@aexhq/sdk 0.35.0 → 0.37.0

package/dist/data-tools.d.ts

@@ -1,82 +0,0 @@
-/**
- * Data-source chat tools — turn the SDK's sessions read surface into LLM tool
- * definitions.
- *
- * `createDataTools(client)` returns a small, PROVIDER-AGNOSTIC tool set (plain
- * JSON-Schema `input_schema`, the Anthropic/OpenAI tool shape) plus an
- * `execute(name, input)` dispatcher. A chat backend wires `tools` into its
- * Messages loop and calls `execute` on each `tool_use`. There is no LLM-vendor
- * dependency here: the executor only ever calls public `AgentExecutor` session
- * methods, so a chat built on these tools can reach a workspace's sessions and
- * outputs and NOTHING else — internal/operator data is unreachable by construction.
- *
- * The tools follow search-then-fetch: `list_sessions` / `list_outputs` return
- * lean references and metadata; only `read_output` returns file content, and it
- * is byte-capped so a large deliverable never floods the context window.
- */
-import type { AgentExecutor } from "./client.js";
-import type { SessionListQuery } from "./_contracts/index.js";
-/** JSON Schema for a tool's input — the subset every major LLM tool API accepts. */
-export interface DataChatToolSchema {
-    readonly type: "object";
-    readonly properties: Record<string, unknown>;
-    readonly required?: readonly string[];
-    readonly additionalProperties?: boolean;
-}
-/** One tool definition in the vendor-neutral `{ name, description, input_schema }` shape. */
-export interface DataChatTool {
-    readonly name: string;
-    readonly description: string;
-    readonly input_schema: DataChatToolSchema;
-}
-/** The tool set plus its dispatcher, returned by {@link createDataTools}. */
-export interface DataTools {
-    /** Tool definitions to pass to the model. */
-    readonly tools: readonly DataChatTool[];
-    /** A system-prompt fragment that teaches the model to search-then-fetch. */
-    readonly instructions: string;
-    /**
-     * Run one tool by name with the model's arguments. Returns a JSON-serializable
-     * result (never raw bytes). Throws `DataToolError` for an unknown tool or
-     * invalid arguments — surface that text back to the model as the tool result.
-     */
-    execute(name: string, input: Record<string, unknown>): Promise<unknown>;
-}
-export interface CreateDataToolsOptions {
-    /** Default `max_bytes` for `read_output` when the model omits it. Default 50_000. */
-    readonly defaultReadBytes?: number;
-}
-/**
- * Scopes a chat to a fixed set of sessions. Either pin explicit `sessionIds`
- * (the primary path — needs only `sessions.get` / `sessions.outputs(id).read`,
- * no `sessions.list`), or supply a `filter`
- * (status/since/limit) resolved to a concrete allow-list via `sessions.list`
- * (owner-gated). Every corpus read tool refuses a session outside the resolved
- * set.
- */
-export interface ChatCorpus {
-    /** Explicit session-id allow-list. */
-    readonly sessionIds?: readonly string[];
-    /** Resolve the corpus from a `sessions.list` query (status / since / limit). */
-    readonly filter?: SessionListQuery;
-}
-/** Thrown by `DataTools.execute` for an unknown tool or malformed arguments. */
-export declare class DataToolError extends Error {
-    constructor(message: string);
-}
-export declare const DATA_TOOLS_INSTRUCTIONS: string;
-/**
- * Build the data-source chat tool set bound to one {@link AgentExecutor}.
- * Everything the tools can reach is scoped to the client's workspace token.
- */
-export declare function createDataTools(client: AgentExecutor, options?: CreateDataToolsOptions): DataTools;
-/**
- * Build a corpus-scoped variant of {@link createDataTools}: identical tools, but
- * every read tool is fenced to the sessions in `corpus`. A `get_session`/
- * `list_outputs`/`read_output` for a session outside the corpus throws a
- * {@link DataToolError} ("session <id> is not in this chat's corpus");
- * `list_sessions` returns only corpus sessions; `search_outputs` is auto-scoped
- * to the corpus. This is a client-side guard on top of the server-side
- * workspace-token data scope.
