@agent-native/core 0.70.3 → 0.72.0

package/dist/action.d.ts

@@ -1,5 +1,6 @@
 import type { AgentChatAttachment, AgentChatEvent } from "./agent/types.js";
 import { type ActionChatUIConfig } from "./action-ui.js";
+import type { ActionAuditConfig } from "./audit/types.js";
 import type { StandardSchemaV1 } from "@standard-schema/spec";
 /**
  * How an action's `run` was invoked. Tagged at each dispatch site so the action
@@ -66,6 +67,21 @@ export interface ActionRunContext {
      * attaching an `"abort"` listener is always safe.
      */
     signal?: AbortSignal;
+    /**
+     * Name of the action being invoked (the registry key, e.g.
+     * `delete-recording`). Set at each dispatch site so cross-cutting concerns —
+     * notably the audit log — can attribute the call. `undefined` for direct
+     * programmatic `run()` calls that bypass the dispatcher.
+     */
+    actionName?: string;
+    /**
+     * Agent conversation thread + turn that triggered this call, populated only
+     * inside the agent tool loop (`caller: "tool"`). Lets the audit log link a
+     * mutation to the specific agent run/turn that caused it. `undefined` on
+     * every human/programmatic surface.
+     */
+    threadId?: string;
+    turnId?: string;
 }
 export interface AgentActionStopOptions {
     /** Optional stable code surfaced in run metadata and tests. */
@@ -315,6 +331,14 @@ interface DefineActionWithSchema<TSchema extends StandardSchemaV1, TReturn = any
      *   as "approval required" (fail closed).
      */
     needsApproval?: boolean | ((args: StandardSchemaV1.InferOutput<TSchema>, ctx?: ActionRunContext) => boolean | Promise<boolean>);
+    /**
+     * Audit-log configuration. **Default-on for mutating actions** — you only
+     * need this to tune capture: declare the mutated `target` (so the change
+     * shows up in the owner's audit trail) and/or a `summary`, opt a read-only
+     * action in via `onRead`, or opt a noisy action out via `enabled: false`.
+     * See the `audit-log` skill.
+     */
+    audit?: ActionAuditConfig;
 }
 interface DefineActionWithParams<TParams extends Record<string, ParameterSchema> | undefined = Record<string, ParameterSchema> | undefined, TReturn = any> {
     description: string;
@@ -362,6 +386,9 @@ interface DefineActionWithParams<TParams extends Record<string, ParameterSchema>
     /** Opt-in human-in-the-loop approval gate (default off). See the schema
      *  overload above for full semantics. */
     needsApproval?: boolean | ((args: InferParams<TParams>, ctx?: ActionRunContext) => boolean | Promise<boolean>);
+    /** Audit-log configuration (default-on for mutations). See the schema
+     *  overload above and the `audit-log` skill. */
+    audit?: ActionAuditConfig;
 }
 /**
  * Opaque typed wrapper returned by `defineAction`. The type parameters carry
@@ -406,6 +433,10 @@ export interface ActionDefinition<TInput, TReturn> {
      *  agent loop emits `approval_required` and pauses instead of executing this
      *  action until a human approves the specific call. */
     readonly needsApproval?: boolean | ((args: TInput, ctx?: ActionRunContext) => boolean | Promise<boolean>);
+    /** Resolved audit-log configuration. Present only when the caller passed
+     *  `audit`. The audit capture wrapper is baked into `run`; this field is for
+     *  introspection. */
+    readonly audit?: ActionAuditConfig;
 }
 /**
  * Define an agent action. Place in `actions/` directory — auto-discovered by the framework.

package/dist/action.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,mBAAmB,EACnB,cAAc,EACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAEhF;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IACvC;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,mCAAmC;IACnC,MAAM,EAAE,YAAY,CAAC;IACrB;;;;;;;;;;OAUG;IACH,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACpC;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,eAAe,QAAQ;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;gBAEjB,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B;CAMlE;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,GACX,GAAG,IAAI,oBAAoB,CAU7B;AAED,0CAA0C;AAC1C,MAAM,WAAW,gBAAgB;IAC/B,qEAAqE;IACrE,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC3C,mFAAmF;IACnF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,8EAA8E;AAC9E,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;mEACmE;AACnE,MAAM,WAAW,cAAc;IAC7B;;kFAE8E;IAC9E,GAAG,EAAE,MAAM,CAAC;IACZ,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;kDAGkD;AAClD,MAAM,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE;IACpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,CAAC;CACb,KAAK,cAAc,GAAG,IAAI,GAAG,SAAS,CAAC;AAExC,eAAO,MAAM,oBAAoB,EAAG,4BAAqC,CAAC;AAC1E,eAAO,MAAM,iBAAiB,EAAG,2BAAoC,CAAC;AACtE,eAAO,MAAM,6BAA6B,EAAG,gBAAyB,CAAC;AAEvE,MAAM,WAAW,eAAe;IAC9B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAEjD,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,wBAAwB;IACvC,GAAG,CAAC,EAAE,eAAe,GAAG,sBAAsB,CAAC;IAC/C,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,KAAK,MAAM,CAAC;AAEb,MAAM,WAAW,0BAA0B;IACzC,2DAA2D;IAC3D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,IAAI,EAAE,MAAM,GAAG,uBAAuB,CAAC;IACvC,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,OAAO,iBAAiB,CAAC;IACpC,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,GAAG,CAAC,EAAE,eAAe,GAAG,sBAAsB,CAAC;IAC/C,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,0BAA0B,CAAC;IACtC;;;OAGG;IACH,UAAU,CAAC,EAAE,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;IACpC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,kFAAkF;AAClF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,wEAAwE;AACxE,KAAK,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,IACpE,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GACrC;KAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM;CAAE,GAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE7B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAMvE,UAAU,sBAAsB,CAC9B,OAAO,SAAS,gBAAgB,EAChC,OAAO,GAAG,GAAG,EACb,aAAa,SAAS,gBAAgB,GAAG,SAAS,GAAG,SAAS;IAE9D,WAAW,EAAE,MAAM,CAAC;IACpB;;4EAEwE;IACxE,MAAM,EAAE,OAAO,CAAC;IAChB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB;;;iFAG6E;IAC7E,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,0EAA0E;IAC1E,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;IAChD;0DACsD;IACtD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,GAAG,EAAE,CACH,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC,EAC3C,GAAG,CAAC,EAAE,gBAAgB,KACnB,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAChC,IAAI,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;IAChC;;4EAEwE;IACxE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;;;0FAQsF;IACtF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;oFAGgF;IAChF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;yDAGqD;IACrD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;;;;;gDAU4C;IAC5C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;+EAE2E;IAC3E,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC;;;mFAG+E;IAC/E,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB;;oCAEgC;IAChC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B;uEACmE;IACnE,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B;;;;;;;;;;;;;;;OAeG;IACH,aAAa,CAAC,EACV,OAAO,GACP,CAAC,CACC,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC,EAC3C,GAAG,CAAC,EAAE,gBAAgB,KACnB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;CACtC;AAMD,UAAU,sBAAsB,CAC9B,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,GACvD,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAC/B,SAAS,EACb,OAAO,GAAG,GAAG;IAEb,WAAW,EAAE,MAAM,CAAC;IACpB;oEACgE;IAChE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mDAAmD;IACnD,MAAM,CAAC,EAAE,KAAK,CAAC;IACf;;6DAEyD;IACzD,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,0EAA0E;IAC1E,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;IAChD;0DACsD;IACtD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,GAAG,EAAE,CACH,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,EAC1B,GAAG,CAAC,EAAE,gBAAgB,KACnB,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAChC,IAAI,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;IAChC;2DACuD;IACvD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;gFAE4E;IAC5E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;iFAC6E;IAC7E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;gFAC4E;IAC5E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;wDAEoD;IACpD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,6DAA6D;IAC7D,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,gEAAgE;IAChE,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,6EAA6E;IAC7E,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B;6CACyC;IACzC,aAAa,CAAC,EACV,OAAO,GACP,CAAC,CACC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,EAC1B,GAAG,CAAC,EAAE,gBAAgB,KACnB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;CACtC;AAMD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,gBAAgB,CAAC,MAAM,EAAE,OAAO;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,GAAG,EAAE,CACZ,IAAI,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,gBAAgB,KACnB,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAChC,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,OAAO,kBAAkB,EAAE,UAAU,CAAC;IACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,uBAAuB,CAAC;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IACrC;gFAC4E;IAC5E,QAAQ,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IACzC;qCACiC;IACjC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;IACzD,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC;;2DAEuD;IACvD,QAAQ,CAAC,aAAa,CAAC,EACnB,OAAO,GACP,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,gBAAgB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;CAC5E;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAgB,YAAY,CAC1B,OAAO,SAAS,gBAAgB,EAChC,OAAO,EACP,aAAa,SAAS,gBAAgB,GAAG,SAAS,GAAG,SAAS,EAE9D,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,GAC/D,gBAAgB,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AACnE,wBAAgB,YAAY,CAC1B,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,EAC3D,OAAO,EAEP,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,GAChD,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC"}
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,mBAAmB,EACnB,cAAc,EACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAEhF;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IACvC;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,mCAAmC;IACnC,MAAM,EAAE,YAAY,CAAC;IACrB;;;;;;;;;;OAUG;IACH,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACpC;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,eAAe,QAAQ;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;gBAEjB,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B;CAMlE;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,GACX,GAAG,IAAI,oBAAoB,CAU7B;AAED,0CAA0C;AAC1C,MAAM,WAAW,gBAAgB;IAC/B,qEAAqE;IACrE,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC3C,mFAAmF;IACnF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,8EAA8E;AAC9E,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;mEACmE;AACnE,MAAM,WAAW,cAAc;IAC7B;;kFAE8E;IAC9E,GAAG,EAAE,MAAM,CAAC;IACZ,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;kDAGkD;AAClD,MAAM,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE;IACpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,CAAC;CACb,KAAK,cAAc,GAAG,IAAI,GAAG,SAAS,CAAC;AAExC,eAAO,MAAM,oBAAoB,EAAG,4BAAqC,CAAC;AAC1E,eAAO,MAAM,iBAAiB,EAAG,2BAAoC,CAAC;AACtE,eAAO,MAAM,6BAA6B,EAAG,gBAAyB,CAAC;AAEvE,MAAM,WAAW,eAAe;IAC9B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAEjD,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,wBAAwB;IACvC,GAAG,CAAC,EAAE,eAAe,GAAG,sBAAsB,CAAC;IAC/C,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,KAAK,MAAM,CAAC;AAEb,MAAM,WAAW,0BAA0B;IACzC,2DAA2D;IAC3D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,IAAI,EAAE,MAAM,GAAG,uBAAuB,CAAC;IACvC,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,OAAO,iBAAiB,CAAC;IACpC,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,GAAG,CAAC,EAAE,eAAe,GAAG,sBAAsB,CAAC;IAC/C,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,0BAA0B,CAAC;IACtC;;;OAGG;IACH,UAAU,CAAC,EAAE,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;IACpC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,kFAAkF;AAClF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,wEAAwE;AACxE,KAAK,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,IACpE,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GACrC;KAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM;CAAE,GAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE7B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAMvE,UAAU,sBAAsB,CAC9B,OAAO,SAAS,gBAAgB,EAChC,OAAO,GAAG,GAAG,EACb,aAAa,SAAS,gBAAgB,GAAG,SAAS,GAAG,SAAS;IAE9D,WAAW,EAAE,MAAM,CAAC;IACpB;;4EAEwE;IACxE,MAAM,EAAE,OAAO,CAAC;IAChB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB;;;iFAG6E;IAC7E,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,0EAA0E;IAC1E,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;IAChD;0DACsD;IACtD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,GAAG,EAAE,CACH,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC,EAC3C,GAAG,CAAC,EAAE,gBAAgB,KACnB,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAChC,IAAI,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;IAChC;;4EAEwE;IACxE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;;;0FAQsF;IACtF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;oFAGgF;IAChF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;yDAGqD;IACrD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;;;;;gDAU4C;IAC5C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;+EAE2E;IAC3E,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC;;;mFAG+E;IAC/E,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB;;oCAEgC;IAChC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B;uEACmE;IACnE,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B;;;;;;;;;;;;;;;OAeG;IACH,aAAa,CAAC,EACV,OAAO,GACP,CAAC,CACC,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC,EAC3C,GAAG,CAAC,EAAE,gBAAgB,KACnB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACrC;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,iBAAiB,CAAC;CAC3B;AAMD,UAAU,sBAAsB,CAC9B,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,GACvD,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAC/B,SAAS,EACb,OAAO,GAAG,GAAG;IAEb,WAAW,EAAE,MAAM,CAAC;IACpB;oEACgE;IAChE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mDAAmD;IACnD,MAAM,CAAC,EAAE,KAAK,CAAC;IACf;;6DAEyD;IACzD,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,0EAA0E;IAC1E,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;IAChD;0DACsD;IACtD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,GAAG,EAAE,CACH,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,EAC1B,GAAG,CAAC,EAAE,gBAAgB,KACnB,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAChC,IAAI,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;IAChC;2DACuD;IACvD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;gFAE4E;IAC5E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;iFAC6E;IAC7E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;gFAC4E;IAC5E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;wDAEoD;IACpD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,6DAA6D;IAC7D,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,gEAAgE;IAChE,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,6EAA6E;IAC7E,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B;6CACyC;IACzC,aAAa,CAAC,EACV,OAAO,GACP,CAAC,CACC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,EAC1B,GAAG,CAAC,EAAE,gBAAgB,KACnB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACrC;oDACgD;IAChD,KAAK,CAAC,EAAE,iBAAiB,CAAC;CAC3B;AAMD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,gBAAgB,CAAC,MAAM,EAAE,OAAO;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,GAAG,EAAE,CACZ,IAAI,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,gBAAgB,KACnB,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAChC,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,OAAO,kBAAkB,EAAE,UAAU,CAAC;IACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,uBAAuB,CAAC;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IACrC;gFAC4E;IAC5E,QAAQ,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IACzC;qCACiC;IACjC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;IACzD,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC;;2DAEuD;IACvD,QAAQ,CAAC,aAAa,CAAC,EACnB,OAAO,GACP,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,gBAAgB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3E;;yBAEqB;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC;CACpC;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAgB,YAAY,CAC1B,OAAO,SAAS,gBAAgB,EAChC,OAAO,EACP,aAAa,SAAS,gBAAgB,GAAG,SAAS,GAAG,SAAS,EAE9D,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,GAC/D,gBAAgB,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AACnE,wBAAgB,YAAY,CAC1B,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,EAC3D,OAAO,EAEP,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,GAChD,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC"}

package/dist/action.js

@@ -1,4 +1,5 @@
 import { normalizeActionChatUIConfig, } from "./action-ui.js";
+import { normalizeAuditConfig, resolveAuditAttach } from "./audit/config.js";
 /**
  * Throw from an action when the agent should stop the current turn instead of
  * feeding the failure back to the model for another retry.
@@ -74,6 +75,15 @@ export function defineAction(options) {
         : inferredReadOnly
             ? true
             : undefined;
+    // Audit: wrap the validated run so every mutating call records an audit
+    // event (who/what/when/from-where, and for the agent which run). Default-on
+    // for mutations; read-only actions opt in via `audit.onRead`. The wrapper
+    // lazily imports the DB-touching recorder so `action.ts` keeps no static DB
+    // dependency.
+    const auditConfig = normalizeAuditConfig(options.audit);
+    const finalRun = resolveAuditAttach(auditConfig, readOnly)
+        ? wrapRunWithAudit(run, auditConfig)
+        : run;
     // toolCallable: thread through whatever the caller declared. We DO NOT
     // default to `true` here — the absence of an explicit field is meaningful
     // to the tools bridge: it lets us emit a one-shot warning when an action
@@ -122,7 +132,7 @@ export function defineAction(options) {
             description: options.description,
             parameters: toolParameters,
         },
-        run,
+        run: finalRun,
         ...(hasSchema ? { schema: options.schema } : {}),
         ...(options.http !== undefined ? { http: options.http } : {}),
         ...(typeof options.requiresAuth === "boolean"
@@ -149,6 +159,40 @@ export function defineAction(options) {
             typeof options.needsApproval === "function"
             ? { needsApproval: options.needsApproval }
             : {}),
+        ...(auditConfig ? { audit: auditConfig } : {}),
+    };
+}
+/**
+ * Wrap an action's (already input/output-validated) run so each call records an
+ * audit event after it resolves — on success and on error. Best-effort: the
+ * recorder swallows its own failures and the original result/throw is always
+ * preserved, so auditing can never change an action's behavior. The DB-touching
+ * recorder is imported lazily so merely defining an action pulls in no DB code.
+ */
+function wrapRunWithAudit(run, auditConfig) {
+    return async function auditedRun(args, ctx) {
+        let result;
+        let error;
+        let threw = false;
+        try {
+            result = await run(args, ctx);
+        }
+        catch (err) {
+            error = err;
+            threw = true;
+        }
+        try {
+            const { recordActionAudit } = await import("./audit/record.js");
+            await recordActionAudit(threw
+                ? { config: auditConfig, args, ctx, status: "error", error }
+                : { config: auditConfig, args, ctx, status: "success", result });
+        }
+        catch {
+            // Recorder failed to load/run — never affect the action.
