npm - @agent-native/core - Versions diffs - 0.127.1 → 0.128.0 - Mend

@agent-native/core 0.127.1 → 0.128.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (431) hide show

package/dist/action.js CHANGED Viewed

@@ -52,12 +52,19 @@ export function defineAction(options) {
         "~standard" in options.agentInputSchema) {
         toolParameters = schemaToJsonSchema(options.agentInputSchema, options.description);
     }
+    // Authorization sits INSIDE input validation, so a gate that inspects `args`
+    // is handed the parsed, coerced value its type promises rather than whatever
+    // shape the caller sent. Putting it outside would have every guard reading
+    // attacker-shaped input while typed as though it were validated.
+    const guardedRun = typeof options.authorize === "function"
+        ? wrapRunWithAuthorize(options.run, options.authorize)
+        : options.run;
     // Wrap run() with INPUT validation when schema is provided.
     // Pass toolParameters so the validation error can echo the expected signature
     // (required vs optional fields) and help the caller self-correct.
     const inputValidatedRun = hasSchema
-        ? wrapWithValidation(options.schema, options.run, toolParameters)
-        : options.run;
+        ? wrapWithValidation(options.schema, guardedRun, toolParameters)
+        : guardedRun;
     // Then wrap with OUTPUT validation when an outputSchema is provided. This
     // composes AROUND the input-validated run so the order is: validate input →
     // run() → validate output. When no outputSchema is present, the run is passed
@@ -189,6 +196,34 @@ export function defineAction(options) {
         ...(auditConfig ? { audit: auditConfig } : {}),
     };
 }
+/**
+ * Wrap an action's run with its `authorize` gate.
+ *
+ * The gate is applied here, around `run`, rather than exposed as a flag on the
+ * action entry: `run` is the one thing all six dispatch sites (agent loop, HTTP
+ * route, frontend, MCP, A2A, CLI) go through, so there is no caller that can
+ * reach the body without passing the check. `needsApproval` took the flag route
+ * and is consequently honoured only inside the agent loop.
+ *
+ * Composed so the full order is: validate input → authorize → run → validate
+ * output → audit. The audit wrapper is outermost, so a denial is still recorded
+ * as an attempt — which is precisely what an audit trail is for.
+ *
+ * A guard that throws denies with its own message. A guard that returns `false`
+ * denies generically. Anything else — including `undefined` — allows.
+ */
+function wrapRunWithAuthorize(run, authorize) {
+    return async function authorizedRun(args, ctx) {
+        const verdict = await authorize(args, ctx);
+        if (verdict === false) {
+            const err = new Error("Not authorized");
+            err.name = "ForbiddenError";
+            err.statusCode = 403;
+            throw err;
+        }
+        return run(args, ctx);
+    };
+}
 /**
  * Wrap an action's (already input/output-validated) run so each call records an
  * audit event after it resolves — on success and on error. Best-effort: the

package/dist/action.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"action.js","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,2BAA2B,GAE5B,MAAM,gBAAgB,CAAC;AAMxB,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAyH7E;;;GAGG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,eAAe,GAAG,IAAI,CAAC;IACvB,SAAS,CAAU;IACnB,UAAU,CAAU;IAE7B,YAAY,OAAe,EAAE,OAAO,GAA2B,EAAE;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACvC,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CACpC,GAAY;IAEZ,OAAO,CACL,GAAG,YAAY,oBAAoB;QACnC,OAAO,CACL,GAAG;YACH,OAAO,GAAG,KAAK,QAAQ;YACvB,iBAAiB,IAAI,GAAG;YACvB,GAAqC,CAAC,eAAe,KAAK,IAAI,CAChE,CACF,CAAC;AACJ,CAAC;AA0CD,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAAqC,CAAC;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,2BAAoC,CAAC;AACtE,MAAM,CAAC,MAAM,6BAA6B,GAAG,gBAAyB,CAAC;AA6dvE,MAAM,UAAU,YAAY,CAAC,OAAY;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAElE,2CAA2C;IAC3C,IAAI,cAAwC,CAAC;IAC7C,IAAI,SAAS,EAAE,CAAC;QACd,oDAAoD;QACpD,cAAc,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3E,CAAC;SAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC9B,cAAc,GAAG;YACf,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,uEAAuE;IACvE,wEAAwE;IACxE,uEAAuE;IACvE,qEAAqE;IACrE,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,IACE,SAAS;QACT,OAAO,CAAC,gBAAgB;QACxB,WAAW,IAAI,OAAO,CAAC,gBAAgB,EACvC,CAAC;QACD,cAAc,GAAG,kBAAkB,CACjC,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,WAAW,CACpB,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,8EAA8E;IAC9E,kEAAkE;IAClE,MAAM,iBAAiB,GAAG,SAAS;QACjC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC;QACjE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAEhB,0EAA0E;IAC1E,4EAA4E;IAC5E,8EAA8E;IAC9E,6DAA6D;IAC7D,MAAM,eAAe,GACnB,OAAO,CAAC,YAAY,IAAI,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC;IAC9D,MAAM,mBAAmB,GACvB,OAAO,CAAC,mBAAmB,KAAK,QAAQ;QACxC,OAAO,CAAC,mBAAmB,KAAK,MAAM;QACtC,OAAO,CAAC,mBAAmB,KAAK,UAAU;QACxC,CAAC,CAAC,OAAO,CAAC,mBAAmB;QAC7B,CAAC,CAAC,MAAM,CAAC;IACb,MAAM,GAAG,GAAG,eAAe;QACzB,CAAC,CAAC,wBAAwB,CACtB,OAAO,CAAC,YAAY,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,WAAW,CACpB;QACH,CAAC,CAAC,iBAAiB,CAAC;IAEtB,wEAAwE;IACxE,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,UAAU,GAAG,OAAO,CAAC,IAA4C,CAAC;IACxE,MAAM,gBAAgB,GACpB,UAAU,KAAK,KAAK;QACpB,UAAU,KAAK,SAAS;QACxB,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC;IAC9B,8EAA8E;IAC9E,8EAA8E;IAC9E,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,QAAQ,GACZ,OAAO,OAAO,CAAC,QAAQ,KAAK,SAAS;QACnC,CAAC,CAAC,OAAO,CAAC,QAAQ;QAClB,CAAC,CAAC,gBAAgB;YAChB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,SAAS,CAAC;IAElB,wEAAwE;IACxE,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,cAAc;IACd,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC;QACxD,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC;QACpC,CAAC,CAAC,GAAG,CAAC;IAER,uEAAuE;IACvE,0EAA0E;IAC1E,yEAAyE;IACzE,wEAAwE;IACxE,oEAAoE;IACpE,wEAAwE;IACxE,6DAA6D;IAC7D,MAAM,YAAY,GAChB,OAAO,OAAO,CAAC,YAAY,KAAK,SAAS;QACvC,CAAC,CAAC,OAAO,CAAC,YAAY;QACtB,CAAC,CAAC,SAAS,CAAC;IAChB,8EAA8E;IAC9E,6EAA6E;IAC7E,MAAM,SAAS,GACb,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,MAAM,YAAY,GAChB,OAAO,OAAO,CAAC,YAAY,KAAK,SAAS;QACvC,CAAC,CAAC,OAAO,CAAC,YAAY;QACtB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,MAAM,GACV,OAAO,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,WAAW,GACf,OAAO,CAAC,WAAW;QACnB,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACvC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QACjC,CAAC,CAAC,OAAO,CAAC,WAAW;QACrB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,GACR,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,MAAM,GAAmC,CAAC,GAAG,EAAE;QACnD,IACE,CAAC,OAAO,CAAC,MAAM;YACf,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;YAClC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAC7B,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,iEAAiE;QACjE,IAAI,OAAO,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvE,OAAO,OAAO,CAAC,MAA4B,CAAC;QAC9C,CAAC;QACD,2CAA2C;QAC3C,IACE,OAAO,CAAC,MAAM,CAAC,QAAQ;YACvB,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YACvC,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBAC/C,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,EACrD,CAAC;YACD,OAAO,OAAO,CAAC,MAA4B,CAAC;QAC9C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE3D,OAAO;QACL,IAAI,EAAE;YACJ,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,UAAU,EAAE,cAAc;SAC3B;QACD,GAAG,EAAE,QAAQ;QACb,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,OAAO,CAAC,YAAY,KAAK,SAAS;YAC3C,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE;YACxC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ;YAC1C,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE;YACxC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,OAAO,OAAO,CAAC,eAAe,KAAK,SAAS;YAC9C,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE;YAC9C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;YACvC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE;YAClC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ;YAC5C,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,eAAe;YACjB,CAAC,CAAC;gBACE,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,mBAAmB;gBACnB,GAAG,CAAC,mBAAmB,KAAK,UAAU;oBACpC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;oBAC5C,CAAC,CAAC,EAAE,CAAC;aACR;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,OAAO,CAAC,aAAa,KAAK,SAAS;YAC9C,OAAO,OAAO,CAAC,aAAa,KAAK,UAAU;YACzC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE;YAC1C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACvB,GAA+C,EAC/C,WAA0C;IAE1C,OAAO,KAAK,UAAU,UAAU,CAAC,IAAS,EAAE,GAAsB;QAChE,IAAI,MAAW,CAAC;QAChB,IAAI,KAAc,CAAC;QACnB,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,GAAG,GAAG,CAAC;YACZ,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAChE,MAAM,iBAAiB,CACrB,KAAK;gBACH,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC5D,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAClE,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;QAC3D,CAAC;QACD,IAAI,KAAK;YAAE,MAAM,KAAK,CAAC;QACvB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E,8CAA8C;AAC9C,MAAM,oBAAoB,GAAG;IAC3B,OAAO;IACP,iBAAiB;IACjB,UAAU;IACV,sBAAsB;IACtB,KAAK;IACL,IAAI;IACJ,MAAM;IACN,MAAM;CACE,CAAC;AACX,kDAAkD;AAClD,MAAM,oBAAoB,GAAG;IAC3B,OAAO;IACP,OAAO;IACP,OAAO;IACP,aAAa;CACL,CAAC;AACX,qDAAqD;AACrD,MAAM,kBAAkB,GAAG;IACzB,YAAY;IACZ,mBAAmB;IACnB,OAAO;IACP,aAAa;IACb,kBAAkB;CACV,CAAC;AAEX;;;;;;;;;;;;;;GAcG;AACH,SAAS,8BAA8B,CAAI,IAAO;IAChD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,GAAG,GAAG,IAA+B,CAAC;IAE5C,OAAO,GAAG,CAAC,aAAa,CAAC;IAEzB,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACvC,gEAAgE;QAChE,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,GAAG,IAAI,KAAK;gBAAE,8BAA8B,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,GAAG,IAAI,KAAK;gBAAE,8BAA8B,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvC,8BAA8B,CAAC,GAAG,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CACzB,MAAwB,EACxB,YAAqB;IAErB,MAAM,CAAC,GAAG,MAAa,CAAC;IAExB,iEAAiE;IACjE,kDAAkD;IAClD,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;gBAC7C,MAAM,EAAE,UAAU;aACnB,CAAQ,CAAC;YACV,iEAAiE;YACjE,6DAA6D;YAC7D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,OAAO,MAAM,CAAC,OAAO,CAAC;YACxB,CAAC;YACD,OAAO,8BAA8B,CAAC,MAAM,CAA6B,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;QAChB,OAAO,8BAA8B,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,mCAAmC;IACnC,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAQ;IAClC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IAEtB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,UAAU,GAAwB,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACxB,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAU,EAAE,CAAC;gBAChE,MAAM,QAAQ,GAAG,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC;gBACxC,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;oBAC1C,iEAAiE;oBACjE,MAAM,IAAI,GAAG,WAAW,EAAE,WAAW,CAAC;oBACtC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW;wBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;oBACvD,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;oBACvB,IACE,QAAQ,CAAC,IAAI,KAAK,UAAU;wBAC5B,QAAQ,CAAC,IAAI,KAAK,SAAS;wBAC3B,QAAQ,CAAC,IAAI,KAAK,UAAU,EAC5B,CAAC;wBACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpE,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,4DAA4D;QAC5D,iCAAiC;QACjC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACvC,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;gBAC/C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBACxB,CAAC,CAAC,OAAO,CAAC;QACd,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACzD,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC3B,MAAM,CAAC,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC7B,OAAO,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzD,KAAK,CAAC,OAAO;gBACX,OAAO,GAAG,CAAC,YAAY,KAAK,UAAU;oBACpC,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE;oBACpB,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzD,oEAAoE;YACpE,mEAAmE;YACnE,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YACxB,qDAAqD;YACrD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CACnC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,KAAK,SAAS,CAC7C,CAAC;YACF,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC7D,MAAM,UAAU,GAAG,CAAC,CAAM,EAAE,EAAE,CAC5B,OAAO,CAAC,KAAK,QAAQ;oBACnB,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,OAAO,CAAC,KAAK,SAAS;wBACtB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,QAAQ,CAAC;gBACjB,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACzD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC7B,iEAAiE;oBACjE,kEAAkE;oBAClE,iEAAiE;oBACjE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAChD,CAAC;gBACD,wEAAwE;gBACxE,OAAO;oBACL,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;iBACpE,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAChC,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CACtC;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,4EAA4E;IAC5E,yEAAyE;IACzE,mBAAmB;IACnB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACvB,OAAO,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACtB,OAAO,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,WAAW;IACX,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;AAEtC;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,GAAW,EAAE,KAAe;IAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,IAAI,OAAO,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;IACxC,CAAC;IACD,IACE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtB,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACvB,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EACxB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;YACpE,IACE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACxB,MAAM;gBACN,OAAO,MAAM,KAAK,QAAQ;gBAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACtB,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;IACD,IACE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvD,OAAO,KAAK,EAAE;QACd,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAChC,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAS,4BAA4B,CACnC,IAAa,EACb,UAAqC;IAErC,MAAM,UAAU,GAAG,UAAU,EAAE,UAElB,CAAC;IACd,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,IAAI,GAAG,GAAmC,IAAI,CAAC;IAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;QACzE,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QACtC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,CAAC,CAAC,IAAI,CAAC,IAAI;YACX,CAAC,CAAC,IAAI,CAAC,IAAI;gBACT,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACb,CAAC,CAAC,EAAE,CAAC;QACT,2EAA2E;QAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC7D,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,IAAI,CAAC,GAAG;YAAE,GAAG,GAAG,EAAE,GAAI,IAAgC,EAAE,CAAC;QACzD,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CACzB,MAAwB,EACxB,GAAa,EACb,cAAyC;IAEzC,OAAO,KAAK,EAAE,IAAS,EAAE,GAAsB,EAAE,EAAE;QACjD,IAAI,GAAG,4BAA4B,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,wEAAwE;YACxE,6EAA6E;YAC7E,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI;oBACxB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBACtE,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBACxC,mEAAmE;gBACnE,mDAAmD;gBACnD,IACE,OAAO;oBACP,CAAC,GAAG,KAAK,UAAU;wBACjB,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;wBAC/B,+BAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CACR,6BAA6B,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtF,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/B,CAAC;YAED,oEAAoE;YACpE,6DAA6D;YAC7D,IAAI,QAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;oBAAE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;YACrE,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAED,uEAAuE;YACvE,yEAAyE;YACzE,wCAAwC;YACxC,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,IAAI,cAAc,EAAE,UAAU,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;gBACxD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC;qBAClD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;oBACd,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;oBACzC,MAAM,IAAI,GAAI,CAAuB,CAAC,IAAI,IAAI,KAAK,CAAC;oBACpD,OAAO,GAAG,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC;gBAChC,CAAC,CAAC;qBACD,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,IAAI,GAAG;oBACL,QAAQ,GAAG,gBAAgB,GAAG,wCAAwC,CAAC;YAC3E,CAAC;YAED,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,QAAQ,IAAI,QAAQ,EAAE,CACrF,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAE,MAA8C,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,wBAAwB,CAC/B,YAA8B,EAC9B,GAA+C,EAC/C,QAAmC,EACnC,QAAiB,EACjB,WAAoB;IAEpB,OAAO,KAAK,EAAE,IAAS,EAAE,GAAsB,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEhE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,mEAAmE;YACnE,4DAA4D;YAC5D,OAAQ,MAA8C,CAAC,KAAK,CAAC;QAC/D,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;aACzB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI;gBACxB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBACtE,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YACxC,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9C,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,2CAA2C,KAAK,KAAK,MAAM,EAAE,CAAC;QAE9E,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,oEAAoE;QACpE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { StandardSchemaV1 } from \"@standard-schema/spec\";\n\nimport {\n normalizeActionChatUIConfig,\n type ActionChatUIConfig,\n} from \"./action-ui.js\";\nimport type {\n ActionTool,\n AgentChatAttachment,\n AgentChatEvent,\n} from \"./agent/types.js\";\nimport { normalizeAuditConfig, resolveAuditAttach } from \"./audit/config.js\";\nimport type { ActionAuditConfig } from \"./audit/types.js\";\n\n/*\n How an action's `run` was invoked. Tagged at each dispatch site so the action\n * (and tracking) can branch on the surface that called it.\n \n - `\"tool\"` — the in-app agent loop, sub-agents/agent-teams, or A2A (which\n * drives the same agent loop). All agent tool calls are `\"tool\"`.\n * - `\"http\"` — a programmatic HTTP POST/GET to `/_agent-native/actions/<name>`\n * without the frontend request marker.\n * - `\"frontend\"` — a browser call via `useActionQuery` / `useActionMutation` /\n * `callAction` (tagged with the `X-Request-Source` header).\n * - `\"cli\"` — `pnpm action <name>` (the CLI runner).\n * - `\"mcp\"` — an external agent over the MCP `tools/call` endpoint.\n * - `\"a2a\"` — a direct, explicitly exposed read-only A2A action dispatch.\n * Natural-language A2A delegation still runs through the agent loop and its\n * selected actions are attributed as `\"tool\"`.\n * - `\"automation\"` — an event-triggered automation dispatched from a stored\n * workspace trigger with trusted trigger lineage.\n /\nexport type ActionCaller =\n \| \"tool\"\n \| \"http\"\n \| \"frontend\"\n \| \"cli\"\n \| \"mcp\"\n \| \"a2a\"\n \| \"automation\";\n\n/\n Trusted automation lineage added by the trigger dispatcher. Action inputs\n * must never be used to create or override this context.\n /\nexport interface ActionAutomationContext {\n triggerId: string;\n triggerName: string;\n policyId?: string;\n}\n\n/\n Context passed as the optional second argument to an action's `run`.