- */
-export declare function createCorpusTools(client: AgentExecutor, corpus: ChatCorpus, options?: CreateDataToolsOptions): DataTools;

package/dist/data-tools.js

@@ -1,251 +0,0 @@
-/** Thrown by `DataTools.execute` for an unknown tool or malformed arguments. */
-export class DataToolError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "DataToolError";
-    }
-}
-const DEFAULT_READ_BYTES = 50_000;
-export const DATA_TOOLS_INSTRUCTIONS = "You can read this workspace's agent sessions and their output files. " +
-    "Call `list_sessions` to discover sessions (most recent first; page with `cursor`). " +
-    "Call `list_outputs` for a session to see its files. Only call `read_output` for a " +
-    "specific file when you actually need its contents — it is byte-capped, so if a " +
-    "read comes back `truncated`, narrow it with `grep` or a more specific `path` " +
-    "rather than re-reading. Never assume a session or file exists without listing first.";
-/** The vendor-neutral tool definitions, shared by createDataTools/createCorpusTools. */
-function buildToolDefs(defaultReadBytes) {
-    return [
-        {
-            name: "list_sessions",
-            description: "List agent sessions in the workspace, most recent first. Returns id/status/timestamps " +
-                "(and cost when settled) plus a `nextCursor` for the next page. Does NOT return prompts or outputs.",
-            input_schema: {
-                type: "object",
-                additionalProperties: false,
-                properties: {
-                    status: { type: "string", description: "Filter by session status, e.g. 'idle'." },
-                    since: { type: "string", description: "ISO-8601 lower bound on createdAt." },
-                    limit: { type: "integer", description: "Page size, 1-100 (default 25)." },
-                    cursor: { type: "string", description: "Opaque cursor from a prior page's nextCursor." }
-                }
-            }
-        },
-        {
-            name: "get_session",
-            description: "Get one session's status, timing, and cost summary by id. Does NOT return the submission or outputs.",
-            input_schema: {
-                type: "object",
-                additionalProperties: false,
-                required: ["session_id"],
-                properties: { session_id: { type: "string", description: "The session id." } }
-            }
-        },
-        {
-            name: "list_outputs",
-            description: "List a session's captured output files (id, filename, size, content type). Metadata only, no content.",
-            input_schema: {
-                type: "object",
-                additionalProperties: false,
-                required: ["session_id"],
-                properties: { session_id: { type: "string", description: "The session id." } }
-            }
-        },
-        {
-            name: "read_output",
-            description: "Read one output file of a session as text. Byte-capped: if the file is larger than `max_bytes` the result " +
-                "is a prefix with `truncated: true`. Select the file by `path` (e.g. 'report.md') or by `id` from list_outputs.",
-            input_schema: {
-                type: "object",
-                additionalProperties: false,
-                required: ["session_id"],
-                properties: {
-                    session_id: { type: "string", description: "The session id." },
-                    path: { type: "string", description: "Output file path/name (suffix match). Provide this or `id`." },
-                    id: { type: "string", description: "Output file id from list_outputs. Provide this or `path`." },
-                    max_bytes: { type: "integer", description: `Cap on bytes read (default ${defaultReadBytes}, max 10000000).` },
-                    grep: { type: "string", description: "Optional: return only lines matching this substring (case-insensitive)." }
-                }
-            }
-        },
-        {
-            name: "search_outputs",
-            description: "Find output files across sessions by filename/extension/content type. Returns references " +
-                "(session_id, outputId, filename, size) — call read_output to fetch content.",
-            input_schema: {
-                type: "object",
-                additionalProperties: false,
-                properties: {
-                    filename: { type: "string", description: "Case-insensitive substring match on the filename." },
-                    extension: { type: "string", description: "File extension, e.g. 'md', 'json' (no dot)." },
-                    content_type: { type: "string", description: "Exact content type or a prefix wildcard like 'image/*'." },
-                    limit: { type: "integer", description: "Max hits (default 100)." }
-                }
-            }
-        }
-    ];
-}
-/** Shared executor over the read surface; `corpus` (when present) enforces the allow-list. */
-function makeExecute(client, defaultReadBytes, corpus) {
-    return async function execute(name, input) {
-        const args = input ?? {};
-        switch (name) {
-            case "list_sessions": {
-                if (corpus)
-                    return { sessions: await corpus.listSessionSummaries() };
-                const page = await client.sessions.list({
-                    ...(typeof args.status === "string" ? { status: args.status } : {}),
-                    ...(typeof args.since === "string" ? { since: args.since } : {}),
-                    ...(typeof args.limit === "number" ? { limit: args.limit } : {}),