+        }
+        if (threw)
+            throw error;
+        return result;
     };
 }
 // ---------------------------------------------------------------------------

package/dist/action.js.map

@@ -1 +1 @@
-{"version":3,"file":"action.js","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,2BAA2B,GAE5B,MAAM,gBAAgB,CAAC;AA8ExB;;;GAGG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,eAAe,GAAG,IAAI,CAAC;IACvB,SAAS,CAAU;IACnB,UAAU,CAAU;IAE7B,YAAY,OAAe,EAAE,UAAkC,EAAE;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACvC,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CACpC,GAAY;IAEZ,OAAO,CACL,GAAG,YAAY,oBAAoB;QACnC,OAAO,CACL,GAAG;YACH,OAAO,GAAG,KAAK,QAAQ;YACvB,iBAAiB,IAAI,GAAG;YACvB,GAAqC,CAAC,eAAe,KAAK,IAAI,CAChE,CACF,CAAC;AACJ,CAAC;AA0CD,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAAqC,CAAC;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,2BAAoC,CAAC;AACtE,MAAM,CAAC,MAAM,6BAA6B,GAAG,gBAAyB,CAAC;AA4YvE,MAAM,UAAU,YAAY,CAAC,OAAY;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAElE,2CAA2C;IAC3C,IAAI,cAAwC,CAAC;IAC7C,IAAI,SAAS,EAAE,CAAC;QACd,oDAAoD;QACpD,cAAc,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3E,CAAC;SAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC9B,cAAc,GAAG;YACf,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,8EAA8E;IAC9E,kEAAkE;IAClE,MAAM,iBAAiB,GAAG,SAAS;QACjC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC;QACjE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAEhB,0EAA0E;IAC1E,4EAA4E;IAC5E,8EAA8E;IAC9E,6DAA6D;IAC7D,MAAM,eAAe,GACnB,OAAO,CAAC,YAAY,IAAI,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC;IAC9D,MAAM,mBAAmB,GACvB,OAAO,CAAC,mBAAmB,KAAK,QAAQ;QACxC,OAAO,CAAC,mBAAmB,KAAK,MAAM;QACtC,OAAO,CAAC,mBAAmB,KAAK,UAAU;QACxC,CAAC,CAAC,OAAO,CAAC,mBAAmB;QAC7B,CAAC,CAAC,MAAM,CAAC;IACb,MAAM,GAAG,GAAG,eAAe;QACzB,CAAC,CAAC,wBAAwB,CACtB,OAAO,CAAC,YAAY,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,WAAW,CACpB;QACH,CAAC,CAAC,iBAAiB,CAAC;IAEtB,wEAAwE;IACxE,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,UAAU,GAAG,OAAO,CAAC,IAA4C,CAAC;IACxE,MAAM,gBAAgB,GACpB,UAAU,KAAK,KAAK;QACpB,UAAU,KAAK,SAAS;QACxB,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC;IAC9B,8EAA8E;IAC9E,8EAA8E;IAC9E,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,QAAQ,GACZ,OAAO,OAAO,CAAC,QAAQ,KAAK,SAAS;QACnC,CAAC,CAAC,OAAO,CAAC,QAAQ;QAClB,CAAC,CAAC,gBAAgB;YAChB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,SAAS,CAAC;IAElB,uEAAuE;IACvE,0EAA0E;IAC1E,yEAAyE;IACzE,wEAAwE;IACxE,oEAAoE;IACpE,wEAAwE;IACxE,6DAA6D;IAC7D,MAAM,YAAY,GAChB,OAAO,OAAO,CAAC,YAAY,KAAK,SAAS;QACvC,CAAC,CAAC,OAAO,CAAC,YAAY;QACtB,CAAC,CAAC,SAAS,CAAC;IAChB,8EAA8E;IAC9E,6EAA6E;IAC7E,MAAM,SAAS,GACb,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,MAAM,YAAY,GAChB,OAAO,OAAO,CAAC,YAAY,KAAK,SAAS;QACvC,CAAC,CAAC,OAAO,CAAC,YAAY;QACtB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,WAAW,GACf,OAAO,CAAC,WAAW;QACnB,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACvC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QACjC,CAAC,CAAC,OAAO,CAAC,WAAW;QACrB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,GACR,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,MAAM,GAAmC,CAAC,GAAG,EAAE;QACnD,IACE,CAAC,OAAO,CAAC,MAAM;YACf,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;YAClC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAC7B,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,iEAAiE;QACjE,IAAI,OAAO,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvE,OAAO,OAAO,CAAC,MAA4B,CAAC;QAC9C,CAAC;QACD,2CAA2C;QAC3C,IACE,OAAO,CAAC,MAAM,CAAC,QAAQ;YACvB,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YACvC,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBAC/C,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,EACrD,CAAC;YACD,OAAO,OAAO,CAAC,MAA4B,CAAC;QAC9C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE3D,OAAO;QACL,IAAI,EAAE;YACJ,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,UAAU,EAAE,cAAc;SAC3B;QACD,GAAG;QACH,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,OAAO,CAAC,YAAY,KAAK,SAAS;YAC3C,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE;YACxC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,eAAe;YACjB,CAAC,CAAC;gBACE,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,mBAAmB;gBACnB,GAAG,CAAC,mBAAmB,KAAK,UAAU;oBACpC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;oBAC5C,CAAC,CAAC,EAAE,CAAC;aACR;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,OAAO,CAAC,aAAa,KAAK,SAAS;YAC9C,OAAO,OAAO,CAAC,aAAa,KAAK,UAAU;YACzC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE;YAC1C,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E;;;;GAIG;AACH,SAAS,kBAAkB,CACzB,MAAwB,EACxB,YAAqB;IAErB,MAAM,CAAC,GAAG,MAAa,CAAC;IAExB,iEAAiE;IACjE,kDAAkD;IAClD,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;gBAC7C,MAAM,EAAE,UAAU;aACnB,CAAQ,CAAC;YACV,iEAAiE;YACjE,6DAA6D;YAC7D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,OAAO,MAAM,CAAC,OAAO,CAAC;YACxB,CAAC;YACD,OAAO,MAAkC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;QAChB,OAAO,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,mCAAmC;IACnC,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAQ;IAClC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IAEtB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,UAAU,GAAwB,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACxB,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAU,EAAE,CAAC;gBAChE,MAAM,QAAQ,GAAG,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC;gBACxC,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;oBAC1C,iEAAiE;oBACjE,MAAM,IAAI,GAAG,WAAW,EAAE,WAAW,CAAC;oBACtC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW;wBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;oBACvD,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;oBACvB,IACE,QAAQ,CAAC,IAAI,KAAK,UAAU;wBAC5B,QAAQ,CAAC,IAAI,KAAK,SAAS;wBAC3B,QAAQ,CAAC,IAAI,KAAK,UAAU,EAC5B,CAAC;wBACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpE,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,4DAA4D;QAC5D,iCAAiC;QACjC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACvC,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;gBAC/C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBACxB,CAAC,CAAC,OAAO,CAAC;QACd,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACzD,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC3B,MAAM,CAAC,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC7B,OAAO,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzD,KAAK,CAAC,OAAO;gBACX,OAAO,GAAG,CAAC,YAAY,KAAK,UAAU;oBACpC,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE;oBACpB,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzD,oEAAoE;YACpE,mEAAmE;YACnE,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YACxB,qDAAqD;YACrD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CACnC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,KAAK,SAAS,CAC7C,CAAC;YACF,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC7D,MAAM,UAAU,GAAG,CAAC,CAAM,EAAE,EAAE,CAC5B,OAAO,CAAC,KAAK,QAAQ;oBACnB,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,OAAO,CAAC,KAAK,SAAS;wBACtB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,QAAQ,CAAC;gBACjB,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACzD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC7B,iEAAiE;oBACjE,kEAAkE;oBAClE,iEAAiE;oBACjE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAChD,CAAC;gBACD,wEAAwE;gBACxE,OAAO;oBACL,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;iBACpE,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAChC,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CACtC;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,4EAA4E;IAC5E,yEAAyE;IACzE,mBAAmB;IACnB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACvB,OAAO,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACtB,OAAO,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,WAAW;IACX,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;AAEtC;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,GAAW,EAAE,KAAe;IAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,IAAI,OAAO,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;IACxC,CAAC;IACD,IACE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtB,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACvB,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EACxB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;YACpE,IACE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACxB,MAAM;gBACN,OAAO,MAAM,KAAK,QAAQ;gBAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACtB,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;IACD,IACE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvD,OAAO,KAAK,EAAE;QACd,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAChC,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAS,4BAA4B,CACnC,IAAa,EACb,UAAqC;IAErC,MAAM,UAAU,GAAG,UAAU,EAAE,UAElB,CAAC;IACd,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,IAAI,GAAG,GAAmC,IAAI,CAAC;IAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;QACzE,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QACtC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,CAAC,CAAC,IAAI,CAAC,IAAI;YACX,CAAC,CAAC,IAAI,CAAC,IAAI;gBACT,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACb,CAAC,CAAC,EAAE,CAAC;QACT,2EAA2E;QAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC7D,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,IAAI,CAAC,GAAG;YAAE,GAAG,GAAG,EAAE,GAAI,IAAgC,EAAE,CAAC;QACzD,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CACzB,MAAwB,EACxB,GAAa,EACb,cAAyC;IAEzC,OAAO,KAAK,EAAE,IAAS,EAAE,GAAsB,EAAE,EAAE;QACjD,IAAI,GAAG,4BAA4B,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,wEAAwE;YACxE,6EAA6E;YAC7E,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI;oBACxB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBACtE,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBACxC,mEAAmE;gBACnE,mDAAmD;gBACnD,IACE,OAAO;oBACP,CAAC,GAAG,KAAK,UAAU;wBACjB,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;wBAC/B,+BAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CACR,6BAA6B,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtF,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/B,CAAC;YAED,oEAAoE;YACpE,6DAA6D;YAC7D,IAAI,QAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;oBAAE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;YACrE,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAED,uEAAuE;YACvE,yEAAyE;YACzE,wCAAwC;YACxC,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,IAAI,cAAc,EAAE,UAAU,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;gBACxD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC;qBAClD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;oBACd,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;oBACzC,MAAM,IAAI,GAAI,CAAuB,CAAC,IAAI,IAAI,KAAK,CAAC;oBACpD,OAAO,GAAG,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC;gBAChC,CAAC,CAAC;qBACD,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,IAAI,GAAG;oBACL,QAAQ,GAAG,gBAAgB,GAAG,wCAAwC,CAAC;YAC3E,CAAC;YAED,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,QAAQ,IAAI,QAAQ,EAAE,CACrF,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAE,MAA8C,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,wBAAwB,CAC/B,YAA8B,EAC9B,GAA+C,EAC/C,QAAmC,EACnC,QAAiB,EACjB,WAAoB;IAEpB,OAAO,KAAK,EAAE,IAAS,EAAE,GAAsB,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEhE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,mEAAmE;YACnE,4DAA4D;YAC5D,OAAQ,MAA8C,CAAC,KAAK,CAAC;QAC/D,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;aACzB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI;gBACxB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBACtE,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YACxC,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9C,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,2CAA2C,KAAK,KAAK,MAAM,EAAE,CAAC;QAE9E,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,oEAAoE;QACpE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  ActionTool,\n  AgentChatAttachment,\n  AgentChatEvent,\n} from \"./agent/types.js\";\nimport {\n  normalizeActionChatUIConfig,\n  type ActionChatUIConfig,\n} from \"./action-ui.js\";\nimport type { StandardSchemaV1 } from \"@standard-schema/spec\";\n\n/**\n * How an action's `run` was invoked. Tagged at each dispatch site so the action\n * (and tracking) can branch on the surface that called it.\n *\n * - `\"tool\"` — the in-app agent loop, sub-agents/agent-teams, or A2A (which\n *   drives the same agent loop). All agent tool calls are `\"tool\"`.\n * - `\"http\"` — a programmatic HTTP POST/GET to `/_agent-native/actions/<name>`\n *   without the frontend request marker.\n * - `\"frontend\"` — a browser call via `useActionQuery` / `useActionMutation` /\n *   `callAction` (tagged with the `X-Request-Source` header).\n * - `\"cli\"` — `pnpm action <name>` (the CLI runner).\n * - `\"mcp\"` — an external agent over the MCP `tools/call` endpoint.\n * - `\"a2a\"` — a direct A2A action dispatch (currently unused: A2A runs through\n *   the agent loop, so those calls are `\"tool\"`). Reserved for completeness.\n */\nexport type ActionCaller = \"tool\" | \"http\" | \"frontend\" | \"cli\" | \"mcp\" | \"a2a\";\n\n/**\n * Context passed as the optional second argument to an action's `run`.\n * Carries the resolved request identity and the invocation source so actions\n * can read `ctx.userEmail` / `ctx.orgId` / `ctx.caller` directly instead of\n * calling `getRequestUserEmail()` / `getRequestOrgId()` by hand.\n *\n * Backward compatible: existing 1-arg `run(args)` functions keep working, and\n * callers that only need `send` (the agent loop) can still destructure it.\n */\nexport interface ActionRunContext {\n  /**\n   * Emit an SSE event to the client. Only meaningful inside the agent tool\n   * loop (e.g. `agent_call_text` streaming); `undefined` on every other\n   * surface.\n   */\n  send?: (event: AgentChatEvent) => void;\n  /**\n   * Resolved request user email, or `undefined` when there is no authenticated\n   * identity. NEVER defaulted to a dev identity — actions that need a fallback\n   * must apply their own.\n   */\n  userEmail?: string;\n  /** Resolved org id, or `null` when the request has no org. */\n  orgId?: string | null;\n  /** How this action was invoked. */\n  caller: ActionCaller;\n  /**\n   * Attachments submitted with the current agent turn (pasted text blocks,\n   * uploaded files, images), exactly as the server received them — with full,\n   * untruncated `text` for text attachments. Populated only inside the agent\n   * tool loop (`caller: \"tool\"`); `undefined` on every other surface.\n   *\n   * Lets an action consume a large pasted artifact BY REFERENCE (e.g.\n   * `create-extension`'s `contentFromAttachment`) instead of forcing the model\n   * to re-emit the whole file as a tool argument — which frequently gets cut\n   * off mid-stream and triggers a continuation loop.\n   */\n  attachments?: AgentChatAttachment[];\n  /**\n   * Abort signal for the current agent run. Fires when the run is soft-timed\n   * out, user-cancelled, or the server is shutting down. Well-behaved actions\n   * can observe this signal to cancel in-flight work early instead of waiting\n   * for the per-tool 60-second hard timeout.\n   *\n   * Populated only inside the agent tool loop (`caller: \"tool\"`); `undefined`\n   * on every other surface. Never throws — checking `signal.aborted` or\n   * attaching an `\"abort\"` listener is always safe.\n   */\n  signal?: AbortSignal;\n}\n\nexport interface AgentActionStopOptions {\n  /** Optional stable code surfaced in run metadata and tests. */\n  errorCode?: string;\n  /** Optional short tool-result text. Defaults to the user-facing message. */\n  toolResult?: string;\n}\n\n/**\n * Throw from an action when the agent should stop the current turn instead of\n * feeding the failure back to the model for another retry.\n */\nexport class AgentActionStopError extends Error {\n  readonly agentNativeStop = true;\n  readonly errorCode?: string;\n  readonly toolResult?: string;\n\n  constructor(message: string, options: AgentActionStopOptions = {}) {\n    super(message);\n    this.name = \"AgentActionStopError\";\n    this.errorCode = options.errorCode;\n    this.toolResult = options.toolResult;\n  }\n}\n\nexport function isAgentActionStopError(\n  err: unknown,\n): err is AgentActionStopError {\n  return (\n    err instanceof AgentActionStopError ||\n    Boolean(\n      err &&\n      typeof err === \"object\" &&\n      \"agentNativeStop\" in err &&\n      (err as { agentNativeStop?: unknown }).agentNativeStop === true,\n    )\n  );\n}\n\n/** HTTP exposure config for an action. */\nexport interface ActionHttpConfig {\n  /** HTTP method. Default: \"POST\". Use \"GET\" for read-only actions. */\n  method?: \"GET\" | \"POST\" | \"PUT\" | \"DELETE\";\n  /** Override route path under /_agent-native/actions/. Default: action filename. */\n  path?: string;\n}\n\n/** Explicit opt-in metadata for public agent protocols such as MCP or A2A. */\nexport interface PublicAgentActionConfig {\n  expose: boolean;\n  readOnly: boolean;\n  requiresAuth?: boolean;\n  isConsequential?: boolean;\n  title?: string;\n  description?: string;\n}\n\n/** A deep link an external agent (MCP / A2A) can surface to the user so they\n *  can open the produced/listed resource in the running app UI. */\nexport interface ActionDeepLink {\n  /** App-relative path (e.g. `/_agent-native/open?app=mail&view=inbox&...