content) {\n      if (block.type === 'text' && block.text.trim().length > 0)\n        return true\n      if (block.type === 'tool_call' || block.type === 'tool_result')\n        return true\n    }\n  }\n  return false\n}\n\n// ---------------------------------------------------------------------------\n// Summary turn builder\n// ---------------------------------------------------------------------------\n\n/**\n * Maximum length of an anchor turn's textual preview, in characters. Long\n * enough to give the model recognizable context (the first paragraph of\n * a typical user message), short enough that it doesn't blow the\n * cache-stability invariant for the prompt prefix.\n */\nexport const ANCHOR_PREVIEW_MAX_CHARS = 200\n\n/**\n * Extract the first ~200 chars of text-bearing content from a turn — the\n * preview surfaced in `from` / `up_to` direction prompts so the model\n * knows where the slice begins.\n */\nexport function anchorPreviewFor(turn: SessionTurn): string {\n  for (const block of turn.content) {\n    if (block.type === 'text' && block.text.trim().length > 0) {\n      const flat = block.text.replace(/\\s+/g, ' ').trim()\n      return flat.length > ANCHOR_PREVIEW_MAX_CHARS\n        ? `${flat.slice(0, ANCHOR_PREVIEW_MAX_CHARS - 1)}…`\n        : flat\n    }\n  }\n  return '(no preview available)'\n}\n\n/**\n * Input shape for {@link summaryToTurn}. Designed to align with the\n * fields of `CompactResult` so a caller can spread the runner's output\n * with a single `replacesTurnIds` rename — no field-by-field unpacking\n * required.\n *\n * Primitive shape (no `CompactResult` import) keeps this module free of\n * dependencies on the runner — `compact.ts` imports from here, not the\n * other way around.\n */\nexport interface SummaryToTurnInput {\n  /** Summary text — typically `CompactResult.summary`. */\n  summary: string\n  /** Turn ids being replaced — typically `CompactResult.summarizedTurnIds`. */\n  replacesTurnIds: readonly string[]\n  /** Model id that produced the summary. */\n  model: string\n  /** Token usage from the summary call. */\n  usage: TurnUsage\n  /** Defaults to `Date.now()` when omitted. */\n  compactedAt?: number\n}\n\n/**\n * Build a synthetic `SessionTurn` carrying a single `compact-summary`\n * block, ready to append to a session.\n *\n * The turn's role is `'user'` so it sits at a conversational boundary\n * the way the model expects. The caller is responsible for\n * `session.appendTurns([turn])`. The id is freshly generated via\n * `crypto.randomUUID()` so collisions are statistically impossible.\n *\n * Typical use after running `compactConversation`:\n *\n * ```ts\n * const result = await compactConversation({ provider, turns })\n * const turn = summaryToTurn({\n *   summary: result.summary,\n *   replacesTurnIds: result.summarizedTurnIds,\n *   model: result.model,\n *   usage: result.usage,\n * })\n * await session.appendTurns([turn])\n * ```\n */\nexport function summaryToTurn(input: SummaryToTurnInput): SessionTurn {\n  const compactedAt = input.compactedAt ?? Date.now()\n  return {\n    id: crypto.randomUUID(),\n    role: 'user',\n    content: [{\n      type: 'compact-summary',\n      replacesTurnIds: input.replacesTurnIds,\n      summary: input.summary,\n      model: input.model,\n      usage: input.usage,\n      compactedAt,\n    }],\n    createdAt: compactedAt,\n  }\n}\n","/**\n * Pure prompt builders for conversation compaction.\n *\n * The builders produce the **system prompt** for a no-tools summary call.\n * They are total functions of `(direction, anchorPreview?)` and produce\n * byte-stable output for the same inputs — that's load-bearing for the\n * provider's prompt cache: repeated compactions in the same host process\n * share the same prefix and read cache instead of writing it.\n *\n * Inspired by Claude Code's `services/compact/prompt.ts` — same 9-section\n * scaffold, same `<analysis> + <summary>` envelope, same no-tools\n * preamble. Adapted to zidane-specific wording (no \"Claude\" references)\n * and trimmed of the bits that don't apply (no `marble_origami`-style\n * query sources, no compaction-fingerprint header).\n */\n\n/** Identifier for the section of the conversation being summarized. */\nexport type CompactDirection = 'full' | 'tail' | 'from' | 'up_to'\n\nexport interface CompactPromptOptions {\n  direction: CompactDirection\n  /**\n   * Short preview of the anchor turn's text — only used by `'from'` and\n   * `'up_to'`. Pass the last ~200 chars of the anchor turn so the model\n   * has a recognizable handle on where the slice begins / ends. Empty /\n   * undefined for `'full'` and `'tail'`.\n   */\n  anchorPreview?: string\n}\n\n/**\n * Function shape for callers that want to swap in a domain-specific\n * summary prompt (security review handoff, support-ticket continuation,\n * etc.) without touching the runner. Default: {@link buildCompactPrompt}.\n */\nexport type CompactPromptBuilder = (opts: CompactPromptOptions) => string\n\n// ---------------------------------------------------------------------------\n// Composable blocks — each one is a frozen string for cache-stability and\n// quoted verbatim from inside the named builders below. Exported so\n// callers building custom prompts can stitch them together.\n// ---------------------------------------------------------------------------\n\n/**\n * No-tools guard. The runner sends `tools: []` to the provider already,\n * but some models still hallucinate tool-call intent on a long\n * conversation. The prose guard is cheap insurance.\n */\nexport const NO_TOOLS_PREAMBLE = `CRITICAL: Respond with TEXT ONLY. Do NOT call any tools.\n\n- Do NOT use Read, Bash, Grep, Glob, Edit, Write, or ANY other tool.\n- You already have all the context you need in the conversation above.\n- Tool calls will be REJECTED and will waste your only turn — you will fail the task.\n- Your entire response must be plain text: an <analysis> block followed by a <summary> block.`\n\n/**\n * Body shared by every direction. Lays out the 9-section scaffold,\n * mirrors Claude Code's `BASE_COMPACT_PROMPT` so a model already trained\n * on the layout produces the same shape.\n */\nexport const BASE_INSTRUCTIONS = `Your task is to create a detailed summary of the conversation so far, paying close attention to the user's explicit requests and your previous actions.\n\nThis summary should be thorough in capturing technical details, code patterns, and architectural decisions that would be essential for continuing development work without losing context.\n\nBefore providing your final summary, wrap your analysis in <analysis> tags to organize your thoughts and ensure you've covered all necessary points. In your analysis process:\n\n1. Chronologically analyze each message and section of the conversation. For each section thoroughly identify:\n   - The user's explicit requests and intents\n   - Your approach to addressing the user's requests\n   - Key decisions, technical concepts and code patterns\n   - Specific details like file names, full code snippets, function signatures, file edits\n   - Errors that you ran into and how you fixed them\n   - Pay special attention to specific user feedback that you received, especially if the user told you to do something differently.\n2. Double-check for technical accuracy and completeness.\n\nYour summary, wrapped in <summary> tags, must include the following sections:\n\n1. Primary Request and Intent\n2. Key Technical Concepts\n3. Files and Code Sections (with paths; include code snippets only when load-bearing)\n4. Errors and fixes\n5. Problem Solving\n6. All user messages (list ALL non-tool user messages, verbatim)\n7. Pending Tasks\n8. Current Work\n9. Optional Next Step (include direct quotes from the most recent conversation when relevant)`\n\n/** Trailer prompting the model to begin. Same on every direction. */\nexport const TRAILER = 'Provide your <analysis> and <summary> now.'\n\n// ---------------------------------------------------------------------------\n// Direction blurbs — the only knob that varies between builders. Each is\n// frozen and concise so cache-key drift is impossible between calls with\n// the same direction.\n// ---------------------------------------------------------------------------\n\nconst FULL_BLURB = `## Scope\nThe conversation above is being summarized in full. Capture every section the user might need to resume from a fresh context.`\n\nconst TAIL_BLURB = `## Scope\nSummarize the conversation above. The most recent turns will be preserved verbatim alongside your summary, so prioritize older context that would otherwise be lost.`\n\nconst FROM_BLURB = `## Scope\nSummarize the conversation FROM the marked anchor onward (the recent portion). Everything before the anchor will be preserved verbatim.\n\nAnchor turn (preview):\n%ANCHOR_PREVIEW%`\n\nconst UP_TO_BLURB = `## Scope\nSummarize the conversation UP TO the marked anchor (the older portion). Everything from the anchor onward will be preserved verbatim — your summary's job is to compress the prior context the user can no longer scroll back to.\n\nAnchor turn (preview):\n%ANCHOR_PREVIEW%`\n\n// ---------------------------------------------------------------------------\n// Named builders — discoverable, single-purpose, cache-stable.\n// ---------------------------------------------------------------------------\n\n/** Compose the full prompt with a custom direction-blurb. Internal helper. */\nfunction compose(blurb: string): string {\n  return [NO_TOOLS_PREAMBLE, BASE_INSTRUCTIONS, blurb, TRAILER].join('\\n\\n')\n}\n\nexport function buildFullCompactPrompt(): string {\n  return compose(FULL_BLURB)\n}\n\nexport function buildTailCompactPrompt(): string {\n  return compose(TAIL_BLURB)\n}\n\nexport function buildFromCompactPrompt(anchorPreview: string): string {\n  return compose(FROM_BLURB.replace('%ANCHOR_PREVIEW%', anchorPreview))\n}\n\nexport function buildUpToCompactPrompt(anchorPreview: string): string {\n  return compose(UP_TO_BLURB.replace('%ANCHOR_PREVIEW%', anchorPreview))\n}\n\n/**\n * Default public builder. Dispatches by direction to the four named\n * builders. Throws when `from` / `up_to` are passed without an\n * `anchorPreview` — those scopes only make sense with an anchor and a\n * silent fallback would produce a prompt that doesn't tell the model\n * where the slice begins.\n */\nexport const buildCompactPrompt: CompactPromptBuilder = (opts) => {\n  switch (opts.direction) {\n    case 'full':\n      return buildFullCompactPrompt()\n    case 'tail':\n      return buildTailCompactPrompt()\n    case 'from': {\n      const preview = opts.anchorPreview ?? ''\n      if (preview.length === 0)\n        throw new Error('buildCompactPrompt: `anchorPreview` is required for direction \"from\".')\n      return buildFromCompactPrompt(preview)\n    }\n    case 'up_to': {\n      const preview = opts.anchorPreview ?? ''\n      if (preview.length === 0)\n        throw new Error('buildCompactPrompt: `anchorPreview` is required for direction \"up_to\".')\n      return buildUpToCompactPrompt(preview)\n    }\n  }\n}\n","/**\n * `compactConversation` — drive a one-shot summary call against a\n * provider and return a structured envelope describing what was\n * summarized and what stays verbatim.\n *\n * This is the harness primitive. It does not mutate the session, does\n * not own re-entrancy guards, does not enforce a circuit breaker — those\n * belong to whoever wires compaction into a control loop (the agent\n * loop's autocompact trigger, the TUI's session-details modal action,\n * an SDK consumer's batch job).\n *\n * Architecture: mirrors {@link generateSessionTitle} verbatim. The\n * provider's `stream()` is the one-shot completion primitive zidane\n * already exposes; this module reuses it directly instead of layering\n * a second abstraction on top.\n *\n * Caching: the system prompt is byte-stable per `(direction,\n * anchorPreview)` pair (see `./prompt.ts`). Repeated compactions in the\n * same host process share that prefix and read provider cache instead\n * of writing it.\n */\n\nimport type { Provider } from '../providers'\nimport type {\n  SessionContentBlock,\n  SessionMessage,\n  SessionTurn,\n  ThinkingLevel,\n  TurnUsage,\n} from '../types'\nimport type { CompactionSlice, CompactScope } from './messages'\nimport type { CompactPromptBuilder } from './prompt'\nimport { ensureEndsWithUserMessage, ensureToolResultPairing } from '../session/messages'\nimport { toolOutputByteLength } from '../types'\nimport { CompactPromptTooLongError } from './errors'\nimport {\n  anchorPreviewFor,\n  sliceForCompaction,\n  stripImagesFromTurns,\n  truncateHeadForPtlRetry,\n} from './messages'\nimport { buildCompactPrompt } from './prompt'\nimport { utf8ByteLength } from './utils'\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\nexport interface CompactOptions {\n  /** Provider used for the summary call. Called with empty tools list. */\n  provider: Provider\n  /** Conversation to compact, in chronological order. */\n  turns: readonly SessionTurn[]\n  /**\n   * What to summarize. Default: `'tail'` — summarize everything before\n   * the last `keepTurns` turns. See {@link CompactScope}.\n   */\n  scope?: CompactScope\n  /**\n   * Trailing turns left untouched when `scope: 'tail'`. Default: 4.\n   * Matches `AgentBehavior.compactKeepTurns` so a host that uses both\n   * mechanisms shares one knob.\n   */\n  keepTurns?: number\n  /** Model id used for the summary call. Default: `provider.meta.defaultModel`. */\n  model?: string\n  /**\n   * Maximum tokens the summary itself can occupy. Default: 20_000 — the\n   * p99.99 of summary output size in Claude Code's `COMPACT_MAX_OUTPUT`.\n   * Reasonable for any model with a 200k+ window.\n   */\n  maxOutputTokens?: number\n  /** Optional reasoning level. Default: `'off'` — summarization rarely benefits from thinking. */\n  thinking?: ThinkingLevel\n  /** Optional cancellation signal forwarded to `provider.stream()`. */\n  signal?: AbortSignal\n  /**\n   * Retries with head-truncation when the provider reports\n   * `prompt_too_long`. Each retry drops the oldest conversational round\n   * before re-issuing the call. Default: 3. Set 0 to fail-fast.\n   */\n  maxPtlRetries?: number\n  /**\n   * Optional builder override. The default builder dispatches by\n   * direction to the named builders in `./prompt.ts`; pass a custom\n   * function to swap in a domain-specific summary prompt.\n   */\n  prompt?: CompactPromptBuilder\n  /**\n   * Lifecycle hook for observability. Fires once per provider call,\n   * including retries. The `kind` field tells you whether the call is\n   * the initial attempt, a head-truncated retry, or a transient-error\n   * retry — useful for surfacing progress in a UI spinner.\n   */\n  onAttempt?: (event: { attempt: number, kind: 'initial' | 'ptl-retry' | 'transient-retry' }) => void\n}\n\n/**\n * Directive appended as the trailing user message when the conversation\n * to summarize ends with an assistant turn. Mirrors the system-prompt\n * TRAILER text so the model gets the same imperative cue from both\n * surfaces — system instruction + final user message.