@aexhq/sdk 0.24.0 → 0.25.1

package/dist/_contracts/submission.d.ts

@@ -1,11 +1,10 @@
 import { PROXY_ENDPOINT_DEFAULTS, type ProxyAuthShape, type ProxyMethod, type ProxyRetryPolicy, type ProxyResponseMode } from "./proxy-protocol.js";
 export { PROXY_ENDPOINT_DEFAULTS };
-import type { AgentsMdRef, FileRef, McpServerRef, SkillRef } from "./run-config.js";
+import type { AgentsMdRef, FileRef, McpServerRef, SkillRef, ToolRef } from "./run-config.js";
 import { type RuntimeSize } from "./runtime-sizes.js";
 import { type PlatformPostHook, type PlatformPostHookInput } from "./post-hook.js";
 import { type RunModel } from "./models.js";
 import { type RuntimeSecurityProfileName } from "./runtime-security-profile.js";
-import { type CredentialMode, type ManagedKeyPolicyV1 } from "./managed-key.js";
 export type JsonPrimitive = string | number | boolean | null;
 export type JsonValue = JsonPrimitive | JsonValue[] | {
     readonly [key: string]: JsonValue;
@@ -145,6 +144,17 @@ export declare const Providers: {
  */
 export declare const RUNTIME_KINDS: readonly ["managed"];
 export type RuntimeKind = (typeof RUNTIME_KINDS)[number];
+/**
+ * Credential source for upstream provider access. Launch accepts only BYOK:
+ * callers may omit `credentialMode` or pass `"byok"`. Other strings, including
+ * `"managed"`, are invalid submission values rather than reserved product
+ * promises.
+ */
+export declare const CREDENTIAL_MODES: readonly ["byok"];
+export type CredentialMode = (typeof CREDENTIAL_MODES)[number];
+export declare const DEFAULT_CREDENTIAL_MODE: CredentialMode;
+export declare function parseCredentialMode(input: unknown): CredentialMode;
+export declare function credentialModeOrDefault(input: CredentialMode | undefined): CredentialMode;
 /** Outcome of the centralized runtime-support check. */
 export interface RuntimeSupportCheck {
     readonly ok: boolean;
@@ -188,11 +198,10 @@ export type PlatformProxyAuthValue = {
 };
 /**
  * Per-run inline secrets bundle. `apiKey` is the BYOK provider key for the
- * run's selected `provider` (required in `"byok"` credential mode, rejected
- * in `"managed"` mode). A run targets exactly one provider, so the key is a
- * single flat field rather than a per-provider block. `mcpServers` and
- * `proxyEndpointAuth` are cross-provider (an MCP credential is the same
- * secret whichever model is driving the MCP client).
+ * run's selected `provider`. A run targets exactly one provider, so the key is
+ * a single flat field rather than a per-provider block. `mcpServers` and
+ * `proxyEndpointAuth` are cross-provider (an MCP credential is the same secret
+ * whichever model is driving the MCP client).
  */
 export interface PlatformInlineSecrets {
     readonly apiKey?: string;
@@ -289,15 +298,16 @@ export declare function optionalPositiveInt(input: unknown, field: string): numb
  * only the non-secret half; bearer headers travel in
  * `secrets.mcpServers` keyed by `name`.
  *
- * `skills` is a list of `SkillRef`s — workspace refs point at
- * `skill_bundles.id` (validated by the BFF before acceptance and pinned
- * into `run_skill_snapshots`), provider refs pass through unchanged.
+ * `skills` is a list of `SkillRef`s. Launch workspace skills use
+ * content-addressed asset refs; run submission snapshots the bytes into the
+ * run-owned prefix before dispatch.