`)\n   *  or an absolute URL. The MCP layer prefixes the request origin when this\n   *  is relative, and may rewrite it to the `agentnative://` desktop scheme. */\n  url: string;\n  /** Human-readable label, e.g. \"Open draft in Mail\". */\n  label: string;\n  /** Optional view hint (matches the `navigate` command `view`). */\n  view?: string;\n}\n\n/** Builds a deep link from an action's args + result so external agents can\n *  surface an \"Open in <app> →\" link. MUST be pure and synchronous — no I/O,\n *  no awaits. Best-effort: a throw or null is swallowed and never fails the\n *  tool call. See the `external-agents` skill. */\nexport type ActionLinkBuilder = (ctx: {\n  args: Record<string, any>;\n  result: any;\n}) => ActionDeepLink | null | undefined;\n\nexport const MCP_APP_EXTENSION_ID = \"io.modelcontextprotocol/ui\" as const;\nexport const MCP_APP_MIME_TYPE = \"text/html;profile=mcp-app\" as const;\nexport const MCP_APP_RESOURCE_URI_META_KEY = \"ui/resourceUri\" as const;\n\nexport interface ActionMcpAppCsp {\n  connectDomains?: string[];\n  resourceDomains?: string[];\n  frameDomains?: string[];\n  baseUriDomains?: string[];\n}\n\nexport type ActionMcpAppCspBuilder = (ctx: {\n  actionName: string;\n  appId?: string;\n  requestOrigin?: string;\n}) => ActionMcpAppCsp | Promise<ActionMcpAppCsp>;\n\nexport interface ActionMcpAppPermissions {\n  camera?: Record<string, never>;\n  microphone?: Record<string, never>;\n  geolocation?: Record<string, never>;\n  clipboardWrite?: Record<string, never>;\n}\n\nexport interface ActionMcpAppResourceMeta {\n  csp?: ActionMcpAppCsp | ActionMcpAppCspBuilder;\n  permissions?: ActionMcpAppPermissions;\n  /**\n   * Host-specific sandbox domain hint. Do not set this to the app's normal\n   * production URL; app origins belong in CSP/open-link metadata. ChatGPT uses\n   * the separate `openai/widgetDomain` compatibility field.\n   */\n  domain?: string;\n  prefersBorder?: boolean;\n}\n\nexport type ActionMcpAppHtmlBuilder = (ctx: {\n  actionName: string;\n  appId?: string;\n  requestOrigin?: string;\n}) => string;\n\nexport interface ActionMcpAppResourceConfig {\n  /** `ui://` URI. Defaults to `ui://<app>/<action-name>`. */\n  uri?: string;\n  /** MCP resource name. Defaults to the action name. */\n  name?: string;\n  title?: string;\n  description?: string;\n  /**\n   * HTML5 document content for the MCP App resource. Keep this self-contained\n   * or declare any external origins in `csp`.\n   */\n  html: string | ActionMcpAppHtmlBuilder;\n  /** Defaults to the MCP Apps HTML MIME type. */\n  mimeType?: typeof MCP_APP_MIME_TYPE;\n  /** Extra resource/content metadata. `ui` is merged with the fields below. */\n  _meta?: Record<string, unknown>;\n  csp?: ActionMcpAppCsp | ActionMcpAppCspBuilder;\n  permissions?: ActionMcpAppPermissions;\n  /**\n   * Host-specific sandbox domain hint. Do not set this to the app's normal\n   * production URL; app origins belong in CSP/open-link metadata. ChatGPT uses\n   * the separate `openai/widgetDomain` compatibility field.\n   */\n  domain?: string;\n  prefersBorder?: boolean;\n}\n\nexport interface ActionMcpAppConfig {\n  /**\n   * Optional MCP Apps UI resource for hosts that render inline app iframes.\n   * Required when the action should open an interactive app view. Omit when\n   * you only need `compactCatalog: true` to keep a non-UI action visible in\n   * the compact catalog (e.g. read/update actions that should be callable from\n   * Claude.ai / ChatGPT without a dedicated iframe resource).\n   */\n  resource?: ActionMcpAppResourceConfig;\n  /**\n   * MCP Apps tool visibility. Defaults to model + app so the LLM can call the\n   * action and the app iframe can call it back through the host bridge.\n   */\n  visibility?: Array<\"model\" | \"app\">;\n  /**\n   * Rare escape hatch for MCP Apps chat hosts. By default OAuth callers with\n   * `mcp:apps` see the generic app tools (`open_app`, `list_apps`, etc.) so\n   * hosts do not ingest every action-specific UI resource. Set this only when\n   * this specific action must stay visible in that compact catalog.\n   */\n  compactCatalog?: boolean;\n}\n\n/** Schema definition for a single action parameter (legacy JSON schema style). */\nexport interface ParameterSchema {\n  type: string;\n  description?: string;\n  enum?: string[];\n}\n\n/** Infer runtime parameter types from a legacy parameter schema map. */\ntype InferParams<T extends Record<string, ParameterSchema> | undefined> =\n  T extends Record<string, ParameterSchema>\n    ? { [K in keyof T]?: string }\n    : Record<string, string>;\n\n/**\n * What to do when an action's RETURN value fails `outputSchema` validation.\n *\n * - `\"strict\"` — throw a clear error so a buggy action surfaces loudly.\n * - `\"warn\"` (default) — `console.warn` the issues and return the ORIGINAL\n *   result unchanged. Non-breaking: behavior never changes unless the dev\n *   opts into `\"strict\"` or `\"fallback\"`.\n * - `\"fallback\"` — return `outputFallback` in place of the invalid result.\n *\n * Mirrors Mastra/Flue structured-output handling, kept on the action layer.\n */\nexport type ActionOutputErrorStrategy = \"strict\" | \"warn\" | \"fallback\";\n\n// ---------------------------------------------------------------------------\n// Schema-based action options (new: Zod / Valibot / ArkType via Standard Schema)\n// ---------------------------------------------------------------------------\n\ninterface DefineActionWithSchema<\n  TSchema extends StandardSchemaV1,\n  TReturn = any,\n  TOutputSchema extends StandardSchemaV1 | undefined = undefined,\n> {\n  description: string;\n  /** Standard Schema-compatible schema (Zod, Valibot, ArkType). Provides runtime\n   *  validation and full TypeScript type inference for `run()` args. The schema is\n   *  also converted to JSON Schema for the Claude API tool definition. */\n  schema: TSchema;\n  /** Legacy parameters — ignored when `schema` is provided. */\n  parameters?: never;\n  /** Optional Standard Schema-compatible schema (Zod, Valibot, ArkType) the\n   *  action's RETURN value is validated against AFTER `run()` resolves. Borrowed\n   *  from Mastra/Flue structured-output. When omitted, behavior is byte-for-byte\n   *  unchanged. The mismatch handling is governed by `outputErrorStrategy`. */\n  outputSchema?: TOutputSchema;\n  /** What to do when the result fails `outputSchema`. Default: `\"warn\"`. */\n  outputErrorStrategy?: ActionOutputErrorStrategy;\n  /** Value returned in place of an invalid result when `outputErrorStrategy` is\n   *  `\"fallback\"`. Ignored for the other strategies. */\n  outputFallback?: TReturn;\n  run: (\n    args: StandardSchemaV1.InferOutput<TSchema>,\n    ctx?: ActionRunContext,\n  ) => Promise<TReturn> | TReturn;\n  http?: ActionHttpConfig | false;\n  /** Whether the HTTP/frontend action route must have an authenticated owner.\n   *  Defaults to true. Set to false only for metadata/read actions that safely\n   *  handle `ctx.userEmail` / `getRequestUserEmail()` being undefined. */\n  requiresAuth?: boolean;\n  /** Whether this action is exposed to the agent — the in-app assistant and the\n   *  app's MCP/A2A tool surfaces — as a callable tool. **Default-allow opt-out**:\n   *  `undefined` / `true` expose it; only an explicit `false` hides it from every\n   *  agent tool list while keeping it callable from the frontend / HTTP\n   *  (`useActionMutation`, `callAction`, `/_agent-native/actions/<name>`). Use\n   *  this for UI-only or purely programmatic actions you want behind the\n   *  framework's auth + action surface WITHOUT spending a slot in the model's\n   *  tool list. Distinct from `toolCallable`, which only governs the sandboxed\n   *  extension (\"tools\") iframe bridge. See `packages/core/docs/content/actions.md`. */\n  agentTool?: boolean;\n  /** If true, the framework will NOT emit a screen-refresh change event after a\n   *  successful call. Auto-inferred as `true` when `http.method === \"GET\"`.\n   *  Only set this manually when you need to override the inference — e.g. a\n   *  POST action that only reads data but can't use GET for a protocol reason. */\n  readOnly?: boolean;\n  /** If true, the agent may execute this action concurrently with other\n   *  read-only or parallel-safe tool calls emitted in the same model turn.\n   *  Only set this for mutating actions that are internally concurrency-safe\n   *  and order-independent for same-turn execution. */\n  parallelSafe?: boolean;\n  /** Whether this action may be invoked from the tools (Alpine iframe) bridge\n   *  via `appAction(name, params)` — see `packages/core/docs/content/actions.md`\n   *  (\"Tools Callability\"). **Default-allow opt-out**: undefined / `true` both\n   *  allow tool-iframe calls; only an explicit `false` returns 403. Set to\n   *  `false` for high-blast-radius admin operations (account deletion, org\n   *  membership changes, anything that modifies auth state) — used by the\n   *  framework's `share-resource`, `unshare-resource`, and\n   *  `set-resource-visibility` for defense-in-depth. Regular UI/agent/CLI/MCP/A2A\n   *  calls are unaffected. Enforced by the action HTTP route layer — see\n   *  `packages/core/src/server/action-routes.ts`. Audit reference: H5 in\n   *  `security-audit/05-tools-sandbox.md`. */\n  toolCallable?: boolean;\n  /** Explicit public-agent exposure metadata. Public web routes never imply\n   *  public MCP/A2A/OpenAPI tool exposure. Actions must opt in here and public\n   *  protocol mounts must still filter for safe, route-appropriate tools. */\n  publicAgent?: PublicAgentActionConfig;\n  /** Optional deep-link builder. When set, MCP/A2A surfaces append an\n   *  \"Open in <app> →\" link built from the call's args + result so the\n   *  external agent can drop the user into the running app at the right\n   *  view/record. Pure + sync + best-effort. See the `external-agents` skill. */\n  link?: ActionLinkBuilder;\n  /** Optional MCP Apps UI resource for hosts that can render inline\n   *  interactive app iframes. Text/deep-link tool results remain the fallback\n   *  for CLI and non-UI hosts. */\n  mcpApp?: ActionMcpAppConfig;\n  /** Optional native Agent-Native chat renderer for this action's structured\n   *  result. This is first-party React UI, not arbitrary HTML/JS. */\n  chatUI?: ActionChatUIConfig;\n  /**\n   * Opt-in human-in-the-loop approval gate. **Default off** — the framework\n   * intentionally keeps HITL approvals rare; almost every action should run\n   * without one. Set this only for high-consequence, outward-facing,\n   * hard-to-undo operations (the canonical example is actually sending an\n   * email). When `needsApproval` resolves truthy and the agent calls this\n   * action, the loop does NOT execute `run()`: it emits an `approval_required`\n   * event and stops the turn, waiting for a human to approve. The action runs\n   * only once the human re-issues the turn approving this specific call.\n   *\n   * - `true` — always require approval.\n   * - `(args, ctx) => boolean | Promise<boolean>` — require approval only when\n   *   the predicate returns true (e.g. only for external recipients, only\n   *   above a dollar threshold). Keep it pure + fast; thrown errors are treated\n   *   as \"approval required\" (fail closed).\n   */\n  needsApproval?:\n    | boolean\n    | ((\n        args: StandardSchemaV1.InferOutput<TSchema>,\n        ctx?: ActionRunContext,\n      ) => boolean | Promise<boolean>);\n}\n\n// ---------------------------------------------------------------------------\n// Legacy parameter-based action options\n// ---------------------------------------------------------------------------\n\ninterface DefineActionWithParams<\n  TParams extends Record<string, ParameterSchema> | undefined =\n    | Record<string, ParameterSchema>\n    | undefined,\n  TReturn = any,\n> {\n  description: string;\n  /** Flat map of parameter names to their schema. Automatically wrapped in\n   *  `{ type: \"object\", properties: ... }` for the Claude API. */\n  parameters?: TParams;\n  /** Standard Schema — not used in this overload. */\n  schema?: never;\n  /** Optional Standard Schema-compatible schema the action's RETURN value is\n   *  validated against AFTER `run()` resolves. See the schema overload above.\n   *  When omitted, behavior is byte-for-byte unchanged. */\n  outputSchema?: StandardSchemaV1;\n  /** What to do when the result fails `outputSchema`. Default: `\"warn\"`. */\n  outputErrorStrategy?: ActionOutputErrorStrategy;\n  /** Value returned in place of an invalid result when `outputErrorStrategy` is\n   *  `\"fallback\"`. Ignored for the other strategies. */\n  outputFallback?: TReturn;\n  run: (\n    args: InferParams<TParams>,\n    ctx?: ActionRunContext,\n  ) => Promise<TReturn> | TReturn;\n  http?: ActionHttpConfig | false;\n  /** Whether the HTTP/frontend action route must have an authenticated owner.\n   *  Defaults to true. See the schema overload above. */\n  requiresAuth?: boolean;\n  /** Whether this action is exposed to the agent as a callable tool. Only an\n   *  explicit `false` hides it from every agent tool list while keeping it\n   *  frontend/HTTP-callable. See the schema overload above and actions.md. */\n  agentTool?: boolean;\n  /** If true, the framework will NOT emit a screen-refresh change event after a\n   *  successful call. Auto-inferred as `true` when `http.method === \"GET\"`. */\n  readOnly?: boolean;\n  /** If true, the agent may execute this action concurrently with other\n   *  read-only or parallel-safe tool calls emitted in the same model turn. */\n  parallelSafe?: boolean;\n  /** Whether this action may be invoked from the tools (Alpine iframe) bridge\n   *  via `appAction(name, params)`. See the schema overload above for details\n   *  and the `toolCallable` section in actions.md. */\n  toolCallable?: boolean;\n  /** Explicit public-agent exposure metadata. See schema overload above. */\n  publicAgent?: PublicAgentActionConfig;\n  /** Optional deep-link builder. See schema overload above. */\n  link?: ActionLinkBuilder;\n  /** Optional MCP Apps UI resource. See schema overload above. */\n  mcpApp?: ActionMcpAppConfig;\n  /** Optional native Agent-Native chat renderer. See schema overload above. */\n  chatUI?: ActionChatUIConfig;\n  /** Opt-in human-in-the-loop approval gate (default off). See the schema\n   *  overload above for full semantics. */\n  needsApproval?:\n    | boolean\n    | ((\n        args: InferParams<TParams>,\n        ctx?: ActionRunContext,\n      ) => boolean | Promise<boolean>);\n}\n\n// ---------------------------------------------------------------------------\n// Return type — carries schema-inferred input + run return for client inference\n// ---------------------------------------------------------------------------\n\n/**\n * Opaque typed wrapper returned by `defineAction`. The type parameters carry\n * the schema-inferred input and the `run` return type so that:\n *\n * - The generated `.generated/action-types.d.ts` can extract them via\n *   `typeof import(\"../actions/my-action\").default.run` and augment\n *   `ActionRegistry` with concrete param/result types.\n * - `useActionQuery` / `useActionMutation` / `callAction` in the client hooks\n *   flow the correct types end-to-end without manual generic annotations.\n *\n * Runtime shape is unchanged — this is a declaration-only wrapper.\n */\nexport interface ActionDefinition<TInput, TReturn> {\n  /**\n   * Typed run function — declaration only; infer input/return from this.\n   * `TInput` is the schema's input type (optional defaults allowed at call\n   * sites); `TReturn` is the awaited result type of the run callback.\n   */\n  readonly run: (\n    args: TInput,\n    ctx?: ActionRunContext,\n  ) => Promise<TReturn> | TReturn;\n  /** @internal Framework use only — do not call directly. */\n  readonly tool: import(\"./agent/types.js\").ActionTool;\n  readonly http?: ActionHttpConfig | false;\n  readonly requiresAuth?: boolean;\n  readonly agentTool?: boolean;\n  readonly readOnly?: boolean;\n  readonly parallelSafe?: boolean;\n  readonly toolCallable?: boolean;\n  readonly publicAgent?: PublicAgentActionConfig;\n  readonly link?: ActionLinkBuilder;\n  readonly mcpApp?: ActionMcpAppConfig;\n  readonly chatUI?: ActionChatUIConfig;\n  /** Standard Schema the action's RETURN value is validated against after\n   *  `run()` resolves. Present only when the caller passed `outputSchema`. */\n  readonly outputSchema?: StandardSchemaV1;\n  /** Resolved output-mismatch strategy. Present only when `outputSchema` is\n   *  set; defaults to `\"warn\"`. */\n  readonly outputErrorStrategy?: ActionOutputErrorStrategy;\n  /** Value substituted for an invalid result under the `\"fallback\"` strategy. */\n  readonly outputFallback?: TReturn;\n  /** Opt-in human-in-the-loop approval gate (default off). When truthy, the\n   *  agent loop emits `approval_required` and pauses instead of executing this\n   *  action until a human approves the specific call. */\n  readonly needsApproval?:\n    | boolean\n    | ((args: TInput, ctx?: ActionRunContext) => boolean | Promise<boolean>);\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Define an agent action. Place in `actions/` directory — auto-discovered by the framework.