\n * Carries the resolved request identity and the invocation source so actions\n * can read `ctx.userEmail` / `ctx.orgId` / `ctx.caller` directly instead of\n * calling `getRequestUserEmail()` / `getRequestOrgId()` by hand.\n \n Backward compatible: existing 1-arg `run(args)` functions keep working, and\n * callers that only need `send` (the agent loop) can still destructure it.\n /\nexport interface ActionRunContext {\n /\n Emit an SSE event to the client. Only meaningful inside the agent tool\n * loop (e.g. `agent_call_text` streaming); `undefined` on every other\n * surface.\n /\n send?: (event: AgentChatEvent) => void;\n /\n Resolved request user email, or `undefined` when there is no authenticated\n * identity. NEVER defaulted to a dev identity — actions that need a fallback\n * must apply their own.\n /\n userEmail?: string;\n /* Resolved org id, or `null` when the request has no org. /\n orgId?: string \| null;\n /* How this action was invoked. /\n caller: ActionCaller;\n /* Present only for trigger-dispatched automation calls. /\n automation?: ActionAutomationContext;\n /* Verified network lineage for direct delegated action calls. /\n networkProtocol?: \"a2a\" \| \"mcp\" \| \"provider-api\";\n networkId?: string;\n networkPeer?: string;\n /\n Attachments submitted with the current agent turn (pasted text blocks,\n * uploaded files, images), exactly as the server received them — with full,\n * untruncated `text` for text attachments. Populated only inside the agent\n * tool loop (`caller: \"tool\"`); `undefined` on every other surface.\n \n Lets an action consume a large pasted artifact BY REFERENCE (e.g.\n * `create-extension`'s `contentFromAttachment`) instead of forcing the model\n * to re-emit the whole file as a tool argument — which frequently gets cut\n * off mid-stream and triggers a continuation loop.\n /\n attachments?: AgentChatAttachment[];\n /\n Abort signal for the current agent run. Fires when the run is soft-timed\n * out, user-cancelled, or the server is shutting down. Well-behaved actions\n * can observe this signal to cancel in-flight work early instead of waiting\n * for the per-tool 60-second hard timeout.\n \n Populated only inside the agent tool loop (`caller: \"tool\"`); `undefined`\n * on every other surface. Never throws — checking `signal.aborted` or\n * attaching an `\"abort\"` listener is always safe.\n /\n signal?: AbortSignal;\n /\n Name of the action being invoked (the registry key, e.g.\n * `delete-recording`). Set at each dispatch site so cross-cutting concerns —\n * notably the audit log — can attribute the call. `undefined` for direct\n * programmatic `run()` calls that bypass the dispatcher.\n /\n actionName?: string;\n /\n Agent conversation thread + turn that triggered this call, populated only\n * inside the agent tool loop (`caller: \"tool\"`). Lets the audit log link a\n * mutation to the specific agent run/turn that caused it. `undefined` on\n * every human/programmatic surface.\n /\n threadId?: string;\n /* Concrete execution id for this agent-loop attempt. /\n runId?: string;\n turnId?: string;\n}\n\nexport interface AgentActionStopOptions {\n /* Optional stable code surfaced in run metadata and tests. /\n errorCode?: string;\n /* Optional short tool-result text. Defaults to the user-facing message. /\n toolResult?: string;\n}\n\n/\n Throw from an action when the agent should stop the current turn instead of\n * feeding the failure back to the model for another retry.\n /\nexport class AgentActionStopError extends Error {\n readonly agentNativeStop = true;\n readonly errorCode?: string;\n readonly toolResult?: string;\n\n constructor(message: string, options: AgentActionStopOptions = {}) {\n super(message);\n this.name = \"AgentActionStopError\";\n this.errorCode = options.errorCode;\n this.toolResult = options.toolResult;\n }\n}\n\nexport function isAgentActionStopError(\n err: unknown,\n): err is AgentActionStopError {\n return (\n err instanceof AgentActionStopError \|\|\n Boolean(\n err &&\n typeof err === \"object\" &&\n \"agentNativeStop\" in err &&\n (err as { agentNativeStop?: unknown }).agentNativeStop === true,\n )\n );\n}\n\n/* HTTP exposure config for an action. /\nexport interface ActionHttpConfig {\n /* HTTP method. Default: \"POST\". Use \"GET\" for read-only actions. /\n method?: \"GET\" \| \"POST\" \| \"PUT\" \| \"DELETE\";\n /* Override route path under /_agent-native/actions/. Default: action filename. /\n path?: string;\n}\n\n/* Explicit opt-in metadata for public agent protocols such as MCP or A2A. /\nexport interface PublicAgentActionConfig {\n expose: boolean;\n readOnly: boolean;\n requiresAuth?: boolean;\n isConsequential?: boolean;\n title?: string;\n description?: string;\n}\n\n/* A deep link an external agent (MCP / A2A) can surface to the user so they\n * can open the produced/listed resource in the running app UI. /\nexport interface ActionDeepLink {\n /* App-relative path (e.g. `/_agent-native/open?app=mail&view=inbox&...`)\n * or an absolute URL. The MCP layer prefixes the request origin when this\n * is relative, and may rewrite it to the `agentnative://` desktop scheme. /\n url: string;\n /* Human-readable label, e.g. \"Open draft in Mail\". /\n label: string;\n /* Optional view hint (matches the `navigate` command `view`). /\n view?: string;\n}\n\n/* Builds a deep link from an action's args + result so external agents can\n * surface an \"Open in <app> →\" link. MUST be pure and synchronous — no I/O,\n * no awaits. Best-effort: a throw or null is swallowed and never fails the\n * tool call. See the `external-agents` skill. /\nexport type ActionLinkBuilder = (ctx: {\n args: Record<string, any>;\n result: any;\n}) => ActionDeepLink \| null \| undefined;\n\nexport const MCP_APP_EXTENSION_ID = \"io.modelcontextprotocol/ui\" as const;\nexport const MCP_APP_MIME_TYPE = \"text/html;profile=mcp-app\" as const;\nexport const MCP_APP_RESOURCE_URI_META_KEY = \"ui/resourceUri\" as const;\n\nexport interface ActionMcpAppCsp {\n connectDomains?: string[];\n resourceDomains?: string[];\n frameDomains?: string[];\n baseUriDomains?: string[];\n}\n\nexport type ActionMcpAppCspBuilder = (ctx: {\n actionName: string;\n appId?: string;\n requestOrigin?: string;\n}) => ActionMcpAppCsp \| Promise<ActionMcpAppCsp>;\n\nexport interface ActionMcpAppPermissions {\n camera?: Record<string, never>;\n microphone?: Record<string, never>;\n geolocation?: Record<string, never>;\n clipboardWrite?: Record<string, never>;\n}\n\nexport interface ActionMcpAppResourceMeta {\n csp?: ActionMcpAppCsp \| ActionMcpAppCspBuilder;\n permissions?: ActionMcpAppPermissions;\n /\n Host-specific sandbox domain hint. Do not set this to the app's normal\n * production URL; app origins belong in CSP/open-link metadata. ChatGPT uses\n * the separate `openai/widgetDomain` compatibility field.\n /\n domain?: string;\n prefersBorder?: boolean;\n}\n\nexport type ActionMcpAppHtmlBuilder = (ctx: {\n actionName: string;\n appId?: string;\n requestOrigin?: string;\n}) => string;\n\nexport interface ActionMcpAppResourceConfig {\n /* `ui://` URI. Defaults to `ui://<app>/<action-name>`. /\n uri?: string;\n /* MCP resource name. Defaults to the action name. /\n name?: string;\n title?: string;\n description?: string;\n /\n HTML5 document content for the MCP App resource. Keep this self-contained\n * or declare any external origins in `csp`.\n /\n html: string \| ActionMcpAppHtmlBuilder;\n /* Defaults to the MCP Apps HTML MIME type. /\n mimeType?: typeof MCP_APP_MIME_TYPE;\n /* Extra resource/content metadata. `ui` is merged with the fields below. /\n _meta?: Record<string, unknown>;\n csp?: ActionMcpAppCsp \| ActionMcpAppCspBuilder;\n permissions?: ActionMcpAppPermissions;\n /\n Host-specific sandbox domain hint. Do not set this to the app's normal\n * production URL; app origins belong in CSP/open-link metadata. ChatGPT uses\n * the separate `openai/widgetDomain` compatibility field.\n /\n domain?: string;\n prefersBorder?: boolean;\n}\n\nexport interface ActionMcpAppConfig {\n /\n Optional MCP Apps UI resource for hosts that render inline app iframes.\n * Required when the action should open an interactive app view. Omit when\n * you only need `compactCatalog: true` to keep a non-UI action visible in\n * the compact catalog (e.g. read/update actions that should be callable from\n * Claude.ai / ChatGPT without a dedicated iframe resource).\n /\n resource?: ActionMcpAppResourceConfig;\n /\n MCP Apps tool visibility. Defaults to model + app so the LLM can call the\n * action and the app iframe can call it back through the host bridge.\n /\n visibility?: Array<\"model\" \| \"app\">;\n /\n Rare escape hatch for MCP Apps chat hosts. By default OAuth callers with\n * `mcp:apps` see the generic app tools (`open_app`, `list_apps`, etc.) so\n * hosts do not ingest every action-specific UI resource. Set this only when\n * this specific action must stay visible in that compact catalog.\n /\n compactCatalog?: boolean;\n}\n\n/* Schema definition for a single action parameter (legacy JSON schema style). /\nexport interface ParameterSchema {\n type: string;\n description?: string;\n enum?: string[];\n}\n\n/* Infer runtime parameter types from a legacy parameter schema map. /\ntype InferParams<T extends Record<string, ParameterSchema> \| undefined> =\n T extends Record<string, ParameterSchema>\n ? { [K in keyof T]?: string }\n : Record<string, string>;\n\n/\n What to do when an action's RETURN value fails `outputSchema` validation.\n \n - `\"strict\"` — throw a clear error so a buggy action surfaces loudly.\n * - `\"warn\"` (default) — `console.warn` the issues and return the ORIGINAL\n * result unchanged. Non-breaking: behavior never changes unless the dev\n * opts into `\"strict\"` or `\"fallback\"`.\n * - `\"fallback\"` — return `outputFallback` in place of the invalid result.\n \n Mirrors Mastra/Flue structured-output handling, kept on the action layer.\n /\nexport type ActionOutputErrorStrategy = \"strict\" \| \"warn\" \| \"fallback\";\n\n// ---------------------------------------------------------------------------\n// Schema-based action options (new: Zod / Valibot / ArkType via Standard Schema)\n// ---------------------------------------------------------------------------\n\ninterface DefineActionWithSchema<\n TSchema extends StandardSchemaV1,\n TReturn = any,\n TOutputSchema extends StandardSchemaV1 \| undefined = undefined,\n> {\n description: string;\n /* Standard Schema-compatible schema (Zod, Valibot, ArkType). Provides runtime\n * validation and full TypeScript type inference for `run()` args. The schema is\n * also converted to JSON Schema for the Claude API tool definition. /\n schema: TSchema;\n /* Legacy parameters — ignored when `schema` is provided. /\n parameters?: never;\n /\n Optional alternate Standard Schema (Zod, Valibot, ArkType) used ONLY to\n * build the tool definition advertised to the model — the JSON Schema that\n * lands in the Claude `tools` array (and MCP/A2A tool listings, which read\n * the same `tool.parameters`). Runtime validation always runs against\n * `schema` above via the normal `wrapWithValidation` path; setting this\n * never weakens validation and never changes `run()`'s argument type.\n \n Use this when the full input schema is much richer than what the model\n * needs to see up front — the canonical example is a deep discriminated\n * union of block/shape types where a per-call catalog lookup tool (e.g.\n * `get-plan-blocks`) already teaches the full field shapes. Advertise a\n * compact version (e.g. an enum of valid `type` values plus a note to call\n * the lookup tool) instead of embedding every variant's fields in every\n * request. Invalid calls still get the full, actionable validation error\n * (missing/invalid fields, received args) from `schema` — this only trims\n * what is proactively shown, not what is accepted or checked.\n /\n agentInputSchema?: StandardSchemaV1;\n /* Optional Standard Schema-compatible schema (Zod, Valibot, ArkType) the\n * action's RETURN value is validated against AFTER `run()` resolves. Borrowed\n * from Mastra/Flue structured-output. When omitted, behavior is byte-for-byte\n * unchanged. The mismatch handling is governed by `outputErrorStrategy`. /\n outputSchema?: TOutputSchema;\n /* What to do when the result fails `outputSchema`. Default: `\"warn\"`. /\n outputErrorStrategy?: ActionOutputErrorStrategy;\n /* Value returned in place of an invalid result when `outputErrorStrategy` is\n * `\"fallback\"`. Ignored for the other strategies. /\n outputFallback?: TReturn;\n run: (\n args: StandardSchemaV1.InferOutput<TSchema>,\n ctx?: ActionRunContext,\n ) => Promise<TReturn> \| TReturn;\n http?: ActionHttpConfig \| false;\n /* Whether the HTTP/frontend action route must have an authenticated owner.\n * Defaults to true. Set to false only for metadata/read actions that safely\n * handle `ctx.userEmail` / `getRequestUserEmail()` being undefined. /\n requiresAuth?: boolean;\n /* Max HTTP request body in bytes. When set, the route 413s on the declared\n * `Content-Length` before parsing. Use for public, no-auth POST actions;\n * unset = no route-level cap. /\n maxBodyBytes?: number;\n /* Whether this action is exposed to the agent — the in-app assistant and the\n * app's MCP/A2A tool surfaces — as a callable tool. Default-allow opt-out:\n * `undefined` / `true` expose it; only an explicit `false` hides it from every\n * agent tool list while keeping it callable from the frontend / HTTP\n * (`useActionMutation`, `callAction`, `/_agent-native/actions/<name>`). Use\n * this for UI-only or purely programmatic actions you want behind the\n * framework's auth + action surface WITHOUT spending a slot in the model's\n * tool list. Distinct from `toolCallable`, which only governs the sandboxed\n * extension (\"tools\") iframe bridge. See `packages/core/docs/content/actions.mdx`. /\n agentTool?: boolean;\n /* If true, the framework will NOT emit a screen-refresh change event after a\n * successful call. Auto-inferred as `true` when `http.method === \"GET\"`.\n * Only set this manually when you need to override the inference — e.g. a\n * POST action that only reads data but can't use GET for a protocol reason. /\n readOnly?: boolean;\n /* Set false for read-only tools that should stay available in Act mode but\n * must not run during Plan mode because they perform substantive work\n * rather than lightweight inspection. Defaults to allowed when read-only. /\n allowInPlanMode?: boolean;\n /* If true, the agent may execute this action concurrently with other\n * read-only or parallel-safe tool calls emitted in the same model turn.\n * Only set this for mutating actions that are internally concurrency-safe\n * and order-independent for same-turn execution. /\n parallelSafe?: boolean;\n /* Set false to exempt a read-only tool from the agent loop's duplicate\n * read-only call guard (per-turn result cache + \"Skipped duplicate...\"\n * repeat detection). Default true (deduped). Use this for volatile/polling\n * reads where an identical call is expected to return a different result\n * each time — e.g. polling a code-execution status by id, or re-fetching\n * current on-screen state. Has no effect on non-read-only actions, which\n * are never deduped in the first place. /\n dedupe?: boolean;\n /* Whether this action may be invoked from the tools (Alpine iframe) bridge\n * via `appAction(name, params)` — see `packages/core/docs/content/actions.mdx`\n * (\"Tools Callability\"). Default-allow opt-out: undefined / `true` both\n * allow tool-iframe calls; only an explicit `false` returns 403. Set to\n * `false` for high-blast-radius admin operations (account deletion, org\n * membership changes, anything that modifies auth state) — used by the\n * framework's `share-resource`, `unshare-resource`, and\n * `set-resource-visibility` for defense-in-depth. Regular UI/agent/CLI/MCP/A2A\n * calls are unaffected. Enforced by the action HTTP route layer — see\n * `packages/core/src/server/action-routes.ts`. Audit reference: H5 in\n * `security-audit/05-tools-sandbox.md`. /\n toolCallable?: boolean;\n /* Explicit public-agent exposure metadata. Public web routes never imply\n * public MCP/A2A/OpenAPI tool exposure. Actions must opt in here and public\n * protocol mounts must still filter for safe, route-appropriate tools. /\n publicAgent?: PublicAgentActionConfig;\n /* Optional deep-link builder. When set, MCP/A2A surfaces append an\n * \"Open in <app> →\" link built from the call's args + result so the\n * external agent can drop the user into the running app at the right\n * view/record. Pure + sync + best-effort. See the `external-agents` skill. /\n link?: ActionLinkBuilder;\n /* Optional MCP Apps UI resource for hosts that can render inline\n * interactive app iframes. Text/deep-link tool results remain the fallback\n * for CLI and non-UI hosts. /\n mcpApp?: ActionMcpAppConfig;\n /* Optional native Agent-Native chat renderer for this action's structured\n * result. This is first-party React UI, not arbitrary HTML/JS. /\n chatUI?: ActionChatUIConfig;\n /\n Per-tool timeout override in milliseconds for agent-loop tool calls. Use\n * sparingly for actions that legitimately wait on slow provider work.\n /\n timeoutMs?: number;\n /* Per-tool result truncation override for agent-loop tool calls. /\n maxResultChars?: number;\n /\n Opt-in human-in-the-loop approval gate. Default off — the framework\n * intentionally keeps HITL approvals rare; almost every action should run\n * without one. Set this only for high-consequence, outward-facing,\n * hard-to-undo operations (the canonical example is actually sending an\n * email). When `needsApproval` resolves truthy and the agent calls this\n * action, the loop does NOT execute `run()`: it emits an `approval_required`\n * event and stops the turn, waiting for a human to approve. The action runs\n * only once the human re-issues the turn approving this specific call.\n \n - `true` — always require approval.\n * - `(args, ctx) => boolean \| Promise<boolean>` — require approval only when\n * the predicate returns true (e.g. only for external recipients, only\n * above a dollar threshold). Keep it pure + fast; thrown errors are treated\n * as \"approval required\" (fail closed).\n /\n needsApproval?:\n \| boolean\n \| ((\n args: StandardSchemaV1.InferOutput<TSchema>,\n ctx?: ActionRunContext,\n ) => boolean \| Promise<boolean>);\n /\n Audit-log configuration. Default-on for mutating actions — you only\n * need this to tune capture: declare the mutated `target` (so the change\n * shows up in the owner's audit trail) and/or a `summary`, opt a read-only\n * action in via `onRead`, or opt a noisy action out via `enabled: false`.\n * See the `audit-log` skill.