  */
 export interface PlatformSubmission {
     readonly model: RunModel;
     readonly system?: string;
     readonly prompt: readonly string[];
     readonly skills: readonly SkillRef[];
+    readonly tools?: readonly ToolRef[];
     readonly agentsMd: readonly AgentsMdRef[];
     readonly files: readonly FileRef[];
     readonly mcpServers: readonly McpServerRef[];
@@ -320,14 +330,14 @@ export interface PlatformSubmission {
      */
     readonly outputs?: PlatformOutputCaptureConfig;
     /**
-     * Optional override for the managed-runtime builtin extensions enabled
-     * inside the runner container. Each entry is one of the closed
-     * {@link BUILTINS} set (prefer the {@link Builtins} symbol
-     * const). The platform default is `["developer"]` which gives the agent
-     * shell + write + edit + tree tools (bash, grep via shell, file read via
-     * shell or editor, file edit). To opt in to more tools (e.g. web fetch via
-     * the `computercontroller` extension), pass the full list. To opt out of
-     * all builtins (pure-MCP setup), pass an empty array.
+     * Optional override for the managed-runtime builtins enabled inside the
+     * runner container. Each entry is one of the closed {@link BUILTINS} set
+     * (prefer the {@link Builtins} symbol const).
+     *
+     * Omit the field for {@link DEFAULT_BUILTINS}: web search, web fetch,
+     * file read/edit, glob, grep, head, and tail. Pass an empty array to opt out
+     * of all builtins for pure-MCP runs. Pass a custom list to narrow or extend
+     * the tool surface, for example `[Builtins.WEB_SEARCH, Builtins.NOTEBOOK]`.
      *
      * Validation:
      *   - Each entry must be a member of {@link BUILTINS}.
@@ -388,9 +398,7 @@ export interface PlatformRunSubmissionRequest {
     readonly idempotencyKey: string;
     /**
      * Credential source for upstream provider access. Omitted means
-     * `"byok"` for compatibility with the current production path.
-     * `"managed"` is a public contract value but remains fail-closed until
-     * credential resolution and billing admission are available.
+     * `"byok"`; launch does not accept managed provider credentials.
      */
     readonly credentialMode: CredentialMode;
     /**
@@ -469,20 +477,14 @@ export type PlatformRunSubmissionInput = Omit<PlatformRunSubmissionRequest, "wor
     readonly postHook?: PlatformPostHookInput;
 };
 export interface ParseRunSubmissionOptions {
-    readonly managedKeyPolicy?: ManagedKeyPolicyV1;
 }
 export declare function parseRunSubmissionRequest(input: unknown, options?: ParseRunSubmissionOptions): PlatformRunSubmissionRequest;
 export declare function parseRuntimeKind(input: unknown): RuntimeKind | undefined;
 export declare function parseRunProvider(input: unknown): RunProvider;
 /**
- * Cross-check the supplied secrets bundle against the credential mode.
- *
- *  - `"byok"`: `secrets.apiKey` (the provider key for the run's `provider`)
- *    MUST be present.
- *  - `"managed"`: `secrets.apiKey` MUST be absent — provider access is
- *    resolved by the managed-key policy, not a caller-supplied key.
- *  - MCP / proxy endpoint auth carry across providers and are not
- *    checked here.
+ * Cross-check the supplied secrets bundle against the credential mode. BYOK
+ * requires `secrets.apiKey` (the provider key for the run's `provider`). MCP /
+ * proxy endpoint auth carry across providers and are not checked here.
  */
 export declare function enforceCredentialSecretPolicy(credentialMode: CredentialMode, secrets: PlatformInlineSecrets): void;
 export declare function parseSubmission(input: unknown): PlatformSubmission;
@@ -491,28 +493,52 @@ export declare const OUTPUT_MODES: readonly ["buffered", "stream"];
 export type OutputMode = (typeof OUTPUT_MODES)[number];
 export declare const DEFAULT_OUTPUT_MODE: OutputMode;
 /**
- * Managed-runtime builtin extensions — the closed set the managed runtime
- * accepts. Closed so an invalid name is a compile error via {@link Builtins},
- * not a silent runtime no-op. `developer` is the platform default when
- * `builtins` is omitted; pass an empty array to disable all builtins
- * (pure-MCP setup).