-                    ...(typeof args.cursor === "string" ? { cursor: args.cursor } : {})
-                });
-                return {
-                    sessions: page.sessions.map(summarizeSession),
-                    ...(page.nextCursor !== undefined ? { nextCursor: page.nextCursor } : {})
-                };
-            }
-            case "get_session": {
-                const sessionId = requireString(args.session_id, "session_id");
-                if (corpus)
-                    await corpus.ensure(sessionId);
-                return summarizeSession(await client.sessions.get(sessionId));
-            }
-            case "list_outputs": {
-                const sessionId = requireString(args.session_id, "session_id");
-                if (corpus)
-                    await corpus.ensure(sessionId);
-                const outputs = await client.sessions.outputs(sessionId).list();
-                return outputs.map((o) => ({
-                    id: o.id,
-                    filename: o.filename,
-                    sizeBytes: o.sizeBytes,
-                    contentType: o.contentType
-                }));
-            }
-            case "read_output": {
-                const sessionId = requireString(args.session_id, "session_id");
-                if (corpus)
-                    await corpus.ensure(sessionId);
-                const selector = readSelector(args);
-                const result = await client.sessions.outputs(sessionId).read(selector, {
-                    maxBytes: typeof args.max_bytes === "number" ? args.max_bytes : defaultReadBytes,
-                    ...(typeof args.grep === "string" && args.grep.length > 0 ? { grep: args.grep } : {})
-                });
-                return {
-                    path: result.output.filename ?? result.output.id,
-                    text: result.text,
-                    truncated: result.truncated,
-                    totalBytes: result.totalBytes
-                };
-            }
-            case "search_outputs": {
-                const sessionIds = corpus ? await corpus.ids() : undefined;
-                const page = await client.sessions.searchOutputs({
-                    ...(sessionIds ? { runIds: sessionIds } : {}),
-                    ...(typeof args.filename === "string" ? { filename: args.filename } : {}),
-                    ...(typeof args.extension === "string" ? { extension: args.extension } : {}),
-                    ...(typeof args.content_type === "string" ? { contentType: args.content_type } : {}),
-                    ...(typeof args.limit === "number" ? { limit: args.limit } : {})
-                });
-                // The wire hit carries `runId`; expose it to the model as `session_id`.
-                return {
-                    hits: page.hits.map((hit) => ({
-                        session_id: hit.runId,
-                        outputId: hit.outputId,
-                        ...(hit.filename !== undefined ? { filename: hit.filename } : {}),
-                        ...(hit.sizeBytes !== undefined ? { sizeBytes: hit.sizeBytes } : {}),
-                        ...(hit.contentType !== undefined ? { contentType: hit.contentType } : {})
-                    }))
-                };
-            }
-            default:
-                throw new DataToolError(`unknown tool: ${name}`);
-        }
-    };
-}
-/**
- * Build the data-source chat tool set bound to one {@link AgentExecutor}.
- * Everything the tools can reach is scoped to the client's workspace token.
- */
-export function createDataTools(client, options) {
-    const defaultReadBytes = options?.defaultReadBytes ?? DEFAULT_READ_BYTES;
-    return {
-        tools: buildToolDefs(defaultReadBytes),
-        instructions: DATA_TOOLS_INSTRUCTIONS,
-        execute: makeExecute(client, defaultReadBytes)
-    };
-}
-/**
- * Build a corpus-scoped variant of {@link createDataTools}: identical tools, but
- * every read tool is fenced to the sessions in `corpus`. A `get_session`/
- * `list_outputs`/`read_output` for a session outside the corpus throws a
- * {@link DataToolError} ("session <id> is not in this chat's corpus");
- * `list_sessions` returns only corpus sessions; `search_outputs` is auto-scoped
- * to the corpus. This is a client-side guard on top of the server-side
- * workspace-token data scope.
- */
-export function createCorpusTools(client, corpus, options) {
-    const defaultReadBytes = options?.defaultReadBytes ?? DEFAULT_READ_BYTES;
-    let resolved = corpus.sessionIds ? new Set(corpus.sessionIds) : null;
-    async function resolve() {
-        if (resolved)
-            return resolved;
-        // No explicit sessionIds → page sessions.list with the filter to a concrete set.
-        const ids = [];
-        const base = corpus.filter ?? {};
-        let cursor = base.cursor;
-        do {
-            const page = await client.sessions.list({ ...base, ...(cursor ? { cursor } : {}) });
-            for (const s of page.sessions)
-                ids.push(s.id);
-            cursor = page.nextCursor;
-        } while (cursor);
-        resolved = new Set(ids);
-        return resolved;
-    }
-    const guard = {
-        ensure: async (sessionId) => {
-            const set = await resolve();
-            if (!set.has(sessionId))
-                throw new DataToolError(`session ${sessionId} is not in this chat's corpus`);
-        },
-        ids: async () => [...(await resolve())],
-        // Build list_sessions rows from sessions.get so the sessionIds corpus never
-        // needs the owner-gated sessions.list; bounded by the corpus size.