\n *\n * Compaction-specific: paired with the compaction system prompt. Other\n * call-sites of {@link ensureEndsWithUserMessage} pass their own directive\n * (or the neutral `DEFAULT_USER_TAIL_DIRECTIVE`) so unrelated codepaths\n * don't inject a \"give me a summary\" cue into a regular turn.\n */\nconst SUMMARY_USER_DIRECTIVE = 'Provide your <analysis> and <summary> now.'\n\nexport interface CompactResult {\n  /** The summary text, with any `<analysis>` block stripped. */\n  summary: string\n  /** Token usage from the (last successful) summary call. */\n  usage: TurnUsage\n  /** Model id used to produce the summary. */\n  model: string\n  /** Number of `prompt_too_long` retries that fired before success. 0 on first-try success. */\n  ptlRetries: number\n  /**\n   * Turn ids actually covered by the summary — i.e., the ids of turns\n   * that made it to the provider. **PTL-retry safe**: when head-truncation\n   * shrank the scope, only the surviving (post-truncation) turn ids\n   * appear here. Drives `summaryToTurn`'s `replacesTurnIds`; the wire-\n   * level cutoff in `applyCompactSummaryCutoff` reads the same field\n   * from the persisted marker.\n   */\n  summarizedTurnIds: readonly string[]\n  /**\n   * Turn ids dropped by PTL head-truncation before reaching the\n   * provider. **Empty on first-try success.** These turns are NOT\n   * covered by the summary — callers should either leave them in the\n   * conversation history (they stay visible to the model verbatim,\n   * since the id-based cutoff only elides ids the marker explicitly\n   * claims) or surface a \"compaction lost N turns of context\" warning.\n   *\n   * The harness keeps these in the wire-level conversation by default;\n   * the safety contract is \"the summary describes exactly what's in\n   * `summarizedTurnIds` — nothing more, nothing less\".\n   */\n  droppedDueToPtl: readonly string[]\n  /** Turns left untouched (the preserved tail / verbatim slice). */\n  preservedTurns: readonly SessionTurn[]\n  /** Byte length of turns actually summarized (post-PTL-truncation). */\n  beforeBytes: number\n  /** UTF-8 byte length of the summary text (rough \"after\" measure). */\n  afterBytes: number\n}\n\nexport { CompactInvalidInputError, CompactPromptTooLongError } from './errors'\nexport type { CompactionSlice, CompactScope, SummaryToTurnInput } from './messages'\nexport type { CompactDirection, CompactPromptBuilder, CompactPromptOptions } from './prompt'\n\n// ---------------------------------------------------------------------------\n// Defaults — locked constants so behavior is predictable across host setups.\n// ---------------------------------------------------------------------------\n\n/** Default `keepTurns` for `scope: 'tail'`. Matches `AgentBehavior.compactKeepTurns`. */\nconst DEFAULT_KEEP_TURNS = 4\n\n/** Default max output tokens for the summary call. */\nconst DEFAULT_MAX_OUTPUT_TOKENS = 20_000\n\n/** Default PTL retry budget. */\nconst DEFAULT_MAX_PTL_RETRIES = 3\n\n/** Maximum transient-error retries before giving up. Independent of PTL. */\nconst TRANSIENT_RETRY_BUDGET = 2\n\n// ---------------------------------------------------------------------------\n// Runner\n// ---------------------------------------------------------------------------\n\nexport async function compactConversation(opts: CompactOptions): Promise<CompactResult> {\n  // ---- Phase 1: pure preflight (no API call) -----------------------------\n  // Throws CompactInvalidInputError on degenerate inputs so the caller can\n  // bail without spending a network round-trip on a doomed request.\n  const slice = sliceForCompaction(\n    opts.turns,\n    opts.scope ?? 'tail',\n    opts.keepTurns ?? DEFAULT_KEEP_TURNS,\n  )\n\n  const direction = scopeToDirection(opts.scope ?? 'tail')\n  const anchorPreview = direction === 'from' || direction === 'up_to'\n    ? anchorPreviewFor(anchorTurnFor(slice, opts.scope!))\n    : undefined\n\n  const builder = opts.prompt ?? buildCompactPrompt\n  const systemPrompt = builder({\n    direction,\n    ...(anchorPreview !== undefined ? { anchorPreview } : {}),\n  })\n\n  const model = opts.model ?? opts.provider.meta.defaultModel\n  const maxOutputTokens = opts.maxOutputTokens ?? DEFAULT_MAX_OUTPUT_TOKENS\n  const maxPtlRetries = Math.max(0, opts.maxPtlRetries ?? DEFAULT_MAX_PTL_RETRIES)\n\n  // ---- Phase 2: retry-aware provider call --------------------------------\n  // Strips images once up-front (cheap, deterministic) so each retry\n  // doesn't re-flatten the same blocks.\n  let workingTurns: readonly SessionTurn[] = stripImagesFromTurns(slice.toSummarize)\n  let ptlRetries = 0\n  let transientRetries = 0\n  let attempt = 0\n\n  while (true) {\n    attempt++\n    const kind: 'initial' | 'ptl-retry' | 'transient-retry'\n      = ptlRetries > 0 ? 'ptl-retry' : transientRetries > 0 ? 'transient-retry' : 'initial'\n    opts.onAttempt?.({ attempt, kind })\n\n    try {\n      // Build wire messages, then run the same defensive pairing pass\n      // the agent loop uses on every live turn (see `applyPairingRepair`\n      // in `src/loop.ts`). A session can contain orphan `tool_use` blocks\n      // even after `sliceForCompaction`'s round-boundary walk: PTL\n      // head-truncation shrinks the working set after the first attempt\n      // (which can lop the head off an in-flight round), prior-loop\n      // crashes can leave dangling tool_use ids in the persisted history,\n      // and `turnsToMessages` itself can drop the only `text` block on\n      // an assistant turn carrying signed thinking that has no signature.\n      // Without this pass the summarizer fires a request the provider 400s\n      // on with `'tool_use' ids were found without 'tool_result' blocks\n      // immediately after`, which surfaces to the user as\n      // \"compaction failed\" with a raw provider message.\n      const paired = ensureToolResultPairing(turnsToMessages(workingTurns))\n      const messages = ensureEndsWithUserMessage(paired, opts.provider, SUMMARY_USER_DIRECTIVE)\n      const { summary, usage } = await runOnce({\n        provider: opts.provider,\n        model,\n        system: systemPrompt,\n        messages,\n        maxTokens: maxOutputTokens,\n        ...(opts.thinking !== undefined ? { thinking: opts.thinking } : {}),\n        ...(opts.signal !== undefined ? { signal: opts.signal } : {}),\n      })\n\n      // PTL retries shrink the scope — the marker should ONLY claim\n      // ownership of turns that actually fed the summary. Compute the\n      // dropped set up-front (cheap; turn counts are O(100s) at worst)\n      // so callers can decide whether to warn the user.\n      const workingIds = new Set(workingTurns.map(t => t.id))\n      const droppedDueToPtl: string[] = []\n      if (ptlRetries > 0) {\n        for (const t of slice.toSummarize) {\n          if (!workingIds.has(t.id))\n            droppedDueToPtl.push(t.id)\n        }\n      }\n\n      return {\n        summary,\n        usage: { ...usage, modelId: usage.modelId ?? model },\n        model,\n        ptlRetries,\n        summarizedTurnIds: workingTurns.map(t => t.id),\n        droppedDueToPtl,\n        preservedTurns: slice.preserved,\n        beforeBytes: bytesIn(workingTurns),\n        afterBytes: utf8ByteLength(summary),\n      }\n    }\n    catch (err) {\n      // Abort flows propagate unchanged so callers can pattern-match.\n      if (isAbortError(err, opts.signal))\n        throw err\n\n      if (isPromptTooLongError(err)) {\n        if (ptlRetries >= maxPtlRetries) {\n          throw new CompactPromptTooLongError(\n            `Compaction failed: prompt_too_long after ${ptlRetries} retries.`,\n            ptlRetries,\n          )\n        }\n        const truncated = truncateHeadForPtlRetry(workingTurns)\n        if (truncated.length === workingTurns.length) {\n          // Nothing more to truncate — refuse to spin.\n          throw new CompactPromptTooLongError(\n            `Compaction failed: prompt_too_long and conversation cannot be shrunk further.`,\n            ptlRetries,\n          )\n        }\n        workingTurns = truncated\n        ptlRetries++\n        continue\n      }\n\n      if (isTransientError(err) && transientRetries < TRANSIENT_RETRY_BUDGET) {\n        transientRetries++\n        continue\n      }\n\n      throw err\n    }\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Internals\n// ---------------------------------------------------------------------------\n\ninterface RunOnceOptions {\n  provider: Provider\n  model: string\n  system: string\n  messages: SessionMessage[]\n  maxTokens: number\n  thinking?: ThinkingLevel\n  signal?: AbortSignal\n}\n\ninterface RunOnceResult {\n  summary: string\n  usage: TurnUsage\n}\n\n/**\n * Single provider call. Strips the `<analysis>` block and returns the\n * post-trim summary text along with the usage report.\n *\n * Why not just use `result.text`: some providers stream deltas without\n * emitting a concatenated `text` field at the end (or set it to an\n * empty string when the stream finished via tool-call). Accumulating\n * deltas in `text` and falling back to `result.text` mirrors\n * `generateSessionTitle` and handles every adapter shape.\n */\nasync function runOnce(opts: RunOnceOptions): Promise<RunOnceResult> {\n  let streamed = ''\n  const result = await opts.provider.stream(\n    {\n      model: opts.model,\n      system: opts.system,\n      tools: [],\n      messages: opts.messages,\n      maxTokens: opts.maxTokens,\n      ...(opts.thinking !== undefined ? { thinking: opts.thinking } : {}),\n      ...(opts.signal !== undefined ? { signal: opts.signal } : {}),\n    },\n    {\n      onText: (delta) => { streamed += delta },\n    },\n  )\n\n  const raw = streamed.length > 0 ? streamed : result.text\n  let summary = stripAnalysisBlock(raw).trim()\n\n  // Reasoning-model fallback. Some models (Qwen-thinking, GLM, DeepSeek\n  // reasoning variants, …) write the entire response into their\n  // reasoning channel rather than `delta.content`. From this layer the\n  // `text` stream is empty, but the assistant message carries\n  // `{ type: 'thinking', text }` blocks containing the actual summary\n  // (often still wrapped in `<analysis>` / `<summary>` tags from the\n  // prompt). Walk those blocks and apply the same extraction waterfall\n  // before giving up. Saves the user from \"model misbehaved, retry\" on\n  // every compaction when their selected model happens to reason\n  // instead of speak.\n  if (summary.length === 0) {\n    const thinking = collectThinkingText(result.assistantMessage)\n    if (thinking.length > 0)\n      summary = stripAnalysisBlock(thinking).trim()\n  }\n\n  if (summary.length === 0) {\n    // Truly empty — aborted stream, tool-call-only turn, or a model\n    // that refused to summarize. `stripAnalysisBlock` already fell back\n    // to raw `<analysis>` content when the model wrapped everything in\n    // the wrong tag; the thinking fallback above caught the reasoning-\n    // channel case. Reaching this branch means there's nothing usable\n    // anywhere in the response.\n    throw new Error('Compaction failed: provider returned no summary text.')\n  }\n  return { summary, usage: result.usage }\n}\n\n/**\n * Concatenate every `thinking`-block's text from an assistant message.\n *\n * Reasoning models route their output through provider-specific\n * \"thinking\" channels (Anthropic native thinking, OpenAI o-series\n * reasoning, OpenAI-compat `reasoning_content`, OpenRouter\n * `reasoning_details`). All of them surface as `{ type: 'thinking', text }`\n * blocks on the normalized `SessionMessage.content` by the time the\n * provider's `stream()` returns. Walking the blocks is provider-agnostic\n * — works for every adapter without bespoke per-provider handling.\n *\n * Returns the empty string when no thinking blocks are present, so the\n * caller's \"did we get anything?\" check stays a single `.length === 0`.\n */\nfunction collectThinkingText(message: SessionMessage): string {\n  const parts: string[] = []\n  for (const block of message.content) {\n    if (block.type === 'thinking' && typeof block.text === 'string' && block.text.length > 0)\n      parts.push(block.text)\n  }\n  return parts.join('\\n')\n}\n\n/**\n * Extract the summary text from the provider's response, peeling off\n * any envelope the model wrapped it in.\n *\n * The compact prompt asks for `<analysis>...</analysis><summary>...</summary>`\n * but real models drift from the format. This function tries four\n * extraction paths in order of strictness:\n *\n *  1. **Strict path** — strip `<analysis>...</analysis>` blocks and\n *     extract the `<summary>...</summary>` envelope. Matches the\n *     prompt-following ideal.\n *  2. **Loose path** — same strip, but accept whatever's outside the\n *     `<analysis>` tags as the summary (no `<summary>` envelope\n *     required). Handles models that drop the wrapper but keep the\n *     analysis.\n *  3. **Analysis-as-summary fallback** — when the entire response is a\n *     single `<analysis>` block (model conflated the two concepts),\n *     return the analysis content. Better than failing the compaction\n *     and forcing the user to retry.\n *  4. **Raw passthrough** — no recognized envelope. Return the text\n *     as-is and let `runOnce`'s empty-check decide whether to throw.\n *\n * Matches Claude Code's `formatCompactSummary` for path (1) + (2) and\n * adds (3) as a graceful-degradation layer we ran into in the wild\n * (smaller / non-Anthropic models sometimes produce analysis-only).\n */\nfunction stripAnalysisBlock(text: string): string {\n  // Strict + loose: strip `<analysis>...</analysis>` non-greedy + dot-all\n  // (no `s` flag in Bun's V8 — `[\\s\\S]` does the same).\n  const analysisStripped = text.replace(/<analysis>[\\s\\S]*?<\\/analysis>/g, '')\n\n  // Path 1: explicit `<summary>...</summary>` envelope.\n  const summaryMatch = analysisStripped.match(/<summary>([\\s\\S]*?)<\\/summary>/)\n  if (summaryMatch)\n    return summaryMatch[1]\n\n  // Path 2: anything outside the `<analysis>` block.\n  if (analysisStripped.trim().length > 0)\n    return analysisStripped\n\n  // Path 3: response was nothing but an `<analysis>` block — extract\n  // its content and use that as the summary. The model meant to give\n  // us a summary; it just wrapped it in the wrong tag.\n  const analysisMatch = text.match(/<analysis>([\\s\\S]*?)<\\/analysis>/)\n  if (analysisMatch)\n    return analysisMatch[1]\n\n  // Path 4: no envelope of any shape — return verbatim.\n  return text\n}\n\n/**\n * Convert turns into the wire-level `SessionMessage[]` shape. Drops\n * system turns (rare; they'd confuse a summary call), and inlines any\n * pre-existing `compact-summary` markers as plain text so the\n * provider's wire converter doesn't have to know about zidane's\n * internal block type.