+ * Managed-runtime builtins — the closed set the managed runtime accepts.
+ * Closed so an invalid name is a compile error via {@link Builtins}, not a
+ * silent runtime no-op.
+ *
+ * The first entries are the recommended concrete builtins. The legacy aggregate
+ * extension names remain accepted for existing callers, but are not the default.
  */
-export declare const BUILTINS: readonly ["developer", "computercontroller", "memory", "autovisualiser", "tutorial"];
+export declare const BUILTINS: readonly ["web_search", "web_fetch", "read", "edit", "glob", "grep", "head", "tail", "notebook", "developer", "computercontroller", "memory", "autovisualiser", "tutorial"];
 export type Builtin = (typeof BUILTINS)[number];
+/**
+ * DX-first managed-runtime defaults. Omitted `builtins` resolves to this list.
+ * Notebook support remains opt-in through {@link Builtins.NOTEBOOK}.
+ */
+export declare const DEFAULT_BUILTINS: readonly ["web_search", "web_fetch", "read", "edit", "glob", "grep", "head", "tail"];
 /**
  * Symbol-style accessors for the closed builtin set, e.g.
- * `Builtins.COMPUTER_CONTROLLER`.
+ * `Builtins.WEB_SEARCH`.
  */
 export declare const Builtins: {
-    /** Shell (bash + UNIX tools incl. grep), write, edit, tree. The default. */
+    /** Managed web search. Included in {@link DEFAULT_BUILTINS}. */
+    readonly WEB_SEARCH: "web_search";
+    /** Fetch a URL and return readable text. Included in {@link DEFAULT_BUILTINS}. */
+    readonly WEB_FETCH: "web_fetch";
+    /** Read files. Included in {@link DEFAULT_BUILTINS}. */
+    readonly READ: "read";
+    /** Create/modify files. Included in {@link DEFAULT_BUILTINS}. */
+    readonly EDIT: "edit";
+    /** Search paths by glob. Included in {@link DEFAULT_BUILTINS}. */
+    readonly GLOB: "glob";
+    /** Search file contents. Included in {@link DEFAULT_BUILTINS}. */
+    readonly GREP: "grep";
+    /** Read the first lines of a file. Included in {@link DEFAULT_BUILTINS}. */
+    readonly HEAD: "head";
+    /** Read the last lines of a file. Included in {@link DEFAULT_BUILTINS}. */
+    readonly TAIL: "tail";
+    /** Jupyter notebook editing. Optional; not in {@link DEFAULT_BUILTINS}. */
+    readonly NOTEBOOK: "notebook";
+    /** Legacy aggregate: shell/filesystem/navigation/web/notebook tools. */
     readonly DEVELOPER: "developer";
-    /** Web fetch/scrape, scripting, general computer-control tools. */
+    /** Legacy aggregate alias retained for existing callers. */
     readonly COMPUTER_CONTROLLER: "computercontroller";
-    /** Cross-session preference memory. */
+    /** Legacy aggregate alias retained for existing callers. */
     readonly MEMORY: "memory";
-    /** Inline data-visualisation rendering. */
+    /** Legacy aggregate alias retained for existing callers. */
     readonly AUTOVISUALISER: "autovisualiser";
-    /** Interactive guided tutorials. */
+    /** Legacy aggregate alias retained for existing callers. */
     readonly TUTORIAL: "tutorial";
 };
 /**

package/dist/_contracts/submission.js

@@ -4,12 +4,11 @@ import { authShapeHeaderName, PROXY_ALLOWED_METHODS, PROXY_ENDPOINT_DEFAULTS, PR
 // existing `@aexhq/contracts` consumers of `PROXY_ENDPOINT_DEFAULTS` are
 // unaffected by the move.