\n /\n audit?: ActionAuditConfig;\n}\n\n// ---------------------------------------------------------------------------\n// Legacy parameter-based action options\n// ---------------------------------------------------------------------------\n\ninterface DefineActionWithParams<\n TParams extends Record<string, ParameterSchema> \| undefined =\n \| Record<string, ParameterSchema>\n \| undefined,\n TReturn = any,\n> {\n description: string;\n /* Flat map of parameter names to their schema. Automatically wrapped in\n * `{ type: \"object\", properties: ... }` for the Claude API. /\n parameters?: TParams;\n /* Standard Schema — not used in this overload. /\n schema?: never;\n /* Advertised-only schema override — not used in this overload (no runtime\n * schema to advertise a compact alternative for). See the schema overload\n * above. /\n agentInputSchema?: never;\n /* Optional Standard Schema-compatible schema the action's RETURN value is\n * validated against AFTER `run()` resolves. See the schema overload above.\n * When omitted, behavior is byte-for-byte unchanged. /\n outputSchema?: StandardSchemaV1;\n /* What to do when the result fails `outputSchema`. Default: `\"warn\"`. /\n outputErrorStrategy?: ActionOutputErrorStrategy;\n /* Value returned in place of an invalid result when `outputErrorStrategy` is\n * `\"fallback\"`. Ignored for the other strategies. /\n outputFallback?: TReturn;\n run: (\n args: InferParams<TParams>,\n ctx?: ActionRunContext,\n ) => Promise<TReturn> \| TReturn;\n http?: ActionHttpConfig \| false;\n /* Whether the HTTP/frontend action route must have an authenticated owner.\n * Defaults to true. See the schema overload above. /\n requiresAuth?: boolean;\n /* Max HTTP request body in bytes; 413s on `Content-Length` before parsing.\n * See the schema overload above. /\n maxBodyBytes?: number;\n /* Whether this action is exposed to the agent as a callable tool. Only an\n * explicit `false` hides it from every agent tool list while keeping it\n * frontend/HTTP-callable. See the schema overload above and actions.md. /\n agentTool?: boolean;\n /* If true, the framework will NOT emit a screen-refresh change event after a\n * successful call. Auto-inferred as `true` when `http.method === \"GET\"`. /\n readOnly?: boolean;\n /* Set false for read-only tools that should stay available in Act mode but\n * must not run during Plan mode. See the schema overload above. /\n allowInPlanMode?: boolean;\n /* If true, the agent may execute this action concurrently with other\n * read-only or parallel-safe tool calls emitted in the same model turn. /\n parallelSafe?: boolean;\n /* Set false to exempt a read-only tool from the duplicate read-only call\n * guard. Default true. See the schema overload above. /\n dedupe?: boolean;\n /* Whether this action may be invoked from the tools (Alpine iframe) bridge\n * via `appAction(name, params)`. See the schema overload above for details\n * and the `toolCallable` section in actions.md. /\n toolCallable?: boolean;\n /* Explicit public-agent exposure metadata. See schema overload above. /\n publicAgent?: PublicAgentActionConfig;\n /* Optional deep-link builder. See schema overload above. /\n link?: ActionLinkBuilder;\n /* Optional MCP Apps UI resource. See schema overload above. /\n mcpApp?: ActionMcpAppConfig;\n /* Optional native Agent-Native chat renderer. See schema overload above. /\n chatUI?: ActionChatUIConfig;\n /* Per-tool timeout override in milliseconds. See schema overload above. /\n timeoutMs?: number;\n /* Per-tool result truncation override. See schema overload above. /\n maxResultChars?: number;\n /* Opt-in human-in-the-loop approval gate (default off). See the schema\n * overload above for full semantics. /\n needsApproval?:\n \| boolean\n \| ((\n args: InferParams<TParams>,\n ctx?: ActionRunContext,\n ) => boolean \| Promise<boolean>);\n /* Audit-log configuration (default-on for mutations). See the schema\n * overload above and the `audit-log` skill. /\n audit?: ActionAuditConfig;\n}\n\n// ---------------------------------------------------------------------------\n// Return type — carries schema-inferred input + run return for client inference\n// ---------------------------------------------------------------------------\n\n/\n Opaque typed wrapper returned by `defineAction`. The type parameters carry\n * the schema-inferred input and the `run` return type so that:\n \n - The generated `.generated/action-types.d.ts` can extract them via\n * `typeof import(\"../actions/my-action\").default.run` and augment\n * `ActionRegistry` with concrete param/result types.\n * - `useActionQuery` / `useActionMutation` / `callAction` in the client hooks\n * flow the correct types end-to-end without manual generic annotations.\n \n Runtime shape is unchanged — this is a declaration-only wrapper.\n /\nexport interface ActionDefinition<TInput, TReturn> {\n /\n Typed run function — declaration only; infer input/return from this.\n * `TInput` is the schema's input type (optional defaults allowed at call\n * sites); `TReturn` is the awaited result type of the run callback.\n /\n readonly run: (\n args: TInput,\n ctx?: ActionRunContext,\n ) => Promise<TReturn> \| TReturn;\n /* @internal Framework use only — do not call directly. /\n readonly tool: import(\"./agent/types.js\").ActionTool;\n readonly http?: ActionHttpConfig \| false;\n readonly requiresAuth?: boolean;\n readonly maxBodyBytes?: number;\n readonly agentTool?: boolean;\n readonly readOnly?: boolean;\n readonly allowInPlanMode?: boolean;\n readonly parallelSafe?: boolean;\n readonly dedupe?: boolean;\n readonly toolCallable?: boolean;\n readonly publicAgent?: PublicAgentActionConfig;\n readonly link?: ActionLinkBuilder;\n readonly mcpApp?: ActionMcpAppConfig;\n readonly chatUI?: ActionChatUIConfig;\n /* Per-tool timeout override in milliseconds for agent-loop tool calls. /\n readonly timeoutMs?: number;\n /* Per-tool result truncation override for agent-loop tool calls. /\n readonly maxResultChars?: number;\n /* Standard Schema the action's RETURN value is validated against after\n * `run()` resolves. Present only when the caller passed `outputSchema`. /\n readonly outputSchema?: StandardSchemaV1;\n /* Resolved output-mismatch strategy. Present only when `outputSchema` is\n * set; defaults to `\"warn\"`. /\n readonly outputErrorStrategy?: ActionOutputErrorStrategy;\n /* Value substituted for an invalid result under the `\"fallback\"` strategy. /\n readonly outputFallback?: TReturn;\n /* Opt-in human-in-the-loop approval gate (default off). When truthy, the\n * agent loop emits `approval_required` and pauses instead of executing this\n * action until a human approves the specific call. /\n readonly needsApproval?:\n \| boolean\n \| ((args: TInput, ctx?: ActionRunContext) => boolean \| Promise<boolean>);\n /* Resolved audit-log configuration. Present only when the caller passed\n * `audit`. The audit capture wrapper is baked into `run`; this field is for\n * introspection. /\n readonly audit?: ActionAuditConfig;\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/\n Define an agent action. Place in `actions/` directory — auto-discovered by the framework.\n \n Supports two modes:\n \n Schema mode (recommended) — pass a Standard Schema-compatible schema (Zod, Valibot,\n * ArkType) for runtime validation and full type inference:\n \n ```ts\n * import { defineAction } from \"@agent-native/core\";\n * import { z } from \"zod\";\n \n export default defineAction({\n * description: \"Create a form\",\n * schema: z.object({\n * title: z.string().describe(\"Form title\"),\n * status: z.enum([\"draft\", \"published\", \"closed\"]).default(\"draft\"),\n * }),\n * run: async (args) => {\n * // args is { title: string; status: \"draft\" \| \"published\" \| \"closed\" }\n * // Already validated — invalid inputs never reach here\n * },\n * });\n * ```\n \n Parameters mode (legacy) — pass raw JSON schema-like parameter definitions:\n \n ```ts\n * export default defineAction({\n * description: \"List events\",\n * parameters: {\n * from: { type: \"string\", description: \"Start date\" },\n * },\n * run: async (args) => { ... },\n * });\n * ```\n /\nexport function defineAction<\n TSchema extends StandardSchemaV1,\n TReturn,\n TOutputSchema extends StandardSchemaV1 \| undefined = undefined,\n>(\n options: DefineActionWithSchema<TSchema, TReturn, TOutputSchema>,\n): ActionDefinition<StandardSchemaV1.InferInput<TSchema>, TReturn>;\nexport function defineAction<\n TParams extends Record<string, ParameterSchema> \| undefined,\n TReturn,\n>(\n options: DefineActionWithParams<TParams, TReturn>,\n): ActionDefinition<InferParams<TParams>, TReturn>;\nexport function defineAction(options: any) {\n const hasSchema = options.schema && \"~standard\" in options.schema;\n\n // Build tool definition for the Claude API\n let toolParameters: ActionTool[\"parameters\"];\n if (hasSchema) {\n // Convert Standard Schema to JSON Schema for Claude\n toolParameters = schemaToJsonSchema(options.schema, options.description);\n } else if (options.parameters) {\n toolParameters = {\n type: \"object\" as const,\n properties: options.parameters,\n };\n }\n\n // `agentInputSchema` swaps in a compact JSON Schema for the ADVERTISED tool\n // definition only (what the model/MCP/A2A tool listings see). It never\n // touches validation below — `wrapWithValidation` is always called with\n // `options.schema`, the full schema, as the source of truth for what's\n // accepted. Passing the same (compact) `toolParameters` into it only\n // affects the top-level \"Expected: { ... }\" hint text and gateway string\n // coercion, both of which only look at top-level property names/types —\n // unaffected by trimming a nested union, so this stays safe either way.\n if (\n hasSchema &&\n options.agentInputSchema &&\n \"~standard\" in options.agentInputSchema\n ) {\n toolParameters = schemaToJsonSchema(\n options.agentInputSchema,\n options.description,\n );\n }\n\n // Wrap run() with INPUT validation when schema is provided.\n // Pass toolParameters so the validation error can echo the expected signature\n // (required vs optional fields) and help the caller self-correct.\n const inputValidatedRun = hasSchema\n ? wrapWithValidation(options.schema, options.run, toolParameters)\n : options.run;\n\n // Then wrap with OUTPUT validation when an outputSchema is provided. This\n // composes AROUND the input-validated run so the order is: validate input →\n // run() → validate output. When no outputSchema is present, the run is passed\n // through untouched and behavior is byte-for-byte unchanged.\n const hasOutputSchema =\n options.outputSchema && \"~standard\" in options.outputSchema;\n const outputErrorStrategy: ActionOutputErrorStrategy =\n options.outputErrorStrategy === \"strict\" \|\|\n options.outputErrorStrategy === \"warn\" \|\|\n options.outputErrorStrategy === \"fallback\"\n ? options.outputErrorStrategy\n : \"warn\";\n const run = hasOutputSchema\n ? wrapWithOutputValidation(\n options.outputSchema,\n inputValidatedRun,\n outputErrorStrategy,\n options.outputFallback,\n options.description,\n )\n : inputValidatedRun;\n\n // Auto-infer readOnly from http.method === \"GET\" unless explicitly set.\n // GET actions are idempotent reads; their completion should NOT trigger a\n // screen refresh. Everything else is assumed to mutate — the dispatcher\n // emits a change event on success so the UI auto-refetches its queries.\n const httpConfig = options.http as ActionHttpConfig \| false \| undefined;\n const inferredReadOnly =\n httpConfig !== false &&\n httpConfig !== undefined &&\n httpConfig.method === \"GET\";\n // Explicit `readOnly` (true OR false) wins. Otherwise infer from http.method.\n // We store the resolved boolean so downstream checks can trust entry.readOnly\n // without re-running method inference — including when a caller explicitly\n // passes readOnly:false to override a GET (rare but valid).\n const readOnly: boolean \| undefined =\n typeof options.readOnly === \"boolean\"\n ? options.readOnly\n : inferredReadOnly\n ? true\n : undefined;\n\n // Audit: wrap the validated run so every mutating call records an audit\n // event (who/what/when/from-where, and for the agent which run). Default-on\n // for mutations; read-only actions opt in via `audit.onRead`. The wrapper\n // lazily imports the DB-touching recorder so `action.ts` keeps no static DB\n // dependency.\n const auditConfig = normalizeAuditConfig(options.audit);\n const finalRun = resolveAuditAttach(auditConfig, readOnly)\n ? wrapRunWithAudit(run, auditConfig)\n : run;\n\n // toolCallable: thread through whatever the caller declared. We DO NOT\n // default to `true` here — the absence of an explicit field is meaningful\n // to the tools bridge: it lets us emit a one-shot warning when an action\n // without a declared `toolCallable` flag is invoked from a tool, so the\n // ecosystem can migrate over time. The bridge treats `undefined` as\n // \"implicit allow with a deprecation warning\"; only an explicit `false`\n // refuses the call. See `extensions/routes.ts` and audit H5.\n const toolCallable: boolean \| undefined =\n typeof options.toolCallable === \"boolean\"\n ? options.toolCallable\n : undefined;\n // agentTool: default-allow opt-out. Only an explicit `false` hides the action\n // from the agent tool surfaces; undefined is preserved (treated as exposed).\n const agentTool: boolean \| undefined =\n typeof options.agentTool === \"boolean\" ? options.agentTool : undefined;\n const parallelSafe: boolean \| undefined =\n typeof options.parallelSafe === \"boolean\"\n ? options.parallelSafe\n : undefined;\n const dedupe: boolean \| undefined =\n typeof options.dedupe === \"boolean\" ? options.dedupe : undefined;\n const publicAgent: PublicAgentActionConfig \| undefined =\n options.publicAgent &&\n typeof options.publicAgent === \"object\" &&\n !Array.isArray(options.publicAgent)\n ? options.publicAgent\n : undefined;\n const link: ActionLinkBuilder \| undefined =\n typeof options.link === \"function\" ? options.link : undefined;\n const mcpApp: ActionMcpAppConfig \| undefined = (() => {\n if (\n !options.mcpApp \|\|\n typeof options.mcpApp !== \"object\" \|\|\n Array.isArray(options.mcpApp)\n ) {\n return undefined;\n }\n // compactCatalog-only: no resource required; just keep the flag.\n if (options.mcpApp.compactCatalog === true && !options.mcpApp.resource) {\n return options.mcpApp as ActionMcpAppConfig;\n }\n // Full resource: validate html is present.\n if (\n options.mcpApp.resource &&\n typeof options.mcpApp.resource === \"object\" &&\n !Array.isArray(options.mcpApp.resource) &&\n (typeof options.mcpApp.resource.html === \"string\" \|\|\n typeof options.mcpApp.resource.html === \"function\")\n ) {\n return options.mcpApp as ActionMcpAppConfig;\n }\n return undefined;\n })();\n const chatUI = normalizeActionChatUIConfig(options.chatUI);\n\n return {\n tool: {\n description: options.description,\n parameters: toolParameters,\n },\n run: finalRun,\n ...(hasSchema ? { schema: options.schema } : {}),\n ...(options.http !== undefined ? { http: options.http } : {}),\n ...(typeof options.requiresAuth === \"boolean\"\n ? { requiresAuth: options.requiresAuth }\n : {}),\n ...(typeof options.maxBodyBytes === \"number\"\n ? { maxBodyBytes: options.maxBodyBytes }\n : {}),\n ...(typeof agentTool === \"boolean\" ? { agentTool } : {}),\n ...(typeof readOnly === \"boolean\" ? { readOnly } : {}),\n ...(typeof options.allowInPlanMode === \"boolean\"\n ? { allowInPlanMode: options.allowInPlanMode }\n : {}),\n ...(typeof parallelSafe === \"boolean\" ? { parallelSafe } : {}),\n ...(typeof dedupe === \"boolean\" ? { dedupe } : {}),\n ...(typeof toolCallable === \"boolean\" ? { toolCallable } : {}),\n ...(publicAgent ? { publicAgent } : {}),\n ...(link ? { link } : {}),\n ...(mcpApp ? { mcpApp } : {}),\n ...(chatUI ? { chatUI } : {}),\n ...(typeof options.timeoutMs === \"number\"\n ? { timeoutMs: options.timeoutMs }\n : {}),\n ...(typeof options.maxResultChars === \"number\"\n ? { maxResultChars: options.maxResultChars }\n : {}),\n ...(hasOutputSchema\n ? {\n outputSchema: options.outputSchema,\n outputErrorStrategy,\n ...(outputErrorStrategy === \"fallback\"\n ? { outputFallback: options.outputFallback }\n : {}),\n }\n : {}),\n ...(typeof options.needsApproval === \"boolean\" \|\|\n typeof options.needsApproval === \"function\"\n ? { needsApproval: options.needsApproval }\n : {}),\n ...(auditConfig ? { audit: auditConfig } : {}),\n };\n}\n\n/\n Wrap an action's (already input/output-validated) run so each call records an\n * audit event after it resolves — on success and on error. Best-effort: the\n * recorder swallows its own failures and the original result/throw is always\n * preserved, so auditing can never change an action's behavior. The DB-touching\n * recorder is imported lazily so merely defining an action pulls in no DB code.\n /\nfunction wrapRunWithAudit(\n run: (args: any, ctx?: ActionRunContext) => any,\n auditConfig: ActionAuditConfig \| undefined,\n): (args: any, ctx?: ActionRunContext) => Promise<any> {\n return async function auditedRun(args: any, ctx?: ActionRunContext) {\n let result: any;\n let error: unknown;\n let threw = false;\n try {\n result = await run(args, ctx);\n } catch (err) {\n error = err;\n threw = true;\n }\n try {\n const { recordActionAudit } = await import(\"./audit/record.js\");\n await recordActionAudit(\n threw\n ? { config: auditConfig, args, ctx, status: \"error\", error }\n : { config: auditConfig, args, ctx, status: \"success\", result },\n );\n } catch {\n // Recorder failed to load/run — never affect the action.\n }\n if (threw) throw error;\n return result;\n };\n}\n\n// ---------------------------------------------------------------------------\n// Schema → JSON Schema conversion\n// ---------------------------------------------------------------------------\n\n// Keywords whose value is a single subschema.\nconst SUBSCHEMA_VALUE_KEYS = [\n \"items\",\n \"additionalItems\",\n \"contains\",\n \"additionalProperties\",\n \"not\",\n \"if\",\n \"then\",\n \"else\",\n] as const;\n// Keywords whose value is an array of subschemas.\nconst SUBSCHEMA_ARRAY_KEYS = [\n \"allOf\",\n \"anyOf\",\n \"oneOf\",\n \"prefixItems\",\n] as const;\n// Keywords whose value is a map of name → subschema.\nconst SUBSCHEMA_MAP_KEYS = [\n \"properties\",\n \"patternProperties\",\n \"$defs\",\n \"definitions\",\n \"dependentSchemas\",\n] as const;\n\n/\n Remove JSON Schema keywords that some providers' function-calling schema\n * validators reject. OpenAI (and Gemini via the Builder gateway) reject\n * `propertyNames` — which Zod v4 emits for `z.record(z.string(), …)` — with a\n * `400 invalid_function_parameters` error, causing the model turn to produce no\n * content (surfacing as an empty assistant response). Anthropic ignores the\n * keyword, so stripping it is safe across providers and keeps action schemas\n * portable. `propertyNames` only constrained object keys; the value/shape of\n * the object is unaffected by its removal.\n \n Only descends through actual subschema positions (properties, items, union\n * branches, definitions, etc.) — never through value-bearing keywords like\n * `default`, `const`, `enum`, or `examples`, whose objects may legitimately\n * contain a `propertyNames` data key that must be preserved.\n /\nfunction stripUnsupportedSchemaKeywords<T>(node: T): T {\n if (!node \|\| typeof node !