\n *\n * Inlining (instead of dropping) is intentional: a session already\n * compacted once still contains the prior summary as load-bearing\n * context. Surfacing it as `[Previous compaction summary]\\n…` lets the\n * new summarization integrate it instead of forgetting it.\n */\nfunction turnsToMessages(turns: readonly SessionTurn[]): SessionMessage[] {\n  const out: SessionMessage[] = []\n  for (const turn of turns) {\n    if (turn.role === 'system')\n      continue\n    const content: SessionContentBlock[] = []\n    for (const block of turn.content) {\n      if (block.type === 'compact-summary') {\n        content.push({\n          type: 'text',\n          text: `[Previous compaction summary]\\n${block.summary}`,\n        })\n        continue\n      }\n      // Strip `thinking` blocks. They're the model's internal reasoning,\n      // signed by the producing provider (`signatureProducer: 'anthropic'`),\n      // and only valid in a follow-up request when that same request has\n      // extended thinking enabled. The compaction call deliberately runs\n      // with `thinking: undefined` (summarization rarely benefits from\n      // reasoning, and we don't want to pay the budget), so re-sending\n      // thinking blocks puts Anthropic in an inconsistent state: it\n      // accepts the request without 400-ing but silently returns an\n      // empty `text` response. The user-visible symptom is \"Compaction\n      // failed: provider returned no summary text\" on sessions where\n      // any turn used extended thinking. Thinking is opaque-by-design;\n      // dropping it for the summary call doesn't lose conversational\n      // content (the model's visible text is in adjacent `text` blocks).\n      if (block.type === 'thinking')\n        continue\n      content.push(block)\n    }\n    if (content.length === 0)\n      continue\n    out.push({ role: turn.role, content })\n  }\n  return out\n}\n\nfunction scopeToDirection(scope: CompactScope): 'full' | 'tail' | 'from' | 'up_to' {\n  if (scope === 'full' || scope === 'tail')\n    return scope\n  return scope.kind\n}\n\nfunction anchorTurnFor(slice: CompactionSlice, scope: CompactScope): SessionTurn {\n  // Caller-side invariant: `sliceForCompaction` already verified the anchor\n  // exists when scope.kind is set. We re-locate it here so the preview is\n  // built from the exact same turn the prompt builder will reference.\n  if (typeof scope === 'string')\n    throw new Error('anchorTurnFor: scope must be object form')\n  if (scope.kind === 'from')\n    return slice.toSummarize[0]!\n  return slice.toSummarize[slice.toSummarize.length - 1]!\n}\n\nfunction bytesIn(turns: readonly SessionTurn[]): number {\n  let total = 0\n  for (const turn of turns) {\n    for (const block of turn.content) {\n      if (block.type === 'text')\n        total += utf8ByteLength(block.text)\n      else if (block.type === 'tool_result')\n        total += toolOutputByteLength(block.output)\n      else if (block.type === 'tool_call')\n        total += utf8ByteLength(JSON.stringify(block.input))\n      else if (block.type === 'thinking')\n        total += utf8ByteLength(block.text)\n    }\n  }\n  return total\n}\n\n// ---------------------------------------------------------------------------\n// Error classification\n// ---------------------------------------------------------------------------\n\n/**\n * Provider-agnostic predicate for the \"prompt is too long\" rejection.\n * Inspects error code, type, status, and message substring — every\n * provider names this case differently but the message is recognizable.\n */\nfunction isPromptTooLongError(err: unknown): boolean {\n  if (!err || typeof err !== 'object')\n    return false\n  const e = err as Record<string, unknown>\n  if (typeof e.code === 'string' && /prompt[_ ]too[_ ]long/i.test(e.code))\n    return true\n  if (typeof e.status === 'number' && (e.status === 413 || e.status === 400)) {\n    const message = typeof e.message === 'string' ? e.message : ''\n    if (/prompt[_ ]too[_ ]long|context[_ ]length|maximum[_ ]context|too many tokens/i.test(message))\n      return true\n  }\n  if (typeof e.message === 'string'\n    && /prompt[_ ]too[_ ]long|context[_ ]length[_ ]exceeded|context window/i.test(e.message)) {\n    return true\n  }\n  // Anthropic SDK shape: `error.error.type === 'invalid_request_error'`\n  // with a `prompt is too long` message.\n  const nested = (e.error ?? {}) as Record<string, unknown>\n  if (typeof nested.type === 'string' && nested.type === 'invalid_request_error') {\n    const message = typeof nested.message === 'string' ? nested.message : ''\n    if (/prompt[_ ]too[_ ]long|too long|context window/i.test(message))\n      return true\n  }\n  return false\n}\n\n/**\n * Transient network / 5xx errors worth retrying once or twice.\n */\nfunction isTransientError(err: unknown): boolean {\n  if (!err || typeof err !== 'object')\n    return false\n  const e = err as Record<string, unknown>\n  if (typeof e.status === 'number' && e.status >= 500 && e.status < 600)\n    return true\n  if (typeof e.code === 'string' && /ECONNRESET|ETIMEDOUT|ENETUNREACH|EAI_AGAIN|fetch failed/i.test(e.code))\n    return true\n  if (typeof e.message === 'string'\n    && /socket hang up|fetch failed|network error|terminated|ECONNRESET|read ETIMEDOUT/i.test(e.message)) {\n    return true\n  }\n  return false\n}\n\nfunction isAbortError(err: unknown, signal: AbortSignal | undefined): boolean {\n  if (signal?.aborted)\n    return true\n  if (!err || typeof err !== 'object')\n    return false\n  const e = err as Record<string, unknown>\n  if (e.name === 'AbortError')\n    return true\n  if (typeof e.message === 'string' && /aborted/i.test(e.message))\n    return true\n  return false\n}\n","/**\n * Post-compact restoration — re-inject load-bearing working state as\n * synthetic tool-call/tool-result pairs after a {@link compactConversation}\n * marker lands in a session.\n *\n * Without this step, the model has a narrative summary but loses direct\n * access to the files it was actively editing and the skills it was\n * following. Restoration re-attaches the top-N recently-read files and\n * active skills so the next turn starts with full working context — no\n * forced re-reads, no degraded continuation.\n *\n * Design — synthetic tool_call/tool_result pairs:\n *\n *   Two turns are appended after the compaction marker:\n *\n *     [marker]                           ← from `summaryToTurn(result)`\n *     [assistant, tool_calls × N]        ← synthetic, one tool_call per item\n *     [user,      tool_results × N]      ← synthetic, matching results\n *     [new prompt]                       ← user's next message\n *\n *   The synthetic turns look identical to what the agent would produce if it\n *   had actually run `read_file` / `skills_use` — by design, because at the\n *   moment of compaction those operations had just happened with that data.\n *\n *   Persisted blocks use **canonical** tool names (e.g. `read_file`). The\n *   agent loop's `rewriteMessagesToWire` translates them to whatever alias\n *   the host configured before they reach the provider, exactly as it does\n *   for real calls. Restoration therefore \"just works\" through aliasing —\n *   the helper does not need to consult the alias map.\n *\n * Budgets — mirror Claude Code's `services/compact/compact.ts:122-130`:\n *\n *   - 50_000 tokens total file budget, 5_000 per file, max 5 files\n *   - 25_000 tokens total skill budget, 5_000 per skill (no count cap)\n *\n *   Tokens are estimated at 4 chars/token — same heuristic Claude Code uses\n *   for budget arithmetic. Hosts can override every limit.\n *\n * Failure modes:\n *\n *   - File read fails (deleted, permissions) → skip silently. Other items\n *     still proceed.\n *   - No `execution` / `handle` passed → file restoration is a no-op;\n *     skill restoration still works (skills carry their content inline).\n *   - Empty `recentFiles` AND empty `activeSkills` → returns `{ turns: [] }`\n *     so the caller's `appendTurns([summary, ...attachments])` is a no-op\n *     on the attachments.\n */\n\nimport type { ExecutionContext, ExecutionHandle } from '../contexts'\nimport type { Session } from '../session'\nimport type { ActiveSkill } from '../skills/activation'\nimport type { SessionContentBlock, SessionTurn } from '../types'\nimport { getReadState } from '../tools/read-state'\nimport { BYTES_PER_TOKEN, estimateTokens, utf8ByteLength } from './utils'\n\n// ---------------------------------------------------------------------------\n// Defaults — match Claude Code's published constants for parity.\n// ---------------------------------------------------------------------------\n\nconst DEFAULT_FILE_TOKEN_BUDGET = 50_000\nconst DEFAULT_FILE_TOKEN_PER_FILE_CAP = 5_000\nconst DEFAULT_MAX_FILES_TO_RESTORE = 5\n\nconst DEFAULT_SKILL_TOKEN_BUDGET = 25_000\nconst DEFAULT_SKILL_TOKEN_PER_SKILL_CAP = 5_000\n\n/** Default canonical tool names — `rewriteMessagesToWire` handles aliasing. */\nconst DEFAULT_READ_FILE_TOOL_NAME = 'read_file'\nconst DEFAULT_SKILLS_USE_TOOL_NAME = 'skills_use'\n\n// ---------------------------------------------------------------------------\n// Public types\n// ---------------------------------------------------------------------------\n\n/** One file selected for restoration, with its last-read timestamp for ranking. */\nexport interface RecentFile {\n  /** Path relative to the execution context's `handle.cwd`. */\n  path: string\n  /** Wall-clock when the file was last read, in ms. Drives recency ranking. */\n  mtimeMs: number\n}\n\nexport interface PostCompactRestoreOptions {\n  // ---- What to restore ---------------------------------------------------\n\n  /**\n   * Files to consider for restoration, ranked by recency. Typically derived\n   * via {@link selectFilesFromReadState} from `getReadState(session)`.\n   * The helper takes the top {@link PostCompactRestoreOptions.maxFilesToRestore}\n   * by `mtimeMs` descending, fetches their current content, and synthesizes\n   * `read_file` tool_call/tool_result pairs.\n   */\n  recentFiles?: readonly RecentFile[]\n\n  /**\n   * Active skills to re-inject. Typically `agent.activeSkills`. Each entry\n   * yields a synthetic `skills_use` tool_call/tool_result pair carrying the\n   * skill's instructions (possibly truncated to the per-skill budget).\n   */\n  activeSkills?: readonly ActiveSkill[]\n\n  // ---- I/O ---------------------------------------------------------------\n\n  /**\n   * Execution context used to fetch file content. **Required for file\n   * restoration.** Skills come pre-loaded (instructions live on the\n   * `SkillConfig`), so they don't need the context.\n   */\n  execution?: ExecutionContext\n  handle?: ExecutionHandle\n\n  // ---- Tool naming -------------------------------------------------------\n\n  /**\n   * Canonical name of the file-read tool. Defaults to `read_file`. Aliases\n   * (e.g. `Read`) are NOT specified here — the agent loop's\n   * `rewriteMessagesToWire` handles wire conversion automatically.\n   *\n   * Override only when a host registered file-read under a different\n   * canonical name (not just an alias).\n   */\n  readFileToolName?: string\n  /**\n   * Canonical name of the skill-activation tool. Defaults to `skills_use`.\n   * Same aliasing semantics as `readFileToolName`.\n   */\n  skillsUseToolName?: string\n\n  // ---- Budgets -----------------------------------------------------------\n\n  /** Total token budget for file restoration. Default: 50_000. */\n  fileTokenBudget?: number\n  /** Per-file token cap. Default: 5_000. */\n  fileTokenPerFileCap?: number\n  /** Maximum file count. Default: 5. */\n  maxFilesToRestore?: number\n\n  /** Total token budget for skill restoration. Default: 25_000. */\n  skillTokenBudget?: number\n  /** Per-skill token cap. Default: 5_000. */\n  skillTokenPerSkillCap?: number\n\n  // ---- Filtering ---------------------------------------------------------\n\n  /**\n   * Paths to skip — typically the file paths already covered by the\n   * compaction result's `preservedTurns`. Avoids double-injection when the\n   * recent reads sit in the preserved tail.\n   */\n  excludePaths?: readonly string[]\n\n  // ---- Synthesis ---------------------------------------------------------\n\n  /**\n   * Optional `runId` to tag the synthetic turns with — useful for hosts\n   * that want the restoration turns to roll up under the same run as the\n   * compaction marker. Defaults to undefined (orphan turns).\n   */\n  runId?: string\n}\n\n/**\n * Envelope returned by {@link buildPostCompactAttachments}. The caller\n * spreads `turns` into `session.appendTurns([summaryTurn, ...turns])`.\n * Count fields drive UI banners (\"restored 5 files + 2 skills\").\n */\nexport interface PostCompactAttachments {\n  /**\n   * Two synthetic turns when at least one item was restored, otherwise\n   * an empty array. The pair is `[assistant_with_tool_calls,\n   * user_with_tool_results]` — adjacent and well-formed for every\n   * provider's `tool_use ↔ tool_result` invariant.\n   */\n  turns: readonly SessionTurn[]\n  /** Count of files actually restored (post-budget). */\n  restoredFiles: number\n  /** Count of skills actually restored (post-budget). */\n  restoredSkills: number\n  /** Rough total token cost of the restoration payload (sum of all content). */\n  estimatedTokens: number\n}\n\n// ---------------------------------------------------------------------------\n// Pure helpers — exported for tests + caller convenience\n// ---------------------------------------------------------------------------\n\n/**\n * Convert a raw read-state map into a deduped, path-ranked list ready for\n * restoration. Multiple entries for the same path (different\n * `(offset, limit, maxBytes)` slices) collapse to one — keeping the most\n * recent `mtimeMs`.\n *\n * Filters out entries whose key doesn't share the given `cwd` prefix:\n * those came from a different execution context and can't be read back\n * through this agent's handle.\n *\n * Pure. Most callers want {@link selectFilesFromSession}, which wraps\n * `getReadState(session)` + this function in one call so the host\n * doesn't have to reach into the tools layer.\n */\nexport function selectFilesFromReadState(\n  readState: ReadonlyMap<string, { mtimeMs: number }>,\n  cwd: string,\n): RecentFile[] {\n  const prefix = `${cwd}::`\n  const byPath = new Map<string, number>()\n  for (const [key, entry] of readState) {\n    if (!key.startsWith(prefix))\n      continue\n    const path = key.slice(prefix.length)\n    if (path.length === 0)\n      continue\n    const prior = byPath.get(path) ?? -Infinity\n    if (entry.mtimeMs > prior)\n      byPath.set(path, entry.mtimeMs)\n  }\n  return Array.from(byPath, ([path, mtimeMs]) => ({ path, mtimeMs }))\n    .sort((a, b) => b.mtimeMs - a.mtimeMs)\n}\n\n/**\n * Session-aware convenience: extract recently-read files directly from\n * a {@link Session} via its per-session read-state map.