-        listSessionSummaries: async () => {
-            const set = await resolve();
-            return Promise.all([...set].map(async (id) => summarizeSession(await client.sessions.get(id))));
-        }
-    };
-    return {
-        tools: buildToolDefs(defaultReadBytes),
-        instructions: DATA_TOOLS_INSTRUCTIONS,
-        execute: makeExecute(client, defaultReadBytes, guard)
-    };
-}
-function requireString(value, field) {
-    if (typeof value !== "string" || value.length === 0) {
-        throw new DataToolError(`missing required string argument: ${field}`);
-    }
-    return value;
-}
-function readSelector(args) {
-    if (typeof args.path === "string" && args.path.length > 0) {
-        return { path: args.path, match: "suffix" };
-    }
-    if (typeof args.id === "string" && args.id.length > 0) {
-        return { id: args.id };
-    }
-    throw new DataToolError("read_output requires either `path` or `id`");
-}
-/** Pick the small, useful, non-sensitive subset of a session record for the model. */
-function summarizeSession(session) {
-    return {
-        id: session.id,
-        status: session.status,
-        createdAt: session.createdAt,
-        updatedAt: session.updatedAt,
-        costUsd: session.costUsd,
-        errorMessage: session.errorMessage ?? undefined
-    };
-}
-//# sourceMappingURL=data-tools.js.map

package/dist/data-tools.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"data-tools.js","sourceRoot":"","sources":["../src/data-tools.ts"],"names":[],"mappings":"AAqEA,gFAAgF;AAChF,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,CAAC,MAAM,uBAAuB,GAClC,uEAAuE;IACvE,qFAAqF;IACrF,oFAAoF;IACpF,iFAAiF;IACjF,+EAA+E;IAC/E,sFAAsF,CAAC;AAEzF,wFAAwF;AACxF,SAAS,aAAa,CAAC,gBAAwB;IAC7C,OAAO;QACL;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EACT,wFAAwF;gBACxF,oGAAoG;YACtG,YAAY,EAAE;gBACZ,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wCAAwC,EAAE;oBACjF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;oBAC5E,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,gCAAgC,EAAE;oBACzE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+CAA+C,EAAE;iBACzF;aACF;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,sGAAsG;YACnH,YAAY,EAAE;gBACZ,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,QAAQ,EAAE,CAAC,YAAY,CAAC;gBACxB,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAE;aAC/E;SACF;QACD;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,uGAAuG;YACpH,YAAY,EAAE;gBACZ,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,QAAQ,EAAE,CAAC,YAAY,CAAC;gBACxB,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAE;aAC/E;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EACT,4GAA4G;gBAC5G,gHAAgH;YAClH,YAAY,EAAE;gBACZ,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,QAAQ,EAAE,CAAC,YAAY,CAAC;gBACxB,UAAU,EAAE;oBACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE;oBAC9D,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6DAA6D,EAAE;oBACpG,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2DAA2D,EAAE;oBAChG,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,8BAA8B,gBAAgB,kBAAkB,EAAE;oBAC7G,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yEAAyE,EAAE;iBACjH;aACF;SACF;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,WAAW,EACT,2FAA2F;gBAC3F,6EAA6E;YAC/E,YAAY,EAAE;gBACZ,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mDAAmD,EAAE;oBAC9F,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6CAA6C,EAAE;oBACzF,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yDAAyD,EAAE;oBACxG,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,yBAAyB,EAAE;iBACnE;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,SAAS,WAAW,CAClB,MAAqB,EACrB,gBAAwB,EACxB,MAAoB;IAEpB,OAAO,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,KAA8B;QACxE,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACzB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,IAAI,MAAM;oBAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC,oBAAoB,EAAE,EAAE,CAAC;gBACrE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACtC,GAAG,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,GAAG,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,GAAG,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,GAAG,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpE,CAAC,CAAC;gBACH,OAAO;oBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC;oBAC7C,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1E,CAAC;YACJ,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;gBAC/D,IAAI,MAAM;oBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC3C,OAAO,gBAAgB,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YAChE,CAAC;YACD,KAAK,cAAc,CAAC,CAAC,CAAC;gBACpB,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;gBAC/D,IAAI,MAAM;oBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;gBAChE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACzB,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;iBAC3B,CAAC,CAAC,CAAC;YACN,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;gBAC/D,IAAI,MAAM;oBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBACpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE;oBACrE,QAAQ,EAAE,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB;oBAChF,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtF,CAAC,CAAC;gBACH,OAAO;oBACL,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE;oBAChD,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC;YACJ,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;oBAC/C,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7C,GAAG,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzE,GAAG,CAAC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5E,GAAG,CAAC,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpF,GAAG,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjE,CAAC,CAAC;gBACH,wEAAwE;gBACxE,OAAO;oBACL,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBAC5B,UAAU,EAAE,GAAG,CAAC,KAAK;wBACrB,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjE,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpE,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC3E,CAAC,CAAC;iBACJ,CAAC;YACJ,CAAC;YACD;gBACE,MAAM,IAAI,aAAa,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAqB,EAAE,OAAgC;IACrF,MAAM,gBAAgB,GAAG,OAAO,EAAE,gBAAgB,IAAI,kBAAkB,CAAC;IACzE,OAAO;QACL,KAAK,EAAE,aAAa,CAAC,gBAAgB,CAAC;QACtC,YAAY,EAAE,uBAAuB;QACrC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAqB,EACrB,MAAkB,EAClB,OAAgC;IAEhC,MAAM,gBAAgB,GAAG,OAAO,EAAE,gBAAgB,IAAI,kBAAkB,CAAC;IAEzE,IAAI,QAAQ,GAAuB,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,KAAK,UAAU,OAAO;QACpB,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,iFAAiF;QACjF,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,MAAM,IAAI,GAAqB,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QACnD,IAAI,MAAM,GAAuB,IAAI,CAAC,MAAM,CAAC;QAC7C,GAAG,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACpF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;QAC3B,CAAC,QAAQ,MAAM,EAAE;QACjB,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAgB;QACzB,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YAC1B,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,MAAM,IAAI,aAAa,CAAC,WAAW,SAAS,+BAA+B,CAAC,CAAC;QACxG,CAAC;QACD,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC;QACvC,4EAA4E;QAC5E,mEAAmE;QACnE,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAC/B,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClG,CAAC;KACF,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,aAAa,CAAC,gBAAgB,CAAC;QACtC,YAAY,EAAE,uBAAuB;QACrC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,aAAa,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,IAA6B;IACjD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;AACxE,CAAC;AAED,sFAAsF;AACtF,SAAS,gBAAgB,CAAC,OAOzB;IACC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;KAChD,CAAC;AACJ,CAAC"}

package/dist/proxy-endpoint.d.ts

@@ -1,131 +0,0 @@
-import { type PlatformProxyAuthValue, type PlatformProxyEndpoint, type PlatformProxyEndpointAuth, type ProxyMethod, type ProxyRetryPolicy, type ProxyResponseMode } from "./_contracts/index.js";
-/**
- * Constructor-only surface for declaring a per-run HTTP proxy endpoint.
- *
- * Why a class rather than a raw object literal: the raw
- * `PlatformProxyEndpoint` + `PlatformProxyEndpointAuth` shape lets the
- * caller assemble two halves of one logical thing (the auth shape and
- * the auth value), and they often drift — agents writing freeform
- * objects regularly hit runtime rejections with `responseMode: "json"`
- * (real values are `status_only | headers_only | full`) or
- * `authShape: { type: "header", header: "X-Api-Key" }` (real field is
- * `name`). The constructor signatures here put the auth secret on the
- * same call as the shape, so any drift becomes a TypeScript error at
- * the call site, not an HTTP 400 a round-trip later.
- *
- * Wire-format unchanged: the SDK splits each `ProxyEndpoint` instance
- * into a `PlatformProxyEndpoint` (the non-secret declaration) plus a
- * `PlatformProxyEndpointAuth` entry (the per-request secret) when the
- * session is created, exactly the way `McpServer` already splits
- * `headers` into `secrets.mcpServers`.
- *
- * Five named constructors:
- *
- *   - `ProxyEndpoint.none  ({ name, baseUrl, ... })` — keyless upstream
- *   - `ProxyEndpoint.bearer({ name, baseUrl, token, ... })`
- *   - `ProxyEndpoint.header({ name, baseUrl, header, value, ... })`
- *   - `ProxyEndpoint.basic ({ name, baseUrl, username, password, ... })`
- *   - `ProxyEndpoint.query ({ name, baseUrl, query, value, ... })`
- *
- * All five share the same allow-list / response-mode / cap parameters.
- * The four authenticated variants split into `secrets.proxyEndpointAuth[].value`
- * when the session is created; `none` produces only a declaration (no secret).
- */
-export interface ProxyEndpointCommonOptions {
-    /**
-     * Endpoint name. Lowercase letters, digits, `_`, `-`, up to 63
-     * chars. Matches the BFF's `PROXY_ENDPOINT_NAME_PATTERN`. Used as
-     * the path segment in `/api/runs/:runId/proxy/:name` and as the
-     * cross-reference key in `secrets.proxyEndpointAuth`.