== \"object\" \|\| Array.isArray(node)) return node;\n const obj = node as Record<string, unknown>;\n\n delete obj.propertyNames;\n\n for (const key of SUBSCHEMA_VALUE_KEYS) {\n // `items`/`additionalItems` may also be an array of subschemas.\n const value = obj[key];\n if (Array.isArray(value)) {\n for (const sub of value) stripUnsupportedSchemaKeywords(sub);\n } else {\n stripUnsupportedSchemaKeywords(value);\n }\n }\n for (const key of SUBSCHEMA_ARRAY_KEYS) {\n const value = obj[key];\n if (Array.isArray(value)) {\n for (const sub of value) stripUnsupportedSchemaKeywords(sub);\n }\n }\n for (const key of SUBSCHEMA_MAP_KEYS) {\n const value = obj[key];\n if (value && typeof value === \"object\" && !Array.isArray(value)) {\n for (const sub of Object.values(value)) {\n stripUnsupportedSchemaKeywords(sub);\n }\n }\n }\n return node;\n}\n\n/\n Convert a Standard Schema to JSON Schema for the Claude API.\n * Tries vendor-specific toJSONSchema first (Zod v4), then falls back\n * to a basic introspection of the schema shape.\n /\nfunction schemaToJsonSchema(\n schema: StandardSchemaV1,\n _description?: string,\n): ActionTool[\"parameters\"] {\n const s = schema as any;\n\n // Prefer Zod's own JSON Schema output — it handles descriptions,\n // enums, coerce, and all type wrappers correctly.\n if (s[\"~standard\"]?.jsonSchema?.input) {\n try {\n const result = s[\"~standard\"].jsonSchema.input({\n target: \"draft-07\",\n }) as any;\n // Strip $schema — the Claude API validates against draft 2020-12\n // and a mismatched $schema declaration can cause rejections.\n if (result && typeof result === \"object\") {\n delete result.$schema;\n }\n return stripUnsupportedSchemaKeywords(result) as ActionTool[\"parameters\"];\n } catch {\n // Fall through to manual converter\n }\n }\n\n // Fallback: manual conversion from Zod v4 internal defs\n if (s._zod?.def) {\n return stripUnsupportedSchemaKeywords(zodDefToJsonSchema(s._zod.def));\n }\n\n // Last resort: empty object schema\n return { type: \"object\" as const, properties: {} };\n}\n\n/\n Convert a Zod v4 internal def to JSON Schema.\n * Handles the common types used in action parameters.\n /\nfunction zodDefToJsonSchema(def: any): any {\n const type = def.type;\n\n if (type === \"object\") {\n const properties: Record<string, any> = {};\n const required: string[] = [];\n const shape = def.shape;\n if (shape) {\n for (const [key, fieldSchema] of Object.entries(shape) as any[]) {\n const fieldDef = fieldSchema?._zod?.def;\n if (fieldDef) {\n const prop = zodDefToJsonSchema(fieldDef);\n // Zod v4 stores .describe() on the schema object, not in the def\n const desc = fieldSchema?.description;\n if (desc && !prop.description) prop.description = desc;\n properties[key] = prop;\n if (\n fieldDef.type !== \"optional\" &&\n fieldDef.type !== \"default\" &&\n fieldDef.type !== \"nullable\"\n ) {\n required.push(key);\n }\n }\n }\n }\n const result: any = { type: \"object\", properties };\n if (required.length > 0) result.required = required;\n return result;\n }\n\n if (type === \"string\") {\n const result: any = { type: \"string\" };\n if (def.description) result.description = def.description;\n return result;\n }\n\n if (type === \"number\" \|\| type === \"float\" \|\| type === \"int\") {\n const result: any = { type: type === \"int\" ? \"integer\" : \"number\" };\n if (def.description) result.description = def.description;\n return result;\n }\n\n if (type === \"boolean\") {\n const result: any = { type: \"boolean\" };\n if (def.description) result.description = def.description;\n return result;\n }\n\n if (type === \"enum\") {\n // Zod v4 stores enum entries as an object {a: \"a\", b: \"b\"};\n // JSON Schema requires an array.\n const entries = def.entries;\n const enumValues = Array.isArray(entries)\n ? entries\n : typeof entries === \"object\" && entries !== null\n ? Object.values(entries)\n : entries;\n const result: any = { type: \"string\", enum: enumValues };\n if (def.description) result.description = def.description;\n return result;\n }\n\n if (type === \"literal\") {\n return { type: typeof def.value, enum: [def.value] };\n }\n\n if (type === \"array\") {\n const result: any = { type: \"array\" };\n if (def.element?._zod?.def) {\n result.items = zodDefToJsonSchema(def.element._zod.def);\n }\n if (def.description) result.description = def.description;\n return result;\n }\n\n if (type === \"optional\") {\n if (def.innerType?._zod?.def) {\n return zodDefToJsonSchema(def.innerType._zod.def);\n }\n }\n\n if (type === \"default\") {\n if (def.innerType?._zod?.def) {\n const inner = zodDefToJsonSchema(def.innerType._zod.def);\n inner.default =\n typeof def.defaultValue === \"function\"\n ? def.defaultValue()\n : def.defaultValue;\n return inner;\n }\n }\n\n if (type === \"nullable\") {\n if (def.innerType?._zod?.def) {\n const inner = zodDefToJsonSchema(def.innerType._zod.def);\n // Surface null as a valid value so the model knows it may pass null\n // (and doesn't treat the field as a non-nullable required string).\n return { anyOf: [inner, { type: \"null\" }] };\n }\n }\n\n if (type === \"union\") {\n if (def.options?.length) {\n // Check if it's a simple enum-like union of literals\n const allLiterals = def.options.every(\n (o: any) => o?._zod?.def?.type === \"literal\",\n );\n if (allLiterals) {\n const values = def.options.map((o: any) => o._zod.def.value);\n const jsonTypeOf = (v: any) =>\n typeof v === \"number\"\n ? \"number\"\n : typeof v === \"boolean\"\n ? \"boolean\"\n : \"string\";\n const uniqueTypes = [...new Set(values.map(jsonTypeOf))];\n if (uniqueTypes.length === 1) {\n // Homogeneous literal union (e.g. all numbers) — derive the JSON\n // type instead of hardcoding \"string\", which would contradict the\n // enum values and make the model coerce/round-trip them wrongly.\n return { type: uniqueTypes[0], enum: values };\n }\n // Mixed literal types: emit anyOf so each branch stays self-consistent.\n return {\n anyOf: values.map((v: any) => ({ type: jsonTypeOf(v), enum: [v] })),\n };\n }\n return {\n anyOf: def.options.map((o: any) =>\n zodDefToJsonSchema(o._zod?.def ?? {}),\n ),\n };\n }\n }\n\n // z.preprocess / z.pipe / .superRefine / .transform all produce a \"pipe\"\n // def with `in` (pre-transform) and `out` (post-transform). For JSON Schema\n // purposes, use `out` — it reflects the validated output shape the model\n // should populate.\n if (type === \"pipe\") {\n if (def.out?._zod?.def) {\n return zodDefToJsonSchema(def.out._zod.def);\n }\n if (def.in?._zod?.def) {\n return zodDefToJsonSchema(def.in._zod.def);\n }\n }\n\n // Fallback\n return { type: \"string\" };\n}\n\n// ---------------------------------------------------------------------------\n// Runtime validation wrapper\n// ---------------------------------------------------------------------------\n\nconst NO_COERCE = Symbol(\"no-coerce\");\n\n/\n Coerce a single stringified value to one of the JSON-schema types the field\n * expects. Returns NO_COERCE when nothing safe applies, so the caller leaves\n * the original value untouched and the normal validation error still surfaces.\n /\nfunction coerceStringToSchemaType(raw: string, types: string[]): unknown {\n const trimmed = raw.trim();\n if (types.includes(\"boolean\")) {\n if (trimmed === \"true\") return true;\n if (trimmed === \"false\") return false;\n }\n if (\n (types.includes(\"array\") &&\n trimmed.startsWith(\"[\") &&\n trimmed.endsWith(\"]\")) \|\|\n (types.includes(\"object\") &&\n trimmed.startsWith(\"{\") &&\n trimmed.endsWith(\"}\"))\n ) {\n try {\n const parsed = JSON.parse(trimmed);\n if (types.includes(\"array\") && Array.isArray(parsed)) return parsed;\n if (\n types.includes(\"object\") &&\n parsed &&\n typeof parsed === \"object\" &&\n !Array.isArray(parsed)\n ) {\n return parsed;\n }\n } catch {\n // fall through — leave the original so validation reports the real error\n }\n }\n if (\n (types.includes(\"number\") \|\| types.includes(\"integer\")) &&\n trimmed !== \"\" &&\n Number.isFinite(Number(trimmed))\n ) {\n const n = Number(trimmed);\n if (types.includes(\"number\") \|\| Number.isInteger(n)) return n;\n }\n return NO_COERCE;\n}\n\n/\n Defensively coerce stringified action arguments to the types the schema\n * expects. Two callers depend on this:\n \n 1. Model gateways (notably Builder's Gemini-backed gateway) hand back\n * structured tool-call arguments as JSON strings — an array param arrives\n * as `\"[{...}]\"`, a boolean as `\"true\"`.\n * 2. GET actions called from the browser via `useActionQuery` / `callAction`.\n * Those serialize params into the query string, where `URLSearchParams`\n * stringifies everything — so `includeSeries: true` arrives as the string\n * `\"true\"` and `limit: 5` as `\"5\"` (see `action-routes.ts`).\n \n In both cases Standard Schema (zod) `validate` does not coerce, so the call\n * fails validation (\"expected boolean, received string\") — the agent thrashes\n * retrying shapes and the frontend query errors. We only touch a string value\n * when the schema expects a non-string type and the string parses cleanly to\n * it; anything ambiguous (schema also allows string) or unparseable is left\n * as-is. Operates on top-level properties only — once an array/object param is\n * parsed, its nested members are already native and validate normally.\n \n Do NOT narrow this to \"gateway-only\": the GET query-string path relies on it\n * too, and `action-routes.spec.ts` guards that round-trip.\n /\nfunction coerceGatewayStringifiedArgs(\n args: unknown,\n parameters?: ActionTool[\"parameters\"],\n): unknown {\n const properties = parameters?.properties as\n \| Record<string, { type?: string \| string[] }>\n \| undefined;\n if (!properties) return args;\n if (!args \|\| typeof args !== \"object\" \|\| Array.isArray(args)) return args;\n let out: Record<string, unknown> \| null = null;\n for (const [key, raw] of Object.entries(args as Record<string, unknown>)) {\n if (typeof raw !== \"string\") continue;\n const spec = properties[key];\n if (!spec) continue;\n const types = Array.isArray(spec.type)\n ? spec.type\n : spec.type\n ? [spec.type]\n : [];\n // No declared type, or the field legitimately accepts a string → leave it.\n if (types.length === 0 \|\| types.includes(\"string\")) continue;\n const coerced = coerceStringToSchemaType(raw, types);\n if (coerced === NO_COERCE) continue;\n if (!out) out = { ...(args as Record<string, unknown>) };\n out[key] = coerced;\n }\n return out ?? args;\n}\n\n/\n Wrap an action's run function with schema validation.\n * Invalid inputs get a clear error message (including what was actually passed)\n * so the agent can see its own mistake and correct it on the next turn.\n /\nfunction wrapWithValidation(\n schema: StandardSchemaV1,\n run: Function,\n toolParameters?: ActionTool[\"parameters\"],\n): (args: any, ctx?: ActionRunContext) => any {\n return async (args: any, ctx?: ActionRunContext) => {\n args = coerceGatewayStringifiedArgs(args, toolParameters);\n const result = await schema[\"~standard\"].validate(args);\n if (result.issues) {\n // Split issues into \"missing required field\" vs other validation errors\n // so the error message reads naturally rather than as \"fieldName: Required\".\n const missing: string[] = [];\n const other: string[] = [];\n for (const issue of result.issues) {\n const pathStr = issue.path\n ? issue.path.map((p) => (typeof p === \"object\" ? p.key : p)).join(\".\")\n : \"\";\n const msg = String(issue.message ?? \"\");\n // Zod emits \"Required\" for missing fields; other libraries may use\n // similar wording. Treat any variant as \"missing\".\n if (\n pathStr &&\n (msg === \"Required\" \|\|\n /invalid.undefined/i.test(msg) \|\|\n /expected.received undefined/i.test(msg))\n ) {\n missing.push(pathStr);\n } else {\n other.push(pathStr ? `${pathStr}: ${msg}` : msg);\n }\n }\n\n const parts: string[] = [];\n if (missing.length > 0) {\n parts.push(\n `Missing required parameter${missing.length === 1 ? \"\" : \"s\"}: ${missing.join(\", \")}`,\n );\n }\n if (other.length > 0) {\n parts.push(other.join(\"; \"));\n }\n\n // Echo the args that were actually passed so the caller (usually an\n // agent) can see exactly what it sent and fix its next call.\n let received: string;\n try {\n received = JSON.stringify(args);\n if (received.length > 500) received = received.slice(0, 500) + \"…\";\n } catch {\n received = String(args);\n }\n\n // Also show the EXPECTED signature so the agent doesn't have to guess.\n // Format: `{ deckId: string, content: string, slideId?: string, ... }`\n // where `` = required, `?` = optional.\n let expected = \"\";\n if (toolParameters?.properties) {\n const required = new Set(toolParameters.required ?? []);\n const sig = Object.entries(toolParameters.properties)\n .map(([k, v]) => {\n const mark = required.has(k) ? \"\" : \"?\";\n const type = (v as { type?: string }).type ?? \"any\";\n return `${k}${mark}: ${type}`;\n })\n .join(\", \");\n if (sig)\n expected = ` Expected: { ${sig} } (where = required, ? = optional).`;\n }\n\n throw new Error(\n `Invalid action parameters — ${parts.join(\". \")}. Received: ${received}.${expected}`,\n );\n }\n return run((result as StandardSchemaV1.SuccessResult<any>).value, ctx);\n };\n}\n\n/*\n Wrap an action's run function with RETURN-value validation. Runs AFTER the\n * (already input-validated) `run` resolves and validates the result against\n * `outputSchema` using the Standard Schema `~standard.validate` contract.\n \n Behavior is governed by `strategy`:\n * - `\"strict\"` — throw a clear error when the result doesn't match.\n * - `\"warn\"` — `console.warn` the issues and return the ORIGINAL result\n * unchanged (default; never alters runtime behavior).\n * - `\"fallback\"`— return `fallback` in place of the invalid result.\n \n On success the validated value is returned (so schema-applied coercion /\n * defaults take effect, mirroring the input path).\n */\nfunction wrapWithOutputValidation(\n outputSchema: StandardSchemaV1,\n run: (args: any, ctx?: ActionRunContext) => any,\n strategy: ActionOutputErrorStrategy,\n fallback: unknown,\n description?: string,\n): (args: any, ctx?: ActionRunContext) => any {\n return async (args: any, ctx?: ActionRunContext) => {\n const output = await run(args, ctx);\n const result = await outputSchema[\"~standard\"].validate(output);\n\n if (!result.issues) {\n // Return the validated value so coercion / defaults defined on the\n // outputSchema are applied, consistent with the input path.\n return (result as StandardSchemaV1.SuccessResult<any>).value;\n }\n\n const issues = result.issues\n .map((issue) => {\n const pathStr = issue.path\n ? issue.path.map((p) => (typeof p === \"object\" ? p.key : p)).join(\".\")\n : \"\";\n const msg = String(issue.message ?? \"\");\n return pathStr ? `${pathStr}: ${msg}` : msg;\n })\n .join(\"; \");\n const label = description ? ` (${description})` : \"\";\n const summary = `Action output did not match outputSchema${label}: ${issues}`;\n\n if (strategy === \"strict\") {\n throw new Error(summary);\n }\n if (strategy === \"fallback\") {\n return fallback;\n }\n // \"warn\" (default): surface the mismatch but never change behavior.\n console.warn(summary);\n return output;\n };\n}\n"]}
1	+ {"version":3,"file":"action.js","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,2BAA2B,GAE5B,MAAM,gBAAgB,CAAC;AAMxB,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAsI7E;;;GAGG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,eAAe,GAAG,IAAI,CAAC;IACvB,SAAS,CAAU;IACnB,UAAU,CAAU;IAE7B,YAAY,OAAe,EAAE,OAAO,GAA2B,EAAE;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACvC,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CACpC,GAAY;IAEZ,OAAO,CACL,GAAG,YAAY,oBAAoB;QACnC,OAAO,CACL,GAAG;YACH,OAAO,GAAG,KAAK,QAAQ;YACvB,iBAAiB,IAAI,GAAG;YACvB,GAAqC,CAAC,eAAe,KAAK,IAAI,CAChE,CACF,CAAC;AACJ,CAAC;AA0CD,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAAqC,CAAC;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,2BAAoC,CAAC;AACtE,MAAM,CAAC,MAAM,6BAA6B,GAAG,gBAAyB,CAAC;AAwfvE,MAAM,UAAU,YAAY,CAAC,OAAY;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAElE,2CAA2C;IAC3C,IAAI,cAAwC,CAAC;IAC7C,IAAI,SAAS,EAAE,CAAC;QACd,oDAAoD;QACpD,cAAc,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3E,CAAC;SAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC9B,cAAc,GAAG;YACf,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,uEAAuE;IACvE,wEAAwE;IACxE,uEAAuE;IACvE,qEAAqE;IACrE,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,IACE,SAAS;QACT,OAAO,CAAC,gBAAgB;QACxB,WAAW,IAAI,OAAO,CAAC,gBAAgB,EACvC,CAAC;QACD,cAAc,GAAG,kBAAkB,CACjC,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,WAAW,CACpB,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,iEAAiE;IACjE,MAAM,UAAU,GACd,OAAO,OAAO,CAAC,SAAS,KAAK,UAAU;QACrC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC;QACtD,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAElB,4DAA4D;IAC5D,8EAA8E;IAC9E,kEAAkE;IAClE,MAAM,iBAAiB,GAAG,SAAS;QACjC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,cAAc,CAAC;QAChE,CAAC,CAAC,UAAU,CAAC;IAEf,0EAA0E;IAC1E,4EAA4E;IAC5E,8EAA8E;IAC9E,6DAA6D;IAC7D,MAAM,eAAe,GACnB,OAAO,CAAC,YAAY,IAAI,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC;IAC9D,MAAM,mBAAmB,GACvB,OAAO,CAAC,mBAAmB,KAAK,QAAQ;QACxC,OAAO,CAAC,mBAAmB,KAAK,MAAM;QACtC,OAAO,CAAC,mBAAmB,KAAK,UAAU;QACxC,CAAC,CAAC,OAAO,CAAC,mBAAmB;QAC7B,CAAC,CAAC,MAAM,CAAC;IACb,MAAM,GAAG,GAAG,eAAe;QACzB,CAAC,CAAC,wBAAwB,CACtB,OAAO,CAAC,YAAY,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,WAAW,CACpB;QACH,CAAC,CAAC,iBAAiB,CAAC;IAEtB,wEAAwE;IACxE,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,UAAU,GAAG,OAAO,CAAC,IAA4C,CAAC;IACxE,MAAM,gBAAgB,GACpB,UAAU,KAAK,KAAK;QACpB,UAAU,KAAK,SAAS;QACxB,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC;IAC9B,8EAA8E;IAC9E,8EAA8E;IAC9E,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,QAAQ,GACZ,OAAO,OAAO,CAAC,QAAQ,KAAK,SAAS;QACnC,CAAC,CAAC,OAAO,CAAC,QAAQ;QAClB,CAAC,CAAC,gBAAgB;YAChB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,SAAS,CAAC;IAElB,wEAAwE;IACxE,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,cAAc;IACd,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC;QACxD,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC;QACpC,CAAC,CAAC,GAAG,CAAC;IAER,uEAAuE;IACvE,0EAA0E;IAC1E,yEAAyE;IACzE,wEAAwE;IACxE,oEAAoE;IACpE,wEAAwE;IACxE,6DAA6D;IAC7D,MAAM,YAAY,GAChB,OAAO,OAAO,CAAC,YAAY,KAAK,SAAS;QACvC,CAAC,CAAC,OAAO,CAAC,YAAY;QACtB,CAAC,CAAC,SAAS,CAAC;IAChB,8EAA8E;IAC9E,6EAA6E;IAC7E,MAAM,SAAS,GACb,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,MAAM,YAAY,GAChB,OAAO,OAAO,CAAC,YAAY,KAAK,SAAS;QACvC,CAAC,CAAC,OAAO,CAAC,YAAY;QACtB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,MAAM,GACV,OAAO,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,WAAW,GACf,OAAO,CAAC,WAAW;QACnB,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACvC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QACjC,CAAC,CAAC,OAAO,CAAC,WAAW;QACrB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,GACR,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,MAAM,GAAmC,CAAC,GAAG,EAAE;QACnD,IACE,CAAC,OAAO,CAAC,MAAM;YACf,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;YAClC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAC7B,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,iEAAiE;QACjE,IAAI,OAAO,