\n *\n * Hosts (TUI / SDK consumers) typically have a `Session` and a `cwd`\n * (the active agent's `handle.cwd`) on hand — this wrapper saves them\n * from reaching into `src/tools/read-state.ts` directly. Returns an\n * empty list when no read state has been recorded yet (fresh session,\n * or `behavior.dedupReads === false`).\n *\n * Equivalent to:\n *\n * ```ts\n * const state = getReadState(session)\n * return state ? selectFilesFromReadState(state, cwd) : []\n * ```\n */\nexport function selectFilesFromSession(\n  session: Session,\n  cwd: string,\n): RecentFile[] {\n  const state = getReadState(session)\n  return state ? selectFilesFromReadState(state, cwd) : []\n}\n\n/**\n * Pick the top `maxFiles` from `files` (descending by `mtimeMs`),\n * dropping any whose path appears in `excludePaths`.\n *\n * Stable for equal mtimes — files with the same timestamp retain their\n * input order. Pure.\n */\nexport function selectRecentFiles(\n  files: readonly RecentFile[],\n  opts: { maxFiles: number, excludePaths?: readonly string[] },\n): RecentFile[] {\n  const excluded = new Set(opts.excludePaths ?? [])\n  const filtered = files.filter(f => !excluded.has(f.path))\n  // Defensive sort — caller may pass an already-sorted list, but doing it\n  // here keeps the function total regardless of input order.\n  const sorted = filtered.slice().sort((a, b) => b.mtimeMs - a.mtimeMs)\n  return sorted.slice(0, Math.max(0, opts.maxFiles))\n}\n\n// ---------------------------------------------------------------------------\n// Internal — content formatting + truncation\n// ---------------------------------------------------------------------------\n\ninterface FormattedFile {\n  /** Tool-result content (line-numbered, with optional truncation footer). */\n  body: string\n  /** Whether the content was truncated to fit the per-file budget. */\n  truncated: boolean\n  /** Estimated token cost of `body` (post-truncation). */\n  estimatedTokens: number\n}\n\ninterface FormattedSkill {\n  body: string\n  truncated: boolean\n  estimatedTokens: number\n}\n\n/**\n * Format a file's contents to match `read_file`'s output shape — 1-indexed\n * line numbers separated by tabs, identical to what the model has seen\n * from real `read_file` calls. Applies the per-file token cap by truncating\n * at the nearest line boundary; appends a footer pointing at the next\n * offset so the model can re-read the rest if needed.\n */\nfunction formatFileForRestoration(\n  content: string,\n  perFileTokenCap: number,\n): FormattedFile {\n  const totalBytes = utf8ByteLength(content)\n  const allLines = content.split('\\n')\n  const totalLines = allLines.length\n\n  // Build the line-numbered body first; tokens are counted on the\n  // numbered form because that's what reaches the provider.\n  const numbered: string[] = []\n  let runningChars = 0\n  const charCap = Math.max(1, perFileTokenCap) * BYTES_PER_TOKEN\n  let truncatedAt = -1\n  let midLineCut = false\n\n  for (let i = 0; i < allLines.length; i++) {\n    const numberedLine = `${i + 1}\\t${allLines[i]}`\n    const lineCharCost = numberedLine.length + (i < allLines.length - 1 ? 1 : 0) // +1 for the joining '\\n' on every line but the last\n    if (runningChars + lineCharCost > charCap) {\n      if (numbered.length === 0) {\n        // The first line on its own already overflows (typical for\n        // minified JS, CSV-on-one-line, etc.). Cut it at the char\n        // boundary so we return SOMETHING useful — the head of the\n        // file — instead of either failing or admitting a huge first\n        // line that blows the budget. Mid-line cuts mean we can't\n        // suggest a precise re-read offset; the footer says so.\n        const cutTo = Math.max(1, charCap - `${i + 1}\\t`.length)\n        numbered.push(`${i + 1}\\t${allLines[i].slice(0, cutTo)}`)\n        midLineCut = true\n      }\n      truncatedAt = i\n      break\n    }\n    numbered.push(numberedLine)\n    runningChars += lineCharCost\n  }\n\n  const body = numbered.join('\\n')\n  if (truncatedAt < 0)\n    return { body, truncated: false, estimatedTokens: estimateTokens(body) }\n\n  const lineLabel = midLineCut\n    ? `line ${truncatedAt + 1} (mid-line)`\n    : `line ${truncatedAt}`\n  const offsetHint = midLineCut\n    ? `mid-line cut prevents a precise offset — re-read with offset=${truncatedAt + 1} and a larger maxBytes`\n    : `re-read with offset=${truncatedAt + 1} to continue`\n  const footer = `\\n\\n…truncated at ${lineLabel} (post-compact restoration cap: ${perFileTokenCap} tokens). File has ${totalLines} lines, ${totalBytes} bytes total — ${offsetHint}.`\n  const truncated = body + footer\n  return { body: truncated, truncated: true, estimatedTokens: estimateTokens(truncated) }\n}\n\n/**\n * Format a skill's instructions for restoration. Skills are plain markdown\n * — no line numbering, no wrapping XML envelope (the model already\n * understands the format from real `skills_use` calls). Truncation cuts\n * at a line boundary when possible; appends a marker so the model knows\n * the body is incomplete.\n */\nfunction formatSkillForRestoration(\n  instructions: string,\n  perSkillTokenCap: number,\n): FormattedSkill {\n  const charCap = Math.max(1, perSkillTokenCap) * BYTES_PER_TOKEN\n  if (instructions.length <= charCap) {\n    return { body: instructions, truncated: false, estimatedTokens: estimateTokens(instructions) }\n  }\n  // Truncate at the nearest line boundary at or before charCap so the\n  // body stays markdown-parseable.\n  const head = instructions.slice(0, charCap)\n  const lastNewline = head.lastIndexOf('\\n')\n  const cutoff = lastNewline > 0 ? lastNewline : charCap\n  const truncatedBody\n    = `${instructions.slice(0, cutoff).trimEnd()}\\n\\n…[truncated post-compact at ${perSkillTokenCap} tokens; full skill body lives at the skill's location]`\n  return {\n    body: truncatedBody,\n    truncated: true,\n    estimatedTokens: estimateTokens(truncatedBody),\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Public runner\n// ---------------------------------------------------------------------------\n\n/**\n * Build the synthetic turns to append after a `compact-summary` marker.\n *\n * Returns a `PostCompactAttachments` envelope; the caller is responsible\n * for `session.appendTurns([summaryTurn, ...result.turns])`. The two\n * synthetic turns are always emitted together (or both omitted when\n * nothing was restored) so the `tool_use ↔ tool_result` adjacency\n * invariant holds regardless of caller code path.\n *\n * Failure isolation: a single file's read failure never blocks the rest\n * of restoration — that file is skipped silently and processing\n * continues. The returned `restoredFiles` count reflects what actually\n * landed in the synthesized turns.\n */\nexport async function buildPostCompactAttachments(\n  opts: PostCompactRestoreOptions,\n): Promise<PostCompactAttachments> {\n  const fileTokenBudget = opts.fileTokenBudget ?? DEFAULT_FILE_TOKEN_BUDGET\n  const fileTokenPerFileCap = opts.fileTokenPerFileCap ?? DEFAULT_FILE_TOKEN_PER_FILE_CAP\n  const maxFilesToRestore = opts.maxFilesToRestore ?? DEFAULT_MAX_FILES_TO_RESTORE\n  const skillTokenBudget = opts.skillTokenBudget ?? DEFAULT_SKILL_TOKEN_BUDGET\n  const skillTokenPerSkillCap = opts.skillTokenPerSkillCap ?? DEFAULT_SKILL_TOKEN_PER_SKILL_CAP\n  const readFileToolName = opts.readFileToolName ?? DEFAULT_READ_FILE_TOOL_NAME\n  const skillsUseToolName = opts.skillsUseToolName ?? DEFAULT_SKILLS_USE_TOOL_NAME\n\n  // ---- Phase 1: pick candidates --------------------------------------\n  //\n  // Tool-availability is governed at the input layer: callers control\n  // which categories are restored by what they pass. To skip files,\n  // pass empty `recentFiles` (or none). To skip skills, pass empty\n  // `activeSkills` (or none). The runner trusts the caller to know\n  // what tools the next agent run will have access to — auto-injected\n  // tools (`skills_use`, MCP, interaction tools) aren't introspectable\n  // from a profile config and constructing a tool-allowlist here would\n  // be incomplete by design.\n  const candidateFiles = opts.recentFiles && opts.recentFiles.length > 0\n    ? selectRecentFiles(opts.recentFiles, {\n        maxFiles: maxFilesToRestore,\n        ...(opts.excludePaths ? { excludePaths: opts.excludePaths } : {}),\n      })\n    : []\n  const candidateSkills = opts.activeSkills ?? []\n\n  // ---- Phase 2: fetch + format files (with per-file + group budget) --\n  const fileCalls: Array<{ callId: string, path: string, body: string, estimatedTokens: number }> = []\n  let fileBudgetUsed = 0\n  if (candidateFiles.length > 0 && opts.execution && opts.handle) {\n    for (let i = 0; i < candidateFiles.length; i++) {\n      const file = candidateFiles[i]\n      let content: string\n      try {\n        content = await opts.execution.readFile(opts.handle, file.path)\n      }\n      catch {\n        // File deleted / unreadable since the last read — skip silently.\n        continue\n      }\n      const formatted = formatFileForRestoration(content, fileTokenPerFileCap)\n      if (fileBudgetUsed + formatted.estimatedTokens > fileTokenBudget) {\n        // Adding this file would blow the group budget. Stop here — the\n        // remaining files are older anyway (candidates are pre-sorted by\n        // recency descending).\n        break\n      }\n      fileBudgetUsed += formatted.estimatedTokens\n      fileCalls.push({\n        callId: `compact-restore-file-${i}`,\n        path: file.path,\n        body: formatted.body,\n        estimatedTokens: formatted.estimatedTokens,\n      })\n    }\n  }\n\n  // ---- Phase 3: format skills (no I/O — instructions are inline) -----\n  const skillCalls: Array<{ callId: string, name: string, body: string, estimatedTokens: number }> = []\n  let skillBudgetUsed = 0\n  for (let i = 0; i < candidateSkills.length; i++) {\n    const active = candidateSkills[i]\n    const instructions = active.skill.instructions ?? ''\n    if (instructions.trim().length === 0)\n      continue\n    const formatted = formatSkillForRestoration(instructions, skillTokenPerSkillCap)\n    if (skillBudgetUsed + formatted.estimatedTokens > skillTokenBudget)\n      break\n    skillBudgetUsed += formatted.estimatedTokens\n    skillCalls.push({\n      callId: `compact-restore-skill-${i}`,\n      name: active.skill.name,\n      body: formatted.body,\n      estimatedTokens: formatted.estimatedTokens,\n    })\n  }\n\n  // ---- Phase 4: synthesize turns -------------------------------------\n  if (fileCalls.length === 0 && skillCalls.length === 0) {\n    return { turns: [], restoredFiles: 0, restoredSkills: 0, estimatedTokens: 0 }\n  }\n\n  const assistantBlocks: SessionContentBlock[] = []\n  const userBlocks: SessionContentBlock[] = []\n\n  for (const fc of fileCalls) {\n    assistantBlocks.push({\n      type: 'tool_call',\n      id: fc.callId,\n      name: readFileToolName,\n      input: { path: fc.path },\n    })\n    userBlocks.push({\n      type: 'tool_result',\n      callId: fc.callId,\n      output: fc.body,\n    })\n  }\n  for (const sc of skillCalls) {\n    assistantBlocks.push({\n      type: 'tool_call',\n      id: sc.callId,\n      name: skillsUseToolName,\n      input: { name: sc.name },\n    })\n    userBlocks.push({\n      type: 'tool_result',\n      callId: sc.callId,\n      output: sc.body,\n    })\n  }\n\n  const now = Date.now()\n  const tag = opts.runId ? { runId: opts.runId } : {}\n  const turns: SessionTurn[] = [\n    {\n      id: crypto.randomUUID(),\n      role: 'assistant',\n      content: assistantBlocks,\n      createdAt: now,\n      ...tag,\n    },\n    {\n      id: crypto.randomUUID(),\n      role: 'user',\n      content: userBlocks,\n      // +1 ms so the user turn sorts after the assistant turn under\n      // tie-breaking sorts that walk by `createdAt`.\n      createdAt: now + 1,\n      ...tag,\n    },\n  ]\n\n  return {\n    turns,\n    restoredFiles: fileCalls.length,\n    restoredSkills: skillCalls.length,\n    estimatedTokens: fileBudgetUsed + skillBudgetUsed,\n  }\n}\n","/**\n * Structured logging primitive with auto-correlation.\n *\n * Every consumer of the harness used to roll its own logger; the TUI has\n * one, downstream apps have theirs, observability backends each want a\n * slightly different shape. This module ships the smallest reasonable\n * shared surface:\n *\n * - {@link Logger} — minimal level-tagged interface (`debug` / `info` /\n *   `warn` / `error`) plus a `with(...)` method that returns a child\n *   logger carrying baseline attributes (`runId`, `turnId`, `callId`,\n *   `childId`, `depth`, anything you want).\n * - {@link createLogger} — builds a Logger from a {@link LogSink}.\n * - {@link consoleSink} / {@link jsonSink} — built-in sinks that cover\n *   the common cases (human-readable to a terminal vs. one JSON object\n *   per line to a log aggregator).\n * - {@link createLoggingHooks} — installs Logger-attached hook handlers\n *   on an agent so every lifecycle event lands on the sink with the\n *   right correlation ids already stamped in.\n *\n * Hosts that already own a logger (pino, winston, structlog binding,\n * platform-native) plug it in via a custom {@link LogSink} — the helper\n * itself does no I/O.\n */\n\nimport type { Hookable } from 'hookable'\nimport type { AgentHooks } from './agent'\n\n// ---------------------------------------------------------------------------\n// Core types\n// ---------------------------------------------------------------------------\n\nexport type LogLevel = 'debug' | 'info' | 'warn' | 'error'\n\nexport interface LogRecord {\n  level: LogLevel\n  /** Unix ms — set by `Logger` at emit time. */\n  timestamp: number\n  /** Free-form message. Sinks render this as the human-facing line. */\n  message: string\n  /** Structured fields. Correlation ids land here automatically. */\n  attrs: Record<string, unknown>\n}\n\nexport interface LogSink {\n  emit: (record: LogRecord) => void\n}\n\nexport interface Logger {\n  debug: (message: string, attrs?: Record<string, unknown>) => void\n  info: (message: string, attrs?: Record<string, unknown>) => void\n  warn: (message: string, attrs?: Record<string, unknown>) => void\n  error: (message: string, attrs?: Record<string, unknown>) => void\n  /**\n   * Returns a child logger that prepends the given attributes onto every\n   * subsequent emit. Equivalent to `pino.child` / `winston.child`. The\n   * parent and child share the same sink — children are zero-cost.\n   */\n  with: (extra: Record<string, unknown>) => Logger\n  /**\n   * Inspectable baseline attributes — handy for tests and for hook\n   * handlers that want to clone-with-extra without recursing.