 export { PROXY_ENDPOINT_DEFAULTS };
-import { parseAssetRefFields, parseMcpServerRef, parseSkillRef } from "./run-config.js";
+import { TOOL_NAME_PATTERN, normaliseSkillBundlePath, parseAssetRefFields, parseMcpServerRef, parseSkillRef } from "./run-config.js";
 import { parseRunTimeout, parseRuntimeSize } from "./runtime-sizes.js";
 import { parsePostHook } from "./post-hook.js";
 import { assertRunModelMatchesProvider, parseRunModel } from "./models.js";
 import { parseRuntimeSecurityProfile } from "./runtime-security-profile.js";
-import { assertManagedKeyAdmissionAllowed, parseCredentialMode } from "./managed-key.js";
 /**
  * Reserved prefix for aex-set runtime env vars (`AEX_CLI`,
  * `AEX_RUNTIME_JSON`, …). Customer `environment.envVars` keys carrying this
@@ -121,6 +120,26 @@ export const Providers = {
  * accepted submission value and fails schema validation.
  */
 export const RUNTIME_KINDS = ["managed"];
+/**
+ * Credential source for upstream provider access. Launch accepts only BYOK:
+ * callers may omit `credentialMode` or pass `"byok"`. Other strings, including
+ * `"managed"`, are invalid submission values rather than reserved product
+ * promises.
+ */
+export const CREDENTIAL_MODES = ["byok"];
+export const DEFAULT_CREDENTIAL_MODE = "byok";
+export function parseCredentialMode(input) {
+    if (input === undefined) {
+        return DEFAULT_CREDENTIAL_MODE;
+    }
+    if (typeof input !== "string" || !CREDENTIAL_MODES.includes(input)) {
+        throw new Error(`credentialMode must be one of: ${CREDENTIAL_MODES.join(", ")} (got ${JSON.stringify(input)})`);
+    }
+    return input;
+}
+export function credentialModeOrDefault(input) {
+    return input ?? DEFAULT_CREDENTIAL_MODE;
+}
 /**
  * Centralized runtime-support validator. Native is removed from the public
  * runtime enum, so an absent runtime and `"managed"` are the only supported
@@ -999,9 +1018,7 @@ export function parseRunSubmissionRequest(input, options = {}) {
     const provider = parseRunProvider(value.provider);
     const runtime = parseRuntimeKind(value.runtime);
     const credentialMode = parseCredentialMode(value.credentialMode);
-    if (credentialMode === "managed") {
-        assertManagedKeyAdmissionAllowed(options.managedKeyPolicy);
-    }
+    void options;
     // Cross-field validation via the centralized runtime-support validator.
     const runtimeSupport = checkRuntimeSupported(provider, runtime);
     if (!runtimeSupport.ok) {
@@ -1086,22 +1103,12 @@ export function parseRunProvider(input) {
     return input;
 }
 /**
- * Cross-check the supplied secrets bundle against the credential mode.
- *
- *  - `"byok"`: `secrets.apiKey` (the provider key for the run's `provider`)
- *    MUST be present.
- *  - `"managed"`: `secrets.apiKey` MUST be absent — provider access is
- *    resolved by the managed-key policy, not a caller-supplied key.
- *  - MCP / proxy endpoint auth carry across providers and are not
- *    checked here.
+ * Cross-check the supplied secrets bundle against the credential mode. BYOK
+ * requires `secrets.apiKey` (the provider key for the run's `provider`). MCP /
+ * proxy endpoint auth carry across providers and are not checked here.