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvE,OAAO,OAAO,CAAC,MAA4B,CAAC;QAC9C,CAAC;QACD,2CAA2C;QAC3C,IACE,OAAO,CAAC,MAAM,CAAC,QAAQ;YACvB,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YACvC,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBAC/C,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,EACrD,CAAC;YACD,OAAO,OAAO,CAAC,MAA4B,CAAC;QAC9C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE3D,OAAO;QACL,IAAI,EAAE;YACJ,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,UAAU,EAAE,cAAc;SAC3B;QACD,GAAG,EAAE,QAAQ;QACb,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,OAAO,CAAC,YAAY,KAAK,SAAS;YAC3C,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE;YACxC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ;YAC1C,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE;YACxC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,OAAO,OAAO,CAAC,eAAe,KAAK,SAAS;YAC9C,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE;YAC9C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;YACvC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE;YAClC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ;YAC5C,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,eAAe;YACjB,CAAC,CAAC;gBACE,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,mBAAmB;gBACnB,GAAG,CAAC,mBAAmB,KAAK,UAAU;oBACpC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;oBAC5C,CAAC,CAAC,EAAE,CAAC;aACR;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,OAAO,CAAC,aAAa,KAAK,SAAS;YAC9C,OAAO,OAAO,CAAC,aAAa,KAAK,UAAU;YACzC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE;YAC1C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,oBAAoB,CAC3B,GAA+C,EAC/C,SAA+B;IAE/B,OAAO,KAAK,UAAU,aAAa,CAAC,IAAS,EAAE,GAAsB;QACnE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,gBAAgB,CAAmC,CAAC;YAC1E,GAAG,CAAC,IAAI,GAAG,gBAAgB,CAAC;YAC5B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACvB,GAA+C,EAC/C,WAA0C;IAE1C,OAAO,KAAK,UAAU,UAAU,CAAC,IAAS,EAAE,GAAsB;QAChE,IAAI,MAAW,CAAC;QAChB,IAAI,KAAc,CAAC;QACnB,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,GAAG,GAAG,CAAC;YACZ,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAChE,MAAM,iBAAiB,CACrB,KAAK;gBACH,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC5D,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAClE,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;QAC3D,CAAC;QACD,IAAI,KAAK;YAAE,MAAM,KAAK,CAAC;QACvB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E,8CAA8C;AAC9C,MAAM,oBAAoB,GAAG;IAC3B,OAAO;IACP,iBAAiB;IACjB,UAAU;IACV,sBAAsB;IACtB,KAAK;IACL,IAAI;IACJ,MAAM;IACN,MAAM;CACE,CAAC;AACX,kDAAkD;AAClD,MAAM,oBAAoB,GAAG;IAC3B,OAAO;IACP,OAAO;IACP,OAAO;IACP,aAAa;CACL,CAAC;AACX,qDAAqD;AACrD,MAAM,kBAAkB,GAAG;IACzB,YAAY;IACZ,mBAAmB;IACnB,OAAO;IACP,aAAa;IACb,kBAAkB;CACV,CAAC;AAEX;;;;;;;;;;;;;;GAcG;AACH,SAAS,8BAA8B,CAAI,IAAO;IAChD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,GAAG,GAAG,IAA+B,CAAC;IAE5C,OAAO,GAAG,CAAC,aAAa,CAAC;IAEzB,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACvC,gEAAgE;QAChE,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,GAAG,IAAI,KAAK;gBAAE,8BAA8B,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,GAAG,IAAI,KAAK;gBAAE,8BAA8B,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvC,8BAA8B,CAAC,GAAG,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CACzB,MAAwB,EACxB,YAAqB;IAErB,MAAM,CAAC,GAAG,MAAa,CAAC;IAExB,iEAAiE;IACjE,kDAAkD;IAClD,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;gBAC7C,MAAM,EAAE,UAAU;aACnB,CAAQ,CAAC;YACV,iEAAiE;YACjE,6DAA6D;YAC7D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,OAAO,MAAM,CAAC,OAAO,CAAC;YACxB,CAAC;YACD,OAAO,8BAA8B,CAAC,MAAM,CAA6B,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;QAChB,OAAO,8BAA8B,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,mCAAmC;IACnC,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAQ;IAClC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IAEtB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,UAAU,GAAwB,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACxB,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAU,EAAE,CAAC;gBAChE,MAAM,QAAQ,GAAG,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC;gBACxC,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;oBAC1C,iEAAiE;oBACjE,MAAM,IAAI,GAAG,WAAW,EAAE,WAAW,CAAC;oBACtC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW;wBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;oBACvD,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;oBACvB,IACE,QAAQ,CAAC,IAAI,KAAK,UAAU;wBAC5B,QAAQ,CAAC,IAAI,KAAK,SAAS;wBAC3B,QAAQ,CAAC,IAAI,KAAK,UAAU,EAC5B,CAAC;wBACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpE,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,4DAA4D;QAC5D,iCAAiC;QACjC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACvC,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;gBAC/C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBACxB,CAAC,CAAC,OAAO,CAAC;QACd,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACzD,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC3B,MAAM,CAAC,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC7B,OAAO,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzD,KAAK,CAAC,OAAO;gBACX,OAAO,GAAG,CAAC,YAAY,KAAK,UAAU;oBACpC,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE;oBACpB,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzD,oEAAoE;YACpE,mEAAmE;YACnE,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YACxB,qDAAqD;YACrD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CACnC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,KAAK,SAAS,CAC7C,CAAC;YACF,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC7D,MAAM,UAAU,GAAG,CAAC,CAAM,EAAE,EAAE,CAC5B,OAAO,CAAC,KAAK,QAAQ;oBACnB,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,OAAO,CAAC,KAAK,SAAS;wBACtB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,QAAQ,CAAC;gBACjB,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACzD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC7B,iEAAiE;oBACjE,kEAAkE;oBAClE,iEAAiE;oBACjE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAChD,CAAC;gBACD,wEAAwE;gBACxE,OAAO;oBACL,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;iBACpE,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAChC,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CACtC;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,4EAA4E;IAC5E,yEAAyE;IACzE,mBAAmB;IACnB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACvB,OAAO,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACtB,OAAO,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,WAAW;IACX,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;AAEtC;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,GAAW,EAAE,KAAe;IAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,IAAI,OAAO,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;IACxC,CAAC;IACD,IACE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtB,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACvB,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EACxB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;YACpE,IACE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACxB,MAAM;gBACN,OAAO,MAAM,KAAK,QAAQ;gBAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACtB,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;IACD,IACE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvD,OAAO,KAAK,EAAE;QACd,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAChC,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAS,4BAA4B,CACnC,IAAa,EACb,UAAqC;IAErC,MAAM,UAAU,GAAG,UAAU,EAAE,UAElB,CAAC;IACd,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,IAAI,GAAG,GAAmC,IAAI,CAAC;IAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;QACzE,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QACtC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,CAAC,CAAC,IAAI,CAAC,IAAI;YACX,CAAC,CAAC,IAAI,CAAC,IAAI;gBACT,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACb,CAAC,CAAC,EAAE,CAAC;QACT,2EAA2E;QAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC7D,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,IAAI,CAAC,GAAG;YAAE,GAAG,GAAG,EAAE,GAAI,IAAgC,EAAE,CAAC;QACzD,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CACzB,MAAwB,EACxB,GAAa,EACb,cAAyC;IAEzC,OAAO,KAAK,EAAE,IAAS,EAAE,GAAsB,EAAE,EAAE;QACjD,IAAI,GAAG,4BAA4B,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,wEAAwE;YACxE,6EAA6E;YAC7E,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI;oBACxB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBACtE,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBACxC,mEAAmE;gBACnE,mDAAmD;gBACnD,IACE,OAAO;oBACP,CAAC,GAAG,KAAK,UAAU;wBACjB,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;wBAC/B,+BAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CACR,6BAA6B,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtF,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/B,CAAC;YAED,oEAAoE;YACpE,6DAA6D;YAC7D,IAAI,QAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;oBAAE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;YACrE,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAED,uEAAuE;YACvE,yEAAyE;YACzE,wCAAwC;YACxC,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,IAAI,cAAc,EAAE,UAAU,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;gBACxD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC;qBAClD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;oBACd,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;oBACzC,MAAM,IAAI,GAAI,CAAuB,CAAC,IAAI,IAAI,KAAK,CAAC;oBACpD,OAAO,GAAG,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC;gBAChC,CAAC,CAAC;qBACD,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,IAAI,GAAG;oBACL,QAAQ,GAAG,gBAAgB,GAAG,wCAAwC,CAAC;YAC3E,CAAC;YAED,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,QAAQ,IAAI,QAAQ,EAAE,CACrF,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAE,MAA8C,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,wBAAwB,CAC/B,YAA8B,EAC9B,GAA+C,EAC/C,QAAmC,EACnC,QAAiB,EACjB,WAAoB;IAEpB,OAAO,KAAK,EAAE,IAAS,EAAE,GAAsB,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEhE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,mEAAmE;YACnE,4DAA4D;YAC5D,OAAQ,MAA8C,CAAC,KAAK,CAAC;QAC/D,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;aACzB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI;gBACxB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBACtE,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YACxC,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9C,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,2CAA2C,KAAK,KAAK,MAAM,EAAE,CAAC;QAE9E,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,oEAAoE;QACpE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { StandardSchemaV1 } from \"@standard-schema/spec\";\n\nimport {\n normalizeActionChatUIConfig,\n type ActionChatUIConfig,\n} from \"./action-ui.js\";\nimport type {\n ActionTool,\n AgentChatAttachment,\n AgentChatEvent,\n} from \"./agent/types.js\";\nimport { normalizeAuditConfig, resolveAuditAttach } from \"./audit/config.js\";\nimport type { ActionAuditConfig } from \"./audit/types.js\";\n\n/*\n How an action's `run` was invoked. Tagged at each dispatch site so the action\n * (and tracking) can branch on the surface that called it.\n \n - `\"tool\"` — the in-app agent loop, sub-agents/agent-teams, or A2A (which\n * drives the same agent loop). All agent tool calls are `\"tool\"`.\n * - `\"http\"` — a programmatic HTTP POST/GET to `/_agent-native/actions/<name>`\n * without the frontend request marker.\n * - `\"frontend\"` — a browser call via `useActionQuery` / `useActionMutation` /\n * `callAction` (tagged with the `X-Request-Source` header).\n * - `\"cli\"` — `pnpm action <name>` (the CLI runner).\n * - `\"mcp\"` — an external agent over the MCP `tools/call` endpoint.\n * - `\"a2a\"` — a direct, explicitly exposed read-only A2A action dispatch.\n * Natural-language A2A delegation still runs through the agent loop and its\n * selected actions are attributed as `\"tool\"`.\n * - `\"automation\"` — an event-triggered automation dispatched from a stored\n * workspace trigger with trusted trigger lineage.\n /\nexport type ActionCaller =\n \| \"tool\"\n \| \"http\"\n \| \"frontend\"\n \| \"cli\"\n \| \"mcp\"\n \| \"a2a\"\n \| \"automation\";\n\n/\n Trusted automation lineage added by the trigger dispatcher. Action inputs\n * must never be used to create or override this context.\n /\nexport interface ActionAutomationContext {\n triggerId: string;\n triggerName: string;\n policyId?: string;\n}\n\n/\n Context passed as the optional second argument to an action's `run`.\n * Carries the resolved request identity and the invocation source so actions\n * can read `ctx.userEmail` / `ctx.orgId` / `ctx.caller` directly instead of\n * calling `getRequestUserEmail()` / `getRequestOrgId()` by hand.\n \n Backward compatible: existing 1-arg `run(args)` functions keep working, and\n * callers that only need `send` (the agent loop) can still destructure it.\n /\nexport interface ActionRunContext {\n /\n Emit an SSE event to the client. Only meaningful inside the agent tool\n * loop (e.g. `agent_call_text` streaming); `undefined` on every other\n * surface.\n /\n send?: (event: AgentChatEvent) => void;\n /\n Resolved request user email, or `undefined` when there is no authenticated\n * identity. NEVER defaulted to a dev identity — actions that need a fallback\n * must apply their own.\n /\n userEmail?: string;\n /* Resolved org id, or `null` when the request has no org. /\n orgId?: string \| null;\n /* How this action was invoked. /\n caller: ActionCaller;\n /* Present only for trigger-dispatched automation calls. /\n automation?: ActionAutomationContext;\n /* Verified network lineage for direct delegated action calls. /\n networkProtocol?: \"a2a\" \| \"mcp\" \| \"provider-api\";\n networkId?: string;\n networkPeer?: string;\n /\n Attachments submitted with the current agent turn (pasted text blocks,\n * uploaded files, images), exactly as the server received them — with full,\n * untruncated `text` for text attachments. Populated only inside the agent\n * tool loop (`caller: \"tool\"`); `undefined` on every other surface.\n \n Lets an action consume a large pasted artifact BY REFERENCE (e.g.\n * `create-extension`'s `contentFromAttachment`) instead of forcing the model\n * to re-emit the whole file as a tool argument — which frequently gets cut\n * off mid-stream and triggers a continuation loop.\n /\n attachments?: AgentChatAttachment[];\n /\n Abort signal for the current agent run. Fires when the run is soft-timed\n * out, user-cancelled, or the server is shutting down. Well-behaved actions\n * can observe this signal to cancel in-flight work early instead of waiting\n * for the per-tool 60-second hard timeout.\n \n Populated only inside the agent tool loop (`caller: \"tool\"`); `undefined`\n * on every other surface. Never throws — checking `signal.aborted` or\n * attaching an `\"abort\"` listener is always safe.\n /\n signal?: AbortSignal;\n /\n Name of the action being invoked (the registry key, e.g.\n * `delete-recording`). Set at each dispatch site so cross-cutting concerns —\n * notably the audit log — can attribute the call. `undefined` for direct\n * programmatic `run()` calls that bypass the dispatcher.\n /\n actionName?: string;\n /\n Agent conversation thread + turn that triggered this call, populated only\n * inside the agent tool loop (`caller: \"tool\"`). Lets the audit log link a\n * mutation to the specific agent run/turn that caused it. `undefined` on\n * every human/programmatic surface.\n /\n threadId?: string;\n /* Concrete execution id for this agent-loop attempt. /\n runId?: string;\n turnId?: string;\n}\n\n/\n Pre-run authorization gate. Throw to deny with a specific message (the\n * framework's `ForbiddenError` carries a 403), or return `false` for a generic\n * denial. Returning `undefined` allows the call — a guard that forgets to\n * return is therefore permissive, which is why `false` is honoured at all:\n * `(args) => someCheck(args)` written against a boolean helper would otherwise\n * pass silently on every denial.\n /\nexport type ActionAuthorize<TArgs> = (\n args: TArgs,\n ctx?: ActionRunContext,\n) => void \| boolean \| Promise<void \| boolean>;\n\nexport interface AgentActionStopOptions {\n /* Optional stable code surfaced in run metadata and tests. /\n errorCode?: string;\n /* Optional short tool-result text. Defaults to the user-facing message. /\n toolResult?: string;\n}\n\n/\n Throw from an action when the agent should stop the current turn instead of\n * feeding the failure back to the model for another retry.\n /\nexport class AgentActionStopError extends Error {\n readonly agentNativeStop = true;\n readonly errorCode?: string;\n readonly toolResult?: string;\n\n constructor(message: string, options: AgentActionStopOptions = {}) {\n super(message);\n this.name = \"AgentActionStopError\";\n this.errorCode = options.errorCode;\n this.toolResult = options.toolResult;\n }\n}\n\nexport function isAgentActionStopError(\n err: unknown,\n): err is AgentActionStopError {\n return (\n err instanceof AgentActionStopError \|\|\n Boolean(\n err &&\n typeof err === \"object\" &&\n \"agentNativeStop\" in err &&\n (err as { agentNativeStop?: unknown }).agentNativeStop === true,\n )\n );\n}\n\n/* HTTP exposure config for an action. /\nexport interface ActionHttpConfig {\n /* HTTP method. Default: \"POST\". Use \"GET\" for read-only actions. /\n method?: \"GET\" \| \"POST\" \| \"PUT\" \| \"DELETE\";\n /* Override route path under /_agent-native/actions/. Default: action filename. /\n path?: string;\n}\n\n/* Explicit opt-in metadata for public agent protocols such as MCP or A2A. /\nexport interface PublicAgentActionConfig {\n expose: boolean;\n readOnly: boolean;\n requiresAuth?: boolean;\n isConsequential?: boolean;\n title?: string;\n description?: string;\n}\n\n/* A deep link an external agent (MCP / A2A) can surface to the user so they\n * can open the produced/listed resource in the running app UI. /\nexport interface ActionDeepLink {\n /* App-relative path (e.g. `/_agent-native/open?app=mail&view=inbox&...`)\n * or an absolute URL. The MCP layer prefixes the request origin when this\n * is relative, and may rewrite it to the `agentnative://` desktop scheme. /\n url: string;\n /* Human-readable label, e.g. \"Open draft in Mail\". /\n label: string;\n /* Optional view hint (matches the `navigate` command `view`). /\n view?: string;\n}\n\n/* Builds a deep link from an action's args + result so external agents can\n * surface an \"Open in <app> →\" link. MUST be pure and synchronous — no I/O,\n * no awaits. Best-effort: a throw or null is swallowed and never fails the\n * tool call. See the `external-agents` skill. /\nexport type ActionLinkBuilder = (ctx: {\n args: Record<string, any>;\n result: any;\n}) => ActionDeepLink \| null \| undefined;\n\nexport const MCP_APP_EXTENSION_ID = \"io.modelcontextprotocol/ui\" as const;\nexport const MCP_APP_MIME_TYPE = \"text/html;profile=mcp-app\" as const;\nexport const MCP_APP_RESOURCE_URI_META_KEY = \"ui/resourceUri\" as const;\n\nexport interface ActionMcpAppCsp {\n connectDomains?: string[];\n resourceDomains?: string[];\n frameDomains?: string[];\n baseUriDomains?: string[];\n}\n\nexport type ActionMcpAppCspBuilder = (ctx: {\n actionName: string;\n appId?: string;\n requestOrigin?: string;\n}) => ActionMcpAppCsp \| Promise<ActionMcpAppCsp>;\n\nexport interface ActionMcpAppPermissions {\n camera?: Record<string, never>;\n microphone?: Record<string, never>;\n geolocation?: Record<string, never>;\n clipboardWrite?: Record<string, never>;\n}\n\nexport interface ActionMcpAppResourceMeta {\n csp?: ActionMcpAppCsp \| ActionMcpAppCspBuilder;\n permissions?: ActionMcpAppPermissions;\n /\n Host-specific sandbox domain hint. Do not set this to the app's normal\n * production URL; app origins belong in CSP/open-link metadata. ChatGPT uses\n * the separate `openai/widgetDomain` compatibility field.