\n   */\n  readonly baseAttributes: Readonly<Record<string, unknown>>\n}\n\n// ---------------------------------------------------------------------------\n// createLogger\n// ---------------------------------------------------------------------------\n\n/**\n * Build a Logger from a sink. Stateless and cheap; create one per agent\n * (or per app) and use `.with()` to attach correlation ids per-call.\n */\nexport function createLogger(\n  sink: LogSink,\n  baseAttributes: Readonly<Record<string, unknown>> = {},\n): Logger {\n  function emit(level: LogLevel, message: string, attrs?: Record<string, unknown>): void {\n    try {\n      sink.emit({\n        level,\n        timestamp: Date.now(),\n        message,\n        attrs: attrs ? { ...baseAttributes, ...attrs } : { ...baseAttributes },\n      })\n    }\n    catch {\n      // Sinks should never crash the run.\n    }\n  }\n\n  return {\n    debug: (m, a) => emit('debug', m, a),\n    info: (m, a) => emit('info', m, a),\n    warn: (m, a) => emit('warn', m, a),\n    error: (m, a) => emit('error', m, a),\n    with: extra => createLogger(sink, { ...baseAttributes, ...extra }),\n    baseAttributes,\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Built-in sinks\n// ---------------------------------------------------------------------------\n\nexport interface ConsoleSinkOptions {\n  /**\n   * Minimum level to emit. Defaults to `'info'` — `debug` is dropped so\n   * the harness's lifecycle logging is not noisy by default. Set to\n   * `'debug'` to see every event.\n   */\n  minLevel?: LogLevel\n  /** Custom output stream. Defaults to `process.stderr` so logs don't pollute stdout. */\n  stream?: { write: (chunk: string) => void }\n}\n\nconst LEVEL_ORDER: Record<LogLevel, number> = {\n  debug: 0,\n  info: 1,\n  warn: 2,\n  error: 3,\n}\n\n/**\n * Human-readable terminal sink. Renders each record as\n * `<ISO timestamp> <LEVEL> <message> <attrs as kv pairs>`.\n *\n * Honors `process.stderr` by default so log lines don't interleave with\n * the agent's stdout-bound output (chat responses, JSON results).\n */\nexport function consoleSink(options: ConsoleSinkOptions = {}): LogSink {\n  const min = LEVEL_ORDER[options.minLevel ?? 'info']\n  const stream = options.stream ?? process.stderr\n  return {\n    emit(record) {\n      if (LEVEL_ORDER[record.level] < min)\n        return\n      const ts = new Date(record.timestamp).toISOString()\n      const kv = Object.entries(record.attrs)\n        .filter(([, v]) => v !== undefined)\n        .map(([k, v]) => `${k}=${typeof v === 'string' ? v : JSON.stringify(v)}`)\n        .join(' ')\n      stream.write(`${ts} ${record.level.toUpperCase().padEnd(5)} ${record.message}${kv ? ` ${kv}` : ''}\\n`)\n    },\n  }\n}\n\n/**\n * One-JSON-object-per-line sink. Suitable for piping into log aggregators\n * (Datadog Agent, Fluent Bit, Loki, Vector) that expect JSONL.\n */\nexport function jsonSink(options: ConsoleSinkOptions = {}): LogSink {\n  const min = LEVEL_ORDER[options.minLevel ?? 'info']\n  const stream = options.stream ?? process.stderr\n  return {\n    emit(record) {\n      if (LEVEL_ORDER[record.level] < min)\n        return\n      try {\n        stream.write(`${JSON.stringify(record)}\\n`)\n      }\n      catch {\n        // Non-serializable attr (cycle, BigInt, etc.). Skip rather than throw.\n      }\n    },\n  }\n}\n\n// ---------------------------------------------------------------------------\n// createLoggingHooks\n// ---------------------------------------------------------------------------\n\nexport interface LoggingHooksOptions {\n  logger: Logger\n  /**\n   * Minimum interesting level for harness-emitted lines. Default `'info'`.\n   * Set to `'debug'` to see every tool dispatch / stream event. Set to\n   * `'warn'` to mute the chatty ones and only see failures + budgets.\n   */\n  level?: LogLevel\n  /**\n   * When true (default), lifecycle events (`agent:start`, `turn:before`,\n   * `tool:before`, `mcp:bootstrap:start`) emit at `debug` level so they\n   * stay quiet by default. Set false to mute them entirely regardless of\n   * the configured minimum level — useful when piping into a tracer\n   * that already captures lifecycle.\n   */\n  includeLifecycle?: boolean\n}\n\nexport interface LoggingHookSet {\n  install: (hooks: Hookable<AgentHooks>) => () => void\n}\n\n/**\n * Install a bundle of hook handlers that emit a structured line per\n * relevant lifecycle event, automatically attaching correlation ids\n * (`runId`, `turnId`, `callId`, `childId`, `depth`, `agentName`).\n *\n * @example\n * ```ts\n * const logger = createLogger(consoleSink({ minLevel: 'debug' }), { service: 'tui' })\n * const lh = createLoggingHooks({ logger })\n * const uninstall = lh.install(agent.hooks)\n * try { await agent.run({ prompt }) }\n * finally { uninstall() }\n * ```\n */\nexport function createLoggingHooks(options: LoggingHooksOptions): LoggingHookSet {\n  const root = options.logger\n  const includeLifecycle = options.includeLifecycle ?? true\n  const minLevel = LEVEL_ORDER[options.level ?? 'info']\n\n  /**\n   * Wrap a Logger so emissions below `minLevel` are dropped before they\n   * hit the sink. Lets us gate harness chatter without forcing every\n   * `LogSink` to re-implement level filtering. Preserves `.with()`\n   * composition (children inherit the filter).\n   */\n  function gateLevel(logger: Logger): Logger {\n    const skip = (level: LogLevel): boolean => LEVEL_ORDER[level] < minLevel\n    const wrap = (l: Logger): Logger => ({\n      debug: (m, a) => {\n        if (!skip('debug'))\n          l.debug(m, a)\n      },\n      info: (m, a) => {\n        if (!skip('info'))\n          l.info(m, a)\n      },\n      warn: (m, a) => {\n        if (!skip('warn'))\n          l.warn(m, a)\n      },\n      error: (m, a) => {\n        if (!skip('error'))\n          l.error(m, a)\n      },\n      with: extra => wrap(l.with(extra)),\n      baseAttributes: l.baseAttributes,\n    })\n    return wrap(logger)\n  }\n\n  return {\n    install(hooks: Hookable<AgentHooks>): () => void {\n      const unregisters: Array<() => void> = []\n      // Per-install loggers, refreshed on `agent:start` / `turn:before`.\n      // Scoped INSIDE install() so concurrent installs across different\n      // agents don't share state — each call to `install()` gets its own\n      // attribution state.\n      const gatedRoot = gateLevel(root)\n      let runLogger = gatedRoot\n      let turnLogger = gatedRoot\n\n      // ---- Agent lifecycle --------------------------------------------\n\n      unregisters.push(hooks.hook('agent:start', (ctx) => {\n        runLogger = gatedRoot.with({\n          runId: ctx.runId,\n          ...(ctx.parentRunId ? { parentRunId: ctx.parentRunId } : {}),\n          depth: ctx.depth,\n          ...(ctx.agentName ? { agentName: ctx.agentName } : {}),\n        })\n        turnLogger = runLogger\n        if (includeLifecycle)\n          runLogger.debug('agent run started')\n      }))\n\n      unregisters.push(hooks.hook('agent:done', (stats) => {\n        runLogger.info('agent run completed', {\n          turns: stats.turns,\n          totalIn: stats.totalIn,\n          totalOut: stats.totalOut,\n          ...(typeof stats.cost === 'number' ? { cost: stats.cost } : {}),\n          elapsedMs: stats.elapsed,\n          ...(typeof stats.timeTillFirstTokenMs === 'number' ? { ttftMs: stats.timeTillFirstTokenMs } : {}),\n        })\n      }))\n\n      unregisters.push(hooks.hook('agent:abort', () => {\n        runLogger.warn('agent run aborted')\n      }))\n\n      // ---- Turn / stream ---------------------------------------------\n\n      unregisters.push(hooks.hook('turn:before', (ctx) => {\n        turnLogger = runLogger.with({ turnId: ctx.turnId, turn: ctx.turn })\n        if (includeLifecycle)\n          turnLogger.debug('turn started')\n      }))\n\n      unregisters.push(hooks.hook('turn:after', (ctx) => {\n        turnLogger.debug('turn ended', {\n          inputTokens: ctx.usage.input,\n          outputTokens: ctx.usage.output,\n          ...(ctx.usage.finishReason ? { finishReason: ctx.usage.finishReason } : {}),\n          ...(ctx.usage.modelId ? { modelId: ctx.usage.modelId } : {}),\n          ...(typeof ctx.usage.timeToFirstTokenMs === 'number' ? { ttftMs: ctx.usage.timeToFirstTokenMs } : {}),\n        })\n      }))\n\n      unregisters.push(hooks.hook('stream:error', (ctx) => {\n        turnLogger.error('stream error', {\n          message: ctx.err instanceof Error ? ctx.err.message : String(ctx.err),\n          ...(ctx.statusCode !== undefined ? { statusCode: ctx.statusCode } : {}),\n          ...(ctx.requestId !== undefined ? { requestId: ctx.requestId } : {}),\n        })\n      }))\n\n      // ---- Tool calls -------------------------------------------------\n\n      unregisters.push(hooks.hook('tool:before', (ctx) => {\n        if (!includeLifecycle)\n          return\n        turnLogger.debug('tool started', {\n          toolName: ctx.name,\n          displayName: ctx.displayName,\n          callId: ctx.callId,\n        })\n      }))\n\n      unregisters.push(hooks.hook('tool:after', (ctx) => {\n        if (!includeLifecycle)\n          return\n        turnLogger.debug('tool ended', {\n          toolName: ctx.name,\n          callId: ctx.callId,\n          outputBytes: ctx.outputBytes,\n        })\n      }))\n\n      unregisters.push(hooks.hook('tool:error', (ctx) => {\n        turnLogger.error('tool error', {\n          toolName: ctx.name,\n          callId: ctx.callId,\n          message: ctx.error.message,\n        })\n      }))\n\n      unregisters.push(hooks.hook('tool:dispatched', (ctx) => {\n        // Successful + gate-substitute paths are routine — only log at\n        // debug level. The three \"something refused / went wrong\" paths\n        // (gate-block, unknown tool, invalid input) land at warn so they\n        // surface in default-config dashboards without forcing debug.\n        const isAnomaly = ctx.outcome === 'gate-block'\n          || ctx.outcome === 'unknown'\n          || ctx.outcome === 'invalid-input'\n        if (!isAnomaly && !includeLifecycle)\n          return\n        const lvl: LogLevel = isAnomaly ? 'warn' : 'debug'\n        turnLogger[lvl]('tool dispatched', {\n          toolName: ctx.name,\n          callId: ctx.callId,\n          outcome: ctx.outcome,\n          ...(ctx.reason ? { reason: ctx.reason } : {}),\n        })\n      }))\n\n      unregisters.push(hooks.hook('validation:reject', (ctx) => {\n        turnLogger.warn('tool input rejected', {\n          toolName: ctx.name,\n          callId: ctx.callId,\n          reason: ctx.reason,\n        })\n      }))\n\n      // ---- Budgets ----------------------------------------------------\n\n      unregisters.push(hooks.hook('budget:exceeded', (ctx) => {\n        turnLogger.warn('byte budget exceeded', {\n          bytes: ctx.bytes,\n          budget: ctx.budget,\n        })\n      }))\n\n      unregisters.push(hooks.hook('tool-budget:exceeded', (ctx) => {\n        turnLogger.warn('tool budget exceeded', {\n          toolName: ctx.tool,\n          count: ctx.count,\n          max: ctx.max,\n          mode: ctx.mode,\n        })\n      }))\n\n      // ---- MCP --------------------------------------------------------\n\n      unregisters.push(hooks.hook('mcp:bootstrap:end', (ctx) => {\n        if (ctx.ok) {\n          if (includeLifecycle) {\n            runLogger.debug('mcp bootstrap ok', {\n              server: ctx.name,\n              transport: ctx.transport,\n              durationMs: ctx.durationMs,\n              toolCount: ctx.toolCount,\n              ...(ctx.lazy ? { lazy: true } : {}),\n              ...(ctx.cached ? { cached: true } : {}),\n            })\n          }\n        }\n        else {\n          runLogger.warn('mcp bootstrap failed', {\n            server: ctx.name,\n            transport: ctx.transport,\n            durationMs: ctx.durationMs,\n            message: ctx.error.message,\n          })\n        }\n      }))\n\n      unregisters.push(hooks.hook('mcp:error', (ctx) => {\n        runLogger.error('mcp error', {\n          server: ctx.name,\n          message: ctx.error.message,\n        })\n      }))\n\n      unregisters.push(hooks.hook('mcp:warn', (ctx) => {\n        runLogger.warn('mcp warn', {\n          server: ctx.name,\n          message: ctx.message,\n        })\n      }))\n\n      unregisters.push(hooks.hook('mcp:auth:required', (ctx) => {\n        runLogger.warn('mcp auth required', {\n          server: ctx.name,\n          transport: ctx.transport,\n          reason: ctx.reason,\n        })\n      }))\n\n      unregisters.push(hooks.hook('mcp:tool:error', (ctx) => {\n        turnLogger.error('mcp tool error', {\n          server: ctx.server,\n          tool: ctx.displayName,\n          callId: ctx.callId,\n          message: ctx.error.message,\n        })\n      }))\n\n      // ---- Spawn ------------------------------------------------------\n\n      unregisters.push(hooks.hook('spawn:before', (ctx) => {\n        if (!includeLifecycle)\n          return\n        runLogger.debug('spawn started', {\n          childId: ctx.id,\n          depth: ctx.depth,\n        })\n      }))\n\n      unregisters.push(hooks.hook('spawn:complete', (ctx) => {\n        runLogger.info('spawn completed', {\n          childId: ctx.id,\n          ...(ctx.depth ? { depth: ctx.depth } : {}),\n          status: ctx.status ?? 'completed',\n          turns: ctx.stats.turns,\n          totalIn: ctx.stats.totalIn,\n          totalOut: ctx.stats.totalOut,\n          ...(typeof ctx.stats.cost === 'number' ? { cost: ctx.stats.cost } : {}),\n        })\n      }))\n\n      unregisters.push(hooks.hook('spawn:error', (ctx) => {\n        runLogger.error('spawn error', {\n          childId: ctx.id,\n          ...(ctx.depth ? { depth: ctx.depth } : {}),\n          message: ctx.error.message,\n        })\n      }))\n\n      // -----------------------------------------------------------------\n      // Disposal\n      // -----------------------------------------------------------------\n\n      let disposed = false\n      return function uninstall() {\n        if (disposed)\n          return\n        disposed = true\n        for (const un of unregisters) {\n          try {\n            un()\n          }\n          catch { /* ignore */ }\n        }\n      }\n    },\n  }\n}\n","/**\n * Local loopback HTTP callback for OAuth 2.0 authorization code flows.\n *\n * Stands up a one-shot server on `127.0.0.1:<random>` that captures the\n * `?code=...` redirect from a browser-driven OAuth flow and resolves a\n * promise with the code. Used as the `redirectUrl` half of the MCP SDK's\n * `OAuthClientProvider` (the persistence half lives separately).\n *\n * Design:\n *   - Loopback-only (`127.0.0.1`) — the OAuth spec treats `http://127.0.0.1:<port>`\n *     as a public-client redirect URI per RFC 8252 §7.3. Browsers do NOT block it,\n *     and Anthropic / OpenAI / Linear / GitHub all accept it.\n *   - Random port (`port = 0`) — the OS picks an unused one. We read the actual\n *     port back from `server.address()` after `listen()`.