  */
 export function enforceCredentialSecretPolicy(credentialMode, secrets) {
-    if (credentialMode === "managed") {
-        if (secrets.apiKey !== undefined) {
-            throw new Error(`secrets.apiKey is not allowed when credentialMode is managed; provider access is resolved by the managed-key policy`);
-        }
-        return;
-    }
+    void credentialMode;
     if (!secrets.apiKey) {
         throw new Error(`secrets.apiKey is required when credentialMode is byok`);
     }
@@ -1113,6 +1120,7 @@ export function parseSubmission(input) {
         "system",
         "prompt",
         "skills",
+        "tools",
         "agentsMd",
         "files",
         "mcpServers",
@@ -1134,6 +1142,7 @@ export function parseSubmission(input) {
     const system = optionalString(value.system, "submission.system");
     const prompt = parsePrompt(value.prompt);
     const skills = parseSkills(value.skills);
+    const tools = parseTools(value.tools);
     const agentsMd = parseAgentsMd(value.agentsMd);
     const files = parseFiles(value.files);
     const mcpServers = parseMcpServers(value.mcpServers);
@@ -1150,6 +1159,7 @@ export function parseSubmission(input) {
         ...(system ? { system } : {}),
         prompt,
         skills,
+        tools,
         agentsMd,
         files,
         mcpServers,
@@ -1222,33 +1232,75 @@ function parseOutputMode(input) {
     return input;
 }
 /**
- * Managed-runtime builtin extensions — the closed set the managed runtime
- * accepts. Closed so an invalid name is a compile error via {@link Builtins},
- * not a silent runtime no-op. `developer` is the platform default when
- * `builtins` is omitted; pass an empty array to disable all builtins
- * (pure-MCP setup).
+ * Managed-runtime builtins — the closed set the managed runtime accepts.
+ * Closed so an invalid name is a compile error via {@link Builtins}, not a
+ * silent runtime no-op.
+ *
+ * The first entries are the recommended concrete builtins. The legacy aggregate
+ * extension names remain accepted for existing callers, but are not the default.
  */
 export const BUILTINS = [
+    "web_search",
+    "web_fetch",
+    "read",
+    "edit",
+    "glob",
+    "grep",
+    "head",
+    "tail",
+    "notebook",
     "developer",
     "computercontroller",
     "memory",
     "autovisualiser",
     "tutorial"
 ];
+/**
+ * DX-first managed-runtime defaults. Omitted `builtins` resolves to this list.
+ * Notebook support remains opt-in through {@link Builtins.NOTEBOOK}.
+ */
+export const DEFAULT_BUILTINS = [
+    "web_search",
+    "web_fetch",
+    "read",
+    "edit",
+    "glob",
+    "grep",
+    "head",
+    "tail"
+];
 /**
  * Symbol-style accessors for the closed builtin set, e.g.
- * `Builtins.COMPUTER_CONTROLLER`.
+ * `Builtins.WEB_SEARCH`.
  */
 export const Builtins = {
-    /** Shell (bash + UNIX tools incl. grep), write, edit, tree. The default. */
+    /** Managed web search. Included in {@link DEFAULT_BUILTINS}. */
+    WEB_SEARCH: "web_search",
+    /** Fetch a URL and return readable text. Included in {@link DEFAULT_BUILTINS}. */
+    WEB_FETCH: "web_fetch",
+    /** Read files. Included in {@link DEFAULT_BUILTINS}. */
+    READ: "read",
+    /** Create/modify files. Included in {@link DEFAULT_BUILTINS}. */
+    EDIT: "edit",
+    /** Search paths by glob. Included in {@link DEFAULT_BUILTINS}. */
+    GLOB: "glob",
+    /** Search file contents. Included in {@link DEFAULT_BUILTINS}. */
+    GREP: "grep",
+    /** Read the first lines of a file. Included in {@link DEFAULT_BUILTINS}. */
+    HEAD: "head",
+    /** Read the last lines of a file. Included in {@link DEFAULT_BUILTINS}. */
+    TAIL: "tail",
+    /** Jupyter notebook editing. Optional; not in {@link DEFAULT_BUILTINS}. */
+    NOTEBOOK: "notebook",
+    /** Legacy aggregate: shell/filesystem/navigation/web/notebook tools. */