\n /\n domain?: string;\n prefersBorder?: boolean;\n}\n\nexport type ActionMcpAppHtmlBuilder = (ctx: {\n actionName: string;\n appId?: string;\n requestOrigin?: string;\n}) => string;\n\nexport interface ActionMcpAppResourceConfig {\n /* `ui://` URI. Defaults to `ui://<app>/<action-name>`. /\n uri?: string;\n /* MCP resource name. Defaults to the action name. /\n name?: string;\n title?: string;\n description?: string;\n /\n HTML5 document content for the MCP App resource. Keep this self-contained\n * or declare any external origins in `csp`.\n /\n html: string \| ActionMcpAppHtmlBuilder;\n /* Defaults to the MCP Apps HTML MIME type. /\n mimeType?: typeof MCP_APP_MIME_TYPE;\n /* Extra resource/content metadata. `ui` is merged with the fields below. /\n _meta?: Record<string, unknown>;\n csp?: ActionMcpAppCsp \| ActionMcpAppCspBuilder;\n permissions?: ActionMcpAppPermissions;\n /\n Host-specific sandbox domain hint. Do not set this to the app's normal\n * production URL; app origins belong in CSP/open-link metadata. ChatGPT uses\n * the separate `openai/widgetDomain` compatibility field.\n /\n domain?: string;\n prefersBorder?: boolean;\n}\n\nexport interface ActionMcpAppConfig {\n /\n Optional MCP Apps UI resource for hosts that render inline app iframes.\n * Required when the action should open an interactive app view. Omit when\n * you only need `compactCatalog: true` to keep a non-UI action visible in\n * the compact catalog (e.g. read/update actions that should be callable from\n * Claude.ai / ChatGPT without a dedicated iframe resource).\n /\n resource?: ActionMcpAppResourceConfig;\n /\n MCP Apps tool visibility. Defaults to model + app so the LLM can call the\n * action and the app iframe can call it back through the host bridge.\n /\n visibility?: Array<\"model\" \| \"app\">;\n /\n Rare escape hatch for MCP Apps chat hosts. By default OAuth callers with\n * `mcp:apps` see the generic app tools (`open_app`, `list_apps`, etc.) so\n * hosts do not ingest every action-specific UI resource. Set this only when\n * this specific action must stay visible in that compact catalog.\n /\n compactCatalog?: boolean;\n}\n\n/* Schema definition for a single action parameter (legacy JSON schema style). /\nexport interface ParameterSchema {\n type: string;\n description?: string;\n enum?: string[];\n}\n\n/* Infer runtime parameter types from a legacy parameter schema map. /\ntype InferParams<T extends Record<string, ParameterSchema> \| undefined> =\n T extends Record<string, ParameterSchema>\n ? { [K in keyof T]?: string }\n : Record<string, string>;\n\n/\n What to do when an action's RETURN value fails `outputSchema` validation.\n \n - `\"strict\"` — throw a clear error so a buggy action surfaces loudly.\n * - `\"warn\"` (default) — `console.warn` the issues and return the ORIGINAL\n * result unchanged. Non-breaking: behavior never changes unless the dev\n * opts into `\"strict\"` or `\"fallback\"`.\n * - `\"fallback\"` — return `outputFallback` in place of the invalid result.\n \n Mirrors Mastra/Flue structured-output handling, kept on the action layer.\n /\nexport type ActionOutputErrorStrategy = \"strict\" \| \"warn\" \| \"fallback\";\n\n// ---------------------------------------------------------------------------\n// Schema-based action options (new: Zod / Valibot / ArkType via Standard Schema)\n// ---------------------------------------------------------------------------\n\ninterface DefineActionWithSchema<\n TSchema extends StandardSchemaV1,\n TReturn = any,\n TOutputSchema extends StandardSchemaV1 \| undefined = undefined,\n> {\n description: string;\n /* Standard Schema-compatible schema (Zod, Valibot, ArkType). Provides runtime\n * validation and full TypeScript type inference for `run()` args. The schema is\n * also converted to JSON Schema for the Claude API tool definition. /\n schema: TSchema;\n /* Legacy parameters — ignored when `schema` is provided. /\n parameters?: never;\n /\n Optional alternate Standard Schema (Zod, Valibot, ArkType) used ONLY to\n * build the tool definition advertised to the model — the JSON Schema that\n * lands in the Claude `tools` array (and MCP/A2A tool listings, which read\n * the same `tool.parameters`). Runtime validation always runs against\n * `schema` above via the normal `wrapWithValidation` path; setting this\n * never weakens validation and never changes `run()`'s argument type.\n \n Use this when the full input schema is much richer than what the model\n * needs to see up front — the canonical example is a deep discriminated\n * union of block/shape types where a per-call catalog lookup tool (e.g.\n * `get-plan-blocks`) already teaches the full field shapes. Advertise a\n * compact version (e.g. an enum of valid `type` values plus a note to call\n * the lookup tool) instead of embedding every variant's fields in every\n * request. Invalid calls still get the full, actionable validation error\n * (missing/invalid fields, received args) from `schema` — this only trims\n * what is proactively shown, not what is accepted or checked.\n /\n agentInputSchema?: StandardSchemaV1;\n /* Optional Standard Schema-compatible schema (Zod, Valibot, ArkType) the\n * action's RETURN value is validated against AFTER `run()` resolves. Borrowed\n * from Mastra/Flue structured-output. When omitted, behavior is byte-for-byte\n * unchanged. The mismatch handling is governed by `outputErrorStrategy`. /\n outputSchema?: TOutputSchema;\n /* What to do when the result fails `outputSchema`. Default: `\"warn\"`. /\n outputErrorStrategy?: ActionOutputErrorStrategy;\n /* Value returned in place of an invalid result when `outputErrorStrategy` is\n * `\"fallback\"`. Ignored for the other strategies. /\n outputFallback?: TReturn;\n run: (\n args: StandardSchemaV1.InferOutput<TSchema>,\n ctx?: ActionRunContext,\n ) => Promise<TReturn> \| TReturn;\n http?: ActionHttpConfig \| false;\n /* Whether the HTTP/frontend action route must have an authenticated owner.\n * Defaults to true. Set to false only for metadata/read actions that safely\n * handle `ctx.userEmail` / `getRequestUserEmail()` being undefined. /\n requiresAuth?: boolean;\n /* Max HTTP request body in bytes. When set, the route 413s on the declared\n * `Content-Length` before parsing. Use for public, no-auth POST actions;\n * unset = no route-level cap. /\n maxBodyBytes?: number;\n /* Whether this action is exposed to the agent — the in-app assistant and the\n * app's MCP/A2A tool surfaces — as a callable tool. Default-allow opt-out:\n * `undefined` / `true` expose it; only an explicit `false` hides it from every\n * agent tool list while keeping it callable from the frontend / HTTP\n * (`useActionMutation`, `callAction`, `/_agent-native/actions/<name>`). Use\n * this for UI-only or purely programmatic actions you want behind the\n * framework's auth + action surface WITHOUT spending a slot in the model's\n * tool list. Distinct from `toolCallable`, which only governs the sandboxed\n * extension (\"tools\") iframe bridge. See `packages/core/docs/content/actions.mdx`. /\n agentTool?: boolean;\n /* If true, the framework will NOT emit a screen-refresh change event after a\n * successful call. Auto-inferred as `true` when `http.method === \"GET\"`.\n * Only set this manually when you need to override the inference — e.g. a\n * POST action that only reads data but can't use GET for a protocol reason. /\n readOnly?: boolean;\n /* Set false for read-only tools that should stay available in Act mode but\n * must not run during Plan mode because they perform substantive work\n * rather than lightweight inspection. Defaults to allowed when read-only. /\n allowInPlanMode?: boolean;\n /* If true, the agent may execute this action concurrently with other\n * read-only or parallel-safe tool calls emitted in the same model turn.\n * Only set this for mutating actions that are internally concurrency-safe\n * and order-independent for same-turn execution. /\n parallelSafe?: boolean;\n /* Set false to exempt a read-only tool from the agent loop's duplicate\n * read-only call guard (per-turn result cache + \"Skipped duplicate...\"\n * repeat detection). Default true (deduped). Use this for volatile/polling\n * reads where an identical call is expected to return a different result\n * each time — e.g. polling a code-execution status by id, or re-fetching\n * current on-screen state. Has no effect on non-read-only actions, which\n * are never deduped in the first place. /\n dedupe?: boolean;\n /* Whether this action may be invoked from the tools (Alpine iframe) bridge\n * via `appAction(name, params)` — see `packages/core/docs/content/actions.mdx`\n * (\"Tools Callability\"). Default-allow opt-out: undefined / `true` both\n * allow tool-iframe calls; only an explicit `false` returns 403. Set to\n * `false` for high-blast-radius admin operations (account deletion, org\n * membership changes, anything that modifies auth state) — used by the\n * framework's `share-resource`, `unshare-resource`, and\n * `set-resource-visibility` for defense-in-depth. Regular UI/agent/CLI/MCP/A2A\n * calls are unaffected. Enforced by the action HTTP route layer — see\n * `packages/core/src/server/action-routes.ts`. Audit reference: H5 in\n * `security-audit/05-tools-sandbox.md`. /\n toolCallable?: boolean;\n /* Explicit public-agent exposure metadata. Public web routes never imply\n * public MCP/A2A/OpenAPI tool exposure. Actions must opt in here and public\n * protocol mounts must still filter for safe, route-appropriate tools. /\n publicAgent?: PublicAgentActionConfig;\n /* Optional deep-link builder. When set, MCP/A2A surfaces append an\n * \"Open in <app> →\" link built from the call's args + result so the\n * external agent can drop the user into the running app at the right\n * view/record. Pure + sync + best-effort. See the `external-agents` skill. /\n link?: ActionLinkBuilder;\n /* Optional MCP Apps UI resource for hosts that can render inline\n * interactive app iframes. Text/deep-link tool results remain the fallback\n * for CLI and non-UI hosts. /\n mcpApp?: ActionMcpAppConfig;\n /* Optional native Agent-Native chat renderer for this action's structured\n * result. This is first-party React UI, not arbitrary HTML/JS. /\n chatUI?: ActionChatUIConfig;\n /\n Per-tool timeout override in milliseconds for agent-loop tool calls. Use\n * sparingly for actions that legitimately wait on slow provider work.\n /\n timeoutMs?: number;\n /* Per-tool result truncation override for agent-loop tool calls. /\n maxResultChars?: number;\n /\n Opt-in human-in-the-loop approval gate. Default off — the framework\n * intentionally keeps HITL approvals rare; almost every action should run\n * without one. Set this only for high-consequence, outward-facing,\n * hard-to-undo operations (the canonical example is actually sending an\n * email). When `needsApproval` resolves truthy and the agent calls this\n * action, the loop does NOT execute `run()`: it emits an `approval_required`\n * event and stops the turn, waiting for a human to approve. The action runs\n * only once the human re-issues the turn approving this specific call.\n \n - `true` — always require approval.\n * - `(args, ctx) => boolean \| Promise<boolean>` — require approval only when\n * the predicate returns true (e.g. only for external recipients, only\n * above a dollar threshold). Keep it pure + fast; thrown errors are treated\n * as \"approval required\" (fail closed).\n /\n needsApproval?:\n \| boolean\n \| ((\n args: StandardSchemaV1.InferOutput<TSchema>,\n ctx?: ActionRunContext,\n ) => boolean \| Promise<boolean>);\n /\n Authorization gate that runs before `run()` on every caller — agent\n * tool, HTTP, frontend, MCP, A2A, and CLI. It wraps `run` itself rather than\n * hanging off the action entry, because a flag consulted by the dispatcher\n * only guards the dispatchers that remember to consult it.\n \n This is authorization, not approval: `needsApproval` asks a human to\n * bless one call the caller is already allowed to make, while `authorize`\n * decides whether they are allowed at all. It also does not replace\n * `accessFilter` / `assertAccess` — those scope which rows a permitted caller\n * may see; this decides whether the operation is open to them.\n \n ```ts\n * import { coachAccess } from \"../lib/access.js\";\n \n export default defineAction({\n * description: \"Archive a training plan.\",\n * schema,\n * authorize: coachAccess.requireAny(\"coach-admin\"),\n * run: async (args) => { ... },\n * });\n * ```\n /\n authorize?: ActionAuthorize<StandardSchemaV1.InferOutput<TSchema>>;\n /\n Audit-log configuration. Default-on for mutating actions — you only\n * need this to tune capture: declare the mutated `target` (so the change\n * shows up in the owner's audit trail) and/or a `summary`, opt a read-only\n * action in via `onRead`, or opt a noisy action out via `enabled: false`.\n * See the `audit-log` skill.\n /\n audit?: ActionAuditConfig;\n}\n\n// ---------------------------------------------------------------------------\n// Legacy parameter-based action options\n// ---------------------------------------------------------------------------\n\ninterface DefineActionWithParams<\n TParams extends Record<string, ParameterSchema> \| undefined =\n \| Record<string, ParameterSchema>\n \| undefined,\n TReturn = any,\n> {\n description: string;\n /* Flat map of parameter names to their schema. Automatically wrapped in\n * `{ type: \"object\", properties: ... }` for the Claude API. /\n parameters?: TParams;\n /* Standard Schema — not used in this overload. /\n schema?: never;\n /* Advertised-only schema override — not used in this overload (no runtime\n * schema to advertise a compact alternative for). See the schema overload\n * above. /\n agentInputSchema?: never;\n /* Optional Standard Schema-compatible schema the action's RETURN value is\n * validated against AFTER `run()` resolves. See the schema overload above.\n * When omitted, behavior is byte-for-byte unchanged. /\n outputSchema?: StandardSchemaV1;\n /* What to do when the result fails `outputSchema`. Default: `\"warn\"`. /\n outputErrorStrategy?: ActionOutputErrorStrategy;\n /* Value returned in place of an invalid result when `outputErrorStrategy` is\n * `\"fallback\"`. Ignored for the other strategies. /\n outputFallback?: TReturn;\n run: (\n args: InferParams<TParams>,\n ctx?: ActionRunContext,\n ) => Promise<TReturn> \| TReturn;\n http?: ActionHttpConfig \| false;\n /* Whether the HTTP/frontend action route must have an authenticated owner.\n * Defaults to true. See the schema overload above. /\n requiresAuth?: boolean;\n /* Max HTTP request body in bytes; 413s on `Content-Length` before parsing.\n * See the schema overload above. /\n maxBodyBytes?: number;\n /* Whether this action is exposed to the agent as a callable tool. Only an\n * explicit `false` hides it from every agent tool list while keeping it\n * frontend/HTTP-callable. See the schema overload above and actions.md. /\n agentTool?: boolean;\n /* If true, the framework will NOT emit a screen-refresh change event after a\n * successful call. Auto-inferred as `true` when `http.method === \"GET\"`. /\n readOnly?: boolean;\n /* Set false for read-only tools that should stay available in Act mode but\n * must not run during Plan mode. See the schema overload above. /\n allowInPlanMode?: boolean;\n /* If true, the agent may execute this action concurrently with other\n * read-only or parallel-safe tool calls emitted in the same model turn. /\n parallelSafe?: boolean;\n /* Set false to exempt a read-only tool from the duplicate read-only call\n * guard. Default true. See the schema overload above. /\n dedupe?: boolean;\n /* Whether this action may be invoked from the tools (Alpine iframe) bridge\n * via `appAction(name, params)`. See the schema overload above for details\n * and the `toolCallable` section in actions.md. /\n toolCallable?: boolean;\n /* Explicit public-agent exposure metadata. See schema overload above. /\n publicAgent?: PublicAgentActionConfig;\n /* Optional deep-link builder. See schema overload above. /\n link?: ActionLinkBuilder;\n /* Optional MCP Apps UI resource. See schema overload above. /\n mcpApp?: ActionMcpAppConfig;\n /* Optional native Agent-Native chat renderer. See schema overload above. /\n chatUI?: ActionChatUIConfig;\n /* Per-tool timeout override in milliseconds. See schema overload above. /\n timeoutMs?: number;\n /* Per-tool result truncation override. See schema overload above. /\n maxResultChars?: number;\n /* Opt-in human-in-the-loop approval gate (default off). See the schema\n * overload above for full semantics. /\n needsApproval?:\n \| boolean\n \| ((\n args: InferParams<TParams>,\n ctx?: ActionRunContext,\n ) => boolean \| Promise<boolean>);\n /* Pre-run authorization gate applied to every caller. See the schema\n * overload above for full semantics. /\n authorize?: ActionAuthorize<InferParams<TParams>>;\n /* Audit-log configuration (default-on for mutations). See the schema\n * overload above and the `audit-log` skill. /\n audit?: ActionAuditConfig;\n}\n\n// ---------------------------------------------------------------------------\n// Return type — carries schema-inferred input + run return for client inference\n// ---------------------------------------------------------------------------\n\n/\n Opaque typed wrapper returned by `defineAction`. The type parameters carry\n * the schema-inferred input and the `run` return type so that:\n \n - The generated `.generated/action-types.d.ts` can extract them via\n * `typeof import(\"../actions/my-action\").default.run` and augment\n * `ActionRegistry` with concrete param/result types.\n * - `useActionQuery` / `useActionMutation` / `callAction` in the client hooks\n * flow the correct types end-to-end without manual generic annotations.\n \n Runtime shape is unchanged — this is a declaration-only wrapper.\n /\nexport interface ActionDefinition<TInput, TReturn> {\n /\n Typed run function — declaration only; infer input/return from this.\n * `TInput` is the schema's input type (optional defaults allowed at call\n * sites); `TReturn` is the awaited result type of the run callback.