\n *   - Single-shot — the first GET to `path` with a `code` (or `error`) wins;\n *     subsequent requests get 404. The server keeps listening (in case the user\n *     hits \"back\" and re-authorizes), so callers must `close()` once they have\n *     the code or have given up.\n *   - Abort-aware — wiring an external `AbortSignal` rejects the promise and\n *     closes the server immediately. Required for the TUI's \"esc cancels login\"\n *     UX.\n *   - No HTML framework — a single inline `<html>` string keeps this isolated\n *     from any UI dependency.\n */\n\nimport type { AddressInfo } from 'node:net'\nimport { createServer } from 'node:http'\n\n/**\n * Result of a successful callback. `state` is forwarded verbatim from the\n * query string — callers verify it against their pre-flight value to defend\n * against CSRF (the MCP SDK does this internally when it controls `state`).\n */\nexport interface OAuthCallbackResult {\n  code: string\n  state?: string\n}\n\nexport interface OAuthCallbackHandle {\n  /**\n   * Full URI to register with the authorization server, e.g.\n   * `http://127.0.0.1:51823/callback`. Stable for the lifetime of the\n   * handle.\n   */\n  redirectUri: string\n  /**\n   * Resolves with `{ code, state }` on a successful callback. Rejects with:\n   *   - The OAuth-spec `error` field (`access_denied`, `server_error`, ...)\n   *     when the authorization server redirects with `?error=...`.\n   *   - `'OAuth callback aborted'` when the external `AbortSignal` fires.\n   *   - `'OAuth callback server closed'` when `close()` is called before any\n   *     callback arrives.\n   *\n   * Single-shot — only the first matching request resolves the promise.\n   */\n  promise: Promise<OAuthCallbackResult>\n  /**\n   * Idempotent shutdown. Safe to call from a `finally` block whether the\n   * flow succeeded, failed, or was aborted. Resolves once the server stops\n   * accepting connections.\n   */\n  close: () => Promise<void>\n}\n\nexport interface OAuthCallbackOptions {\n  /** Cancels the flow — rejects `promise` and closes the server. */\n  signal?: AbortSignal\n  /**\n   * Path component the authorization server should redirect to. Defaults\n   * to `/callback`. Useful when matching a pre-registered URI that uses a\n   * different path.\n   */\n  path?: string\n  /**\n   * Override the loopback host. Defaults to `127.0.0.1`. Don't bind to\n   * `0.0.0.0` here — the OAuth code is a one-time secret and the server\n   * would otherwise accept it from any host on the LAN.\n   */\n  host?: string\n  /**\n   * Override the port. Defaults to `0` (OS-assigned). Pin to a fixed port\n   * only when the authorization server requires a pre-registered redirect\n   * URI; the random-port path is preferred so concurrent flows don't clash.\n   */\n  port?: number\n}\n\nconst DEFAULT_PATH = '/callback'\nconst DEFAULT_HOST = '127.0.0.1'\n\nconst SUCCESS_HTML = `<!doctype html>\n<html><head><meta charset=\"utf-8\"><title>Logged in</title>\n<style>body{font:14px/1.5 -apple-system,system-ui,sans-serif;margin:6rem auto;max-width:28rem;text-align:center;color:#1d1d1f}.ok{color:#1f8a4c;font-weight:600}</style>\n</head><body>\n<p class=\"ok\">Logged in.</p>\n<p>You can close this tab and return to the terminal.</p>\n</body></html>`\n\nfunction errorHtml(message: string): string {\n  // No interpolation into HTML attributes — message goes only inside <p> text\n  // where the SAMEORIGIN browser context is rendering. Escape angle brackets\n  // and ampersands defensively anyway: a malicious authorization server could\n  // theoretically craft an `error_description` containing markup, and we\n  // don't want stored XSS even in a one-shot loopback page.\n  const escaped = message\n    .replace(/&/g, '&amp;')\n    .replace(/</g, '&lt;')\n    .replace(/>/g, '&gt;')\n  return `<!doctype html>\n<html><head><meta charset=\"utf-8\"><title>Login failed</title>\n<style>body{font:14px/1.5 -apple-system,system-ui,sans-serif;margin:6rem auto;max-width:28rem;text-align:center;color:#1d1d1f}.err{color:#c43c2c;font-weight:600}</style>\n</head><body>\n<p class=\"err\">Login failed.</p>\n<p>${escaped}</p>\n<p>You can close this tab and return to the terminal.</p>\n</body></html>`\n}\n\n/**\n * Start a one-shot OAuth callback server. The returned handle's `redirectUri`\n * should be passed to the authorization server as the `redirect_uri` query\n * parameter; `promise` resolves once the user finishes the browser flow.\n *\n * Always `await handle.close()` in a `finally` block — even on success, the\n * server stays open until told to shut down (so it can serve the\n * \"you can close this tab\" page).\n */\nexport async function startOAuthCallback(\n  opts: OAuthCallbackOptions = {},\n): Promise<OAuthCallbackHandle> {\n  const path = opts.path ?? DEFAULT_PATH\n  const host = opts.host ?? DEFAULT_HOST\n  const port = opts.port ?? 0\n\n  if (!path.startsWith('/'))\n    throw new Error(`OAuth callback path must start with \"/\" (got: ${JSON.stringify(path)})`)\n\n  if (opts.signal?.aborted)\n    throw new Error('OAuth callback aborted')\n\n  let resolveResult: (value: OAuthCallbackResult) => void\n  let rejectResult: (error: Error) => void\n  const promise = new Promise<OAuthCallbackResult>((resolve, reject) => {\n    resolveResult = resolve\n    rejectResult = reject\n  })\n  // Attach a default no-op catch so a rejection without a consumer doesn't\n  // raise an unhandled-rejection warning. Callers that DO `await promise`\n  // still receive the rejection — Promises fan out to all listeners.\n  promise.catch(() => {})\n\n  let settled = false\n  const resolveOnce = (value: OAuthCallbackResult) => {\n    if (settled)\n      return\n    settled = true\n    resolveResult(value)\n  }\n  const rejectOnce = (error: Error) => {\n    if (settled)\n      return\n    settled = true\n    rejectResult(error)\n  }\n\n  const server = createServer((req, res) => {\n    const url = new URL(req.url ?? '/', `http://${host}`)\n    if (url.pathname !== path) {\n      res.writeHead(404, { 'content-type': 'text/plain' })\n      res.end('Not Found')\n      return\n    }\n\n    // `no-store` prevents the browser from replaying the page (with the\n    // now-spent code in its URL bar) when the user hits back, refreshes,\n    // or restores the tab from history. The code is a one-time secret.\n    const htmlHeaders = {\n      'content-type': 'text/html; charset=utf-8',\n      'cache-control': 'no-store',\n    }\n\n    const error = url.searchParams.get('error')\n    if (error) {\n      const desc = url.searchParams.get('error_description') ?? error\n      res.writeHead(400, htmlHeaders)\n      res.end(errorHtml(desc))\n      rejectOnce(new Error(`OAuth authorization failed: ${desc}`))\n      return\n    }\n\n    const code = url.searchParams.get('code')\n    if (!code) {\n      // No code, no error — likely a stray probe. Serve a minimal page,\n      // don't resolve. The browser will eventually arrive with the real\n      // redirect, or the caller will time out via signal.\n      res.writeHead(400, { 'content-type': 'text/plain' })\n      res.end('Missing \"code\" query parameter.')\n      return\n    }\n\n    const state = url.searchParams.get('state') ?? undefined\n    res.writeHead(200, htmlHeaders)\n    res.end(SUCCESS_HTML)\n    resolveOnce({ code, state })\n  })\n\n  // Surface socket errors that arrive before the request handler — e.g. EADDRINUSE\n  // on a pinned port, or an early TLS-style probe that the parser rejects.\n  server.on('error', (err) => {\n    rejectOnce(err instanceof Error ? err : new Error(String(err)))\n  })\n\n  await new Promise<void>((resolve, reject) => {\n    server.once('error', reject)\n    server.listen(port, host, () => {\n      server.off('error', reject)\n      resolve()\n    })\n  })\n\n  const addr = server.address() as AddressInfo | null\n  if (!addr || typeof addr === 'string') {\n    server.close()\n    throw new Error('OAuth callback server did not bind to a TCP port')\n  }\n\n  // `closeServer` and `onAbort` reference each other — pre-declare both so\n  // either ordering reads cleanly and the lint doesn't trip on the cycle.\n  let closing: Promise<void> | undefined\n  let closeServer: () => Promise<void>\n  const onAbort = () => {\n    rejectOnce(new Error('OAuth callback aborted'))\n    void closeServer()\n  }\n  closeServer = (): Promise<void> => {\n    if (closing)\n      return closing\n    closing = new Promise<void>((resolve) => {\n      // `close()` on a Node http server waits for in-flight requests to drain.\n      // The flow has already settled (or is being aborted), so we also call\n      // `closeAllConnections()` to drop keep-alive sockets immediately — a\n      // browser keeps the connection open after the success page, which would\n      // otherwise hang the close for the keep-alive timeout (~5s).\n      const anyServer = server as { closeAllConnections?: () => void }\n      anyServer.closeAllConnections?.()\n      server.close(() => {\n        opts.signal?.removeEventListener('abort', onAbort)\n        // If neither a callback nor an abort happened before close(), reject\n        // pending awaits so callers don't hang. Tag the rejection as\n        // 'aborted' when the signal already fired — Bun fires the abort\n        // listener via a microtask, so server.close() may resolve first\n        // even though semantically the abort came first.\n        if (opts.signal?.aborted)\n          rejectOnce(new Error('OAuth callback aborted'))\n        else\n          rejectOnce(new Error('OAuth callback server closed'))\n        resolve()\n      })\n    })\n    return closing\n  }\n  opts.signal?.addEventListener('abort', onAbort, { once: true })\n\n  return {\n    redirectUri: `http://${host}:${addr.port}${path}`,\n    promise,\n    close: closeServer,\n  }\n}\n","/**\n * Interactive OAuth login orchestrator for one MCP server.\n *\n * Composes the three pieces shipped separately:\n *   - `startOAuthCallback` (`./oauth-callback`) — local loopback HTTP\n *     listener that catches the `?code=...` redirect.\n *   - `McpOAuthProvider` (`./oauth-provider`) — SDK adapter that persists\n *     tokens / client info via an injected `McpCredentialStore`.\n *   - The MCP SDK's transport `authProvider` + `finishAuth` plumbing —\n *     `client.connect()` triggers the SDK to call `redirectToAuthorization`\n *     (which opens the browser); we wait for the loopback callback to\n *     deliver the code, hand it to `transport.finishAuth`, and reconnect.\n *\n * Returns once tokens are persisted. Caller decides whether to immediately\n * reconnect the server (re-run `connectMcpServers` / `agent.warmup()`) or\n * defer to the next session activation. The returned `tools` array is\n * provided as a convenience — callers that want the connection live in\n * this call rather than rebuilding can wire them in directly.\n */\n\nimport type { OAuthClientProvider } from '@modelcontextprotocol/sdk/client/auth.js'\nimport type { Hookable } from 'hookable'\nimport type { AgentHooks } from '../agent'\nimport type { McpServerConfig } from '../types'\nimport type { OAuthCallbackHandle } from './oauth-callback'\nimport type { McpCredentialStore } from './oauth-provider'\nimport { startOAuthCallback } from './oauth-callback'\nimport { McpOAuthProvider } from './oauth-provider'\nimport { sseToJsonFetchIfNeeded } from './sse-to-json-fetch'\nimport { createTolerantClient } from './tolerant-client'\n\nexport interface LoginMcpServerOptions {\n  /** Persistence — same store the bootstrap path reads from. */\n  store: McpCredentialStore\n  /**\n   * Invoked with the authorization URL once it's ready. Hosts typically\n   * (a) emit `mcp:auth:url` for the TUI, and (b) call `tryOpenBrowser`.\n   * The URL is identical to the one passed to the `mcp:auth:url` hook\n   * fired automatically — this callback is a synchronous hook for callers\n   * that don't want to wire the agent hook machinery.\n   */\n  onAuthorizationUrl?: (url: URL) => void | Promise<void>\n  /** Cancels the flow (esc / close modal / SIGINT). */\n  signal?: AbortSignal\n  /** Agent hooks. The flow emits `mcp:auth:url`/`success`/`error` when wired. */\n  hooks?: Hookable<AgentHooks>\n  /** Override `client_name` shown on consent screens. Default: 'zidane'. */\n  clientName?: string\n  /** Override the requested OAuth scope. */\n  scope?: string\n  /**\n   * Override the loopback callback path. Default: `/callback`. Useful only\n   * for servers that pinned a different path during registration.\n   */\n  callbackPath?: string\n  /**\n   * Maximum time to wait for the user to complete the browser flow, in ms.\n   * The user can also cancel via `signal`. Default: 5 minutes.\n   */\n  timeoutMs?: number\n}\n\nexport interface LoginMcpServerResult {\n  /** Stored OAuth tokens after a successful exchange. */\n  tokens: NonNullable<ReturnType<McpOAuthProvider['tokens']>>\n  /**\n   * Upstream tool descriptors discovered after re-connecting with the new\n   * tokens. Already filtered by the server's `enabledTools` / `disabledTools`\n   * is NOT applied here — that's a bootstrap concern. Hosts that want filtering\n   * should pass the result through `connectMcpServers` rebuild on the next\n   * session activation rather than reusing this list verbatim.\n   */\n  tools: Array<{ name: string, description?: string | null, inputSchema?: unknown }>\n}\n\nconst DEFAULT_LOGIN_TIMEOUT_MS = 5 * 60_000\n\n/**\n * Run the full interactive OAuth flow for `config`. Only supports `sse` and\n * `streamable-http` transports — `stdio` MCP servers don't speak OAuth.\n *\n * Throws on:\n *   - Wrong transport.\n *   - Abort signal.\n *   - Browser-side error (user denied, server rejected, etc.).\n *   - Code exchange failure.\n *   - Post-exchange connect failure.\n *\n * Always closes the loopback callback server before returning, success or\n * failure.\n */\nexport async function loginMcpServer(\n  config: McpServerConfig,\n  options: LoginMcpServerOptions,\n): Promise<LoginMcpServerResult> {\n  if (config.transport !== 'sse' && config.transport !== 'streamable-http')\n    throw new Error(`MCP OAuth: cannot login for transport \"${config.transport}\" — only sse / streamable-http are supported`)\n  if (!config.url)\n    throw new Error(`MCP OAuth: server \"${config.name}\" is missing a url`)\n\n  const hooks = options.hooks\n\n  let callback: OAuthCallbackHandle | undefined\n  try {\n    callback = await startOAuthCallback({\n      signal: options.signal,\n      path: options.callbackPath,\n    })\n\n    const handle = callback\n    const provider = new McpOAuthProvider({\n      name: config.name,\n      store: options.store,\n      redirectUri: handle.redirectUri,\n      clientName: options.clientName,\n      scope: options.scope,\n      onAuthorizationUrl: async (url) => {\n        await hooks?.callHook('mcp:auth:url', { name: config.name, url: url.toString() })\n        await options.onAuthorizationUrl?.