-     */
-    readonly name: string;
-    /** Upstream base URL. Must be an absolute `https://` URL. */
-    readonly baseUrl: string;
-    /** HTTP methods the in-container caller is allowed to use. */
-    readonly allowMethods: readonly ProxyMethod[];
-    /** Path prefixes the in-container caller is allowed to hit. */
-    readonly allowPathPrefixes: readonly string[];
-    /**
-     * Caller-supplied headers permitted to pass through the proxy. The
-     * auth header (Bearer/Basic/custom-name) is enforced by the proxy
-     * itself and MUST NOT appear here.
-     */
-    readonly allowHeaders?: readonly string[];
-    /** Default narrowest response disclosure mode. */
-    readonly responseMode?: ProxyResponseMode;
-    readonly maxRequestBytes?: number;
-    readonly maxResponseBytes?: number;
-    readonly timeoutMs?: number;
-    /** Opt-in retry policy for in-container calls to this endpoint. */
-    readonly retry?: ProxyRetryPolicy;
-}
-export interface BearerProxyEndpointOptions extends ProxyEndpointCommonOptions {
-    /** Bearer token sent as `Authorization: Bearer <token>`. */
-    readonly token: string;
-}
-/**
- * Options for `ProxyEndpoint.none` — keyless upstream. Same shape as
- * `ProxyEndpointCommonOptions`; declared as an empty extension so the
- * call site reads symmetrically with the other constructors and stays
- * a stable extension point if a future field becomes auth-shape-only.
- */
-export interface NoneProxyEndpointOptions extends ProxyEndpointCommonOptions {
-}
-export interface BasicProxyEndpointOptions extends ProxyEndpointCommonOptions {
-    readonly username: string;
-    readonly password: string;
-}
-export interface HeaderProxyEndpointOptions extends ProxyEndpointCommonOptions {
-    /** Header name the upstream expects the auth value in. */
-    readonly header: string;
-    /** Header value (the actual secret). */
-    readonly value: string;
-}
-export interface QueryProxyEndpointOptions extends ProxyEndpointCommonOptions {
-    /** Query parameter name the upstream expects the auth value in. */
-    readonly query: string;
-    /** Query parameter value (the actual secret). */
-    readonly value: string;
-}
-export declare class ProxyEndpoint {
-    /** Non-secret half of the wire shape — declaration only. */
-    readonly declaration: PlatformProxyEndpoint;
-    /**
-     * Per-request secret half — auth value keyed by the same `name`.
-     * `null` for keyless (`ProxyEndpoint.none`) endpoints; `splitProxyEndpoints`
-     * filters those out so they never land in `secrets.proxyEndpointAuth`.
-     */
-    readonly auth: PlatformProxyEndpointAuth | null;
-    private constructor();
-    /**
-     * Keyless endpoint. Routes through the aex managed proxy for
-     * unified egress and audit, but the BFF injects
-     * no auth header or query parameter. Use for public APIs (Wikimedia
-     * Commons, NASA Images, Library of Congress, NARA, GDELT, etc.).
-     */
-    static none(options: NoneProxyEndpointOptions): ProxyEndpoint;
-    /** Bearer-token endpoint. */
-    static bearer(options: BearerProxyEndpointOptions): ProxyEndpoint;
-    /** Basic-auth endpoint. */
-    static basic(options: BasicProxyEndpointOptions): ProxyEndpoint;
-    /** Custom-header endpoint. */
-    static header(options: HeaderProxyEndpointOptions): ProxyEndpoint;
-    /** Query-string-auth endpoint. */
-    static query(options: QueryProxyEndpointOptions): ProxyEndpoint;
-}
-/**
- * Split a list of `ProxyEndpoint` instances into the public declarations
- * (`proxyEndpoints[]`) and the per-request auth bundle
- * (`secrets.proxyEndpointAuth[]`). Mirrors the way the SDK already
- * splits `McpServer.headers` into `secrets.mcpServers[]`.
- *
- * Throws on duplicate endpoint names — names are the cross-reference
- * key between the two halves and the BFF rejects collisions; failing
- * here gives the caller a precise message at the call site instead of
- * an opaque HTTP error.