     DEVELOPER: "developer",
-    /** Web fetch/scrape, scripting, general computer-control tools. */
+    /** Legacy aggregate alias retained for existing callers. */
     COMPUTER_CONTROLLER: "computercontroller",
-    /** Cross-session preference memory. */
+    /** Legacy aggregate alias retained for existing callers. */
     MEMORY: "memory",
-    /** Inline data-visualisation rendering. */
+    /** Legacy aggregate alias retained for existing callers. */
     AUTOVISUALISER: "autovisualiser",
-    /** Interactive guided tutorials. */
+    /** Legacy aggregate alias retained for existing callers. */
     TUTORIAL: "tutorial"
 };
 const MAX_BUILTINS = 16;
@@ -1505,6 +1557,68 @@ function parseSkills(input) {
         return ref;
     });
 }
+function parseTools(input) {
+    if (input === undefined) {
+        return [];
+    }
+    if (!Array.isArray(input)) {
+        throw new Error("submission.tools must be an array of ToolRef objects");
+    }
+    const seenNames = new Set();
+    const seenAssetIds = new Set();
+    return input.map((item, index) => {
+        const path = `submission.tools[${index}]`;
+        const raw = requireRecord(item, path);
+        for (const key of Object.keys(raw)) {
+            if (key !== "kind" &&
+                key !== "assetId" &&
+                key !== "name" &&
+                key !== "description" &&
+                key !== "input_schema" &&
+                key !== "entry") {
+                throw new Error(`${path}.${key} is not an allowed field for ToolRef; permitted: kind, assetId, name, description, input_schema, entry`);
+            }
+        }
+        if (raw.kind !== "asset") {
+            throw new Error(`${path}.kind must be 'asset' (got ${JSON.stringify(raw.kind)})`);
+        }
+        const fields = parseAssetRefFields({ kind: raw.kind, assetId: raw.assetId, name: raw.name }, path);
+        if (!TOOL_NAME_PATTERN.test(fields.name)) {
+            throw new Error(`${path}.name must match ${TOOL_NAME_PATTERN.source}`);
+        }
+        if (fields.name.includes("__")) {
+            throw new Error(`${path}.name must not contain "__"; that separator is reserved for MCP tools`);
+        }
+        if (seenNames.has(fields.name)) {
+            throw new Error(`submission.tools duplicate name: ${fields.name}`);
+        }
+        seenNames.add(fields.name);
+        if (seenAssetIds.has(fields.assetId)) {
+            throw new Error(`submission.tools duplicate assetId: ${fields.assetId}`);
+        }
+        seenAssetIds.add(fields.assetId);
+        const description = requireString(raw.description, `${path}.description`);
+        if (description.trim().length === 0 || description.length > 2048) {
+            throw new Error(`${path}.description must be non-empty and <= 2048 chars`);
+        }
+        const inputSchema = requireRecord(raw.input_schema, `${path}.input_schema`);
+        if (!isJsonValue(inputSchema)) {
+            throw new Error(`${path}.input_schema must be JSON-serializable`);
+        }
+        if (inputSchema.type !== "object") {
+            throw new Error(`${path}.input_schema.type must be "object"`);
+        }
+        const entry = normaliseSkillBundlePath(requireString(raw.entry, `${path}.entry`));
+        return {
+            kind: "asset",
+            assetId: fields.assetId,
+            name: fields.name,
+            description,
+            input_schema: inputSchema,
+            entry
+        };
+    });
+}
 function parseAgentsMd(input) {
     if (input === undefined)
         return [];

package/dist/bundle.d.ts

@@ -1,3 +1,4 @@
+import { type ToolInputSchema } from "./_contracts/index.js";
 /**
  * In-memory skill bundle: a flat path -> bytes map and the
  * deterministically-zipped representation.