\n /\n readonly run: (\n args: TInput,\n ctx?: ActionRunContext,\n ) => Promise<TReturn> \| TReturn;\n /* @internal Framework use only — do not call directly. /\n readonly tool: import(\"./agent/types.js\").ActionTool;\n readonly http?: ActionHttpConfig \| false;\n readonly requiresAuth?: boolean;\n readonly maxBodyBytes?: number;\n readonly agentTool?: boolean;\n readonly readOnly?: boolean;\n readonly allowInPlanMode?: boolean;\n readonly parallelSafe?: boolean;\n readonly dedupe?: boolean;\n readonly toolCallable?: boolean;\n readonly publicAgent?: PublicAgentActionConfig;\n readonly link?: ActionLinkBuilder;\n readonly mcpApp?: ActionMcpAppConfig;\n readonly chatUI?: ActionChatUIConfig;\n /* Per-tool timeout override in milliseconds for agent-loop tool calls. /\n readonly timeoutMs?: number;\n /* Per-tool result truncation override for agent-loop tool calls. /\n readonly maxResultChars?: number;\n /* Standard Schema the action's RETURN value is validated against after\n * `run()` resolves. Present only when the caller passed `outputSchema`. /\n readonly outputSchema?: StandardSchemaV1;\n /* Resolved output-mismatch strategy. Present only when `outputSchema` is\n * set; defaults to `\"warn\"`. /\n readonly outputErrorStrategy?: ActionOutputErrorStrategy;\n /* Value substituted for an invalid result under the `\"fallback\"` strategy. /\n readonly outputFallback?: TReturn;\n /* Opt-in human-in-the-loop approval gate (default off). When truthy, the\n * agent loop emits `approval_required` and pauses instead of executing this\n * action until a human approves the specific call. /\n readonly needsApproval?:\n \| boolean\n \| ((args: TInput, ctx?: ActionRunContext) => boolean \| Promise<boolean>);\n /* Resolved audit-log configuration. Present only when the caller passed\n * `audit`. The audit capture wrapper is baked into `run`; this field is for\n * introspection. /\n readonly audit?: ActionAuditConfig;\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/\n Define an agent action. Place in `actions/` directory — auto-discovered by the framework.\n \n Supports two modes:\n \n Schema mode (recommended) — pass a Standard Schema-compatible schema (Zod, Valibot,\n * ArkType) for runtime validation and full type inference:\n \n ```ts\n * import { defineAction } from \"@agent-native/core\";\n * import { z } from \"zod\";\n \n export default defineAction({\n * description: \"Create a form\",\n * schema: z.object({\n * title: z.string().describe(\"Form title\"),\n * status: z.enum([\"draft\", \"published\", \"closed\"]).default(\"draft\"),\n * }),\n * run: async (args) => {\n * // args is { title: string; status: \"draft\" \| \"published\" \| \"closed\" }\n * // Already validated — invalid inputs never reach here\n * },\n * });\n * ```\n \n Parameters mode (legacy) — pass raw JSON schema-like parameter definitions:\n \n ```ts\n * export default defineAction({\n * description: \"List events\",\n * parameters: {\n * from: { type: \"string\", description: \"Start date\" },\n * },\n * run: async (args) => { ... },\n * });\n * ```\n /\nexport function defineAction<\n TSchema extends StandardSchemaV1,\n TReturn,\n TOutputSchema extends StandardSchemaV1 \| undefined = undefined,\n>(\n options: DefineActionWithSchema<TSchema, TReturn, TOutputSchema>,\n): ActionDefinition<StandardSchemaV1.InferInput<TSchema>, TReturn>;\nexport function defineAction<\n TParams extends Record<string, ParameterSchema> \| undefined,\n TReturn,\n>(\n options: DefineActionWithParams<TParams, TReturn>,\n): ActionDefinition<InferParams<TParams>, TReturn>;\nexport function defineAction(options: any) {\n const hasSchema = options.schema && \"~standard\" in options.schema;\n\n // Build tool definition for the Claude API\n let toolParameters: ActionTool[\"parameters\"];\n if (hasSchema) {\n // Convert Standard Schema to JSON Schema for Claude\n toolParameters = schemaToJsonSchema(options.schema, options.description);\n } else if (options.parameters) {\n toolParameters = {\n type: \"object\" as const,\n properties: options.parameters,\n };\n }\n\n // `agentInputSchema` swaps in a compact JSON Schema for the ADVERTISED tool\n // definition only (what the model/MCP/A2A tool listings see). It never\n // touches validation below — `wrapWithValidation` is always called with\n // `options.schema`, the full schema, as the source of truth for what's\n // accepted. Passing the same (compact) `toolParameters` into it only\n // affects the top-level \"Expected: { ... }\" hint text and gateway string\n // coercion, both of which only look at top-level property names/types —\n // unaffected by trimming a nested union, so this stays safe either way.\n if (\n hasSchema &&\n options.agentInputSchema &&\n \"~standard\" in options.agentInputSchema\n ) {\n toolParameters = schemaToJsonSchema(\n options.agentInputSchema,\n options.description,\n );\n }\n\n // Authorization sits INSIDE input validation, so a gate that inspects `args`\n // is handed the parsed, coerced value its type promises rather than whatever\n // shape the caller sent. Putting it outside would have every guard reading\n // attacker-shaped input while typed as though it were validated.\n const guardedRun =\n typeof options.authorize === \"function\"\n ? wrapRunWithAuthorize(options.run, options.authorize)\n : options.run;\n\n // Wrap run() with INPUT validation when schema is provided.\n // Pass toolParameters so the validation error can echo the expected signature\n // (required vs optional fields) and help the caller self-correct.\n const inputValidatedRun = hasSchema\n ? wrapWithValidation(options.schema, guardedRun, toolParameters)\n : guardedRun;\n\n // Then wrap with OUTPUT validation when an outputSchema is provided. This\n // composes AROUND the input-validated run so the order is: validate input →\n // run() → validate output. When no outputSchema is present, the run is passed\n // through untouched and behavior is byte-for-byte unchanged.\n const hasOutputSchema =\n options.outputSchema && \"~standard\" in options.outputSchema;\n const outputErrorStrategy: ActionOutputErrorStrategy =\n options.outputErrorStrategy === \"strict\" \|\|\n options.outputErrorStrategy === \"warn\" \|\|\n options.outputErrorStrategy === \"fallback\"\n ? options.outputErrorStrategy\n : \"warn\";\n const run = hasOutputSchema\n ? wrapWithOutputValidation(\n options.outputSchema,\n inputValidatedRun,\n outputErrorStrategy,\n options.outputFallback,\n options.description,\n )\n : inputValidatedRun;\n\n // Auto-infer readOnly from http.method === \"GET\" unless explicitly set.\n // GET actions are idempotent reads; their completion should NOT trigger a\n // screen refresh. Everything else is assumed to mutate — the dispatcher\n // emits a change event on success so the UI auto-refetches its queries.\n const httpConfig = options.http as ActionHttpConfig \| false \| undefined;\n const inferredReadOnly =\n httpConfig !== false &&\n httpConfig !== undefined &&\n httpConfig.method === \"GET\";\n // Explicit `readOnly` (true OR false) wins. Otherwise infer from http.method.\n // We store the resolved boolean so downstream checks can trust entry.readOnly\n // without re-running method inference — including when a caller explicitly\n // passes readOnly:false to override a GET (rare but valid).\n const readOnly: boolean \| undefined =\n typeof options.readOnly === \"boolean\"\n ? options.readOnly\n : inferredReadOnly\n ? true\n : undefined;\n\n // Audit: wrap the validated run so every mutating call records an audit\n // event (who/what/when/from-where, and for the agent which run). Default-on\n // for mutations; read-only actions opt in via `audit.onRead`. The wrapper\n // lazily imports the DB-touching recorder so `action.ts` keeps no static DB\n // dependency.\n const auditConfig = normalizeAuditConfig(options.audit);\n const finalRun = resolveAuditAttach(auditConfig, readOnly)\n ? wrapRunWithAudit(run, auditConfig)\n : run;\n\n // toolCallable: thread through whatever the caller declared. We DO NOT\n // default to `true` here — the absence of an explicit field is meaningful\n // to the tools bridge: it lets us emit a one-shot warning when an action\n // without a declared `toolCallable` flag is invoked from a tool, so the\n // ecosystem can migrate over time. The bridge treats `undefined` as\n // \"implicit allow with a deprecation warning\"; only an explicit `false`\n // refuses the call. See `extensions/routes.ts` and audit H5.\n const toolCallable: boolean \| undefined =\n typeof options.toolCallable === \"boolean\"\n ? options.toolCallable\n : undefined;\n // agentTool: default-allow opt-out. Only an explicit `false` hides the action\n // from the agent tool surfaces; undefined is preserved (treated as exposed).\n const agentTool: boolean \| undefined =\n typeof options.agentTool === \"boolean\" ? options.agentTool : undefined;\n const parallelSafe: boolean \| undefined =\n typeof options.parallelSafe === \"boolean\"\n ? options.parallelSafe\n : undefined;\n const dedupe: boolean \| undefined =\n typeof options.dedupe === \"boolean\" ? options.dedupe : undefined;\n const publicAgent: PublicAgentActionConfig \| undefined =\n options.publicAgent &&\n typeof options.publicAgent === \"object\" &&\n !Array.isArray(options.publicAgent)\n ? options.publicAgent\n : undefined;\n const link: ActionLinkBuilder \| undefined =\n typeof options.link === \"function\" ? options.link : undefined;\n const mcpApp: ActionMcpAppConfig \| undefined = (() => {\n if (\n !options.mcpApp \|\|\n typeof options.mcpApp !== \"object\" \|\|\n Array.isArray(options.mcpApp)\n ) {\n return undefined;\n }\n // compactCatalog-only: no resource required; just keep the flag.\n if (options.mcpApp.compactCatalog === true && !options.mcpApp.resource) {\n return options.mcpApp as ActionMcpAppConfig;\n }\n // Full resource: validate html is present.\n if (\n options.mcpApp.resource &&\n typeof options.mcpApp.resource === \"object\" &&\n !Array.isArray(options.mcpApp.resource) &&\n (typeof options.mcpApp.resource.html === \"string\" \|\|\n typeof options.mcpApp.resource.html === \"function\")\n ) {\n return options.mcpApp as ActionMcpAppConfig;\n }\n return undefined;\n })();\n const chatUI = normalizeActionChatUIConfig(options.chatUI);\n\n return {\n tool: {\n description: options.description,\n parameters: toolParameters,\n },\n run: finalRun,\n ...(hasSchema ? { schema: options.schema } : {}),\n ...(options.http !== undefined ? { http: options.http } : {}),\n ...(typeof options.requiresAuth === \"boolean\"\n ? { requiresAuth: options.requiresAuth }\n : {}),\n ...(typeof options.maxBodyBytes === \"number\"\n ? { maxBodyBytes: options.maxBodyBytes }\n : {}),\n ...(typeof agentTool === \"boolean\" ? { agentTool } : {}),\n ...(typeof readOnly === \"boolean\" ? { readOnly } : {}),\n ...(typeof options.allowInPlanMode === \"boolean\"\n ? { allowInPlanMode: options.allowInPlanMode }\n : {}),\n ...(typeof parallelSafe === \"boolean\" ? { parallelSafe } : {}),\n ...(typeof dedupe === \"boolean\" ? { dedupe } : {}),\n ...(typeof toolCallable === \"boolean\" ? { toolCallable } : {}),\n ...(publicAgent ? { publicAgent } : {}),\n ...(link ? { link } : {}),\n ...(mcpApp ? { mcpApp } : {}),\n ...(chatUI ? { chatUI } : {}),\n ...(typeof options.timeoutMs === \"number\"\n ? { timeoutMs: options.timeoutMs }\n : {}),\n ...(typeof options.maxResultChars === \"number\"\n ? { maxResultChars: options.maxResultChars }\n : {}),\n ...(hasOutputSchema\n ? {\n outputSchema: options.outputSchema,\n outputErrorStrategy,\n ...(outputErrorStrategy === \"fallback\"\n ? { outputFallback: options.outputFallback }\n : {}),\n }\n : {}),\n ...(typeof options.needsApproval === \"boolean\" \|\|\n typeof options.needsApproval === \"function\"\n ? { needsApproval: options.needsApproval }\n : {}),\n ...(auditConfig ? { audit: auditConfig } : {}),\n };\n}\n\n/\n Wrap an action's run with its `authorize` gate.\n \n The gate is applied here, around `run`, rather than exposed as a flag on the\n * action entry: `run` is the one thing all six dispatch sites (agent loop, HTTP\n * route, frontend, MCP, A2A, CLI) go through, so there is no caller that can\n * reach the body without passing the check. `needsApproval` took the flag route\n * and is consequently honoured only inside the agent loop.\n \n Composed so the full order is: validate input → authorize → run → validate\n * output → audit. The audit wrapper is outermost, so a denial is still recorded\n * as an attempt — which is precisely what an audit trail is for.\n \n A guard that throws denies with its own message. A guard that returns `false`\n * denies generically. Anything else — including `undefined` — allows.\n /\nfunction wrapRunWithAuthorize(\n run: (args: any, ctx?: ActionRunContext) => any,\n authorize: ActionAuthorize<any>,\n): (args: any, ctx?: ActionRunContext) => Promise<any> {\n return async function authorizedRun(args: any, ctx?: ActionRunContext) {\n const verdict = await authorize(args, ctx);\n if (verdict === false) {\n const err = new Error(\"Not authorized\") as Error & { statusCode: number };\n err.name = \"ForbiddenError\";\n err.statusCode = 403;\n throw err;\n }\n return run(args, ctx);\n };\n}\n\n/\n Wrap an action's (already input/output-validated) run so each call records an\n * audit event after it resolves — on success and on error. Best-effort: the\n * recorder swallows its own failures and the original result/throw is always\n * preserved, so auditing can never change an action's behavior. The DB-touching\n * recorder is imported lazily so merely defining an action pulls in no DB code.\n /\nfunction wrapRunWithAudit(\n run: (args: any, ctx?: ActionRunContext) => any,\n auditConfig: ActionAuditConfig \| undefined,\n): (args: any, ctx?: ActionRunContext) => Promise<any> {\n return async function auditedRun(args: any, ctx?: ActionRunContext) {\n let result: any;\n let error: unknown;\n let threw = false;\n try {\n result = await run(args, ctx);\n } catch (err) {\n error = err;\n threw = true;\n }\n try {\n const { recordActionAudit } = await import(\"./audit/record.js\");\n await recordActionAudit(\n threw\n ? { config: auditConfig, args, ctx, status: \"error\", error }\n : { config: auditConfig, args, ctx, status: \"success\", result },\n );\n } catch {\n // Recorder failed to load/run — never affect the action.\n }\n if (threw) throw error;\n return result;\n };\n}\n\n// ---------------------------------------------------------------------------\n// Schema → JSON Schema conversion\n// ---------------------------------------------------------------------------\n\n// Keywords whose value is a single subschema.\nconst SUBSCHEMA_VALUE_KEYS = [\n \"items\",\n \"additionalItems\",\n \"contains\",\n \"additionalProperties\",\n \"not\",\n \"if\",\n \"then\",\n \"else\",\n] as const;\n// Keywords whose value is an array of subschemas.\nconst SUBSCHEMA_ARRAY_KEYS = [\n \"allOf\",\n \"anyOf\",\n \"oneOf\",\n \"prefixItems\",\n] as const;\n// Keywords whose value is a map of name → subschema.\nconst SUBSCHEMA_MAP_KEYS = [\n \"properties\",\n \"patternProperties\",\n \"$defs\",\n \"definitions\",\n \"dependentSchemas\",\n] as const;\n\n/\n Remove JSON Schema keywords that some providers' function-calling schema\n * validators reject. OpenAI (and Gemini via the Builder gateway) reject\n * `propertyNames` — which Zod v4 emits for `z.record(z.string(), …)` — with a\n * `400 invalid_function_parameters` error, causing the model turn to produce no\n * content (surfacing as an empty assistant response). Anthropic ignores the\n * keyword, so stripping it is safe across providers and keeps action schemas\n * portable. `propertyNames` only constrained object keys; the value/shape of\n * the object is unaffected by its removal.\n \n Only descends through actual subschema positions (properties, items, union\n * branches, definitions, etc.) — never through value-bearing keywords like\n * `default`, `const`, `enum`, or `examples`, whose objects may legitimately\n * contain a `propertyNames` data key that must be preserved.\n /\nfunction stripUnsupportedSchemaKeywords<T>(node: T): T {\n if (!node \|\| typeof node !== \"object\" \|\| Array.isArray(node)) return node;\n const obj = node as Record<string, unknown>;\n\n delete obj.propertyNames;\n\n for (const key of SUBSCHEMA_VALUE_KEYS) {\n // `items`/`additionalItems` may also be an array of subschemas.\n const value = obj[key];\n if (Array.isArray(value)) {\n for (const sub of value) stripUnsupportedSchemaKeywords(sub);\n } else {\n stripUnsupportedSchemaKeywords(value);\n }\n }\n for (const key of SUBSCHEMA_ARRAY_KEYS) {\n const value = obj[key];\n if (Array.isArray(value)) {\n for (const sub of value) stripUnsupportedSchemaKeywords(sub);\n }\n }\n for (const key of SUBSCHEMA_MAP_KEYS) {\n const value = obj[key];\n if (value && typeof value === \"object\" && !Array.isArray(value)) {\n for (const sub of Object.values(value)) {\n stripUnsupportedSchemaKeywords(sub);\n }\n }\n }\n return node;\n}\n\n/\n Convert a Standard Schema to JSON Schema for the Claude API.\n * Tries vendor-specific toJSONSchema first (Zod v4), then falls back\n * to a basic introspection of the schema shape.\n /\nfunction schemaToJsonSchema(\n schema: StandardSchemaV1,\n _description?: string,\n): ActionTool[\"parameters\"] {\n const s = schema as any;\n\n // Prefer Zod's own JSON Schema output — it handles descriptions,\n // enums, coerce, and all type wrappers correctly.\n if (s[\"~standard\"]?.jsonSchema?.input) {\n try {\n const result = s[\"~standard\"].jsonSchema.input({\n target: \"draft-07\",\n }) as any;\n // Strip $schema — the Claude API validates against draft 2020-12\n // and a mismatched $schema declaration can cause rejections.\n if (result && typeof result === \"object\") {\n delete result.$schema;\n }\n return stripUnsupportedSchemaKeywords(result) as ActionTool[\"parameters\"];\n } catch {\n // Fall through to manual converter\n }\n }\n\n // Fallback: manual conversion from Zod v4 internal defs\n if (s._zod?.def) {\n return stripUnsupportedSchemaKeywords(zodDefToJsonSchema(s._zod.def));\n }\n\n // Last resort: empty object schema\n return { type: \"object\" as const, properties: {} };\n}\n\n/\n Convert a Zod v4 internal def to JSON Schema.\n * Handles the common types used in action parameters.\n /\nfunction zodDefToJsonSchema(def: any): any {\n const type = def.type;\n\n if (type === \"object\") {\n const properties: Record<string, any> = {};\n const required: string[] = [];\n const shape = def.shape;\n if (shape) {\n for (const [key, fieldSchema] of Object.entries(shape) as any[]) {\n const fieldDef = fieldSchema?._zod?.def;\n if (fieldDef) {\n const prop = zodDefToJsonSchema(fieldDef);\n // Zod v4 stores .describe() on the schema object, not in the def\n const desc = fieldSchema?.description;\n if (desc && !prop.description) prop.description = desc;\n properties[key] = prop;\n if (\n fieldDef.type !== \"optional\" &&\n fieldDef.type !== \"default\" &&\n fieldDef.type !== \"nullable\"\n ) {\n required.push(key);\n }\n }\n }\n }\n const result: any = { type: \"object\", properties };\n if (required.length > 0) result.required = required;\n return result;\n }\n\n if (type === \"string\") {\n const result: any = { type: \"string\" };\n if (def.description) result.description = def.description;\n return result;\n }\n\n if (type === \"number\" \|\| type === \"float\" \|\| type === \"int\") {\n const result: any = { type: type === \"int\" ? \"integer\" : \"number\" };\n if (def.description) result.description = def.description;\n return result;\n }\n\n if (type === \"boolean\") {\n const result: any = { type: \"boolean\" };\n if (def.description) result.description = def.description;\n return result;\n }\n\n if (type === \"enum\") {\n // Zod v4 stores enum entries as an object {a: \"a\", b: \"b\"};\n // JSON Schema requires an array.