\n *\n * Supports two modes:\n *\n * **Schema mode (recommended)** — pass a Standard Schema-compatible schema (Zod, Valibot,\n * ArkType) for runtime validation and full type inference:\n *\n * ```ts\n * import { defineAction } from \"@agent-native/core\";\n * import { z } from \"zod\";\n *\n * export default defineAction({\n *   description: \"Create a form\",\n *   schema: z.object({\n *     title: z.string().describe(\"Form title\"),\n *     status: z.enum([\"draft\", \"published\", \"closed\"]).default(\"draft\"),\n *   }),\n *   run: async (args) => {\n *     // args is { title: string; status: \"draft\" | \"published\" | \"closed\" }\n *     // Already validated — invalid inputs never reach here\n *   },\n * });\n * ```\n *\n * **Parameters mode (legacy)** — pass raw JSON schema-like parameter definitions:\n *\n * ```ts\n * export default defineAction({\n *   description: \"List events\",\n *   parameters: {\n *     from: { type: \"string\", description: \"Start date\" },\n *   },\n *   run: async (args) => { ... },\n * });\n * ```\n */\nexport function defineAction<\n  TSchema extends StandardSchemaV1,\n  TReturn,\n  TOutputSchema extends StandardSchemaV1 | undefined = undefined,\n>(\n  options: DefineActionWithSchema<TSchema, TReturn, TOutputSchema>,\n): ActionDefinition<StandardSchemaV1.InferInput<TSchema>, TReturn>;\nexport function defineAction<\n  TParams extends Record<string, ParameterSchema> | undefined,\n  TReturn,\n>(\n  options: DefineActionWithParams<TParams, TReturn>,\n): ActionDefinition<InferParams<TParams>, TReturn>;\nexport function defineAction(options: any) {\n  const hasSchema = options.schema && \"~standard\" in options.schema;\n\n  // Build tool definition for the Claude API\n  let toolParameters: ActionTool[\"parameters\"];\n  if (hasSchema) {\n    // Convert Standard Schema to JSON Schema for Claude\n    toolParameters = schemaToJsonSchema(options.schema, options.description);\n  } else if (options.parameters) {\n    toolParameters = {\n      type: \"object\" as const,\n      properties: options.parameters,\n    };\n  }\n\n  // Wrap run() with INPUT validation when schema is provided.\n  // Pass toolParameters so the validation error can echo the expected signature\n  // (required vs optional fields) and help the caller self-correct.\n  const inputValidatedRun = hasSchema\n    ? wrapWithValidation(options.schema, options.run, toolParameters)\n    : options.run;\n\n  // Then wrap with OUTPUT validation when an outputSchema is provided. This\n  // composes AROUND the input-validated run so the order is: validate input →\n  // run() → validate output. When no outputSchema is present, the run is passed\n  // through untouched and behavior is byte-for-byte unchanged.\n  const hasOutputSchema =\n    options.outputSchema && \"~standard\" in options.outputSchema;\n  const outputErrorStrategy: ActionOutputErrorStrategy =\n    options.outputErrorStrategy === \"strict\" ||\n    options.outputErrorStrategy === \"warn\" ||\n    options.outputErrorStrategy === \"fallback\"\n      ? options.outputErrorStrategy\n      : \"warn\";\n  const run = hasOutputSchema\n    ? wrapWithOutputValidation(\n        options.outputSchema,\n        inputValidatedRun,\n        outputErrorStrategy,\n        options.outputFallback,\n        options.description,\n      )\n    : inputValidatedRun;\n\n  // Auto-infer readOnly from http.method === \"GET\" unless explicitly set.\n  // GET actions are idempotent reads; their completion should NOT trigger a\n  // screen refresh. Everything else is assumed to mutate — the dispatcher\n  // emits a change event on success so the UI auto-refetches its queries.\n  const httpConfig = options.http as ActionHttpConfig | false | undefined;\n  const inferredReadOnly =\n    httpConfig !== false &&\n    httpConfig !== undefined &&\n    httpConfig.method === \"GET\";\n  // Explicit `readOnly` (true OR false) wins. Otherwise infer from http.method.\n  // We store the resolved boolean so downstream checks can trust entry.readOnly\n  // without re-running method inference — including when a caller explicitly\n  // passes readOnly:false to override a GET (rare but valid).\n  const readOnly: boolean | undefined =\n    typeof options.readOnly === \"boolean\"\n      ? options.readOnly\n      : inferredReadOnly\n        ? true\n        : undefined;\n\n  // toolCallable: thread through whatever the caller declared. We DO NOT\n  // default to `true` here — the absence of an explicit field is meaningful\n  // to the tools bridge: it lets us emit a one-shot warning when an action\n  // without a declared `toolCallable` flag is invoked from a tool, so the\n  // ecosystem can migrate over time. The bridge treats `undefined` as\n  // \"implicit allow with a deprecation warning\"; only an explicit `false`\n  // refuses the call. See `extensions/routes.ts` and audit H5.\n  const toolCallable: boolean | undefined =\n    typeof options.toolCallable === \"boolean\"\n      ? options.toolCallable\n      : undefined;\n  // agentTool: default-allow opt-out. Only an explicit `false` hides the action\n  // from the agent tool surfaces; undefined is preserved (treated as exposed).\n  const agentTool: boolean | undefined =\n    typeof options.agentTool === \"boolean\" ? options.agentTool : undefined;\n  const parallelSafe: boolean | undefined =\n    typeof options.parallelSafe === \"boolean\"\n      ? options.parallelSafe\n      : undefined;\n  const publicAgent: PublicAgentActionConfig | undefined =\n    options.publicAgent &&\n    typeof options.publicAgent === \"object\" &&\n    !Array.isArray(options.publicAgent)\n      ? options.publicAgent\n      : undefined;\n  const link: ActionLinkBuilder | undefined =\n    typeof options.link === \"function\" ? options.link : undefined;\n  const mcpApp: ActionMcpAppConfig | undefined = (() => {\n    if (\n      !options.mcpApp ||\n      typeof options.mcpApp !== \"object\" ||\n      Array.isArray(options.mcpApp)\n    ) {\n      return undefined;\n    }\n    // compactCatalog-only: no resource required; just keep the flag.\n    if (options.mcpApp.compactCatalog === true && !options.mcpApp.resource) {\n      return options.mcpApp as ActionMcpAppConfig;\n    }\n    // Full resource: validate html is present.\n    if (\n      options.mcpApp.resource &&\n      typeof options.mcpApp.resource === \"object\" &&\n      !Array.isArray(options.mcpApp.resource) &&\n      (typeof options.mcpApp.resource.html === \"string\" ||\n        typeof options.mcpApp.resource.html === \"function\")\n    ) {\n      return options.mcpApp as ActionMcpAppConfig;\n    }\n    return undefined;\n  })();\n  const chatUI = normalizeActionChatUIConfig(options.chatUI);\n\n  return {\n    tool: {\n      description: options.description,\n      parameters: toolParameters,\n    },\n    run,\n    ...(hasSchema ? { schema: options.schema } : {}),\n    ...(options.http !== undefined ? { http: options.http } : {}),\n    ...(typeof options.requiresAuth === \"boolean\"\n      ? { requiresAuth: options.requiresAuth }\n      : {}),\n    ...(typeof agentTool === \"boolean\" ? { agentTool } : {}),\n    ...(typeof readOnly === \"boolean\" ? { readOnly } : {}),\n    ...(typeof parallelSafe === \"boolean\" ? { parallelSafe } : {}),\n    ...(typeof toolCallable === \"boolean\" ? { toolCallable } : {}),\n    ...(publicAgent ? { publicAgent } : {}),\n    ...(link ? { link } : {}),\n    ...(mcpApp ? { mcpApp } : {}),\n    ...(chatUI ? { chatUI } : {}),\n    ...(hasOutputSchema\n      ? {\n          outputSchema: options.outputSchema,\n          outputErrorStrategy,\n          ...(outputErrorStrategy === \"fallback\"\n            ? { outputFallback: options.outputFallback }\n            : {}),\n        }\n      : {}),\n    ...(typeof options.needsApproval === \"boolean\" ||\n    typeof options.needsApproval === \"function\"\n      ? { needsApproval: options.needsApproval }\n      : {}),\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Schema → JSON Schema conversion\n// ---------------------------------------------------------------------------\n\n/**\n * Convert a Standard Schema to JSON Schema for the Claude API.\n * Tries vendor-specific toJSONSchema first (Zod v4), then falls back\n * to a basic introspection of the schema shape.\n */\nfunction schemaToJsonSchema(\n  schema: StandardSchemaV1,\n  _description?: string,\n): ActionTool[\"parameters\"] {\n  const s = schema as any;\n\n  // Prefer Zod's own JSON Schema output — it handles descriptions,\n  // enums, coerce, and all type wrappers correctly.\n  if (s[\"~standard\"]?.jsonSchema?.input) {\n    try {\n      const result = s[\"~standard\"].jsonSchema.input({\n        target: \"draft-07\",\n      }) as any;\n      // Strip $schema — the Claude API validates against draft 2020-12\n      // and a mismatched $schema declaration can cause rejections.\n      if (result && typeof result === \"object\") {\n        delete result.$schema;\n      }\n      return result as ActionTool[\"parameters\"];\n    } catch {\n      // Fall through to manual converter\n    }\n  }\n\n  // Fallback: manual conversion from Zod v4 internal defs\n  if (s._zod?.def) {\n    return zodDefToJsonSchema(s._zod.def);\n  }\n\n  // Last resort: empty object schema\n  return { type: \"object\" as const, properties: {} };\n}\n\n/**\n * Convert a Zod v4 internal def to JSON Schema.\n * Handles the common types used in action parameters.\n */\nfunction zodDefToJsonSchema(def: any): any {\n  const type = def.type;\n\n  if (type === \"object\") {\n    const properties: Record<string, any> = {};\n    const required: string[] = [];\n    const shape = def.shape;\n    if (shape) {\n      for (const [key, fieldSchema] of Object.entries(shape) as any[]) {\n        const fieldDef = fieldSchema?._zod?.def;\n        if (fieldDef) {\n          const prop = zodDefToJsonSchema(fieldDef);\n          // Zod v4 stores .describe() on the schema object, not in the def\n          const desc = fieldSchema?.description;\n          if (desc && !prop.description) prop.description = desc;\n          properties[key] = prop;\n          if (\n            fieldDef.type !== \"optional\" &&\n            fieldDef.type !== \"default\" &&\n            fieldDef.type !== \"nullable\"\n          ) {\n            required.push(key);\n          }\n        }\n      }\n    }\n    const result: any = { type: \"object\", properties };\n    if (required.length > 0) result.required = required;\n    return result;\n  }\n\n  if (type === \"string\") {\n    const result: any = { type: \"string\" };\n    if (def.description) result.description = def.description;\n    return result;\n  }\n\n  if (type === \"number\" || type === \"float\" || type === \"int\") {\n    const result: any = { type: type === \"int\" ? \"integer\" : \"number\" };\n    if (def.description) result.description = def.description;\n    return result;\n  }\n\n  if (type === \"boolean\") {\n    const result: any = { type: \"boolean\" };\n    if (def.description) result.description = def.description;\n    return result;\n  }\n\n  if (type === \"enum\") {\n    // Zod v4 stores enum entries as an object {a: \"a\", b: \"b\"};\n    // JSON Schema requires an array.\n    const entries = def.entries;\n    const enumValues = Array.isArray(entries)\n      ? entries\n      : typeof entries === \"object\" && entries !== null\n        ? Object.values(entries)\n        : entries;\n    const result: any = { type: \"string\", enum: enumValues };\n    if (def.description) result.description = def.description;\n    return result;\n  }\n\n  if (type === \"literal\") {\n    return { type: typeof def.value, enum: [def.value] };\n  }\n\n  if (type === \"array\") {\n    const result: any = { type: \"array\" };\n    if (def.element?._zod?.def) {\n      result.items = zodDefToJsonSchema(def.element._zod.def);\n    }\n    if (def.description) result.description = def.description;\n    return result;\n  }\n\n  if (type === \"optional\") {\n    if (def.innerType?._zod?.def) {\n      return zodDefToJsonSchema(def.innerType._zod.def);\n    }\n  }\n\n  if (type === \"default\") {\n    if (def.innerType?._zod?.def) {\n      const inner = zodDefToJsonSchema(def.innerType._zod.def);\n      inner.default =\n        typeof def.defaultValue === \"function\"\n          ? def.defaultValue()\n          : def.defaultValue;\n      return inner;\n    }\n  }\n\n  if (type === \"nullable\") {\n    if (def.innerType?._zod?.def) {\n      const inner = zodDefToJsonSchema(def.innerType._zod.def);\n      // Surface null as a valid value so the model knows it may pass null\n      // (and doesn't treat the field as a non-nullable required string).\n      return { anyOf: [inner, { type: \"null\" }] };\n    }\n  }\n\n  if (type === \"union\") {\n    if (def.options?.length) {\n      // Check if it's a simple enum-like union of literals\n      const allLiterals = def.options.every(\n        (o: any) => o?._zod?.def?.type === \"literal\",\n      );\n      if (allLiterals) {\n        const values = def.options.map((o: any) => o._zod.def.value);\n        const jsonTypeOf = (v: any) =>\n          typeof v === \"number\"\n            ? \"number\"\n            : typeof v === \"boolean\"\n              ? \"boolean\"\n              : \"string\";\n        const uniqueTypes = [...new Set(values.map(jsonTypeOf))];\n        if (uniqueTypes.length === 1) {\n          // Homogeneous literal union (e.g. all numbers) — derive the JSON\n          // type instead of hardcoding \"string\", which would contradict the\n          // enum values and make the model coerce/round-trip them wrongly.\n          return { type: uniqueTypes[0], enum: values };\n        }\n        // Mixed literal types: emit anyOf so each branch stays self-consistent.\n        return {\n          anyOf: values.map((v: any) => ({ type: jsonTypeOf(v), enum: [v] })),\n        };\n      }\n      return {\n        anyOf: def.options.map((o: any) =>\n          zodDefToJsonSchema(o._zod?.def ?? {}),\n        ),\n      };\n    }\n  }\n\n  // z.preprocess / z.pipe / .superRefine / .transform all produce a \"pipe\"\n  // def with `in` (pre-transform) and `out` (post-transform). For JSON Schema\n  // purposes, use `out` — it reflects the validated output shape the model\n  // should populate.\n  if (type === \"pipe\") {\n    if (def.out?._zod?.def) {\n      return zodDefToJsonSchema(def.out._zod.def);\n    }\n    if (def.in?._zod?.def) {\n      return zodDefToJsonSchema(def.in._zod.def);\n    }\n  }\n\n  // Fallback\n  return { type: \"string\" };\n}\n\n// ---------------------------------------------------------------------------\n// Runtime validation wrapper\n// ---------------------------------------------------------------------------\n\nconst NO_COERCE = Symbol(\"no-coerce\");\n\n/**\n * Coerce a single stringified value to one of the JSON-schema types the field\n * expects. Returns NO_COERCE when nothing safe applies, so the caller leaves\n * the original value untouched and the normal validation error still surfaces.\n */\nfunction coerceStringToSchemaType(raw: string, types: string[]): unknown {\n  const trimmed = raw.trim();\n  if (types.includes(\"boolean\")) {\n    if (trimmed === \"true\") return true;\n    if (trimmed === \"false\") return false;\n  }\n  if (\n    (types.includes(\"array\") &&\n      trimmed.startsWith(\"[\") &&\n      trimmed.endsWith(\"]\")) ||\n    (types.includes(\"object\") &&\n      trimmed.startsWith(\"{\") &&\n      trimmed.endsWith(\"}\"))\n  ) {\n    try {\n      const parsed = JSON.parse(trimmed);\n      if (types.includes(\"array\") && Array.isArray(parsed)) return parsed;\n      if (\n        types.includes(\"object\") &&\n        parsed &&\n        typeof parsed === \"object\" &&\n        !Array.isArray(parsed)\n      ) {\n        return parsed;\n      }\n    } catch {\n      // fall through — leave the original so validation reports the real error\n    }\n  }\n  if (\n    (types.includes(\"number\") || types.includes(\"integer\")) &&\n    trimmed !== \"\" &&\n    Number.isFinite(Number(trimmed))\n  ) {\n    const n = Number(trimmed);\n    if (types.includes(\"number\") || Number.isInteger(n)) return n;\n  }\n  return NO_COERCE;\n}\n\n/**\n * Defensively coerce stringified action arguments to the types the schema\n * expects. Two callers depend on this:\n *\n *   1. Model gateways (notably Builder's Gemini-backed gateway) hand back\n *      structured tool-call arguments as JSON strings — an array param arrives\n *      as `\"[{...}]\"`, a boolean as `\"true\"`.\n *   2. GET actions called from the browser via `useActionQuery` / `callAction`.\n *      Those serialize params into the query string, where `URLSearchParams`\n *      stringifies everything — so `includeSeries: true` arrives as the string\n *      `\"true\"` and `limit: 5` as `\"5\"` (see `action-routes.ts`).\n *\n * In both cases Standard Schema (zod) `validate` does not coerce, so the call\n * fails validation (\"expected boolean, received string\") — the agent thrashes\n * retrying shapes and the frontend query errors. We only touch a string value\n * when the schema expects a non-string type and the string parses cleanly to\n * it; anything ambiguous (schema also allows string) or unparseable is left\n * as-is. Operates on top-level properties only — once an array/object param is\n * parsed, its nested members are already native and validate normally.\n *\n * Do NOT narrow this to \"gateway-only\": the GET query-string path relies on it\n * too, and `action-routes.spec.ts` guards that round-trip.\n */\nfunction coerceGatewayStringifiedArgs(\n  args: unknown,\n  parameters?: ActionTool[\"parameters\"],\n): unknown {\n  const properties = parameters?.properties as\n    | Record<string, { type?: string | string[] }>\n    | undefined;\n  if (!properties) return args;\n  if (!args || typeof args !== \"object\" || Array.isArray(args)) return args;\n  let out: Record<string, unknown> | null = null;\n  for (const [key, raw] of Object.entries(args as Record<string, unknown>)) {\n    if (typeof raw !== \"string\") continue;\n    const spec = properties[key];\n    if (!spec) continue;\n    const types = Array.isArray(spec.type)\n      ? spec.type\n      : spec.type\n        ? [spec.type]\n        : [];\n    // No declared type, or the field legitimately accepts a string → leave it.\n    if (types.length === 0 || types.includes(\"string\")) continue;\n    const coerced = coerceStringToSchemaType(raw, types);\n    if (coerced === NO_COERCE) continue;\n    if (!out) out = { ...(args as Record<string, unknown>) };\n    out[key] = coerced;\n  }\n  return out ?? args;\n}\n\n/**\n * Wrap an action's run function with schema validation.\n * Invalid inputs get a clear error message (including what was actually passed)\n * so the agent can see its own mistake and correct it on the next turn.