@@ -22,6 +23,18 @@ export interface BundledSkill {
 /** Inline files map: path -> contents (UTF-8 string or raw bytes). */
 export type SkillFiles = Readonly<Record<string, string | Uint8Array>>;
 export declare function bundleSkillFiles(files: SkillFiles): BundledSkill;
+export interface BundledTool {
+    readonly zip: Uint8Array;
+    readonly fileCount: number;
+    readonly compressedSize: number;
+}
+export interface ToolBundleManifest {
+    readonly name: string;
+    readonly description: string;
+    readonly input_schema: ToolInputSchema;
+    readonly entry: string;
+}
+export declare function bundleToolFiles(files: SkillFiles, manifest: ToolBundleManifest): BundledTool;
 /**
  * Compute `sha256:<hex>` of the given canonicalised zip bytes. Used by
  * `Skill.fromFiles` / `Skill.fromPath` to populate the

package/dist/bundle.js

@@ -53,6 +53,57 @@ export function bundleSkillFiles(files) {
     }
     return { zip, fileCount: entries.length, compressedSize: zip.byteLength };
 }
+export function bundleToolFiles(files, manifest) {
+    if (!files || typeof files !== "object") {
+        throw new Error("Tool files map is required");
+    }
+    const entries = Object.entries(files);
+    if (entries.length === 0) {
+        throw new Error("Tool files map cannot be empty");
+    }
+    if (entries.length > SKILL_BUNDLE_LIMITS.maxFiles) {
+        throw new Error(`Tool bundle exceeds ${SKILL_BUNDLE_LIMITS.maxFiles} file limit (got ${entries.length})`);
+    }
+    const collected = new Map();
+    let totalDecompressed = 0;
+    let hasEntry = false;
+    const entryPath = validateSkillBundleEntry({ path: manifest.entry, size: 0 }).path;
+    for (const [rawPath, contents] of entries) {
+        const bytes = typeof contents === "string" ? TEXT.encode(contents) : contents;
+        if (!(bytes instanceof Uint8Array)) {
+            throw new Error(`Tool file "${rawPath}" must be a string or Uint8Array`);
+        }
+        const entry = validateSkillBundleEntry({ path: rawPath, size: bytes.byteLength });
+        totalDecompressed += bytes.byteLength;
+        if (totalDecompressed > SKILL_BUNDLE_LIMITS.maxDecompressedBytes) {
+            throw new Error(`Tool bundle exceeds decompressed cap of ${SKILL_BUNDLE_LIMITS.maxDecompressedBytes} bytes`);
+        }
+        if (collected.has(entry.path)) {
+            throw new Error(`Tool bundle contains duplicate path: ${entry.path}`);
+        }
+        if (entry.path === entryPath)
+            hasEntry = true;
+        collected.set(entry.path, bytes);
+    }
+    if (!hasEntry) {
+        throw new Error(`Tool bundle entry "${entryPath}" must exist in files`);
+    }
+    const manifestBytes = TEXT.encode(`${JSON.stringify(manifest, null, 2)}\n`);
+    if (collected.has("tool.json")) {
+        throw new Error('Tool bundle files must not include reserved "tool.json"; pass manifest fields to Tool.fromFiles instead');
+    }
+    collected.set("tool.json", manifestBytes);
+    const sorted = [...collected.entries()].sort((a, b) => (a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0));
+    const zippable = {};
+    for (const [path, bytes] of sorted) {
+        zippable[path] = [bytes, { mtime: ZIP_EPOCH }];
+    }
+    const zip = zipSync(zippable, { level: 6 });
+    if (zip.byteLength > SKILL_BUNDLE_LIMITS.maxCompressedBytes) {
+        throw new Error(`Tool bundle exceeds compressed cap of ${SKILL_BUNDLE_LIMITS.maxCompressedBytes} bytes (got ${zip.byteLength})`);
+    }
+    return { zip, fileCount: collected.size, compressedSize: zip.byteLength };
+}
 const ZIP_EPOCH = new Date(Date.UTC(1980, 0, 1));
 /**
  * Compute `sha256:<hex>` of the given canonicalised zip bytes. Used by

package/dist/bundle.js.map

@@ -1 +1 @@
-{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../src/bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAiB,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAwBjF,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAK/B,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,wBAAwB,mBAAmB,CAAC,QAAQ,oBAAoB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7G,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;IAChD,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAE1B,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC9E,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,eAAe,OAAO,kCAAkC,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,KAAK,GAAG,wBAAwB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAClF,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,iBAAiB,IAAI,KAAK,CAAC,UAAU,CAAC;QACtC,IAAI,iBAAiB,GAAG,mBAAmB,CAAC,oBAAoB,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CACb,4CAA4C,mBAAmB,CAAC,oBAAoB,QAAQ,CAC7F,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,2DAA2D;YACzD,uEAAuE;YACvE,gDAAgD,CACnD,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,sEAAsE;IACtE,qEAAqE;IACrE,sDAAsD;IACtD,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,UAAU,GAAG,mBAAmB,CAAC,kBAAkB,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,0CAA0C,mBAAmB,CAAC,kBAAkB,eAAe,GAAG,CAAC,UAAU,GAAG,CACjH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAEjD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAoB;IACxD,MAAM,MAAM,GAAI,UAAqD,CAAC,MAAM,EAAE,MAAM,CAAC;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,kHAAkH,CACnH,CAAC;IACJ,CAAC;IACD,qEAAqE;IACrE,uEAAuE;IACvE,oEAAoE;IACpE,qEAAqE;IACrE,aAAa;IACb,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3D,OAAO,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,MAAmB;IACtC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAC/B,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../src/bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAiB,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAwB,MAAM,kBAAkB,CAAC;AAwBvG,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAK/B,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,wBAAwB,mBAAmB,CAAC,QAAQ,oBAAoB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7G,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;IAChD,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAE1B,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC9E,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,eAAe,OAAO,kCAAkC,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,KAAK,GAAG,wBAAwB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAClF,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,iBAAiB,IAAI,KAAK,CAAC,UAAU,CAAC;QACtC,IAAI,iBAAiB,GAAG,mBAAmB,CAAC,oBAAoB,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CACb,4CAA4C,mBAAmB,CAAC,oBAAoB,QAAQ,CAC7F,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,2DAA2D;YACzD,uEAAuE;YACvE,gDAAgD,CACnD,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,sEAAsE;IACtE,qEAAqE;IACrE,sDAAsD;IACtD,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,UAAU,GAAG,mBAAmB,CAAC,kBAAkB,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,0CAA0C,mBAAmB,CAAC,kBAAkB,eAAe,GAAG,CAAC,UAAU,GAAG,CACjH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;AAC5E,CAAC;AAeD,MAAM,UAAU,eAAe,CAC7B,KAAiB,EACjB,QAA4B;IAE5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,uBAAuB,mBAAmB,CAAC,QAAQ,oBAAoB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5G,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;IAChD,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,SAAS,GAAG,wBAAwB,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;IAEnF,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC9E,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,cAAc,OAAO,kCAAkC,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,KAAK,GAAG,wBAAwB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAClF,iBAAiB,IAAI,KAAK,CAAC,UAAU,CAAC;QACtC,IAAI,iBAAiB,GAAG,mBAAmB,CAAC,oBAAoB,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CACb,2CAA2C,mBAAmB,CAAC,oBAAoB,QAAQ,CAC5F,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,wCAAwC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,QAAQ,GAAG,IAAI,CAAC;QAC9C,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,uBAAuB,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5E,IAAI,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,yGAAyG,CAAC,CAAC;IAC7H,CAAC;IACD,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAE1C,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,UAAU,GAAG,mBAAmB,CAAC,kBAAkB,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,yCAAyC,mBAAmB,CAAC,kBAAkB,eAAe,GAAG,CAAC,UAAU,GAAG,CAChH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAEjD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAoB;IACxD,MAAM,MAAM,GAAI,UAAqD,CAAC,MAAM,EAAE,MAAM,CAAC;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,kHAAkH,CACnH,CAAC;IACJ,CAAC;IACD,qEAAqE;IACrE,uEAAuE;IACvE,oEAAoE;IACpE,qEAAqE;IACrE,aAAa;IACb,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3D,OAAO,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,MAAmB;IACtC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAC/B,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}