\n const entries = def.entries;\n const enumValues = Array.isArray(entries)\n ? entries\n : typeof entries === \"object\" && entries !== null\n ? Object.values(entries)\n : entries;\n const result: any = { type: \"string\", enum: enumValues };\n if (def.description) result.description = def.description;\n return result;\n }\n\n if (type === \"literal\") {\n return { type: typeof def.value, enum: [def.value] };\n }\n\n if (type === \"array\") {\n const result: any = { type: \"array\" };\n if (def.element?._zod?.def) {\n result.items = zodDefToJsonSchema(def.element._zod.def);\n }\n if (def.description) result.description = def.description;\n return result;\n }\n\n if (type === \"optional\") {\n if (def.innerType?._zod?.def) {\n return zodDefToJsonSchema(def.innerType._zod.def);\n }\n }\n\n if (type === \"default\") {\n if (def.innerType?._zod?.def) {\n const inner = zodDefToJsonSchema(def.innerType._zod.def);\n inner.default =\n typeof def.defaultValue === \"function\"\n ? def.defaultValue()\n : def.defaultValue;\n return inner;\n }\n }\n\n if (type === \"nullable\") {\n if (def.innerType?._zod?.def) {\n const inner = zodDefToJsonSchema(def.innerType._zod.def);\n // Surface null as a valid value so the model knows it may pass null\n // (and doesn't treat the field as a non-nullable required string).\n return { anyOf: [inner, { type: \"null\" }] };\n }\n }\n\n if (type === \"union\") {\n if (def.options?.length) {\n // Check if it's a simple enum-like union of literals\n const allLiterals = def.options.every(\n (o: any) => o?._zod?.def?.type === \"literal\",\n );\n if (allLiterals) {\n const values = def.options.map((o: any) => o._zod.def.value);\n const jsonTypeOf = (v: any) =>\n typeof v === \"number\"\n ? \"number\"\n : typeof v === \"boolean\"\n ? \"boolean\"\n : \"string\";\n const uniqueTypes = [...new Set(values.map(jsonTypeOf))];\n if (uniqueTypes.length === 1) {\n // Homogeneous literal union (e.g. all numbers) — derive the JSON\n // type instead of hardcoding \"string\", which would contradict the\n // enum values and make the model coerce/round-trip them wrongly.\n return { type: uniqueTypes[0], enum: values };\n }\n // Mixed literal types: emit anyOf so each branch stays self-consistent.\n return {\n anyOf: values.map((v: any) => ({ type: jsonTypeOf(v), enum: [v] })),\n };\n }\n return {\n anyOf: def.options.map((o: any) =>\n zodDefToJsonSchema(o._zod?.def ?? {}),\n ),\n };\n }\n }\n\n // z.preprocess / z.pipe / .superRefine / .transform all produce a \"pipe\"\n // def with `in` (pre-transform) and `out` (post-transform). For JSON Schema\n // purposes, use `out` — it reflects the validated output shape the model\n // should populate.\n if (type === \"pipe\") {\n if (def.out?._zod?.def) {\n return zodDefToJsonSchema(def.out._zod.def);\n }\n if (def.in?._zod?.def) {\n return zodDefToJsonSchema(def.in._zod.def);\n }\n }\n\n // Fallback\n return { type: \"string\" };\n}\n\n// ---------------------------------------------------------------------------\n// Runtime validation wrapper\n// ---------------------------------------------------------------------------\n\nconst NO_COERCE = Symbol(\"no-coerce\");\n\n/\n Coerce a single stringified value to one of the JSON-schema types the field\n * expects. Returns NO_COERCE when nothing safe applies, so the caller leaves\n * the original value untouched and the normal validation error still surfaces.\n /\nfunction coerceStringToSchemaType(raw: string, types: string[]): unknown {\n const trimmed = raw.trim();\n if (types.includes(\"boolean\")) {\n if (trimmed === \"true\") return true;\n if (trimmed === \"false\") return false;\n }\n if (\n (types.includes(\"array\") &&\n trimmed.startsWith(\"[\") &&\n trimmed.endsWith(\"]\")) \|\|\n (types.includes(\"object\") &&\n trimmed.startsWith(\"{\") &&\n trimmed.endsWith(\"}\"))\n ) {\n try {\n const parsed = JSON.parse(trimmed);\n if (types.includes(\"array\") && Array.isArray(parsed)) return parsed;\n if (\n types.includes(\"object\") &&\n parsed &&\n typeof parsed === \"object\" &&\n !Array.isArray(parsed)\n ) {\n return parsed;\n }\n } catch {\n // fall through — leave the original so validation reports the real error\n }\n }\n if (\n (types.includes(\"number\") \|\| types.includes(\"integer\")) &&\n trimmed !== \"\" &&\n Number.isFinite(Number(trimmed))\n ) {\n const n = Number(trimmed);\n if (types.includes(\"number\") \|\| Number.isInteger(n)) return n;\n }\n return NO_COERCE;\n}\n\n/\n Defensively coerce stringified action arguments to the types the schema\n * expects. Two callers depend on this:\n \n 1. Model gateways (notably Builder's Gemini-backed gateway) hand back\n * structured tool-call arguments as JSON strings — an array param arrives\n * as `\"[{...}]\"`, a boolean as `\"true\"`.\n * 2. GET actions called from the browser via `useActionQuery` / `callAction`.\n * Those serialize params into the query string, where `URLSearchParams`\n * stringifies everything — so `includeSeries: true` arrives as the string\n * `\"true\"` and `limit: 5` as `\"5\"` (see `action-routes.ts`).\n \n In both cases Standard Schema (zod) `validate` does not coerce, so the call\n * fails validation (\"expected boolean, received string\") — the agent thrashes\n * retrying shapes and the frontend query errors. We only touch a string value\n * when the schema expects a non-string type and the string parses cleanly to\n * it; anything ambiguous (schema also allows string) or unparseable is left\n * as-is. Operates on top-level properties only — once an array/object param is\n * parsed, its nested members are already native and validate normally.\n \n Do NOT narrow this to \"gateway-only\": the GET query-string path relies on it\n * too, and `action-routes.spec.ts` guards that round-trip.\n /\nfunction coerceGatewayStringifiedArgs(\n args: unknown,\n parameters?: ActionTool[\"parameters\"],\n): unknown {\n const properties = parameters?.properties as\n \| Record<string, { type?: string \| string[] }>\n \| undefined;\n if (!properties) return args;\n if (!args \|\| typeof args !== \"object\" \|\| Array.isArray(args)) return args;\n let out: Record<string, unknown> \| null = null;\n for (const [key, raw] of Object.entries(args as Record<string, unknown>)) {\n if (typeof raw !== \"string\") continue;\n const spec = properties[key];\n if (!spec) continue;\n const types = Array.isArray(spec.type)\n ? spec.type\n : spec.type\n ? [spec.type]\n : [];\n // No declared type, or the field legitimately accepts a string → leave it.\n if (types.length === 0 \|\| types.includes(\"string\")) continue;\n const coerced = coerceStringToSchemaType(raw, types);\n if (coerced === NO_COERCE) continue;\n if (!out) out = { ...(args as Record<string, unknown>) };\n out[key] = coerced;\n }\n return out ?? args;\n}\n\n/\n Wrap an action's run function with schema validation.\n * Invalid inputs get a clear error message (including what was actually passed)\n * so the agent can see its own mistake and correct it on the next turn.\n /\nfunction wrapWithValidation(\n schema: StandardSchemaV1,\n run: Function,\n toolParameters?: ActionTool[\"parameters\"],\n): (args: any, ctx?: ActionRunContext) => any {\n return async (args: any, ctx?: ActionRunContext) => {\n args = coerceGatewayStringifiedArgs(args, toolParameters);\n const result = await schema[\"~standard\"].validate(args);\n if (result.issues) {\n // Split issues into \"missing required field\" vs other validation errors\n // so the error message reads naturally rather than as \"fieldName: Required\".\n const missing: string[] = [];\n const other: string[] = [];\n for (const issue of result.issues) {\n const pathStr = issue.path\n ? issue.path.map((p) => (typeof p === \"object\" ? p.key : p)).join(\".\")\n : \"\";\n const msg = String(issue.message ?? \"\");\n // Zod emits \"Required\" for missing fields; other libraries may use\n // similar wording. Treat any variant as \"missing\".\n if (\n pathStr &&\n (msg === \"Required\" \|\|\n /invalid.undefined/i.test(msg) \|\|\n /expected.received undefined/i.test(msg))\n ) {\n missing.push(pathStr);\n } else {\n other.push(pathStr ? `${pathStr}: ${msg}` : msg);\n }\n }\n\n const parts: string[] = [];\n if (missing.length > 0) {\n parts.push(\n `Missing required parameter${missing.length === 1 ? \"\" : \"s\"}: ${missing.join(\", \")}`,\n );\n }\n if (other.length > 0) {\n parts.push(other.join(\"; \"));\n }\n\n // Echo the args that were actually passed so the caller (usually an\n // agent) can see exactly what it sent and fix its next call.\n let received: string;\n try {\n received = JSON.stringify(args);\n if (received.length > 500) received = received.slice(0, 500) + \"…\";\n } catch {\n received = String(args);\n }\n\n // Also show the EXPECTED signature so the agent doesn't have to guess.\n // Format: `{ deckId: string, content: string, slideId?: string, ... }`\n // where `` = required, `?` = optional.\n let expected = \"\";\n if (toolParameters?.properties) {\n const required = new Set(toolParameters.required ?? []);\n const sig = Object.entries(toolParameters.properties)\n .map(([k, v]) => {\n const mark = required.has(k) ? \"\" : \"?\";\n const type = (v as { type?: string }).type ?? \"any\";\n return `${k}${mark}: ${type}`;\n })\n .join(\", \");\n if (sig)\n expected = ` Expected: { ${sig} } (where = required, ? = optional).`;\n }\n\n throw new Error(\n `Invalid action parameters — ${parts.join(\". \")}. Received: ${received}.${expected}`,\n );\n }\n return run((result as StandardSchemaV1.SuccessResult<any>).value, ctx);\n };\n}\n\n/*\n Wrap an action's run function with RETURN-value validation. Runs AFTER the\n * (already input-validated) `run` resolves and validates the result against\n * `outputSchema` using the Standard Schema `~standard.validate` contract.\n \n Behavior is governed by `strategy`:\n * - `\"strict\"` — throw a clear error when the result doesn't match.\n * - `\"warn\"` — `console.warn` the issues and return the ORIGINAL result\n * unchanged (default; never alters runtime behavior).\n * - `\"fallback\"`— return `fallback` in place of the invalid result.\n \n On success the validated value is returned (so schema-applied coercion /\n * defaults take effect, mirroring the input path).\n */\nfunction wrapWithOutputValidation(\n outputSchema: StandardSchemaV1,\n run: (args: any, ctx?: ActionRunContext) => any,\n strategy: ActionOutputErrorStrategy,\n fallback: unknown,\n description?: string,\n): (args: any, ctx?: ActionRunContext) => any {\n return async (args: any, ctx?: ActionRunContext) => {\n const output = await run(args, ctx);\n const result = await outputSchema[\"~standard\"].validate(output);\n\n if (!result.issues) {\n // Return the validated value so coercion / defaults defined on the\n // outputSchema are applied, consistent with the input path.\n return (result as StandardSchemaV1.SuccessResult<any>).value;\n }\n\n const issues = result.issues\n .map((issue) => {\n const pathStr = issue.path\n ? issue.path.map((p) => (typeof p === \"object\" ? p.key : p)).join(\".\")\n : \"\";\n const msg = String(issue.message ?? \"\");\n return pathStr ? `${pathStr}: ${msg}` : msg;\n })\n .join(\"; \");\n const label = description ? ` (${description})` : \"\";\n const summary = `Action output did not match outputSchema${label}: ${issues}`;\n\n if (strategy === \"strict\") {\n throw new Error(summary);\n }\n if (strategy === \"fallback\") {\n return fallback;\n }\n // \"warn\" (default): surface the mismatch but never change behavior.\n console.warn(summary);\n return output;\n };\n}\n"]}

package/dist/chat-threads/store.d.ts CHANGED Viewed

@@ -1,6 +1,18 @@
 import { type AccessContext } from "../sharing/access.js";
 import { type ShareRole } from "../sharing/schema.js";
 export declare function withThreadDataLock<T>(threadId: string, fn: () => Promise<T>): Promise<T>;
+/**
+ * Explicitly repair `message_count` for legacy rows written before the count
+ * was maintained. This must never run from table/bootstrap initialization:
+ * serverless isolates would each scan the full `thread_data` blob column on
+ * cold start. Operators may invoke it once when upgrading an old database.
+ */
+export declare function repairLegacyChatThreadMessageCounts(options?: {
+    batchSize?: number;
+}): Promise<{
+    scanned: number;
+    updated: number;
+}>;
 /**
  * A resource the chat is bound to, e.g. `{ type: "deck", id: "deck-abc" }`.
  * The framework is opaque to the type string — each template chooses what

package/dist/chat-threads/store.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/chat-threads/store.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAEzE,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AA+BrE,wBAAgB,kBAAkB,CAAC,CAAC,EAClC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAeZ;~~AA2MD~~;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,SAAS,GAAG,KAAK,GAAG,QAAQ,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,SAAS,GAAG,KAAK,GAAG,QAAQ,CAAC;CAC1C;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;CAChC;AA4GD,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAAA;CAAE,GACrE,OAAO,CAAC,UAAU,CAAC,CAuCrB;~~AAYD~~,wBAAgB,4BAA4B,IAAI,IAAI,CAanD;AAED,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAE5D;AAED,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACpC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACnC,OAAO,GAAE,SAAS,GAAG,OAAkB,EACvC,GAAG,GAAE,IAAI,CAAC,aAAa,EAAE,WAAW,CAAM,GACzC,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAQ5B;AAED,wBAAsB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAStE;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IACL,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACzC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B,GACA,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA2F5B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,qEAAqE;IACrE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAuBD,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,kBAAkB,GAAG,MAAW,EACzC,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,iBAAiB,EAAE,CAAC,~~CAqC9B~~;AAMD,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,KAAK,SAAK,EACV,OAAO,GAAE;IACP,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,oEAAoE;IACpE,eAAe,CAAC,EAAE,OAAO,CAAC;CACtB,GACL,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAgC9B;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,eAAe,GAAG,IAAI,GAC5B,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,wBAAsB,YAAY,CAChC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,OAAO,EACf,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,OAAO,EACjB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED,MAAM,WAAW,uBAAuB;IACtC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IACzC,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAUD,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,IAAI,CAAC,CAoFf;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAQlC;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;CACxB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,aAAa,EAAE,EAC/B,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CA0BlB;AAWD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;IAC/D,OAAO,EAAE,IAAI,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAMD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AA2CD,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAOtC;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAwCrC;AAaD,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAiCtC;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA0C5B;AAED;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,SAAS,EACf,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAkB/D"}
1	+ {"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/chat-threads/store.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAEzE,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AA+BrE,wBAAgB,kBAAkB,CAAC,CAAC,EAClC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAeZ;AAkKD;;;;;GAKG;AACH,wBAAsB,mCAAmC,CACvD,OAAO,GAAE;IACP,SAAS,CAAC,EAAE,MAAM,CAAC;CACf,GACL,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAgC/C;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,SAAS,GAAG,KAAK,GAAG,QAAQ,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,SAAS,GAAG,KAAK,GAAG,QAAQ,CAAC;CAC1C;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;CAChC;AA4GD,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAAA;CAAE,GACrE,OAAO,CAAC,UAAU,CAAC,CAuCrB;AAWD,wBAAgB,4BAA4B,IAAI,IAAI,CAanD;AAED,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAE5D;AAED,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACpC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACnC,OAAO,GAAE,SAAS,GAAG,OAAkB,EACvC,GAAG,GAAE,IAAI,CAAC,aAAa,EAAE,WAAW,CAAM,GACzC,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAQ5B;AAED,wBAAsB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAStE;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IACL,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACzC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B,GACA,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA2F5B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,qEAAqE;IACrE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAuBD,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,kBAAkB,GAAG,MAAW,EACzC,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAoC9B;AAMD,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,KAAK,SAAK,EACV,OAAO,GAAE;IACP,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,oEAAoE;IACpE,eAAe,CAAC,EAAE,OAAO,CAAC;CACtB,GACL,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAgC9B;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,eAAe,GAAG,IAAI,GAC5B,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,wBAAsB,YAAY,CAChC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,OAAO,EACf,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,OAAO,EACjB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED,MAAM,WAAW,uBAAuB;IACtC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IACzC,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAUD,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,IAAI,CAAC,CAoFf;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAQlC;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;CACxB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,aAAa,EAAE,EAC/B,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CA0BlB;AAWD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;IAC/D,OAAO,EAAE,IAAI,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAMD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AA2CD,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAOtC;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAwCrC;AAaD,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAiCtC;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA0C5B;AAED;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,SAAS,EACf,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAkB/D"}