\n */\nfunction wrapWithValidation(\n  schema: StandardSchemaV1,\n  run: Function,\n  toolParameters?: ActionTool[\"parameters\"],\n): (args: any, ctx?: ActionRunContext) => any {\n  return async (args: any, ctx?: ActionRunContext) => {\n    args = coerceGatewayStringifiedArgs(args, toolParameters);\n    const result = await schema[\"~standard\"].validate(args);\n    if (result.issues) {\n      // Split issues into \"missing required field\" vs other validation errors\n      // so the error message reads naturally rather than as \"fieldName: Required\".\n      const missing: string[] = [];\n      const other: string[] = [];\n      for (const issue of result.issues) {\n        const pathStr = issue.path\n          ? issue.path.map((p) => (typeof p === \"object\" ? p.key : p)).join(\".\")\n          : \"\";\n        const msg = String(issue.message ?? \"\");\n        // Zod emits \"Required\" for missing fields; other libraries may use\n        // similar wording. Treat any variant as \"missing\".\n        if (\n          pathStr &&\n          (msg === \"Required\" ||\n            /invalid.*undefined/i.test(msg) ||\n            /expected.*received undefined/i.test(msg))\n        ) {\n          missing.push(pathStr);\n        } else {\n          other.push(pathStr ? `${pathStr}: ${msg}` : msg);\n        }\n      }\n\n      const parts: string[] = [];\n      if (missing.length > 0) {\n        parts.push(\n          `Missing required parameter${missing.length === 1 ? \"\" : \"s\"}: ${missing.join(\", \")}`,\n        );\n      }\n      if (other.length > 0) {\n        parts.push(other.join(\"; \"));\n      }\n\n      // Echo the args that were actually passed so the caller (usually an\n      // agent) can see exactly what it sent and fix its next call.\n      let received: string;\n      try {\n        received = JSON.stringify(args);\n        if (received.length > 500) received = received.slice(0, 500) + \"…\";\n      } catch {\n        received = String(args);\n      }\n\n      // Also show the EXPECTED signature so the agent doesn't have to guess.\n      // Format: `{ deckId*: string, content*: string, slideId?: string, ... }`\n      // where `*` = required, `?` = optional.\n      let expected = \"\";\n      if (toolParameters?.properties) {\n        const required = new Set(toolParameters.required ?? []);\n        const sig = Object.entries(toolParameters.properties)\n          .map(([k, v]) => {\n            const mark = required.has(k) ? \"*\" : \"?\";\n            const type = (v as { type?: string }).type ?? \"any\";\n            return `${k}${mark}: ${type}`;\n          })\n          .join(\", \");\n        if (sig)\n          expected = ` Expected: { ${sig} } (where * = required, ? = optional).`;\n      }\n\n      throw new Error(\n        `Invalid action parameters — ${parts.join(\". \")}. Received: ${received}.${expected}`,\n      );\n    }\n    return run((result as StandardSchemaV1.SuccessResult<any>).value, ctx);\n  };\n}\n\n/**\n * Wrap an action's run function with RETURN-value validation. Runs AFTER the\n * (already input-validated) `run` resolves and validates the result against\n * `outputSchema` using the Standard Schema `~standard.validate` contract.\n *\n * Behavior is governed by `strategy`:\n * - `\"strict\"`  — throw a clear error when the result doesn't match.\n * - `\"warn\"`    — `console.warn` the issues and return the ORIGINAL result\n *                 unchanged (default; never alters runtime behavior).\n * - `\"fallback\"`— return `fallback` in place of the invalid result.\n *\n * On success the validated value is returned (so schema-applied coercion /\n * defaults take effect, mirroring the input path).\n */\nfunction wrapWithOutputValidation(\n  outputSchema: StandardSchemaV1,\n  run: (args: any, ctx?: ActionRunContext) => any,\n  strategy: ActionOutputErrorStrategy,\n  fallback: unknown,\n  description?: string,\n): (args: any, ctx?: ActionRunContext) => any {\n  return async (args: any, ctx?: ActionRunContext) => {\n    const output = await run(args, ctx);\n    const result = await outputSchema[\"~standard\"].validate(output);\n\n    if (!result.issues) {\n      // Return the validated value so coercion / defaults defined on the\n      // outputSchema are applied, consistent with the input path.\n      return (result as StandardSchemaV1.SuccessResult<any>).value;\n    }\n\n    const issues = result.issues\n      .map((issue) => {\n        const pathStr = issue.path\n          ? issue.path.map((p) => (typeof p === \"object\" ? p.key : p)).join(\".\")\n          : \"\";\n        const msg = String(issue.message ?? \"\");\n        return pathStr ? `${pathStr}: ${msg}` : msg;\n      })\n      .join(\"; \");\n    const label = description ? ` (${description})` : \"\";\n    const summary = `Action output did not match outputSchema${label}: ${issues}`;\n\n    if (strategy === \"strict\") {\n      throw new Error(summary);\n    }\n    if (strategy === \"fallback\") {\n      return fallback;\n    }\n    // \"warn\" (default): surface the mismatch but never change behavior.\n    console.warn(summary);\n    return output;\n  };\n}\n"]}
+{"version":3,"file":"action.js","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,2BAA2B,GAE5B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AA6F7E;;;GAGG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,eAAe,GAAG,IAAI,CAAC;IACvB,SAAS,CAAU;IACnB,UAAU,CAAU;IAE7B,YAAY,OAAe,EAAE,UAAkC,EAAE;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACvC,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CACpC,GAAY;IAEZ,OAAO,CACL,GAAG,YAAY,oBAAoB;QACnC,OAAO,CACL,GAAG;YACH,OAAO,GAAG,KAAK,QAAQ;YACvB,iBAAiB,IAAI,GAAG;YACvB,GAAqC,CAAC,eAAe,KAAK,IAAI,CAChE,CACF,CAAC;AACJ,CAAC;AA0CD,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAAqC,CAAC;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,2BAAoC,CAAC;AACtE,MAAM,CAAC,MAAM,6BAA6B,GAAG,gBAAyB,CAAC;AA2ZvE,MAAM,UAAU,YAAY,CAAC,OAAY;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAElE,2CAA2C;IAC3C,IAAI,cAAwC,CAAC;IAC7C,IAAI,SAAS,EAAE,CAAC;QACd,oDAAoD;QACpD,cAAc,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3E,CAAC;SAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC9B,cAAc,GAAG;YACf,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,8EAA8E;IAC9E,kEAAkE;IAClE,MAAM,iBAAiB,GAAG,SAAS;QACjC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC;QACjE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAEhB,0EAA0E;IAC1E,4EAA4E;IAC5E,8EAA8E;IAC9E,6DAA6D;IAC7D,MAAM,eAAe,GACnB,OAAO,CAAC,YAAY,IAAI,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC;IAC9D,MAAM,mBAAmB,GACvB,OAAO,CAAC,mBAAmB,KAAK,QAAQ;QACxC,OAAO,CAAC,mBAAmB,KAAK,MAAM;QACtC,OAAO,CAAC,mBAAmB,KAAK,UAAU;QACxC,CAAC,CAAC,OAAO,CAAC,mBAAmB;QAC7B,CAAC,CAAC,MAAM,CAAC;IACb,MAAM,GAAG,GAAG,eAAe;QACzB,CAAC,CAAC,wBAAwB,CACtB,OAAO,CAAC,YAAY,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,WAAW,CACpB;QACH,CAAC,CAAC,iBAAiB,CAAC;IAEtB,wEAAwE;IACxE,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,UAAU,GAAG,OAAO,CAAC,IAA4C,CAAC;IACxE,MAAM,gBAAgB,GACpB,UAAU,KAAK,KAAK;QACpB,UAAU,KAAK,SAAS;QACxB,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC;IAC9B,8EAA8E;IAC9E,8EAA8E;IAC9E,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,QAAQ,GACZ,OAAO,OAAO,CAAC,QAAQ,KAAK,SAAS;QACnC,CAAC,CAAC,OAAO,CAAC,QAAQ;QAClB,CAAC,CAAC,gBAAgB;YAChB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,SAAS,CAAC;IAElB,wEAAwE;IACxE,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,cAAc;IACd,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC;QACxD,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC;QACpC,CAAC,CAAC,GAAG,CAAC;IAER,uEAAuE;IACvE,0EAA0E;IAC1E,yEAAyE;IACzE,wEAAwE;IACxE,oEAAoE;IACpE,wEAAwE;IACxE,6DAA6D;IAC7D,MAAM,YAAY,GAChB,OAAO,OAAO,CAAC,YAAY,KAAK,SAAS;QACvC,CAAC,CAAC,OAAO,CAAC,YAAY;QACtB,CAAC,CAAC,SAAS,CAAC;IAChB,8EAA8E;IAC9E,6EAA6E;IAC7E,MAAM,SAAS,GACb,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,MAAM,YAAY,GAChB,OAAO,OAAO,CAAC,YAAY,KAAK,SAAS;QACvC,CAAC,CAAC,OAAO,CAAC,YAAY;QACtB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,WAAW,GACf,OAAO,CAAC,WAAW;QACnB,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACvC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QACjC,CAAC,CAAC,OAAO,CAAC,WAAW;QACrB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,GACR,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,MAAM,GAAmC,CAAC,GAAG,EAAE;QACnD,IACE,CAAC,OAAO,CAAC,MAAM;YACf,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;YAClC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAC7B,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,iEAAiE;QACjE,IAAI,OAAO,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvE,OAAO,OAAO,CAAC,MAA4B,CAAC;QAC9C,CAAC;QACD,2CAA2C;QAC3C,IACE,OAAO,CAAC,MAAM,CAAC,QAAQ;YACvB,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YACvC,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBAC/C,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,EACrD,CAAC;YACD,OAAO,OAAO,CAAC,MAA4B,CAAC;QAC9C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE3D,OAAO;QACL,IAAI,EAAE;YACJ,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,UAAU,EAAE,cAAc;SAC3B;QACD,GAAG,EAAE,QAAQ;QACb,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,OAAO,CAAC,YAAY,KAAK,SAAS;YAC3C,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE;YACxC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,eAAe;YACjB,CAAC,CAAC;gBACE,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,mBAAmB;gBACnB,GAAG,CAAC,mBAAmB,KAAK,UAAU;oBACpC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;oBAC5C,CAAC,CAAC,EAAE,CAAC;aACR;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,OAAO,CAAC,aAAa,KAAK,SAAS;YAC9C,OAAO,OAAO,CAAC,aAAa,KAAK,UAAU;YACzC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE;YAC1C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACvB,GAA+C,EAC/C,WAA0C;IAE1C,OAAO,KAAK,UAAU,UAAU,CAAC,IAAS,EAAE,GAAsB;QAChE,IAAI,MAAW,CAAC;QAChB,IAAI,KAAc,CAAC;QACnB,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,GAAG,GAAG,CAAC;YACZ,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAChE,MAAM,iBAAiB,CACrB,KAAK;gBACH,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC5D,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAClE,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;QAC3D,CAAC;QACD,IAAI,KAAK;YAAE,MAAM,KAAK,CAAC;QACvB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E;;;;GAIG;AACH,SAAS,kBAAkB,CACzB,MAAwB,EACxB,YAAqB;IAErB,MAAM,CAAC,GAAG,MAAa,CAAC;IAExB,iEAAiE;IACjE,kDAAkD;IAClD,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;gBAC7C,MAAM,EAAE,UAAU;aACnB,CAAQ,CAAC;YACV,iEAAiE;YACjE,6DAA6D;YAC7D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,OAAO,MAAM,CAAC,OAAO,CAAC;YACxB,CAAC;YACD,OAAO,MAAkC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;QAChB,OAAO,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,mCAAmC;IACnC,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAQ;IAClC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IAEtB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,UAAU,GAAwB,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACxB,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAU,EAAE,CAAC;gBAChE,MAAM,QAAQ,GAAG,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC;gBACxC,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;oBAC1C,iEAAiE;oBACjE,MAAM,IAAI,GAAG,WAAW,EAAE,WAAW,CAAC;oBACtC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW;wBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;oBACvD,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;oBACvB,IACE,QAAQ,CAAC,IAAI,KAAK,UAAU;wBAC5B,QAAQ,CAAC,IAAI,KAAK,SAAS;wBAC3B,QAAQ,CAAC,IAAI,KAAK,UAAU,EAC5B,CAAC;wBACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpE,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,4DAA4D;QAC5D,iCAAiC;QACjC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACvC,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;gBAC/C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBACxB,CAAC,CAAC,OAAO,CAAC;QACd,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACzD,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC3B,MAAM,CAAC,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC7B,OAAO,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzD,KAAK,CAAC,OAAO;gBACX,OAAO,GAAG,CAAC,YAAY,KAAK,UAAU;oBACpC,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE;oBACpB,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzD,oEAAoE;YACpE,mEAAmE;YACnE,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YACxB,qDAAqD;YACrD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CACnC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,KAAK,SAAS,CAC7C,CAAC;YACF,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC7D,MAAM,UAAU,GAAG,CAAC,CAAM,EAAE,EAAE,CAC5B,OAAO,CAAC,KAAK,QAAQ;oBACnB,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,OAAO,CAAC,KAAK,SAAS;wBACtB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,QAAQ,CAAC;gBACjB,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACzD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC7B,iEAAiE;oBACjE,kEAAkE;oBAClE,iEAAiE;oBACjE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAChD,CAAC;gBACD,wEAAwE;gBACxE,OAAO;oBACL,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;iBACpE,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAChC,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CACtC;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,4EAA4E;IAC5E,yEAAyE;IACzE,mBAAmB;IACnB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACvB,OAAO,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACtB,OAAO,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,WAAW;IACX,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;AAEtC;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,GAAW,EAAE,KAAe;IAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,IAAI,OAAO,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;IACxC,CAAC;IACD,IACE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtB,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACvB,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EACxB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;YACpE,IACE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACxB,MAAM;gBACN,OAAO,MAAM,KAAK,QAAQ;gBAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACtB,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;IACD,IACE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvD,OAAO,KAAK,EAAE;QACd,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAChC,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAS,4BAA4B,CACnC,IAAa,EACb,UAAqC;IAErC,MAAM,UAAU,GAAG,UAAU,EAAE,UAElB,CAAC;IACd,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,IAAI,GAAG,GAAmC,IAAI,CAAC;IAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;QACzE,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QACtC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,CAAC,CAAC,IAAI,CAAC,IAAI;YACX,CAAC,CAAC,IAAI,CAAC,IAAI;gBACT,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACb,CAAC,CAAC,EAAE,CAAC;QACT,2EAA2E;QAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC7D,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,IAAI,CAAC,GAAG;YAAE,GAAG,GAAG,EAAE,GAAI,IAAgC,EAAE,CAAC;QACzD,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CACzB,MAAwB,EACxB,GAAa,EACb,cAAyC;IAEzC,OAAO,KAAK,EAAE,IAAS,EAAE,GAAsB,EAAE,EAAE;QACjD,IAAI,GAAG,4BAA4B,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,wEAAwE;YACxE,6EAA6E;YAC7E,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI;oBACxB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBACtE,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBACxC,mEAAmE;gBACnE,mDAAmD;gBACnD,IACE,OAAO;oBACP,CAAC,GAAG,KAAK,UAAU;wBACjB,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;wBAC/B,+BAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CACR,6BAA6B,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtF,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/B,CAAC;YAED,oEAAoE;YACpE,6DAA6D;YAC7D,IAAI,QAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;oBAAE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;YACrE,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAED,uEAAuE;YACvE,yEAAyE;YACzE,wCAAwC;YACxC,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,IAAI,cAAc,EAAE,UAAU,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;gBACxD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC;qBAClD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;oBACd,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;oBACzC,MAAM,IAAI,GAAI,CAAuB,CAAC,IAAI,IAAI,KAAK,CAAC;oBACpD,OAAO,GAAG,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC;gBAChC,CAAC,CAAC;qBACD,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,IAAI,GAAG;oBACL,QAAQ,GAAG,gBAAgB,GAAG,wCAAwC,CAAC;YAC3E,CAAC;YAED,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,QAAQ,IAAI,QAAQ,EAAE,CACrF,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAE,MAA8C,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,wBAAwB,CAC/B,YAA8B,EAC9B,GAA+C,EAC/C,QAAmC,EACnC,QAAiB,EACjB,WAAoB;IAEpB,OAAO,KAAK,EAAE,IAAS,EAAE,GAAsB,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEhE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,mEAAmE;YACnE,4DAA4D;YAC5D,OAAQ,MAA8C,CAAC,KAAK,CAAC;QAC/D,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;aACzB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI;gBACxB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBACtE,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YACxC,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9C,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,2CAA2C,KAAK,KAAK,MAAM,EAAE,CAAC;QAE9E,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,oEAAoE;QACpE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  ActionTool,\n  AgentChatAttachment,\n  AgentChatEvent,\n} from \"./agent/types.js\";\nimport {\n  normalizeActionChatUIConfig,\n  type ActionChatUIConfig,\n} from \"./action-ui.js\";\nimport type { ActionAuditConfig } from \"./audit/types.js\";\nimport { normalizeAuditConfig, resolveAuditAttach } from \"./audit/config.js\";\nimport type { StandardSchemaV1 } from \"@standard-schema/spec\";\n\n/**\n * How an action's `run` was invoked. Tagged at each dispatch site so the action\n * (and tracking) can branch on the surface that called it.