(url)\n      },\n    })\n\n    const transport = await createInteractiveTransport(config, provider)\n    const client = await createTolerantClient({ name: 'zidane', version: '1.0.0' })\n\n    // First connect → SDK has no tokens, so it calls\n    // `provider.redirectToAuthorization(url)` (which routes to our\n    // `onAuthorizationUrl`), then throws `UnauthorizedError`. This is the\n    // expected path — we catch and wait on the loopback for the code.\n    let needsAuth = false\n    try {\n      await client.connect(transport)\n    }\n    catch (err) {\n      if (!isUnauthorizedError(err)) {\n        await client.close().catch(() => {})\n        throw err\n      }\n      needsAuth = true\n    }\n\n    if (needsAuth) {\n      const { code } = await raceLoginCallback(handle, options.timeoutMs ?? DEFAULT_LOGIN_TIMEOUT_MS, options.signal)\n      // SDK exchanges code → tokens; provider.saveTokens persists them.\n      await (transport as { finishAuth: (code: string) => Promise<void> }).finishAuth(code)\n      // Reconnect with a FRESH transport. The previous one is already in\n      // the \"started\" state from the failed connect — reusing it throws\n      // \"StreamableHTTPClientTransport already started!\" inside\n      // `transport.start()`. The SDK's canonical example\n      // (`simpleOAuthClient.js`) uses the same pattern: recurse with a\n      // new transport, reuse the client. Close the stale transport\n      // first so its abort controllers + sockets don't leak.\n      await transport.close().catch(() => {})\n      const freshTransport = await createInteractiveTransport(config, provider)\n      await client.connect(freshTransport)\n    }\n\n    const { tools } = await client.listTools()\n    await client.close()\n\n    const tokens = provider.tokens()\n    if (!tokens)\n      throw new Error(`MCP OAuth: login for \"${config.name}\" returned no tokens (server may have rejected the exchange silently)`)\n\n    await hooks?.callHook('mcp:auth:success', { name: config.name })\n    return { tokens, tools }\n  }\n  catch (err) {\n    const error = err instanceof Error ? err : new Error(String(err))\n    await hooks?.callHook('mcp:auth:error', { name: config.name, error })\n    throw error\n  }\n  finally {\n    await callback?.close()\n  }\n}\n\n/**\n * Build an `sse` / `streamable-http` transport pre-wired with `authProvider`.\n * Mirrors the bootstrap-side `createTransport` shape but inlined here so the\n * login flow doesn't depend on the bootstrap module's private export.\n */\nasync function createInteractiveTransport(config: McpServerConfig, authProvider: OAuthClientProvider) {\n  if (config.transport === 'sse') {\n    const { SSEClientTransport } = await import('@modelcontextprotocol/sdk/client/sse.js')\n    return new SSEClientTransport(new URL(config.url!), {\n      requestInit: config.headers ? { headers: config.headers } : undefined,\n      authProvider,\n    })\n  }\n  // streamable-http\n  const { StreamableHTTPClientTransport } = await import('@modelcontextprotocol/sdk/client/streamableHttp.js')\n  return new StreamableHTTPClientTransport(new URL(config.url!), {\n    requestInit: config.headers ? { headers: config.headers } : undefined,\n    fetch: sseToJsonFetchIfNeeded(),\n    authProvider,\n  })\n}\n\nfunction isUnauthorizedError(err: unknown): boolean {\n  if (!err || typeof err !== 'object')\n    return false\n  const e = err as { name?: string, message?: string, constructor?: { name?: string } }\n  if (e.name === 'UnauthorizedError' || e.constructor?.name === 'UnauthorizedError')\n    return true\n  return typeof e.message === 'string' && e.message.toLowerCase().startsWith('unauthorized')\n}\n\n/**\n * Wait on the callback handle, with a hard timeout AND honor the external\n * abort signal. Unlike `callback.promise` alone, this provides a deterministic\n * failure mode for \"user opened the browser then walked away\" — the modal\n * doesn't hang forever waiting for a redirect that may never come.\n */\nasync function raceLoginCallback(\n  handle: OAuthCallbackHandle,\n  timeoutMs: number,\n  signal: AbortSignal | undefined,\n): Promise<{ code: string, state?: string }> {\n  if (signal?.aborted)\n    throw new Error('OAuth login aborted')\n  let timer: ReturnType<typeof setTimeout> | undefined\n  let onAbort: (() => void) | undefined\n  try {\n    return await new Promise<{ code: string, state?: string }>((resolve, reject) => {\n      timer = setTimeout(\n        () => reject(new Error(`OAuth login timed out after ${timeoutMs}ms`)),\n        timeoutMs,\n      )\n      if (signal) {\n        onAbort = () => reject(new Error('OAuth login aborted'))\n        signal.addEventListener('abort', onAbort, { once: true })\n      }\n      handle.promise.then(resolve, reject)\n    })\n  }\n  finally {\n    if (timer)\n      clearTimeout(timer)\n    if (signal && onAbort)\n      signal.removeEventListener('abort', onAbort)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAkBA,IAAa,2BAAb,cAA8C,MAAM;CAClD,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;;;;;;;AAQA,IAAa,4BAAb,cAA+C,MAAM;CACN;CAA7C,YAAY,SAAiB,YAAoC;EAC/D,MAAM,OAAO;EAD8B,KAAA,aAAA;EAE3C,KAAK,OAAO;CACd;AACF;;;;;;;;;;;;;;;;;ACeA,SAAgB,mBACd,OACA,OACA,WACiB;CACjB,IAAI,MAAM,WAAW,GACnB,MAAM,IAAI,yBAAyB,sBAAsB;CAE3D,IAAI;CACJ,IAAI;CAEJ,IAAI,UAAU,QAAQ;EACpB,cAAc;EACd,YAAY,CAAC;CACf,OACK,IAAI,UAAU,QAAQ;EACzB,MAAM,OAAO,KAAK,IAAI,GAAG,SAAS;EAClC,IAAI,QAAQ,MAAM,QAChB,MAAM,IAAI,yBACR,kCAAkC,KAAK,oCAAoC,MAAM,OAAO,SAC1F;EAEF,MAAM,UAAU,sBAAsB,OAAO,MAAM,SAAS,IAAI;EAChE,cAAc,MAAM,MAAM,GAAG,OAAO;EACpC,YAAY,MAAM,MAAM,OAAO;CACjC,OACK,IAAI,MAAM,SAAS,QAAQ;EAC9B,MAAM,MAAM,MAAM,WAAU,MAAK,EAAE,OAAO,MAAM,MAAM;EACtD,IAAI,MAAM,GACR,MAAM,IAAI,yBAAyB,2BAA2B,MAAM,OAAO,GAAG;EAMhF,MAAM,UAAU,sBAAsB,OAAO,GAAG;EAChD,YAAY,MAAM,MAAM,GAAG,OAAO;EAClC,cAAc,MAAM,MAAM,OAAO;CACnC,OACK;EAKH,MAAM,MAAM,MAAM,WAAU,MAAK,EAAE,OAAO,MAAM,MAAM;EACtD,IAAI,MAAM,GACR,MAAM,IAAI,yBAAyB,2BAA2B,MAAM,OAAO,GAAG;EAChF,MAAM,UAAU,sBAAsB,OAAO,MAAM,CAAC;EACpD,cAAc,MAAM,MAAM,GAAG,OAAO;EACpC,YAAY,MAAM,MAAM,OAAO;CACjC;CAEA,IAAI,YAAY,WAAW,GACzB,MAAM,IAAI,yBAAyB,0CAA0C;CAC/E,IAAI,CAAC,sBAAsB,WAAW,GACpC,MAAM,IAAI,yBAAyB,+DAA+D;CAEpG,OAAO;EAAE;EAAa;CAAU;AAClC;;;;;;;;;;;;;;;;AAiBA,SAAgB,qBAAqB,OAA8C;CACjF,OAAO,MAAM,KAAI,SAAQ,oBAAoB,IAAI,CAAC;AACpD;AAEA,SAAS,oBAAoB,MAAgC;CAC3D,IAAI,UAAU;CACd,MAAM,cAAqC,CAAC;CAC5C,KAAK,MAAM,SAAS,KAAK,SAAS;EAChC,IAAI,MAAM,SAAS,SAAS;GAC1B,UAAU;GACV,YAAY,KAAK;IAAE,MAAM;IAAQ,MAAM;GAAU,CAAC;GAClD;EACF;EACA,IAAI,MAAM,SAAS,YAAY;GAC7B,UAAU;GACV,YAAY,KAAK;IAAE,MAAM;IAAQ,MAAM;GAAa,CAAC;GACrD;EACF;EACA,IAAI,MAAM,SAAS,iBAAiB,MAAM,QAAQ,MAAM,MAAM,GAAG;GAC/D,MAAM,OAAO,+BAA+B,MAAM,MAAM;GACxD,IAAI,MAAM;IACR,UAAU;IACV,YAAY,KAAK;KAAE,GAAG;KAAO,QAAQ;IAAK,CAAC;IAC3C;GACF;EACF;EACA,YAAY,KAAK,KAAK;CACxB;CACA,OAAO,UAAU;EAAE,GAAG;EAAM,SAAS;CAAY,IAAI;AACvD;;;;;;;;AASA,SAAS,+BAA+B,OAAiE;CACvG,IAAI,UAAU;CACd,MAAM,MAA2B,CAAC;CAClC,KAAK,MAAM,QAAQ,OACjB,IAAI,KAAK,SAAS,SAAS;EACzB,UAAU;EACV,IAAI,KAAK;GAAE,MAAM;GAAQ,MAAM;EAAU,CAAC;CAC5C,OACK,IAAI,KAAK,SAAS,YAAY;EACjC,UAAU;EACV,IAAI,KAAK;GAAE,MAAM;GAAQ,MAAM;EAAa,CAAC;CAC/C,OAEE,IAAI,KAAK,IAAI;CAGjB,OAAO,UAAU,MAAM;AACzB;;;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,wBAAwB,OAA8C;CACpF,IAAI,MAAM,UAAU,GAClB,OAAO,MAAM,MAAM;CAKrB,MAAM,eAAe,MAAM,WAAU,MAAK,EAAE,SAAS,MAAM;CAC3D,IAAI,eAAe,GACjB,OAAO,MAAM,MAAM;CAOrB,IAAI,SAAS,eAAe;CAC5B,OAAO,SAAS,MAAM,QAAQ;EAC5B,MAAM,OAAO,MAAM;EACnB,IAAI,KAAK,SAAS,aAAa;GAC7B;GACA;EACF;EACA,IAAI,KAAK,SAAS,UAAU,sBAAsB,IAAI,GAAG;GACvD;GACA;EACF;EACA;CACF;CAIA,IAAI,UAAU,MAAM,QAClB,OAAO,MAAM,MAAM;CAErB,OAAO,MAAM,MAAM,MAAM;AAC3B;AAEA,SAAS,sBAAsB,MAA4B;CACzD,IAAI,KAAK,QAAQ,WAAW,GAC1B,OAAO;CACT,OAAO,KAAK,QAAQ,OAAM,UAAS,MAAM,SAAS,aAAa;AACjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BA,SAAS,sBAAsB,OAA+B,aAA6B;CACzF,IAAI,MAAM,KAAK,IAAI,GAAG,KAAK,IAAI,MAAM,QAAQ,WAAW,CAAC;CACzD,OAAO,MAAM,KAAK,kBAAkB,MAAM,MAAM,EAAE,GAChD;CACF,OAAO;AACT;;AAGA,SAAS,kBAAkB,MAA4B;CACrD,IAAI,KAAK,SAAS,aAChB,OAAO;CACT,KAAK,MAAM,SAAS,KAAK,SACvB,IAAI,MAAM,SAAS,aACjB,OAAO;CAEX,OAAO;AACT;AAEA,SAAS,sBAAsB,OAAwC;CACrE,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,KAAK,SAAS,UAChB;EACF,KAAK,MAAM,SAAS,KAAK,SAAS;GAChC,IAAI,MAAM,SAAS,UAAU,MAAM,KAAK,KAAK,EAAE,SAAS,GACtD,OAAO;GACT,IAAI,MAAM,SAAS,eAAe,MAAM,SAAS,eAC/C,OAAO;EACX;CACF;CACA,OAAO;AACT;;;;;;;AAYA,MAAa,2BAA2B;;;;;;AAOxC,SAAgB,iBAAiB,MAA2B;CAC1D,KAAK,MAAM,SAAS,KAAK,SACvB,IAAI,MAAM,SAAS,UAAU,MAAM,KAAK,KAAK,EAAE,SAAS,GAAG;EACzD,MAAM,OAAO,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,KAAK;EAClD,OAAO,KAAK,SAAA,MACR,GAAG,KAAK,MAAM,GAAA,GAA+B,EAAE,KAC/C;CACN;CAEF,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;AA+CA,SAAgB,cAAc,OAAwC;CACpE,MAAM,cAAc,MAAM,eAAe,KAAK,IAAI;CAClD,OAAO;EACL,IAAI,OAAO,WAAW;EACtB,MAAM;EACN,SAAS,CAAC;GACR,MAAM;GACN,iBAAiB,MAAM;GACvB,SAAS,MAAM;GACf,OAAO,MAAM;GACb,OAAO,MAAM;GACb;EACF,CAAC;EACD,WAAW;CACb;AACF;;;;;;;;AC1VA,MAAa,oBAAoB;;;;;;;;;;;AAYjC,MAAa,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BjC,MAAa,UAAU;AAQvB,MAAM,aAAa;;AAGnB,MAAM,aAAa;;AAGnB,MAAM,aAAa;;;;;AAMnB,MAAM,cAAc;;;;;;AAWpB,SAAS,QAAQ,OAAuB;CACtC,OAAO;EAAC;EAAmB;EAAmB;EAAO;CAAO,EAAE,KAAK,MAAM;AAC3E;AAEA,SAAgB,yBAAiC;CAC/C,OAAO,QAAQ,UAAU;AAC3B;AAEA,SAAgB,yBAAiC;CAC/C,OAAO,QAAQ,UAAU;AAC3B;AAEA,SAAgB,uBAAuB,eAA+B;CACpE,OAAO,QAAQ,WAAW,QAAQ,oBAAoB,aAAa,CAAC;AACtE;AAEA,SAAgB,uBAAuB,eAA+B;CACpE,OAAO,QAAQ,YAAY,QAAQ,oBAAoB,aAAa,CAAC;AACvE;;;;;;;;AASA,MAAa,sBAA4C,SAAS;CAChE,QAAQ,KAAK,WAAb;EACE,KAAK,QACH,OAAO,uBAAuB;EAChC,KAAK,QACH,OAAO,uBAAuB;EAChC,KAAK,QAAQ;GACX,MAAM,UAAU,KAAK,iBAAiB;GACtC,IAAI,QAAQ,WAAW,GACrB,MAAM,IAAI,MAAM,yEAAuE;GACzF,OAAO,uBAAuB,OAAO;EACvC;EACA,KAAK,SAAS;GACZ,MAAM,UAAU,KAAK,iBAAiB;GACtC,IAAI,QAAQ,WAAW,GACrB,MAAM,IAAI,MAAM,0EAAwE;GAC1F,OAAO,uBAAuB,OAAO;EACvC;CACF;AACF;;;;;;;;;;;;;;ACzDA,MAAM,yBAAyB;;AAkD/B,MAAM,qBAAqB;;AAG3B,MAAM,4BAA4B;;AAGlC,MAAM,0BAA0B;;AAGhC,MAAM,yBAAyB;AAM/B,eAAsB,oBAAoB,MAA8C;CAItF,MAAM,QAAQ,mBACZ,KAAK,OACL,KAAK,SAAS,QACd,KAAK,aAAa,kBACpB;CAEA,MAAM,YAAY,iBAAiB,KAAK,SAAS,MAAM;CACvD,MAAM,gBAAgB,cAAc,UAAU,cAAc,UACxD,iBAAiB,cAAc,OAAO,KAAK,KAAM,CAAC,IAClD,KAAA;CAGJ,MAAM,gBADU,KAAK,UAAU,oBACF;EAC3B;EACA,GAAI,kBAAkB,KAAA,IAAY,EAAE,cAAc,IAAI,CAAC;CACzD,CAAC;CAED,MAAM,QAAQ,KAAK,SAAS,KAAK,SAAS,KAAK;CAC/C,MAAM,kBAAkB,KAAK,mBAAmB;CAChD,MAAM,gBAAgB,KAAK,IAAI,GAAG,KAAK,iBAAiB,uBAAuB;CAK/E,IAAI,eAAuC,qBAAqB,MAAM,WAAW;CACjF,IAAI,aAAa;CACjB,IAAI,mBAAmB;CACvB,IAAI,UAAU;CAEd,OAAO,MAAM;EACX;EACA,MAAM,OACF,aAAa,IAAI,cAAc,mBAAmB,IAAI,oBAAoB;EAC9E,KAAK,YAAY;GAAE;GAAS;EAAK,CAAC;EAElC,IAAI;GAeF,MAAM,WAAW,0BADF,wBAAwB,gBAAgB,YAAY,CACnB,GAAG,KAAK,UAAU,sBAAsB;GACxF,MAAM,EAAE,SAAS,UAAU,MAAM,QAAQ;IACvC,UAAU,KAAK;IACf;IACA,QAAQ;IACR;IACA,WAAW;IACX,GAAI,KAAK,aAAa,KAAA,IAAY,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;IACjE,GAAI,KAAK,WAAW,KAAA,IAAY,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC;GAC7D,CAAC;GAMD,MAAM,aAAa,IAAI,IAAI,aAAa,KAAI,MAAK,EAAE,EAAE,CAAC;GACtD,MAAM,kBAA4B,CAAC;GACnC,IAAI,aAAa;SACV,MAAM,KAAK,MAAM,aACpB,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,GACtB,gBAAgB,KAAK,EAAE,EAAE;GAAA;GAI/B,OAAO;IACL;IACA,OAAO;KAAE,GAAG;KAAO,SAAS,MAAM,WAAW;IAAM;IACnD;IACA;IACA,mBAAmB,aAAa,KAAI,MAAK,EAAE,EAAE;IAC7C;IACA,gBAAgB,MAAM;IACtB,aAAa,QAAQ,YAAY;IACjC,YAAY,eAAe,OAAO;GACpC;EACF,SACO,KAAK;GAEV,IAAI,aAAa,KAAK,KAAK,MAAM,GAC/B,MAAM;GAER,IAAI,qBAAqB,GAAG,GAAG;IAC7B,IAAI,cAAc,eAChB,MAAM,IAAI,0BACR,4CAA4C,WAAW,YACvD,UACF;IAEF,MAAM,YAAY,wBAAwB,YAAY;IACtD,IAAI,UAAU,WAAW,aAAa,QAEpC,MAAM,IAAI,0BACR,iFACA,UACF;IAEF,eAAe;IACf;IACA;GACF;GAEA,IAAI,iBAAiB,GAAG,KAAK,mBAAmB,wBAAwB;IACtE;IACA;GACF;GAEA,MAAM;EACR;CACF;AACF;;;;;;;;;;;AA+BA,eAAe,QAAQ,MAA8C;CACnE,IAAI,WAAW;CACf,MAAM,SAAS,MAAM,KAAK,SAAS,OACjC;EACE,OAAO,KAAK;EACZ,QAAQ,KAAK;EACb,OAAO,CAAC;EACR,UAAU,KAAK;EACf,WAAW,KAAK;EAChB,GAAI,KAAK,aAAa,KAAA,IAAY,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;EACjE,GAAI,KAAK,WAAW,KAAA,IAAY,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC;CAC7D,GACA,EACE,SAAS,UAAU;EAAE,YAAY;CAAM,EACzC,CACF;CAGA,IAAI,UAAU,mBADF,SAAS,SAAS,IAAI,WAAW,OAAO,IAChB,EAAE,KAAK;CAY3C,IAAI,QAAQ,WAAW,GAAG;EACxB,MAAM,WAAW,oBAAoB,OAAO,gBAAgB;EAC5D,IAAI,SAAS,SAAS,GACpB,UAAU,mBAAmB,QAAQ,EAAE,KAAK;CAChD;CAEA,IAAI,QAAQ,WAAW,GAOrB,MAAM,IAAI,MAAM,uDAAuD;CAEzE,OAAO;EAAE;EAAS,OAAO,OAAO;CAAM;AACxC;;;;;;;;;;;;;;;AAgBA,SAAS,oBAAoB,SAAiC;CAC5D,MAAM,QAAkB,CAAC;CACzB,KAAK,MAAM,SAAS,QAAQ,SAC1B,IAAI,MAAM,SAAS,cAAc,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,SAAS,GACrF,MAAM,KAAK,MAAM,IAAI;CAEzB,OAAO,MAAM,KAAK,IAAI;AACxB;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,SAAS,mBAAmB,MAAsB;CAGhD,MAAM,mBAAmB,KAAK,QAAQ,mCAAmC,EAAE;CAG3E,MAAM,eAAe,iBAAiB,MAAM,gCAAgC;CAC5E,IAAI,cACF,OAAO,aAAa;CAGtB,IAAI,iBAAiB,KAAK,EAAE,SAAS,GACnC,OAAO;CAKT,MAAM,gBAAgB,KAAK,MAAM,kCAAkC;CACnE,IAAI,eACF,OAAO,cAAc;CAGvB,OAAO;AACT;;;;;;;;;;;;;AAcA,SAAS,gBAAgB,OAAiD;CACxE,MAAM,MAAwB,CAAC;CAC/B,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,KAAK,SAAS,UAChB;EACF,MAAM,UAAiC,CAAC;EACxC,KAAK,MAAM,SAAS,KAAK,SAAS;GAChC,IAAI,MAAM,SAAS,mBAAmB;IACpC,QAAQ,KAAK;KACX,MAAM;KACN,MAAM,kCAAkC,MAAM;IAChD,CAAC;IACD;GACF;GAcA,IAAI,MAAM,SAAS,YACjB;GACF,QAAQ,KAAK,KAAK;EACpB;EACA,IAAI,QAAQ,WAAW,GACrB;EACF,IAAI,KAAK;GAAE,MAAM,KAAK;GAAM;EAAQ,CAAC;CACvC;CACA,OAAO;AACT;AAEA,SAAS,iBAAiB,OAAyD;CACjF,IAAI,UAAU,UAAU,UAAU,QAChC,OAAO;CACT,OAAO,MAAM;AACf;AAEA,SAAS,cAAc,OAAwB,OAAkC;CAI/E,IAAI,OAAO,UAAU,UACnB,MAAM,IAAI,MAAM,0CAA0C;CAC5D,IAAI,MAAM,SAAS,QACjB,OAAO,MAAM,YAAY;CAC3B,OAAO,MAAM,YAAY,MAAM,YAAY,SAAS;AACtD;AAEA,SAAS,QAAQ,OAAuC;CACtD,IAAI,QAAQ;CACZ,KAAK,MAAM,QAAQ,OACjB,KAAK,MAAM,SAAS,KAAK,SACvB,IAAI,MAAM,SAAS,QACjB,SAAS,eAAe,MAAM,IAAI;MAC/B,IAAI,MAAM,SAAS,eACtB,SAAS,qBAAqB,MAAM,MAAM;MACvC,IAAI,MAAM,SAAS,aACtB,SAAS,eAAe,KAAK,UAAU,MAAM,KAAK,CAAC;MAChD,IAAI,MAAM,SAAS,YACtB,SAAS,eAAe,MAAM,IAAI;CAGxC,OAAO;AACT;;;;;;AAWA,SAAS,qBAAqB,KAAuB;CACnD,IAAI,CAAC,OAAO,OAAO,QAAQ,UACzB,OAAO;CACT,MAAM,IAAI;CACV,IAAI,OAAO,EAAE,SAAS,YAAY,yBAAyB,KAAK,EAAE,IAAI,GACpE,OAAO;CACT,IAAI,OAAO,EAAE,WAAW,aAAa,EAAE,WAAW,OAAO,EAAE,WAAW,MAAM;EAC1E,MAAM,UAAU,OAAO,EAAE,YAAY,WAAW,EAAE,UAAU;EAC5D,IAAI,8EAA8E,KAAK,OAAO,GAC5F,OAAO;CACX;CACA,IAAI,OAAO,EAAE,YAAY,YACpB,sEAAsE,KAAK,EAAE,OAAO,GACvF,OAAO;CAIT,MAAM,SAAU,EAAE,SAAS,CAAC;CAC5B,IAAI,OAAO,OAAO,SAAS,YAAY,OAAO,SAAS,yBAAyB;EAC9E,MAAM,UAAU,OAAO,OAAO,YAAY,WAAW,OAAO,UAAU;EACtE,IAAI,iDAAiD,KAAK,OAAO,GAC/D,OAAO;CACX;CACA,OAAO;AACT;;;;AAKA,SAAS,iBAAiB,KAAuB;CAC/C,IAAI,CAAC,OAAO,OAAO,QAAQ,UACzB,OAAO;CACT,MAAM,IAAI;CACV,IAAI,OAAO,EAAE,WAAW,YAAY,EAAE,UAAU,OAAO,EAAE,SAAS,KAChE,OAAO;CACT,IAAI,OAAO,EAAE,SAAS,YAAY,2DAA2D,KAAK,EAAE,IAAI,GACtG,OAAO;CACT,IAAI,OAAO,EAAE,YAAY,YACpB,kFAAkF,KAAK,EAAE,OAAO,GACnG,OAAO;CAET,OAAO;AACT;AAEA,SAAS,aAAa,KAAc,QAA0C;CAC5E,IAAI,QAAQ,SACV,OAAO;CACT,IAAI,CAAC,OAAO,OAAO,QAAQ,UACzB,OAAO;CACT,MAAM,IAAI;CACV,IAAI,EAAE,SAAS,cACb,OAAO;CACT,IAAI,OAAO,EAAE,YAAY,YAAY,WAAW,KAAK,EAAE,OAAO,GAC5D,OAAO;CACT,OAAO;AACT;;;ACzhBA,MAAM,4BAA4B;AAClC,MAAM,kCAAkC;AACxC,MAAM,+BAA+B;AAErC,MAAM,6BAA6B;AACnC,MAAM,oCAAoC;;AAG1C,MAAM,8BAA8B;AACpC,MAAM,+BAA+B;;;;;;;;;;;;;;;AAoIrC,SAAgB,yBACd,WACA,KACc;CACd,MAAM,SAAS,GAAG,IAAI;CACtB,MAAM,yBAAS,IAAI,IAAoB;CACvC,KAAK,MAAM,CAAC,KAAK,UAAU,WAAW;EACpC,IAAI,CAAC,IAAI,WAAW,MAAM,GACxB;EACF,MAAM,OAAO,IAAI,MAAM,OAAO,MAAM;EACpC,IAAI,KAAK,WAAW,GAClB;EACF,MAAM,QAAQ,OAAO,IAAI,IAAI,KAAK;EAClC,IAAI,MAAM,UAAU,OAClB,OAAO,IAAI,MAAM,MAAM,OAAO;CAClC;CACA,OAAO,MAAM,KAAK,SAAS,CAAC,MAAM,cAAc;EAAE;EAAM;CAAQ,EAAE,EAC/D,MAAM,GAAG,MAAM,EAAE,UAAU,EAAE,OAAO;AACzC;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,uBACd,SACA,KACc;CACd,MAAM,QAAQ,aAAa,OAAO;CAClC,OAAO,QAAQ,yBAAyB,OAAO,GAAG,IAAI,CAAC;AACzD;;;;;;;;AASA,SAAgB,kBACd,OACA,MACc;CACd,MAAM,WAAW,IAAI,IAAI,KAAK,gBAAgB,CAAC,CAAC;CAKhD,OAJiB,MAAM,QAAO,MAAK,CAAC,SAAS,IAAI,EAAE,IAAI,CAGjC,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,UAAU,EAAE,OACjD,EAAE,MAAM,GAAG,KAAK,IAAI,GAAG,KAAK,QAAQ,CAAC;AACnD;;;;;;;;AA4BA,SAAS,yBACP,SACA,iBACe;CACf,MAAM,aAAa,eAAe,OAAO;CACzC,MAAM,WAAW,QAAQ,MAAM,IAAI;CACnC,MAAM,aAAa,SAAS;CAI5B,MAAM,WAAqB,CAAC;CAC5B,IAAI,eAAe;CACnB,MAAM,UAAU,KAAK,IAAI,GAAG,eAAe,IAAA;CAC3C,IAAI,cAAc;CAClB,IAAI,aAAa;CAEjB,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;EACxC,MAAM,eAAe,GAAG,IAAI,EAAE,IAAI,SAAS;EAC3C,MAAM,eAAe,aAAa,UAAU,IAAI,SAAS,SAAS,IAAI,IAAI;EAC1E,IAAI,eAAe,eAAe,SAAS;GACzC,IAAI,SAAS,WAAW,GAAG;IAOzB,MAAM,QAAQ,KAAK,IAAI,GAAG,UAAU,GAAG,IAAI,EAAE,IAAI,MAAM;IACvD,SAAS,KAAK,GAAG,IAAI,EAAE,IAAI,SAAS,GAAG,MAAM,GAAG,KAAK,GAAG;IACxD,aAAa;GACf;GACA,cAAc;GACd;EACF;EACA,SAAS,KAAK,YAAY;EAC1B,gBAAgB;CAClB;CAEA,MAAM,OAAO,SAAS,KAAK,IAAI;CAC/B,IAAI,cAAc,GAChB,OAAO;EAAE;EAAM,WAAW;EAAO,iBAAiB,eAAe,IAAI;CAAE;CASzE,MAAM,YAAY,OAAO,qBAPP,aACd,QAAQ,cAAc,EAAE,eACxB,QAAQ,cAIkC,kCAAkC,gBAAgB,qBAAqB,WAAW,UAAU,WAAW,iBAHlI,aACf,gEAAgE,cAAc,EAAE,0BAChF,uBAAuB,cAAc,EAAE,cACsI;CAEjL,OAAO;EAAE,MAAM;EAAW,WAAW;EAAM,iBAAiB,eAAe,SAAS;CAAE;AACxF;;;;;;;;AASA,SAAS,0BACP,cACA,kBACgB;CAChB,MAAM,UAAU,KAAK,IAAI,GAAG,gBAAgB,IAAA;CAC5C,IAAI,aAAa,UAAU,SACzB,OAAO;EAAE,MAAM;EAAc,WAAW;EAAO,iBAAiB,eAAe,YAAY;CAAE;CAK/F,MAAM,cADO,aAAa,MAAM,GAAG,OACZ,EAAE,YAAY,IAAI;CACzC,MAAM,SAAS,cAAc,IAAI,cAAc;CAC/C,MAAM,gBACF,GAAG,aAAa,MAAM,GAAG,MAAM,EAAE,QAAQ,EAAE,kCAAkC,iBAAiB;CAClG,OAAO;EACL,MAAM;EACN,WAAW;EACX,iBAAiB,eAAe,aAAa;CAC/C;AACF;;;;;;;;;;;;;;;AAoBA,eAAsB,4BACpB,MACiC;CACjC,MAAM,kBAAkB,KAAK,mBAAmB;CAChD,MAAM,sBAAsB,KAAK,uBAAuB;CACxD,MAAM,oBAAoB,KAAK,qBAAqB;CACpD,MAAM,mBAAmB,KAAK,oBAAoB;CAClD,MAAM,wBAAwB,KAAK,yBAAyB;CAC5D,MAAM,mBAAmB,KAAK,oBAAoB;CAClD,MAAM,oBAAoB,KAAK,qBAAqB;CAYpD,MAAM,iBAAiB,KAAK,eAAe,KAAK,YAAY,SAAS,IACjE,kBAAkB,KAAK,aAAa;EAClC,UAAU;EACV,GAAI,KAAK,eAAe,EAAE,cAAc,KAAK,aAAa,IAAI,CAAC;CACjE,CAAC,IACD,CAAC;CACL,MAAM,kBAAkB,KAAK,gBAAgB,CAAC;CAG9C,MAAM,YAA4F,CAAC;CACnG,IAAI,iBAAiB;CACrB,IAAI,eAAe,SAAS,KAAK,KAAK,aAAa,KAAK,QACtD,KAAK,IAAI,IAAI,GAAG,IAAI,eAAe,QAAQ,KAAK;EAC9C,MAAM,OAAO,eAAe;EAC5B,IAAI;EACJ,IAAI;GACF,UAAU,MAAM,KAAK,UAAU,SAAS,KAAK,QAAQ,KAAK,IAAI;EAChE,QACM;GAEJ;EACF;EACA,MAAM,YAAY,yBAAyB,SAAS,mBAAmB;EACvE,IAAI,iBAAiB,UAAU,kBAAkB,iBAI/C;EAEF,kBAAkB,UAAU;EAC5B,UAAU,KAAK;GACb,QAAQ,wBAAwB;GAChC,MAAM,KAAK;GACX,MAAM,UAAU;GAChB,iBAAiB,UAAU;EAC7B,CAAC;CACH;CAIF,MAAM,aAA6F,CAAC;CACpG,IAAI,kBAAkB;CACtB,KAAK,IAAI,IAAI,GAAG,IAAI,gBAAgB,QAAQ,KAAK;EAC/C,MAAM,SAAS,gBAAgB;EAC/B,MAAM,eAAe,OAAO,MAAM,gBAAgB;EAClD,IAAI,aAAa,KAAK,EAAE,WAAW,GACjC;EACF,MAAM,YAAY,0BAA0B,cAAc,qBAAqB;EAC/E,IAAI,kBAAkB,UAAU,kBAAkB,kBAChD;EACF,mBAAmB,UAAU;EAC7B,WAAW,KAAK;GACd,QAAQ,yBAAyB;GACjC,MAAM,OAAO,MAAM;GACnB,MAAM,UAAU;GAChB,iBAAiB,UAAU;EAC7B,CAAC;CACH;CAGA,IAAI,UAAU,WAAW,KAAK,WAAW,WAAW,GAClD,OAAO;EAAE,OAAO,CAAC;EAAG,eAAe;EAAG,gBAAgB;EAAG,iBAAiB;CAAE;CAG9E,MAAM,kBAAyC,CAAC;CAChD,MAAM,aAAoC,CAAC;CAE3C,KAAK,MAAM,MAAM,WAAW;EAC1B,gBAAgB,KAAK;GACnB,MAAM;GACN,IAAI,GAAG;GACP,MAAM;GACN,OAAO,EAAE,MAAM,GAAG,KAAK;EACzB,CAAC;EACD,WAAW,KAAK;GACd,MAAM;GACN,QAAQ,GAAG;GACX,QAAQ,GAAG;EACb,CAAC;CACH;CACA,KAAK,MAAM,MAAM,YAAY;EAC3B,gBAAgB,KAAK;GACnB,MAAM;GACN,IAAI,GAAG;GACP,MAAM;GACN,OAAO,EAAE,MAAM,GAAG,KAAK;EACzB,CAAC;EACD,WAAW,KAAK;GACd,MAAM;GACN,QAAQ,GAAG;GACX,QAAQ,GAAG;EACb,CAAC;CACH;CAEA,MAAM,MAAM,KAAK,IAAI;CACrB,MAAM,MAAM,KAAK,QAAQ,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;CAoBlD,OAAO;EACL,OAAA,CAnBA;GACE,IAAI,OAAO,WAAW;GACtB,MAAM;GACN,SAAS;GACT,WAAW;GACX,GAAG;EACL,GACA;GACE,IAAI,OAAO,WAAW;GACtB,MAAM;GACN,SAAS;GAGT,WAAW,MAAM;GACjB,GAAG;EACL,CAII;EACJ,eAAe,UAAU;EACzB,gBAAgB,WAAW;EAC3B,iBAAiB,iBAAiB;CACpC;AACF;;;;;;;AC3cA,SAAgB,aACd,MACA,iBAAoD,CAAC,GAC7C;CACR,SAAS,KAAK,OAAiB,SAAiB,OAAuC;EACrF,IAAI;GACF,KAAK,KAAK;IACR;IACA,WAAW,KAAK,IAAI;IACpB;IACA,OAAO,QAAQ;KAAE,GAAG;KAAgB,GAAG;IAAM,IAAI,EAAE,GAAG,eAAe;GACvE,CAAC;EACH,QACM,CAEN;CACF;CAEA,OAAO;EACL,QAAQ,GAAG,MAAM,KAAK,SAAS,GAAG,CAAC;EACnC,OAAO,GAAG,MAAM,KAAK,QAAQ,GAAG,CAAC;EACjC,OAAO,GAAG,MAAM,KAAK,QAAQ,GAAG,CAAC;EACjC,QAAQ,GAAG,MAAM,KAAK,SAAS,GAAG,CAAC;EACnC,OAAM,UAAS,aAAa,MAAM;GAAE,GAAG;GAAgB,GAAG;EAAM,CAAC;EACjE;CACF;AACF;AAiBA,MAAM,cAAwC;CAC5C,OAAO;CACP,MAAM;CACN,MAAM;CACN,OAAO;AACT;;;;;;;;AASA,SAAgB,YAAY,UAA8B,CAAC,GAAY;CACrE,MAAM,MAAM,YAAY,QAAQ,YAAY;CAC5C,MAAM,SAAS,QAAQ,UAAU,QAAQ;CACzC,OAAO,EACL,KAAK,QAAQ;EACX,IAAI,YAAY,OAAO,SAAS,KAC9B;EACF,MAAM,KAAK,IAAI,KAAK,OAAO,SAAS,EAAE,YAAY;EAClD,MAAM,KAAK,OAAO,QAAQ,OAAO,KAAK,EACnC,QAAQ,GAAG,OAAO,MAAM,KAAA,CAAS,EACjC,KAAK,CAAC,GAAG,OAAO,GAAG,EAAE,GAAG,OAAO,MAAM,WAAW,IAAI,KAAK,UAAU,CAAC,GAAG,EACvE,KAAK,GAAG;EACX,OAAO,MAAM,GAAG,GAAG,GAAG,OAAO,MAAM,YAAY,EAAE,OAAO,CAAC,EAAE,GAAG,OAAO,UAAU,KAAK,IAAI,OAAO,GAAG,GAAG;CACvG,EACF;AACF;;;;;AAMA,SAAgB,SAAS,UAA8B,CAAC,GAAY;CAClE,MAAM,MAAM,YAAY,QAAQ,YAAY;CAC5C,MAAM,SAAS,QAAQ,UAAU,QAAQ;CACzC,OAAO,EACL,KAAK,QAAQ;EACX,IAAI,YAAY,OAAO,SAAS,KAC9B;EACF,IAAI;GACF,OAAO,MAAM,GAAG,KAAK,UAAU,MAAM,EAAE,GAAG;EAC5C,QACM,CAEN;CACF,EACF;AACF;;;;;;;;;;;;;;;AA0CA,SAAgB,mBAAmB,SAA8C;CAC/E,MAAM,OAAO,QAAQ;CACrB,MAAM,mBAAmB,QAAQ,oBAAoB;CACrD,MAAM,WAAW,YAAY,QAAQ,SAAS;;;;;;;CAQ9C,SAAS,UAAU,QAAwB;EACzC,MAAM,QAAQ,UAA6B,YAAY,SAAS;EAChE,MAAM,QAAQ,OAAuB;GACnC,QAAQ,GAAG,MAAM;IACf,IAAI,CAAC,KAAK,OAAO,GACf,EAAE,MAAM,GAAG,CAAC;GAChB;GACA,OAAO,GAAG,MAAM;IACd,IAAI,CAAC,KAAK,MAAM,GACd,EAAE,KAAK,GAAG,CAAC;GACf;GACA,OAAO,GAAG,MAAM;IACd,IAAI,CAAC,KAAK,MAAM,GACd,EAAE,KAAK,GAAG,CAAC;GACf;GACA,QAAQ,GAAG,MAAM;IACf,IAAI,CAAC,KAAK,OAAO,GACf,EAAE,MAAM,GAAG,CAAC;GAChB;GACA,OAAM,UAAS,KAAK,EAAE,KAAK,KAAK,CAAC;GACjC,gBAAgB,EAAE;EACpB;EACA,OAAO,KAAK,MAAM;CACpB;CAEA,OAAO,EACL,QAAQ,OAAyC;EAC/C,MAAM,cAAiC,CAAC;EAKxC,MAAM,YAAY,UAAU,IAAI;EAChC,IAAI,YAAY;EAChB,IAAI,aAAa;EAIjB,YAAY,KAAK,MAAM,KAAK,gBAAgB,QAAQ;GAClD,YAAY,UAAU,KAAK;IACzB,OAAO,IAAI;IACX,GAAI,IAAI,cAAc,EAAE,aAAa,IAAI,YAAY,IAAI,CAAC;IAC1D,OAAO,IAAI;IACX,GAAI,IAAI,YAAY,EAAE,WAAW,IAAI,UAAU,IAAI,CAAC;GACtD,CAAC;GACD,aAAa;GACb,IAAI,kBACF,UAAU,MAAM,mBAAmB;EACvC,CAAC,CAAC;EAEF,YAAY,KAAK,MAAM,KAAK,eAAe,UAAU;GACnD,UAAU,KAAK,uBAAuB;IACpC,OAAO,MAAM;IACb,SAAS,MAAM;IACf,UAAU,MAAM;IAChB,GAAI,OAAO,MAAM,SAAS,WAAW,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;IAC7D,WAAW,MAAM;IACjB,GAAI,OAAO,MAAM,yBAAyB,WAAW,EAAE,QAAQ,MAAM,qBAAqB,IAAI,CAAC;GACjG,CAAC;EACH,CAAC,CAAC;EAEF,YAAY,KAAK,MAAM,KAAK,qBAAqB;GAC/C,UAAU,KAAK,mBAAmB;EACpC,CAAC,CAAC;EAIF,YAAY,KAAK,MAAM,KAAK,gBAAgB,QAAQ;GAClD,aAAa,UAAU,KAAK;IAAE,QAAQ,IAAI;IAAQ,MAAM,IAAI;GAAK,CAAC;GAClE,IAAI,kBACF,WAAW,MAAM,cAAc;EACnC,CAAC,CAAC;EAEF,YAAY,KAAK,MAAM,KAAK,eAAe,QAAQ;GACjD,WAAW,MAAM,cAAc;IAC7B,aAAa,IAAI,MAAM;IACvB,cAAc,IAAI,MAAM;IACxB,GAAI,IAAI,MAAM,eAAe,EAAE,cAAc,IAAI,MAAM,aAAa,IAAI,CAAC;IACzE,GAAI,IAAI,MAAM,UAAU,EAAE,SAAS,IAAI,MAAM,QAAQ,IAAI,CAAC;IAC1D,GAAI,OAAO,IAAI,MAAM,uBAAuB,WAAW,EAAE,QAAQ,IAAI,MAAM,mBAAmB,IAAI,CAAC;GACrG,CAAC;EACH,CAAC,CAAC;EAEF,YAAY,KAAK,MAAM,KAAK,iBAAiB,QAAQ;GACnD,WAAW,MAAM,gBAAgB;IAC/B,SAAS,IAAI,eAAe,QAAQ,IAAI,IAAI,UAAU,OAAO,IAAI,GAAG;IACpE,GAAI,IAAI,eAAe,KAAA,IAAY,EAAE,YAAY,IAAI,WAAW,IAAI,CAAC;IACrE,GAAI,IAAI,cAAc,KAAA,IAAY,EAAE,WAAW,IAAI,UAAU,IAAI,CAAC;GACpE,CAAC;EACH,CAAC,CAAC;EAIF,YAAY,KAAK,MAAM,KAAK,gBAAgB,QAAQ;GAClD,IAAI,CAAC,kBACH;GACF,WAAW,MAAM,gBAAgB;IAC/B,UAAU,IAAI;IACd,aAAa,IAAI;IACjB,QAAQ,IAAI;GACd,CAAC;EACH,CAAC,CAAC;EAEF,YAAY,KAAK,MAAM,KAAK,eAAe,QAAQ;GACjD,IAAI,CAAC,kBACH;GACF,WAAW,MAAM,cAAc;IAC7B,UAAU,IAAI;IACd,QAAQ,IAAI;IACZ,aAAa,IAAI;GACnB,CAAC;EACH,CAAC,CAAC;EAEF,YAAY,KAAK,MAAM,KAAK,eAAe,QAAQ;GACjD,WAAW,MAAM,cAAc;IAC7B,UAAU,IAAI;IACd,QAAQ,IAAI;IACZ,SAAS,IAAI,MAAM;GACrB,CAAC;EACH,CAAC,CAAC;EAEF,YAAY,KAAK,MAAM,KAAK,oBAAoB,QAAQ;GAKtD,MAAM,YAAY,IAAI,YAAY,gBAC7B,IAAI,YAAY,aAChB,IAAI,YAAY;GACrB,IAAI,CAAC,aAAa,CAAC,kBACjB;GAEF,WADsB,YAAY,SAAS,SAC3B,mBAAmB;IACjC,UAAU,IAAI;IACd,QAAQ,IAAI;IACZ,SAAS,IAAI;IACb,GAAI,IAAI,SAAS,EAAE,QAAQ,IAAI,OAAO,IAAI,CAAC;GAC7C,CAAC;EACH,CAAC,CAAC;EAEF,YAAY,KAAK,MAAM,KAAK,sBAAsB,QAAQ;GACxD,WAAW,KAAK,uBAAuB;IACrC,UAAU,IAAI;IACd,QAAQ,IAAI;IACZ,QAAQ,IAAI;GACd,CAAC;EACH,CAAC,CAAC;EAIF,YAAY,KAAK,MAAM,KAAK,oBAAoB,QAAQ;GACtD,WAAW,KAAK,wBAAwB;IACtC,OAAO,IAAI;IACX,QAAQ,IAAI;GACd,CAAC;EACH,CAAC,CAAC;EAEF,YAAY,KAAK,MAAM,KAAK,yBAAyB,QAAQ;GAC3D,WAAW,KAAK,wBAAwB;IACtC,UAAU,IAAI;IACd,OAAO,IAAI;IACX,KAAK,IAAI;IACT,MAAM,IAAI;GACZ,CAAC;EACH,CAAC,CAAC;EAIF,YAAY,KAAK,MAAM,KAAK,sBAAsB,QAAQ;GACxD,IAAI,IAAI;QACF,kBACF,UAAU,MAAM,oBAAoB;KAClC,QAAQ,IAAI;KACZ,WAAW,IAAI;KACf,YAAY,IAAI;KAChB,WAAW,IAAI;KACf,GAAI,IAAI,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;KACjC,GAAI,IAAI,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;IACvC,CAAC;GAAA,OAIH,UAAU,KAAK,wBAAwB;IACrC,QAAQ,IAAI;IACZ,WAAW,IAAI;IACf,YAAY,IAAI;IAChB,SAAS,IAAI,MAAM;GACrB,CAAC;EAEL,CAAC,CAAC;EAEF,YAAY,KAAK,MAAM,KAAK,cAAc,QAAQ;GAChD,UAAU,MAAM,aAAa;IAC3B,QAAQ,IAAI;IACZ,SAAS,IAAI,MAAM;GACrB,CAAC;EACH,CAAC,CAAC;EAEF,YAAY,KAAK,MAAM,KAAK,aAAa,QAAQ;GAC/C,UAAU,KAAK,YAAY;IACzB,QAAQ,IAAI;IACZ,SAAS,IAAI;GACf,CAAC;EACH,CAAC,CAAC;EAEF,YAAY,KAAK,MAAM,KAAK,sBAAsB,QAAQ;GACxD,UAAU,KAAK,qBAAqB;IAClC,QAAQ,IAAI;IACZ,WAAW,IAAI;IACf,QAAQ,IAAI;GACd,CAAC;EACH,CAAC,CAAC;EAEF,YAAY,KAAK,MAAM,KAAK,mBAAmB,QAAQ;GACrD,WAAW,MAAM,kBAAkB;IACjC,QAAQ,IAAI;IACZ,MAAM,IAAI;IACV,QAAQ,IAAI;IACZ,SAAS,IAAI,MAAM;GACrB,CAAC;EACH,CAAC,CAAC;EAIF,YAAY,KAAK,MAAM,KAAK,iBAAiB,QAAQ;GACnD,IAAI,CAAC,kBACH;GACF,UAAU,MAAM,iBAAiB;IAC/B,SAAS,IAAI;IACb,OAAO,IAAI;GACb,CAAC;EACH,CAAC,CAAC;EAEF,YAAY,KAAK,MAAM,KAAK,mBAAmB,QAAQ;GACrD,UAAU,KAAK,mBAAmB;IAChC,SAAS,IAAI;IACb,GAAI,IAAI,QAAQ,EAAE,OAAO,IAAI,MAAM,IAAI,CAAC;IACxC,QAAQ,IAAI,UAAU;IACtB,OAAO,IAAI,MAAM;IACjB,SAAS,IAAI,MAAM;IACnB,UAAU,IAAI,MAAM;IACpB,GAAI,OAAO,IAAI,MAAM,SAAS,WAAW,EAAE,MAAM,IAAI,MAAM,KAAK,IAAI,CAAC;GACvE,CAAC;EACH,CAAC,CAAC;EAEF,YAAY,KAAK,MAAM,KAAK,gBAAgB,QAAQ;GAClD,UAAU,MAAM,eAAe;IAC7B,SAAS,IAAI;IACb,GAAI,IAAI,QAAQ,EAAE,OAAO,IAAI,MAAM,IAAI,CAAC;IACxC,SAAS,IAAI,MAAM;GACrB,CAAC;EACH,CAAC,CAAC;EAMF,IAAI,WAAW;EACf,OAAO,SAAS,YAAY;GAC1B,IAAI,UACF;GACF,WAAW;GACX,KAAK,MAAM,MAAM,aACf,IAAI;IACF,GAAG;GACL,QACM,CAAe;EAEzB;CACF,EACF;AACF;;;ACpZA,MAAM,eAAe;AACrB,MAAM,eAAe;AAErB,MAAM,eAAe;;;;;;;AAQrB,SAAS,UAAU,SAAyB;CAU1C,OAAO;;;;;KAJS,QACb,QAAQ,MAAM,OAAO,EACrB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,MAMR,EAAE;;;AAGb;;;;;;;;;;AAWA,eAAsB,mBACpB,OAA6B,CAAC,GACA;CAC9B,MAAM,OAAO,KAAK,QAAQ;CAC1B,MAAM,OAAO,KAAK,QAAQ;CAC1B,MAAM,OAAO,KAAK,QAAQ;CAE1B,IAAI,CAAC,KAAK,WAAW,GAAG,GACtB,MAAM,IAAI,MAAM,iDAAiD,KAAK,UAAU,IAAI,EAAE,EAAE;CAE1F,IAAI,KAAK,QAAQ,SACf,MAAM,IAAI,MAAM,wBAAwB;CAE1C,IAAI;CACJ,IAAI;CACJ,MAAM,UAAU,IAAI,SAA8B,SAAS,WAAW;EACpE,gBAAgB;EAChB,eAAe;CACjB,CAAC;CAID,QAAQ,YAAY,CAAC,CAAC;CAEtB,IAAI,UAAU;CACd,MAAM,eAAe,UAA+B;EAClD,IAAI,SACF;EACF,UAAU;EACV,cAAc,KAAK;CACrB;CACA,MAAM,cAAc,UAAiB;EACnC,IAAI,SACF;EACF,UAAU;EACV,aAAa,KAAK;CACpB;CAEA,MAAM,SAAS,cAAc,KAAK,QAAQ;EACxC,MAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,UAAU,MAAM;EACpD,IAAI,IAAI,aAAa,MAAM;GACzB,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;GACnD,IAAI,IAAI,WAAW;GACnB;EACF;EAKA,MAAM,cAAc;GAClB,gBAAgB;GAChB,iBAAiB;EACnB;EAEA,MAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;EAC1C,IAAI,OAAO;GACT,MAAM,OAAO,IAAI,aAAa,IAAI,mBAAmB,KAAK;GAC1D,IAAI,UAAU,KAAK,WAAW;GAC9B,IAAI,IAAI,UAAU,IAAI,CAAC;GACvB,2BAAW,IAAI,MAAM,+BAA+B,MAAM,CAAC;GAC3D;EACF;EAEA,MAAM,OAAO,IAAI,aAAa,IAAI,MAAM;EACxC,IAAI,CAAC,MAAM;GAIT,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;GACnD,IAAI,IAAI,mCAAiC;GACzC;EACF;EAEA,MAAM,QAAQ,IAAI,aAAa,IAAI,OAAO,KAAK,KAAA;EAC/C,IAAI,UAAU,KAAK,WAAW;EAC9B,IAAI,IAAI,YAAY;EACpB,YAAY;GAAE;GAAM;EAAM,CAAC;CAC7B,CAAC;CAID,OAAO,GAAG,UAAU,QAAQ;EAC1B,WAAW,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC,CAAC;CAChE,CAAC;CAED,MAAM,IAAI,SAAe,SAAS,WAAW;EAC3C,OAAO,KAAK,SAAS,MAAM;EAC3B,OAAO,OAAO,MAAM,YAAY;GAC9B,OAAO,IAAI,SAAS,MAAM;GAC1B,QAAQ;EACV,CAAC;CACH,CAAC;CAED,MAAM,OAAO,OAAO,QAAQ;CAC5B,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;EACrC,OAAO,MAAM;EACb,MAAM,IAAI,MAAM,kDAAkD;CACpE;CAIA,IAAI;CACJ,IAAI;CACJ,MAAM,gBAAgB;EACpB,2BAAW,IAAI,MAAM,wBAAwB,CAAC;EAC9C,YAAiB;CACnB;CACA,oBAAmC;EACjC,IAAI,SACF,OAAO;EACT,UAAU,IAAI,SAAe,YAAY;GAOvC,OAAU,sBAAsB;GAChC,OAAO,YAAY;IACjB,KAAK,QAAQ,oBAAoB,SAAS,OAAO;IAMjD,IAAI,KAAK,QAAQ,SACf,2BAAW,IAAI,MAAM,wBAAwB,CAAC;SAE9C,2BAAW,IAAI,MAAM,8BAA8B,CAAC;IACtD,QAAQ;GACV,CAAC;EACH,CAAC;EACD,OAAO;CACT;CACA,KAAK,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;CAE9D,OAAO;EACL,aAAa,UAAU,KAAK,GAAG,KAAK,OAAO;EAC3C;EACA,OAAO;CACT;AACF;;;ACjMA,MAAM,2BAA2B,IAAI;;;;;;;;;;;;;;;AAgBrC,eAAsB,eACpB,QACA,SAC+B;CAC/B,IAAI,OAAO,cAAc,SAAS,OAAO,cAAc,mBACrD,MAAM,IAAI,MAAM,0CAA0C,OAAO,UAAU,6CAA6C;CAC1H,IAAI,CAAC,OAAO,KACV,MAAM,IAAI,MAAM,sBAAsB,OAAO,KAAK,mBAAmB;CAEvE,MAAM,QAAQ,QAAQ;CAEtB,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,mBAAmB;GAClC,QAAQ,QAAQ;GAChB,MAAM,QAAQ;EAChB,CAAC;EAED,MAAM,SAAS;EACf,MAAM,WAAW,IAAI,iBAAiB;GACpC,MAAM,OAAO;GACb,OAAO,QAAQ;GACf,aAAa,OAAO;GACpB,YAAY,QAAQ;GACpB,OAAO,QAAQ;GACf,oBAAoB,OAAO,QAAQ;IACjC,MAAM,OAAO,SAAS,gBAAgB;KAAE,MAAM,OAAO;KAAM,KAAK,IAAI,SAAS;IAAE,CAAC;IAChF,MAAM,QAAQ,qBAAqB,GAAG;GACxC;EACF,CAAC;EAED,MAAM,YAAY,MAAM,2BAA2B,QAAQ,QAAQ;EACnE,MAAM,SAAS,MAAM,qBAAqB;GAAE,MAAM;GAAU,SAAS;EAAQ,CAAC;EAM9E,IAAI,YAAY;EAChB,IAAI;GACF,MAAM,OAAO,QAAQ,SAAS;EAChC,SACO,KAAK;GACV,IAAI,CAAC,oBAAoB,GAAG,GAAG;IAC7B,MAAM,OAAO,MAAM,EAAE,YAAY,CAAC,CAAC;IACnC,MAAM;GACR;GACA,YAAY;EACd;EAEA,IAAI,WAAW;GACb,MAAM,EAAE,SAAS,MAAM,kBAAkB,QAAQ,QAAQ,aAAa,0BAA0B,QAAQ,MAAM;GAE9G,MAAO,UAA8D,WAAW,IAAI;GAQpF,MAAM,UAAU,MAAM,EAAE,YAAY,CAAC,CAAC;GACtC,MAAM,iBAAiB,MAAM,2BAA2B,QAAQ,QAAQ;GACxE,MAAM,OAAO,QAAQ,cAAc;EACrC;EAEA,MAAM,EAAE,UAAU,MAAM,OAAO,UAAU;EACzC,MAAM,OAAO,MAAM;EAEnB,MAAM,SAAS,SAAS,OAAO;EAC/B,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,yBAAyB,OAAO,KAAK,sEAAsE;EAE7H,MAAM,OAAO,SAAS,oBAAoB,EAAE,MAAM,OAAO,KAAK,CAAC;EAC/D,OAAO;GAAE;GAAQ;EAAM;CACzB,SACO,KAAK;EACV,MAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;EAChE,MAAM,OAAO,SAAS,kBAAkB;GAAE,MAAM,OAAO;GAAM;EAAM,CAAC;EACpE,MAAM;CACR,UACQ;EACN,MAAM,UAAU,MAAM;CACxB;AACF;;;;;;AAOA,eAAe,2BAA2B,QAAyB,cAAmC;CACpG,IAAI,OAAO,cAAc,OAAO;EAC9B,MAAM,EAAE,uBAAuB,MAAM,OAAO;EAC5C,OAAO,IAAI,mBAAmB,IAAI,IAAI,OAAO,GAAI,GAAG;GAClD,aAAa,OAAO,UAAU,EAAE,SAAS,OAAO,QAAQ,IAAI,KAAA;GAC5D;EACF,CAAC;CACH;CAEA,MAAM,EAAE,kCAAkC,MAAM,OAAO;CACvD,OAAO,IAAI,8BAA8B,IAAI,IAAI,OAAO,GAAI,GAAG;EAC7D,aAAa,OAAO,UAAU,EAAE,SAAS,OAAO,QAAQ,IAAI,KAAA;EAC5D,OAAO,uBAAuB;EAC9B;CACF,CAAC;AACH;AAEA,SAAS,oBAAoB,KAAuB;CAClD,IAAI,CAAC,OAAO,OAAO,QAAQ,UACzB,OAAO;CACT,MAAM,IAAI;CACV,IAAI,EAAE,SAAS,uBAAuB,EAAE,aAAa,SAAS,qBAC5D,OAAO;CACT,OAAO,OAAO,EAAE,YAAY,YAAY,EAAE,QAAQ,YAAY,EAAE,WAAW,cAAc;AAC3F;;;;;;;AAQA,eAAe,kBACb,QACA,WACA,QAC2C;CAC3C,IAAI,QAAQ,SACV,MAAM,IAAI,MAAM,qBAAqB;CACvC,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,IAAI,SAA2C,SAAS,WAAW;GAC9E,QAAQ,iBACA,uBAAO,IAAI,MAAM,+BAA+B,UAAU,GAAG,CAAC,GACpE,SACF;GACA,IAAI,QAAQ;IACV,gBAAgB,uBAAO,IAAI,MAAM,qBAAqB,CAAC;IACvD,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;GAC1D;GACA,OAAO,QAAQ,KAAK,SAAS,MAAM;EACrC,CAAC;CACH,UACQ;EACN,IAAI,OACF,aAAa,KAAK;EACpB,IAAI,UAAU,SACZ,OAAO,oBAAoB,SAAS,OAAO;CAC/C;AACF"}