- */
-export declare function splitProxyEndpoints(inputs: readonly ProxyEndpoint[]): {
-    endpoints: readonly PlatformProxyEndpoint[];
-    auth: readonly PlatformProxyEndpointAuth[];
-};
-export type { PlatformProxyAuthValue as ProxyAuthValue };

package/dist/proxy-endpoint.js

@@ -1,144 +0,0 @@
-import { authShapeHeaderName, PROXY_RESPONSE_MODES } from "./_contracts/index.js";
-export class ProxyEndpoint {
-    /** Non-secret half of the wire shape — declaration only. */
-    declaration;
-    /**
-     * Per-request secret half — auth value keyed by the same `name`.
-     * `null` for keyless (`ProxyEndpoint.none`) endpoints; `splitProxyEndpoints`
-     * filters those out so they never land in `secrets.proxyEndpointAuth`.
-     */
-    auth;
-    constructor(declaration, auth) {
-        this.declaration = declaration;
-        this.auth = auth;
-    }
-    /**
-     * Keyless endpoint. Routes through the aex managed proxy for
-     * unified egress and audit, but the BFF injects
-     * no auth header or query parameter. Use for public APIs (Wikimedia
-     * Commons, NASA Images, Library of Congress, NARA, GDELT, etc.).
-     */
-    static none(options) {
-        const common = buildCommonDeclaration(options, { type: "none" });
-        return new ProxyEndpoint(common, null);
-    }
-    /** Bearer-token endpoint. */
-    static bearer(options) {
-        const common = buildCommonDeclaration(options, { type: "bearer" });
-        requireNonEmpty(options.token, "ProxyEndpoint.bearer: token is required");
-        return new ProxyEndpoint(common, {
-            name: common.name,
-            value: { type: "bearer", token: options.token }
-        });
-    }
-    /** Basic-auth endpoint. */
-    static basic(options) {
-        const common = buildCommonDeclaration(options, { type: "basic" });
-        requireNonEmpty(options.username, "ProxyEndpoint.basic: username is required");
-        requireNonEmpty(options.password, "ProxyEndpoint.basic: password is required");
-        return new ProxyEndpoint(common, {
-            name: common.name,
-            value: { type: "basic", username: options.username, password: options.password }
-        });
-    }
-    /** Custom-header endpoint. */
-    static header(options) {
-        requireNonEmpty(options.header, "ProxyEndpoint.header: header is required");
-        const common = buildCommonDeclaration(options, { type: "header", name: options.header });
-        requireNonEmpty(options.value, "ProxyEndpoint.header: value is required");
-        return new ProxyEndpoint(common, {
-            name: common.name,
-            value: { type: "header", value: options.value }
-        });
-    }
-    /** Query-string-auth endpoint. */
-    static query(options) {
-        requireNonEmpty(options.query, "ProxyEndpoint.query: query is required");
-        const common = buildCommonDeclaration(options, { type: "query", name: options.query });
-        requireNonEmpty(options.value, "ProxyEndpoint.query: value is required");
-        return new ProxyEndpoint(common, {
-            name: common.name,
-            value: { type: "query", value: options.value }
-        });
-    }
-}
-/**
- * Split a list of `ProxyEndpoint` instances into the public declarations
- * (`proxyEndpoints[]`) and the per-request auth bundle
- * (`secrets.proxyEndpointAuth[]`). Mirrors the way the SDK already
- * splits `McpServer.headers` into `secrets.mcpServers[]`.
- *
- * Throws on duplicate endpoint names — names are the cross-reference
- * key between the two halves and the BFF rejects collisions; failing
- * here gives the caller a precise message at the call site instead of
- * an opaque HTTP error.
- */
-export function splitProxyEndpoints(inputs) {
-    if (inputs.length === 0) {
-        return { endpoints: [], auth: [] };
-    }
-    const endpoints = [];
-    const auth = [];
-    const seen = new Set();
-    for (let i = 0; i < inputs.length; i++) {
-        const entry = inputs[i];
-        if (!(entry instanceof ProxyEndpoint)) {
-            throw new TypeError(`proxyEndpoints[${i}] must be a ProxyEndpoint built via ProxyEndpoint.none / bearer / header / basic / query`);
-        }
-        if (seen.has(entry.declaration.name)) {
-            throw new Error(`proxyEndpoints duplicate name: ${entry.declaration.name}`);
-        }
-        seen.add(entry.declaration.name);
-        endpoints.push(entry.declaration);
-        if (entry.auth !== null) {
-            auth.push(entry.auth);
-        }
-    }
-    return { endpoints, auth };
-}
-function buildCommonDeclaration(options, authShape) {
-    requireNonEmpty(options.name, "ProxyEndpoint: name is required");
-    requireNonEmpty(options.baseUrl, "ProxyEndpoint: baseUrl is required");
-    if (!Array.isArray(options.allowMethods) || options.allowMethods.length === 0) {
-        throw new Error("ProxyEndpoint: allowMethods must be a non-empty array");
-    }
-    if (!Array.isArray(options.allowPathPrefixes) || options.allowPathPrefixes.length === 0) {
-        throw new Error("ProxyEndpoint: allowPathPrefixes must be a non-empty array");
-    }
-    if (options.responseMode !== undefined && !PROXY_RESPONSE_MODES.includes(options.responseMode)) {
-        throw new Error(`ProxyEndpoint: responseMode must be one of ${PROXY_RESPONSE_MODES.join(" | ")}`);
-    }
-    // Defence in depth: don't let the caller list the auth carrier
-    // header in `allowHeaders`. The BFF rejects this too, but a precise
-    // SDK-side error message is clearer.