\n *\n * - `\"tool\"` — the in-app agent loop, sub-agents/agent-teams, or A2A (which\n *   drives the same agent loop). All agent tool calls are `\"tool\"`.\n * - `\"http\"` — a programmatic HTTP POST/GET to `/_agent-native/actions/<name>`\n *   without the frontend request marker.\n * - `\"frontend\"` — a browser call via `useActionQuery` / `useActionMutation` /\n *   `callAction` (tagged with the `X-Request-Source` header).\n * - `\"cli\"` — `pnpm action <name>` (the CLI runner).\n * - `\"mcp\"` — an external agent over the MCP `tools/call` endpoint.\n * - `\"a2a\"` — a direct A2A action dispatch (currently unused: A2A runs through\n *   the agent loop, so those calls are `\"tool\"`). Reserved for completeness.\n */\nexport type ActionCaller = \"tool\" | \"http\" | \"frontend\" | \"cli\" | \"mcp\" | \"a2a\";\n\n/**\n * Context passed as the optional second argument to an action's `run`.\n * Carries the resolved request identity and the invocation source so actions\n * can read `ctx.userEmail` / `ctx.orgId` / `ctx.caller` directly instead of\n * calling `getRequestUserEmail()` / `getRequestOrgId()` by hand.\n *\n * Backward compatible: existing 1-arg `run(args)` functions keep working, and\n * callers that only need `send` (the agent loop) can still destructure it.\n */\nexport interface ActionRunContext {\n  /**\n   * Emit an SSE event to the client. Only meaningful inside the agent tool\n   * loop (e.g. `agent_call_text` streaming); `undefined` on every other\n   * surface.\n   */\n  send?: (event: AgentChatEvent) => void;\n  /**\n   * Resolved request user email, or `undefined` when there is no authenticated\n   * identity. NEVER defaulted to a dev identity — actions that need a fallback\n   * must apply their own.\n   */\n  userEmail?: string;\n  /** Resolved org id, or `null` when the request has no org. */\n  orgId?: string | null;\n  /** How this action was invoked. */\n  caller: ActionCaller;\n  /**\n   * Attachments submitted with the current agent turn (pasted text blocks,\n   * uploaded files, images), exactly as the server received them — with full,\n   * untruncated `text` for text attachments. Populated only inside the agent\n   * tool loop (`caller: \"tool\"`); `undefined` on every other surface.\n   *\n   * Lets an action consume a large pasted artifact BY REFERENCE (e.g.\n   * `create-extension`'s `contentFromAttachment`) instead of forcing the model\n   * to re-emit the whole file as a tool argument — which frequently gets cut\n   * off mid-stream and triggers a continuation loop.\n   */\n  attachments?: AgentChatAttachment[];\n  /**\n   * Abort signal for the current agent run. Fires when the run is soft-timed\n   * out, user-cancelled, or the server is shutting down. Well-behaved actions\n   * can observe this signal to cancel in-flight work early instead of waiting\n   * for the per-tool 60-second hard timeout.\n   *\n   * Populated only inside the agent tool loop (`caller: \"tool\"`); `undefined`\n   * on every other surface. Never throws — checking `signal.aborted` or\n   * attaching an `\"abort\"` listener is always safe.\n   */\n  signal?: AbortSignal;\n  /**\n   * Name of the action being invoked (the registry key, e.g.\n   * `delete-recording`). Set at each dispatch site so cross-cutting concerns —\n   * notably the audit log — can attribute the call. `undefined` for direct\n   * programmatic `run()` calls that bypass the dispatcher.\n   */\n  actionName?: string;\n  /**\n   * Agent conversation thread + turn that triggered this call, populated only\n   * inside the agent tool loop (`caller: \"tool\"`). Lets the audit log link a\n   * mutation to the specific agent run/turn that caused it. `undefined` on\n   * every human/programmatic surface.\n   */\n  threadId?: string;\n  turnId?: string;\n}\n\nexport interface AgentActionStopOptions {\n  /** Optional stable code surfaced in run metadata and tests. */\n  errorCode?: string;\n  /** Optional short tool-result text. Defaults to the user-facing message. */\n  toolResult?: string;\n}\n\n/**\n * Throw from an action when the agent should stop the current turn instead of\n * feeding the failure back to the model for another retry.\n */\nexport class AgentActionStopError extends Error {\n  readonly agentNativeStop = true;\n  readonly errorCode?: string;\n  readonly toolResult?: string;\n\n  constructor(message: string, options: AgentActionStopOptions = {}) {\n    super(message);\n    this.name = \"AgentActionStopError\";\n    this.errorCode = options.errorCode;\n    this.toolResult = options.toolResult;\n  }\n}\n\nexport function isAgentActionStopError(\n  err: unknown,\n): err is AgentActionStopError {\n  return (\n    err instanceof AgentActionStopError ||\n    Boolean(\n      err &&\n      typeof err === \"object\" &&\n      \"agentNativeStop\" in err &&\n      (err as { agentNativeStop?: unknown }).agentNativeStop === true,\n    )\n  );\n}\n\n/** HTTP exposure config for an action. */\nexport interface ActionHttpConfig {\n  /** HTTP method. Default: \"POST\". Use \"GET\" for read-only actions. */\n  method?: \"GET\" | \"POST\" | \"PUT\" | \"DELETE\";\n  /** Override route path under /_agent-native/actions/. Default: action filename. */\n  path?: string;\n}\n\n/** Explicit opt-in metadata for public agent protocols such as MCP or A2A. */\nexport interface PublicAgentActionConfig {\n  expose: boolean;\n  readOnly: boolean;\n  requiresAuth?: boolean;\n  isConsequential?: boolean;\n  title?: string;\n  description?: string;\n}\n\n/** A deep link an external agent (MCP / A2A) can surface to the user so they\n *  can open the produced/listed resource in the running app UI. */\nexport interface ActionDeepLink {\n  /** App-relative path (e.g. `/_agent-native/open?app=mail&view=inbox&...`)\n   *  or an absolute URL. The MCP layer prefixes the request origin when this\n   *  is relative, and may rewrite it to the `agentnative://` desktop scheme. */\n  url: string;\n  /** Human-readable label, e.g. \"Open draft in Mail\". */\n  label: string;\n  /** Optional view hint (matches the `navigate` command `view`). */\n  view?: string;\n}\n\n/** Builds a deep link from an action's args + result so external agents can\n *  surface an \"Open in <app> →\" link. MUST be pure and synchronous — no I/O,\n *  no awaits. Best-effort: a throw or null is swallowed and never fails the\n *  tool call. See the `external-agents` skill. */\nexport type ActionLinkBuilder = (ctx: {\n  args: Record<string, any>;\n  result: any;\n}) => ActionDeepLink | null | undefined;\n\nexport const MCP_APP_EXTENSION_ID = \"io.modelcontextprotocol/ui\" as const;\nexport const MCP_APP_MIME_TYPE = \"text/html;profile=mcp-app\" as const;\nexport const MCP_APP_RESOURCE_URI_META_KEY = \"ui/resourceUri\" as const;\n\nexport interface ActionMcpAppCsp {\n  connectDomains?: string[];\n  resourceDomains?: string[];\n  frameDomains?: string[];\n  baseUriDomains?: string[];\n}\n\nexport type ActionMcpAppCspBuilder = (ctx: {\n  actionName: string;\n  appId?: string;\n  requestOrigin?: string;\n}) => ActionMcpAppCsp | Promise<ActionMcpAppCsp>;\n\nexport interface ActionMcpAppPermissions {\n  camera?: Record<string, never>;\n  microphone?: Record<string, never>;\n  geolocation?: Record<string, never>;\n  clipboardWrite?: Record<string, never>;\n}\n\nexport interface ActionMcpAppResourceMeta {\n  csp?: ActionMcpAppCsp | ActionMcpAppCspBuilder;\n  permissions?: ActionMcpAppPermissions;\n  /**\n   * Host-specific sandbox domain hint. Do not set this to the app's normal\n   * production URL; app origins belong in CSP/open-link metadata. ChatGPT uses\n   * the separate `openai/widgetDomain` compatibility field.\n   */\n  domain?: string;\n  prefersBorder?: boolean;\n}\n\nexport type ActionMcpAppHtmlBuilder = (ctx: {\n  actionName: string;\n  appId?: string;\n  requestOrigin?: string;\n}) => string;\n\nexport interface ActionMcpAppResourceConfig {\n  /** `ui://` URI. Defaults to `ui://<app>/<action-name>`. */\n  uri?: string;\n  /** MCP resource name. Defaults to the action name. */\n  name?: string;\n  title?: string;\n  description?: string;\n  /**\n   * HTML5 document content for the MCP App resource. Keep this self-contained\n   * or declare any external origins in `csp`.\n   */\n  html: string | ActionMcpAppHtmlBuilder;\n  /** Defaults to the MCP Apps HTML MIME type. */\n  mimeType?: typeof MCP_APP_MIME_TYPE;\n  /** Extra resource/content metadata. `ui` is merged with the fields below. */\n  _meta?: Record<string, unknown>;\n  csp?: ActionMcpAppCsp | ActionMcpAppCspBuilder;\n  permissions?: ActionMcpAppPermissions;\n  /**\n   * Host-specific sandbox domain hint. Do not set this to the app's normal\n   * production URL; app origins belong in CSP/open-link metadata. ChatGPT uses\n   * the separate `openai/widgetDomain` compatibility field.\n   */\n  domain?: string;\n  prefersBorder?: boolean;\n}\n\nexport interface ActionMcpAppConfig {\n  /**\n   * Optional MCP Apps UI resource for hosts that render inline app iframes.\n   * Required when the action should open an interactive app view. Omit when\n   * you only need `compactCatalog: true` to keep a non-UI action visible in\n   * the compact catalog (e.g. read/update actions that should be callable from\n   * Claude.ai / ChatGPT without a dedicated iframe resource).\n   */\n  resource?: ActionMcpAppResourceConfig;\n  /**\n   * MCP Apps tool visibility. Defaults to model + app so the LLM can call the\n   * action and the app iframe can call it back through the host bridge.\n   */\n  visibility?: Array<\"model\" | \"app\">;\n  /**\n   * Rare escape hatch for MCP Apps chat hosts. By default OAuth callers with\n   * `mcp:apps` see the generic app tools (`open_app`, `list_apps`, etc.) so\n   * hosts do not ingest every action-specific UI resource. Set this only when\n   * this specific action must stay visible in that compact catalog.\n   */\n  compactCatalog?: boolean;\n}\n\n/** Schema definition for a single action parameter (legacy JSON schema style). */\nexport interface ParameterSchema {\n  type: string;\n  description?: string;\n  enum?: string[];\n}\n\n/** Infer runtime parameter types from a legacy parameter schema map. */\ntype InferParams<T extends Record<string, ParameterSchema> | undefined> =\n  T extends Record<string, ParameterSchema>\n    ? { [K in keyof T]?: string }\n    : Record<string, string>;\n\n/**\n * What to do when an action's RETURN value fails `outputSchema` validation.\n *\n * - `\"strict\"` — throw a clear error so a buggy action surfaces loudly.\n * - `\"warn\"` (default) — `console.warn` the issues and return the ORIGINAL\n *   result unchanged. Non-breaking: behavior never changes unless the dev\n *   opts into `\"strict\"` or `\"fallback\"`.\n * - `\"fallback\"` — return `outputFallback` in place of the invalid result.\n *\n * Mirrors Mastra/Flue structured-output handling, kept on the action layer.\n */\nexport type ActionOutputErrorStrategy = \"strict\" | \"warn\" | \"fallback\";\n\n// ---------------------------------------------------------------------------\n// Schema-based action options (new: Zod / Valibot / ArkType via Standard Schema)\n// ---------------------------------------------------------------------------\n\ninterface DefineActionWithSchema<\n  TSchema extends StandardSchemaV1,\n  TReturn = any,\n  TOutputSchema extends StandardSchemaV1 | undefined = undefined,\n> {\n  description: string;\n  /** Standard Schema-compatible schema (Zod, Valibot, ArkType). Provides runtime\n   *  validation and full TypeScript type inference for `run()` args. The schema is\n   *  also converted to JSON Schema for the Claude API tool definition. */\n  schema: TSchema;\n  /** Legacy parameters — ignored when `schema` is provided. */\n  parameters?: never;\n  /** Optional Standard Schema-compatible schema (Zod, Valibot, ArkType) the\n   *  action's RETURN value is validated against AFTER `run()` resolves. Borrowed\n   *  from Mastra/Flue structured-output. When omitted, behavior is byte-for-byte\n   *  unchanged. The mismatch handling is governed by `outputErrorStrategy`. */\n  outputSchema?: TOutputSchema;\n  /** What to do when the result fails `outputSchema`. Default: `\"warn\"`. */\n  outputErrorStrategy?: ActionOutputErrorStrategy;\n  /** Value returned in place of an invalid result when `outputErrorStrategy` is\n   *  `\"fallback\"`. Ignored for the other strategies. */\n  outputFallback?: TReturn;\n  run: (\n    args: StandardSchemaV1.InferOutput<TSchema>,\n    ctx?: ActionRunContext,\n  ) => Promise<TReturn> | TReturn;\n  http?: ActionHttpConfig | false;\n  /** Whether the HTTP/frontend action route must have an authenticated owner.\n   *  Defaults to true. Set to false only for metadata/read actions that safely\n   *  handle `ctx.userEmail` / `getRequestUserEmail()` being undefined. */\n  requiresAuth?: boolean;\n  /** Whether this action is exposed to the agent — the in-app assistant and the\n   *  app's MCP/A2A tool surfaces — as a callable tool. **Default-allow opt-out**:\n   *  `undefined` / `true` expose it; only an explicit `false` hides it from every\n   *  agent tool list while keeping it callable from the frontend / HTTP\n   *  (`useActionMutation`, `callAction`, `/_agent-native/actions/<name>`). Use\n   *  this for UI-only or purely programmatic actions you want behind the\n   *  framework's auth + action surface WITHOUT spending a slot in the model's\n   *  tool list. Distinct from `toolCallable`, which only governs the sandboxed\n   *  extension (\"tools\") iframe bridge. See `packages/core/docs/content/actions.md`. */\n  agentTool?: boolean;\n  /** If true, the framework will NOT emit a screen-refresh change event after a\n   *  successful call. Auto-inferred as `true` when `http.method === \"GET\"`.\n   *  Only set this manually when you need to override the inference — e.g. a\n   *  POST action that only reads data but can't use GET for a protocol reason. */\n  readOnly?: boolean;\n  /** If true, the agent may execute this action concurrently with other\n   *  read-only or parallel-safe tool calls emitted in the same model turn.\n   *  Only set this for mutating actions that are internally concurrency-safe\n   *  and order-independent for same-turn execution. */\n  parallelSafe?: boolean;\n  /** Whether this action may be invoked from the tools (Alpine iframe) bridge\n   *  via `appAction(name, params)` — see `packages/core/docs/content/actions.md`\n   *  (\"Tools Callability\"). **Default-allow opt-out**: undefined / `true` both\n   *  allow tool-iframe calls; only an explicit `false` returns 403. Set to\n   *  `false` for high-blast-radius admin operations (account deletion, org\n   *  membership changes, anything that modifies auth state) — used by the\n   *  framework's `share-resource`, `unshare-resource`, and\n   *  `set-resource-visibility` for defense-in-depth. Regular UI/agent/CLI/MCP/A2A\n   *  calls are unaffected. Enforced by the action HTTP route layer — see\n   *  `packages/core/src/server/action-routes.ts`. Audit reference: H5 in\n   *  `security-audit/05-tools-sandbox.md`. */\n  toolCallable?: boolean;\n  /** Explicit public-agent exposure metadata. Public web routes never imply\n   *  public MCP/A2A/OpenAPI tool exposure. Actions must opt in here and public\n   *  protocol mounts must still filter for safe, route-appropriate tools. */\n  publicAgent?: PublicAgentActionConfig;\n  /** Optional deep-link builder. When set, MCP/A2A surfaces append an\n   *  \"Open in <app> →\" link built from the call's args + result so the\n   *  external agent can drop the user into the running app at the right\n   *  view/record. Pure + sync + best-effort. See the `external-agents` skill. */\n  link?: ActionLinkBuilder;\n  /** Optional MCP Apps UI resource for hosts that can render inline\n   *  interactive app iframes. Text/deep-link tool results remain the fallback\n   *  for CLI and non-UI hosts. */\n  mcpApp?: ActionMcpAppConfig;\n  /** Optional native Agent-Native chat renderer for this action's structured\n   *  result. This is first-party React UI, not arbitrary HTML/JS. */\n  chatUI?: ActionChatUIConfig;\n  /**\n   * Opt-in human-in-the-loop approval gate. **Default off** — the framework\n   * intentionally keeps HITL approvals rare; almost every action should run\n   * without one. Set this only for high-consequence, outward-facing,\n   * hard-to-undo operations (the canonical example is actually sending an\n   * email). When `needsApproval` resolves truthy and the agent calls this\n   * action, the loop does NOT execute `run()`: it emits an `approval_required`\n   * event and stops the turn, waiting for a human to approve. The action runs\n   * only once the human re-issues the turn approving this specific call.\n   *\n   * - `true` — always require approval.\n   * - `(args, ctx) => boolean | Promise<boolean>` — require approval only when\n   *   the predicate returns true (e.g. only for external recipients, only\n   *   above a dollar threshold). Keep it pure + fast; thrown errors are treated\n   *   as \"approval required\" (fail closed).\n   */\n  needsApproval?:\n    | boolean\n    | ((\n        args: StandardSchemaV1.InferOutput<TSchema>,\n        ctx?: ActionRunContext,\n      ) => boolean | Promise<boolean>);\n  /**\n   * Audit-log configuration. **Default-on for mutating actions** — you only\n   * need this to tune capture: declare the mutated `target` (so the change\n   * shows up in the owner's audit trail) and/or a `summary`, opt a read-only\n   * action in via `onRead`, or opt a noisy action out via `enabled: false`.\n   * See the `audit-log` skill.