-    if (options.allowHeaders) {
-        const carrier = authShapeHeaderName(authShape);
-        if (carrier) {
-            for (const h of options.allowHeaders) {
-                if (h.toLowerCase() === carrier) {
-                    throw new Error(`ProxyEndpoint: allowHeaders MUST NOT include the auth header "${h}" — ` +
-                        `it's set by the proxy on every request`);
-                }
-            }
-        }
-    }
-    return {
-        name: options.name,
-        baseUrl: options.baseUrl,
-        authShape,
-        allowMethods: options.allowMethods,
-        allowPathPrefixes: options.allowPathPrefixes,
-        ...(options.allowHeaders ? { allowHeaders: options.allowHeaders } : {}),
-        ...(options.responseMode ? { responseMode: options.responseMode } : {}),
-        ...(options.maxRequestBytes !== undefined ? { maxRequestBytes: options.maxRequestBytes } : {}),
-        ...(options.maxResponseBytes !== undefined ? { maxResponseBytes: options.maxResponseBytes } : {}),
-        ...(options.timeoutMs !== undefined ? { timeoutMs: options.timeoutMs } : {}),
-        ...(options.retry !== undefined ? { retry: options.retry } : {})
-    };
-}
-function requireNonEmpty(value, message) {
-    if (typeof value !== "string" || !value) {
-        throw new Error(message);
-    }
-}
-//# sourceMappingURL=proxy-endpoint.js.map

package/dist/proxy-endpoint.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"proxy-endpoint.js","sourceRoot":"","sources":["../src/proxy-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EAQrB,MAAM,kBAAkB,CAAC;AAiG1B,MAAM,OAAO,aAAa;IACxB,4DAA4D;IACnD,WAAW,CAAwB;IAC5C;;;;OAIG;IACM,IAAI,CAAmC;IAEhD,YAAoB,WAAkC,EAAE,IAAsC;QAC5F,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,IAAI,CAAC,OAAiC;QAC3C,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,6BAA6B;IAC7B,MAAM,CAAC,MAAM,CAAC,OAAmC;QAC/C,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnE,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC;QAC1E,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;SAChD,CAAC,CAAC;IACL,CAAC;IAED,2BAA2B;IAC3B,MAAM,CAAC,KAAK,CAAC,OAAkC;QAC7C,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAClE,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,2CAA2C,CAAC,CAAC;QAC/E,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,2CAA2C,CAAC,CAAC;QAC/E,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;SACjF,CAAC,CAAC;IACL,CAAC;IAED,8BAA8B;IAC9B,MAAM,CAAC,MAAM,CAAC,OAAmC;QAC/C,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,0CAA0C,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACzF,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC;QAC1E,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;SAChD,CAAC,CAAC;IACL,CAAC;IAED,kCAAkC;IAClC,MAAM,CAAC,KAAK,CAAC,OAAkC;QAC7C,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,wCAAwC,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACvF,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,wCAAwC,CAAC,CAAC;QACzE,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;SAC/C,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAgC;IAIlE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAgC,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,KAAK,YAAY,aAAa,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,SAAS,CACjB,kBAAkB,CAAC,0FAA0F,CAC9G,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAmC,EACnC,SAAyB;IAEzB,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;IACjE,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,oCAAoC,CAAC,CAAC;IACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,KAAK,CACb,8CAA8C,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CACjF,CAAC;IACJ,CAAC;IACD,+DAA+D;IAC/D,oEAAoE;IACpE,qCAAqC;IACrC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,EAAE,CAAC;oBAChC,MAAM,IAAI,KAAK,CACb,iEAAiE,CAAC,MAAM;wBACtE,wCAAwC,CAC3C,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS;QACT,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjG,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,OAAe;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC"}