\n   */\n  audit?: ActionAuditConfig;\n}\n\n// ---------------------------------------------------------------------------\n// Legacy parameter-based action options\n// ---------------------------------------------------------------------------\n\ninterface DefineActionWithParams<\n  TParams extends Record<string, ParameterSchema> | undefined =\n    | Record<string, ParameterSchema>\n    | undefined,\n  TReturn = any,\n> {\n  description: string;\n  /** Flat map of parameter names to their schema. Automatically wrapped in\n   *  `{ type: \"object\", properties: ... }` for the Claude API. */\n  parameters?: TParams;\n  /** Standard Schema — not used in this overload. */\n  schema?: never;\n  /** Optional Standard Schema-compatible schema the action's RETURN value is\n   *  validated against AFTER `run()` resolves. See the schema overload above.\n   *  When omitted, behavior is byte-for-byte unchanged. */\n  outputSchema?: StandardSchemaV1;\n  /** What to do when the result fails `outputSchema`. Default: `\"warn\"`. */\n  outputErrorStrategy?: ActionOutputErrorStrategy;\n  /** Value returned in place of an invalid result when `outputErrorStrategy` is\n   *  `\"fallback\"`. Ignored for the other strategies. */\n  outputFallback?: TReturn;\n  run: (\n    args: InferParams<TParams>,\n    ctx?: ActionRunContext,\n  ) => Promise<TReturn> | TReturn;\n  http?: ActionHttpConfig | false;\n  /** Whether the HTTP/frontend action route must have an authenticated owner.\n   *  Defaults to true. See the schema overload above. */\n  requiresAuth?: boolean;\n  /** Whether this action is exposed to the agent as a callable tool. Only an\n   *  explicit `false` hides it from every agent tool list while keeping it\n   *  frontend/HTTP-callable. See the schema overload above and actions.md. */\n  agentTool?: boolean;\n  /** If true, the framework will NOT emit a screen-refresh change event after a\n   *  successful call. Auto-inferred as `true` when `http.method === \"GET\"`. */\n  readOnly?: boolean;\n  /** If true, the agent may execute this action concurrently with other\n   *  read-only or parallel-safe tool calls emitted in the same model turn. */\n  parallelSafe?: boolean;\n  /** Whether this action may be invoked from the tools (Alpine iframe) bridge\n   *  via `appAction(name, params)`. See the schema overload above for details\n   *  and the `toolCallable` section in actions.md. */\n  toolCallable?: boolean;\n  /** Explicit public-agent exposure metadata. See schema overload above. */\n  publicAgent?: PublicAgentActionConfig;\n  /** Optional deep-link builder. See schema overload above. */\n  link?: ActionLinkBuilder;\n  /** Optional MCP Apps UI resource. See schema overload above. */\n  mcpApp?: ActionMcpAppConfig;\n  /** Optional native Agent-Native chat renderer. See schema overload above. */\n  chatUI?: ActionChatUIConfig;\n  /** Opt-in human-in-the-loop approval gate (default off). See the schema\n   *  overload above for full semantics. */\n  needsApproval?:\n    | boolean\n    | ((\n        args: InferParams<TParams>,\n        ctx?: ActionRunContext,\n      ) => boolean | Promise<boolean>);\n  /** Audit-log configuration (default-on for mutations). See the schema\n   *  overload above and the `audit-log` skill. */\n  audit?: ActionAuditConfig;\n}\n\n// ---------------------------------------------------------------------------\n// Return type — carries schema-inferred input + run return for client inference\n// ---------------------------------------------------------------------------\n\n/**\n * Opaque typed wrapper returned by `defineAction`. The type parameters carry\n * the schema-inferred input and the `run` return type so that:\n *\n * - The generated `.generated/action-types.d.ts` can extract them via\n *   `typeof import(\"../actions/my-action\").default.run` and augment\n *   `ActionRegistry` with concrete param/result types.\n * - `useActionQuery` / `useActionMutation` / `callAction` in the client hooks\n *   flow the correct types end-to-end without manual generic annotations.\n *\n * Runtime shape is unchanged — this is a declaration-only wrapper.\n */\nexport interface ActionDefinition<TInput, TReturn> {\n  /**\n   * Typed run function — declaration only; infer input/return from this.\n   * `TInput` is the schema's input type (optional defaults allowed at call\n   * sites); `TReturn` is the awaited result type of the run callback.\n   */\n  readonly run: (\n    args: TInput,\n    ctx?: ActionRunContext,\n  ) => Promise<TReturn> | TReturn;\n  /** @internal Framework use only — do not call directly. */\n  readonly tool: import(\"./agent/types.js\").ActionTool;\n  readonly http?: ActionHttpConfig | false;\n  readonly requiresAuth?: boolean;\n  readonly agentTool?: boolean;\n  readonly readOnly?: boolean;\n  readonly parallelSafe?: boolean;\n  readonly toolCallable?: boolean;\n  readonly publicAgent?: PublicAgentActionConfig;\n  readonly link?: ActionLinkBuilder;\n  readonly mcpApp?: ActionMcpAppConfig;\n  readonly chatUI?: ActionChatUIConfig;\n  /** Standard Schema the action's RETURN value is validated against after\n   *  `run()` resolves. Present only when the caller passed `outputSchema`. */\n  readonly outputSchema?: StandardSchemaV1;\n  /** Resolved output-mismatch strategy. Present only when `outputSchema` is\n   *  set; defaults to `\"warn\"`. */\n  readonly outputErrorStrategy?: ActionOutputErrorStrategy;\n  /** Value substituted for an invalid result under the `\"fallback\"` strategy. */\n  readonly outputFallback?: TReturn;\n  /** Opt-in human-in-the-loop approval gate (default off). When truthy, the\n   *  agent loop emits `approval_required` and pauses instead of executing this\n   *  action until a human approves the specific call. */\n  readonly needsApproval?:\n    | boolean\n    | ((args: TInput, ctx?: ActionRunContext) => boolean | Promise<boolean>);\n  /** Resolved audit-log configuration. Present only when the caller passed\n   *  `audit`. The audit capture wrapper is baked into `run`; this field is for\n   *  introspection. */\n  readonly audit?: ActionAuditConfig;\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Define an agent action. Place in `actions/` directory — auto-discovered by the framework.\n *\n * Supports two modes:\n *\n * **Schema mode (recommended)** — pass a Standard Schema-compatible schema (Zod, Valibot,\n * ArkType) for runtime validation and full type inference:\n *\n * ```ts\n * import { defineAction } from \"@agent-native/core\";\n * import { z } from \"zod\";\n *\n * export default defineAction({\n *   description: \"Create a form\",\n *   schema: z.object({\n *     title: z.string().describe(\"Form title\"),\n *     status: z.enum([\"draft\", \"published\", \"closed\"]).default(\"draft\"),\n *   }),\n *   run: async (args) => {\n *     // args is { title: string; status: \"draft\" | \"published\" | \"closed\" }\n *     // Already validated — invalid inputs never reach here\n *   },\n * });\n * ```\n *\n * **Parameters mode (legacy)** — pass raw JSON schema-like parameter definitions:\n *\n * ```ts\n * export default defineAction({\n *   description: \"List events\",\n *   parameters: {\n *     from: { type: \"string\", description: \"Start date\" },\n *   },\n *   run: async (args) => { ... },\n * });\n * ```\n */\nexport function defineAction<\n  TSchema extends StandardSchemaV1,\n  TReturn,\n  TOutputSchema extends StandardSchemaV1 | undefined = undefined,\n>(\n  options: DefineActionWithSchema<TSchema, TReturn, TOutputSchema>,\n): ActionDefinition<StandardSchemaV1.InferInput<TSchema>, TReturn>;\nexport function defineAction<\n  TParams extends Record<string, ParameterSchema> | undefined,\n  TReturn,\n>(\n  options: DefineActionWithParams<TParams, TReturn>,\n): ActionDefinition<InferParams<TParams>, TReturn>;\nexport function defineAction(options: any) {\n  const hasSchema = options.schema && \"~standard\" in options.schema;\n\n  // Build tool definition for the Claude API\n  let toolParameters: ActionTool[\"parameters\"];\n  if (hasSchema) {\n    // Convert Standard Schema to JSON Schema for Claude\n    toolParameters = schemaToJsonSchema(options.schema, options.description);\n  } else if (options.parameters) {\n    toolParameters = {\n      type: \"object\" as const,\n      properties: options.parameters,\n    };\n  }\n\n  // Wrap run() with INPUT validation when schema is provided.\n  // Pass toolParameters so the validation error can echo the expected signature\n  // (required vs optional fields) and help the caller self-correct.\n  const inputValidatedRun = hasSchema\n    ? wrapWithValidation(options.schema, options.run, toolParameters)\n    : options.run;\n\n  // Then wrap with OUTPUT validation when an outputSchema is provided. This\n  // composes AROUND the input-validated run so the order is: validate input →\n  // run() → validate output. When no outputSchema is present, the run is passed\n  // through untouched and behavior is byte-for-byte unchanged.\n  const hasOutputSchema =\n    options.outputSchema && \"~standard\" in options.outputSchema;\n  const outputErrorStrategy: ActionOutputErrorStrategy =\n    options.outputErrorStrategy === \"strict\" ||\n    options.outputErrorStrategy === \"warn\" ||\n    options.outputErrorStrategy === \"fallback\"\n      ? options.outputErrorStrategy\n      : \"warn\";\n  const run = hasOutputSchema\n    ? wrapWithOutputValidation(\n        options.outputSchema,\n        inputValidatedRun,\n        outputErrorStrategy,\n        options.outputFallback,\n        options.description,\n      )\n    : inputValidatedRun;\n\n  // Auto-infer readOnly from http.method === \"GET\" unless explicitly set.\n  // GET actions are idempotent reads; their completion should NOT trigger a\n  // screen refresh. Everything else is assumed to mutate — the dispatcher\n  // emits a change event on success so the UI auto-refetches its queries.\n  const httpConfig = options.http as ActionHttpConfig | false | undefined;\n  const inferredReadOnly =\n    httpConfig !== false &&\n    httpConfig !== undefined &&\n    httpConfig.method === \"GET\";\n  // Explicit `readOnly` (true OR false) wins. Otherwise infer from http.method.\n  // We store the resolved boolean so downstream checks can trust entry.readOnly\n  // without re-running method inference — including when a caller explicitly\n  // passes readOnly:false to override a GET (rare but valid).\n  const readOnly: boolean | undefined =\n    typeof options.readOnly === \"boolean\"\n      ? options.readOnly\n      : inferredReadOnly\n        ? true\n        : undefined;\n\n  // Audit: wrap the validated run so every mutating call records an audit\n  // event (who/what/when/from-where, and for the agent which run). Default-on\n  // for mutations; read-only actions opt in via `audit.onRead`. The wrapper\n  // lazily imports the DB-touching recorder so `action.ts` keeps no static DB\n  // dependency.\n  const auditConfig = normalizeAuditConfig(options.audit);\n  const finalRun = resolveAuditAttach(auditConfig, readOnly)\n    ? wrapRunWithAudit(run, auditConfig)\n    : run;\n\n  // toolCallable: thread through whatever the caller declared. We DO NOT\n  // default to `true` here — the absence of an explicit field is meaningful\n  // to the tools bridge: it lets us emit a one-shot warning when an action\n  // without a declared `toolCallable` flag is invoked from a tool, so the\n  // ecosystem can migrate over time. The bridge treats `undefined` as\n  // \"implicit allow with a deprecation warning\"; only an explicit `false`\n  // refuses the call. See `extensions/routes.ts` and audit H5.\n  const toolCallable: boolean | undefined =\n    typeof options.toolCallable === \"boolean\"\n      ? options.toolCallable\n      : undefined;\n  // agentTool: default-allow opt-out. Only an explicit `false` hides the action\n  // from the agent tool surfaces; undefined is preserved (treated as exposed).\n  const agentTool: boolean | undefined =\n    typeof options.agentTool === \"boolean\" ? options.agentTool : undefined;\n  const parallelSafe: boolean | undefined =\n    typeof options.parallelSafe === \"boolean\"\n      ? options.parallelSafe\n      : undefined;\n  const publicAgent: PublicAgentActionConfig | undefined =\n    options.publicAgent &&\n    typeof options.publicAgent === \"object\" &&\n    !Array.isArray(options.publicAgent)\n      ? options.publicAgent\n      : undefined;\n  const link: ActionLinkBuilder | undefined =\n    typeof options.link === \"function\" ? options.link : undefined;\n  const mcpApp: ActionMcpAppConfig | undefined = (() => {\n    if (\n      !options.mcpApp ||\n      typeof options.mcpApp !== \"object\" ||\n      Array.isArray(options.mcpApp)\n    ) {\n      return undefined;\n    }\n    // compactCatalog-only: no resource required; just keep the flag.\n    if (options.mcpApp.compactCatalog === true && !options.mcpApp.resource) {\n      return options.mcpApp as ActionMcpAppConfig;\n    }\n    // Full resource: validate html is present.\n    if (\n      options.mcpApp.resource &&\n      typeof options.mcpApp.resource === \"object\" &&\n      !Array.isArray(options.mcpApp.resource) &&\n      (typeof options.mcpApp.resource.html === \"string\" ||\n        typeof options.mcpApp.resource.html === \"function\")\n    ) {\n      return options.mcpApp as ActionMcpAppConfig;\n    }\n    return undefined;\n  })();\n  const chatUI = normalizeActionChatUIConfig(options.chatUI);\n\n  return {\n    tool: {\n      description: options.description,\n      parameters: toolParameters,\n    },\n    run: finalRun,\n    ...(hasSchema ? { schema: options.schema } : {}),\n    ...(options.http !== undefined ? { http: options.http } : {}),\n    ...(typeof options.requiresAuth === \"boolean\"\n      ? { requiresAuth: options.requiresAuth }\n      : {}),\n    ...(typeof agentTool === \"boolean\" ? { agentTool } : {}),\n    ...(typeof readOnly === \"boolean\" ? { readOnly } : {}),\n    ...(typeof parallelSafe === \"boolean\" ? { parallelSafe } : {}),\n    ...(typeof toolCallable === \"boolean\" ? { toolCallable } : {}),\n    ...(publicAgent ? { publicAgent } : {}),\n    ...(link ? { link } : {}),\n    ...(mcpApp ? { mcpApp } : {}),\n    ...(chatUI ? { chatUI } : {}),\n    ...(hasOutputSchema\n      ? {\n          outputSchema: options.outputSchema,\n          outputErrorStrategy,\n          ...(outputErrorStrategy === \"fallback\"\n            ? { outputFallback: options.outputFallback }\n            : {}),\n        }\n      : {}),\n    ...(typeof options.needsApproval === \"boolean\" ||\n    typeof options.needsApproval === \"function\"\n      ? { needsApproval: options.needsApproval }\n      : {}),\n    ...(auditConfig ? { audit: auditConfig } : {}),\n  };\n}\n\n/**\n * Wrap an action's (already input/output-validated) run so each call records an\n * audit event after it resolves — on success and on error. Best-effort: the\n * recorder swallows its own failures and the original result/throw is always\n * preserved, so auditing can never change an action's behavior. The DB-touching\n * recorder is imported lazily so merely defining an action pulls in no DB code.\n */\nfunction wrapRunWithAudit(\n  run: (args: any, ctx?: ActionRunContext) => any,\n  auditConfig: ActionAuditConfig | undefined,\n): (args: any, ctx?: ActionRunContext) => Promise<any> {\n  return async function auditedRun(args: any, ctx?: ActionRunContext) {\n    let result: any;\n    let error: unknown;\n    let threw = false;\n    try {\n      result = await run(args, ctx);\n    } catch (err) {\n      error = err;\n      threw = true;\n    }\n    try {\n      const { recordActionAudit } = await import(\"./audit/record.js\");\n      await recordActionAudit(\n        threw\n          ? { config: auditConfig, args, ctx, status: \"error\", error }\n          : { config: auditConfig, args, ctx, status: \"success\", result },\n      );\n    } catch {\n      // Recorder failed to load/run — never affect the action.\n    }\n    if (threw) throw error;\n    return result;\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Schema → JSON Schema conversion\n// ---------------------------------------------------------------------------\n\n/**\n * Convert a Standard Schema to JSON Schema for the Claude API.\n * Tries vendor-specific toJSONSchema first (Zod v4), then falls back\n * to a basic introspection of the schema shape.\n */\nfunction schemaToJsonSchema(\n  schema: StandardSchemaV1,\n  _description?: string,\n): ActionTool[\"parameters\"] {\n  const s = schema as any;\n\n  // Prefer Zod's own JSON Schema output — it handles descriptions,\n  // enums, coerce, and all type wrappers correctly.\n  if (s[\"~standard\"]?.jsonSchema?.input) {\n    try {\n      const result = s[\"~standard\"].jsonSchema.input({\n        target: \"draft-07\",\n      }) as any;\n      // Strip $schema — the Claude API validates against draft 2020-12\n      // and a mismatched $schema declaration can cause rejections.\n      if (result && typeof result === \"object\") {\n        delete result.$schema;\n      }\n      return result as ActionTool[\"parameters\"];\n    } catch {\n      // Fall through to manual converter\n    }\n  }\n\n  // Fallback: manual conversion from Zod v4 internal defs\n  if (s._zod?.def) {\n    return zodDefToJsonSchema(s._zod.def);\n  }\n\n  // Last resort: empty object schema\n  return { type: \"object\" as const, properties: {} };\n}\n\n/**\n * Convert a Zod v4 internal def to JSON Schema.\n * Handles the common types used in action parameters.\n */\nfunction zodDefToJsonSchema(def: any): any {\n  const type = def.type;\n\n  if (type === \"object\") {\n    const properties: Record<string, any> = {};\n    const required: string[] = [];\n    const shape = def.shape;\n    if (shape) {\n      for (const [key, fieldSchema] of Object.entries(shape) as any[]) {\n        const fieldDef = fieldSchema?._zod?.def;\n        if (fieldDef) {\n          const prop = zodDefToJsonSchema(fieldDef);\n          // Zod v4 stores .describe() on the schema object, not in the def\n          const desc = fieldSchema?.description;\n          if (desc && !prop.description) prop.description = desc;\n          properties[key] = prop;\n          if (\n            fieldDef.type !== \"optional\" &&\n            fieldDef.type !== \"default\" &&\n            fieldDef.type !== \"nullable\"\n          ) {\n            required.push(key);\n          }\n        }\n      }\n    }\n    const result: any = { type: \"object\", properties };\n    if (required.length > 0) result.required = required;\n    return result;\n  }\n\n  if (type === \"string\") {\n    const result: any = { type: \"string\" };\n    if (def.description) result.description = def.description;\n    return result;\n  }\n\n  if (type === \"number\" || type === \"float\" || type === \"int\") {\n    const result: any = { type: type === \"int\" ? \"integer\" : \"number\" };\n    if (def.description) result.description = def.description;\n    return result;\n  }\n\n  if (type === \"boolean\") {\n    const result: any = { type: \"boolean\" };\n    if (def.description) result.description = def.description;\n    return result;\n  }\n\n  if (type === \"enum\") {\n    // Zod v4 stores enum entries as an object {a: \"a\", b: \"b\"};\n    // JSON Schema requires an array.\n    const entries = def.entries;\n    const enumValues = Array.isArray(entries)\n      ? entries\n      : typeof entries === \"object\" && entries !== null\n        ? Object.values(entries)\n        : entries;\n    const result: any = { type: \"string\", enum: enumValues };\n    if (def.description) result.description = def.description;\n    return result;\n  }\n\n  if (type === \"literal\") {\n    return { type: typeof def.value, enum: [def.value] };\n  }\n\n  if (type === \"array\") {\n    const result: any = { type: \"array\" };\n    if (def.element?._zod?.def) {\n      result.items = zodDefToJsonSchema(def.element._zod.def);\n    }\n    if (def.description) result.description = def.description;\n    return result;\n  }\n\n  if (type === \"optional\") {\n    if (def.innerType?._zod?.def) {\n      return zodDefToJsonSchema(def.innerType._zod.def);\n    }\n  }\n\n  if (type === \"default\") {\n    if (def.innerType?._zod?.def) {\n      const inner = zodDefToJsonSchema(def.innerType._zod.def);\n      inner.default =\n        typeof def.defaultValue === \"function\"\n          ? def.defaultValue()\n          : def.defaultValue;\n      return inner;\n    }\n  }\n\n  if (type === \"nullable\") {\n    if (def.innerType?._zod?.def) {\n      const inner = zodDefToJsonSchema(def.innerType._zod.def);\n      // Surface null as a valid value so the model knows it may pass null\n      // (and doesn't treat the field as a non-nullable required string).\n      return { anyOf: [inner, { type: \"null\" }] };\n    }\n  }\n\n  if (type === \"union\") {\n    if (def.options?.length) {\n      // Check if it's a simple enum-like union of literals\n      const allLiterals = def.options.every(\n        (o: any) => o?._zod?.def?.type === \"literal\",\n      );\n      if (allLiterals) {\n        const values = def.options.map((o: any) => o._zod.def.value);\n        const jsonTypeOf = (v: any) =>\n          typeof v === \"number\"\n            ? \"number\"\n            : typeof v === \"boolean\"\n              ? \"boolean\"\n              : \"string\";\n        const uniqueTypes = [...new Set(values.map(jsonTypeOf))];\n        if (uniqueTypes.length === 1) {\n          // Homogeneous literal union (e.g. all numbers) — derive the JSON\n          // type instead of hardcoding \"string\", which would contradict the\n          // enum values and make the model coerce/round-trip them wrongly.\n          return { type: uniqueTypes[0], enum: values };\n        }\n        // Mixed literal types: emit anyOf so each branch stays self-consistent.\n        return {\n          anyOf: values.map((v: any) => ({ type: jsonTypeOf(v), enum: [v] })),\n        };\n      }\n      return {\n        anyOf: def.options.map((o: any) =>\n          zodDefToJsonSchema(o._zod?.def ?? {}),\n        ),\n      };\n    }\n  }\n\n  // z.preprocess / z.pipe / .superRefine / .transform all produce a \"pipe\"\n  // def with `in` (pre-transform) and `out` (post-transform). For JSON Schema\n  // purposes, use `out` — it reflects the validated output shape the model\n  // should populate.\n  if (type === \"pipe\") {\n    if (def.out?._zod?.def) {\n      return zodDefToJsonSchema(def.out._zod.def);\n    }\n    if (def.in?._zod?.def) {\n      return zodDefToJsonSchema(def.in._zod.def);\n    }\n  }\n\n  // Fallback\n  return { type: \"string\" };\n}\n\n// ---------------------------------------------------------------------------\n// Runtime validation wrapper\n// ---------------------------------------------------------------------------\n\nconst NO_COERCE = Symbol(\"no-coerce\");\n\n/**\n * Coerce a single stringified value to one of the JSON-schema types the field\n * expects. Returns NO_COERCE when nothing safe applies, so the caller leaves\n * the original value untouched and the normal validation error still surfaces.\n */\nfunction coerceStringToSchemaType(raw: string, types: string[]): unknown {\n  const trimmed = raw.trim();\n  if (types.includes(\"boolean\")) {\n    if (trimmed === \"true\") return true;\n    if (trimmed === \"false\") return false;\n  }\n  if (\n    (types.includes(\"array\") &&\n      trimmed.startsWith(\"[\") &&\n      trimmed.endsWith(\"]\")) ||\n    (types.includes(\"object\") &&\n      trimmed.startsWith(\"{\") &&\n      trimmed.endsWith(\"}\"))\n  ) {\n    try {\n      const parsed = JSON.parse(trimmed);\n      if (types.includes(\"array\") && Array.isArray(parsed)) return parsed;\n      if (\n        types.includes(\"object\") &&\n        parsed &&\n        typeof parsed === \"object\" &&\n        !Array.isArray(parsed)\n      ) {\n        return parsed;\n      }\n    } catch {\n      // fall through — leave the original so validation reports the real error\n    }\n  }\n  if (\n    (types.includes(\"number\") || types.includes(\"integer\")) &&\n    trimmed !== \"\" &&\n    Number.isFinite(Number(trimmed))\n  ) {\n    const n = Number(trimmed);\n    if (types.includes(\"number\") || Number.isInteger(n)) return n;\n  }\n  return NO_COERCE;\n}\n\n/**\n * Defensively coerce stringified action arguments to the types the schema\n * expects. Two callers depend on this:\n *\n *   1. Model gateways (notably Builder's Gemini-backed gateway) hand back\n *      structured tool-call arguments as JSON strings — an array param arrives\n *      as `\"[{...}]\"`, a boolean as `\"true\"`.\n *   2. GET actions called from the browser via `useActionQuery` / `callAction`.\n *      Those serialize params into the query string, where `URLSearchParams`\n *      stringifies everything — so `includeSeries: true` arrives as the string\n *      `\"true\"` and `limit: 5` as `\"5\"` (see `action-routes.ts`).\n *\n * In both cases Standard Schema (zod) `validate` does not coerce, so the call\n * fails validation (\"expected boolean, received string\") — the agent thrashes\n * retrying shapes and the frontend query errors. We only touch a string value\n * when the schema expects a non-string type and the string parses cleanly to\n * it; anything ambiguous (schema also allows string) or unparseable is left\n * as-is. Operates on top-level properties only — once an array/object param is\n * parsed, its nested members are already native and validate normally.\n *\n * Do NOT narrow this to \"gateway-only\": the GET query-string path relies on it\n * too, and `action-routes.spec.ts` guards that round-trip.\n */\nfunction coerceGatewayStringifiedArgs(\n  args: unknown,\n  parameters?: ActionTool[\"parameters\"],\n): unknown {\n  const properties = parameters?.properties as\n    | Record<string, { type?: string | string[] }>\n    | undefined;\n  if (!properties) return args;\n  if (!args || typeof args !== \"object\" || Array.isArray(args)) return args;\n  let out: Record<string, unknown> | null = null;\n  for (const [key, raw] of Object.entries(args as Record<string, unknown>)) {\n    if (typeof raw !== \"string\") continue;\n    const spec = properties[key];\n    if (!spec) continue;\n    const types = Array.isArray(spec.type)\n      ? spec.type\n      : spec.type\n        ? [spec.type]\n        : [];\n    // No declared type, or the field legitimately accepts a string → leave it.\n    if (types.length === 0 || types.includes(\"string\")) continue;\n    const coerced = coerceStringToSchemaType(raw, types);\n    if (coerced === NO_COERCE) continue;\n    if (!out) out = { ...(args as Record<string, unknown>) };\n    out[key] = coerced;\n  }\n  return out ?? args;\n}\n\n/**\n * Wrap an action's run function with schema validation.\n * Invalid inputs get a clear error message (including what was actually passed)\n * so the agent can see its own mistake and correct it on the next turn.\n */\nfunction wrapWithValidation(\n  schema: StandardSchemaV1,\n  run: Function,\n  toolParameters?: ActionTool[\"parameters\"],\n): (args: any, ctx?: ActionRunContext) => any {\n  return async (args: any, ctx?: ActionRunContext) => {\n    args = coerceGatewayStringifiedArgs(args, toolParameters);\n    const result = await schema[\"~standard\"].validate(args);\n    if (result.issues) {\n      // Split issues into \"missing required field\" vs other validation errors\n      // so the error message reads naturally rather than as \"fieldName: Required\".\n      const missing: string[] = [];\n      const other: string[] = [];\n      for (const issue of result.issues) {\n        const pathStr = issue.path\n          ? issue.path.map((p) => (typeof p === \"object\" ? p.key : p)).join(\".\")\n          : \"\";\n        const msg = String(issue.message ?? \"\");\n        // Zod emits \"Required\" for missing fields; other libraries may use\n        // similar wording. Treat any variant as \"missing\".\n        if (\n          pathStr &&\n          (msg === \"Required\" ||\n            /invalid.*undefined/i.test(msg) ||\n            /expected.*received undefined/i.test(msg))\n        ) {\n          missing.push(pathStr);\n        } else {\n          other.push(pathStr ? `${pathStr}: ${msg}` : msg);\n        }\n      }\n\n      const parts: string[] = [];\n      if (missing.length > 0) {\n        parts.push(\n          `Missing required parameter${missing.length === 1 ? \"\" : \"s\"}: ${missing.join(\", \")}`,\n        );\n      }\n      if (other.length > 0) {\n        parts.push(other.join(\"; \"));\n      }\n\n      // Echo the args that were actually passed so the caller (usually an\n      // agent) can see exactly what it sent and fix its next call.\n      let received: string;\n      try {\n        received = JSON.stringify(args);\n        if (received.length > 500) received = received.slice(0, 500) + \"…\";\n      } catch {\n        received = String(args);\n      }\n\n      // Also show the EXPECTED signature so the agent doesn't have to guess.\n      // Format: `{ deckId*: string, content*: string, slideId?: string, ... }`\n      // where `*` = required, `?` = optional.\n      let expected = \"\";\n      if (toolParameters?.properties) {\n        const required = new Set(toolParameters.required ?? []);\n        const sig = Object.entries(toolParameters.properties)\n          .map(([k, v]) => {\n            const mark = required.has(k) ? \"*\" : \"?\";\n            const type = (v as { type?: string }).type ?? \"any\";\n            return `${k}${mark}: ${type}`;\n          })\n          .join(\", \");\n        if (sig)\n          expected = ` Expected: { ${sig} } (where * = required, ? = optional).`;\n      }\n\n      throw new Error(\n        `Invalid action parameters — ${parts.join(\". \")}. Received: ${received}.${expected}`,\n      );\n    }\n    return run((result as StandardSchemaV1.SuccessResult<any>).value, ctx);\n  };\n}\n\n/**\n * Wrap an action's run function with RETURN-value validation. Runs AFTER the\n * (already input-validated) `run` resolves and validates the result against\n * `outputSchema` using the Standard Schema `~standard.validate` contract.\n *\n * Behavior is governed by `strategy`:\n * - `\"strict\"`  — throw a clear error when the result doesn't match.\n * - `\"warn\"`    — `console.warn` the issues and return the ORIGINAL result\n *                 unchanged (default; never alters runtime behavior).\n * - `\"fallback\"`— return `fallback` in place of the invalid result.\n *\n * On success the validated value is returned (so schema-applied coercion /\n * defaults take effect, mirroring the input path).\n */\nfunction wrapWithOutputValidation(\n  outputSchema: StandardSchemaV1,\n  run: (args: any, ctx?: ActionRunContext) => any,\n  strategy: ActionOutputErrorStrategy,\n  fallback: unknown,\n  description?: string,\n): (args: any, ctx?: ActionRunContext) => any {\n  return async (args: any, ctx?: ActionRunContext) => {\n    const output = await run(args, ctx);\n    const result = await outputSchema[\"~standard\"].validate(output);\n\n    if (!result.issues) {\n      // Return the validated value so coercion / defaults defined on the\n      // outputSchema are applied, consistent with the input path.\n      return (result as StandardSchemaV1.SuccessResult<any>).value;\n    }\n\n    const issues = result.issues\n      .map((issue) => {\n        const pathStr = issue.path\n          ? issue.path.map((p) => (typeof p === \"object\" ? p.key : p)).join(\".\")\n          : \"\";\n        const msg = String(issue.message ?? \"\");\n        return pathStr ? `${pathStr}: ${msg}` : msg;\n      })\n      .join(\"; \");\n    const label = description ? ` (${description})` : \"\";\n    const summary = `Action output did not match outputSchema${label}: ${issues}`;\n\n    if (strategy === \"strict\") {\n      throw new Error(summary);\n    }\n    if (strategy === \"fallback\") {\n      return fallback;\n    }\n    // \"warn\" (default): surface the mismatch but never change behavior.\n    console.warn(summary);\n    return output;\n  };\n}\n"]}

package/dist/agent/context-xray/schema.d.ts

@@ -45,7 +45,7 @@ export declare const contextDirectives: import("drizzle-orm/sqlite-core").SQLite
             tableName: "context_directives";
             dataType: "string";
             columnType: "SQLiteText";
-            data: "org" | "private" | "public";
+            data: "private" | "org" | "public";
             driverParam: string;
             notNull: true;
             hasDefault: true;

package/dist/agent/durable-background.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Framework route the background function actually runs — sibling to
+ * `AGENT_TEAM_PROCESS_RUN_PATH`. Reached *through* the Netlify background
+ * function, so it inherits the 15-min budget.
+ */
+export declare const AGENT_CHAT_PROCESS_RUN_PATH = "/_agent-native/agent-chat/_process-run";
+/** Env flag (off by default) that opts an app into durable background runs. */
+export declare const AGENT_CHAT_DURABLE_BACKGROUND_ENV = "AGENT_CHAT_DURABLE_BACKGROUND";
+/**
+ * Body field the foreground handler injects when self-dispatching to the
+ * background processor. Its presence is how the re-entered handler knows it is
+ * the background worker (run inline with the background soft-timeout; do NOT
+ * re-claim the slot or re-dispatch). Untrusted on its own — the route also
+ * verifies the HMAC token before invoking the handler.
+ */
+export declare const AGENT_CHAT_BACKGROUND_RUN_FIELD = "__backgroundRun";
+/**
+ * Mirror of run-manager's private `isHostedRuntime`. Kept in sync deliberately:
+ * the durable-background gate must agree with the soft-timeout regime about
+ * what "hosted" means.
+ */
+export declare function isHostedRuntimeForDurableBackground(): boolean;
+/**
+ * The single gate. True only when the flag is on AND the runtime is hosted AND
+ * A2A_SECRET is configured. False otherwise — and false means the current
+ * synchronous behavior is used, unchanged.
+ */
+export declare function isAgentChatDurableBackgroundEnabled(): boolean;
+/** Decision returned by `prepareProcessRunRequest`. */
+export type ProcessRunPreparation = {
+    ok: true;
+    /** The pre-claimed run id the background worker must reuse. */
+    runId: string;
+    /** Body to stash for the re-entered handler (marker guaranteed present). */
+    body: Record<string, unknown>;
+} | {
+    ok: false;
+    /** HTTP status the route should return. */
+    status: number;
+    /** Error payload. */
+    error: string;
+};
+/**
+ * Pure, transport-agnostic core of the `_process-run` route: validate the body,
+ * authenticate the HMAC self-dispatch, and produce the body the re-entered
+ * agent-chat handler should run as the background worker.
+ *
+ * Auth policy mirrors the agent-teams processor exactly:
+ *   - `A2A_SECRET` set → require a valid `verifyInternalToken(runId, token)`.
+ *   - no secret but a production runtime → refuse (503) — never run unsigned in
+ *     prod.
+ *   - no secret + non-prod (local dev) → allow unsigned; the SQL atomic claim
+ *     in the worker still prevents double-processing.
+ *
+ * Extracted from the route handler so the auth + marker-prep decision is unit
+ * testable without booting the whole Nitro plugin. The route only adds body
+ * reading and the final handler invocation around this.
+ */
+export declare function prepareProcessRunRequest(body: unknown, authHeader: string | undefined): ProcessRunPreparation;
+//# sourceMappingURL=durable-background.d.ts.map

package/dist/agent/durable-background.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"durable-background.d.ts","sourceRoot":"","sources":["../../src/agent/durable-background.ts"],"names":[],"mappings":"AAmCA;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,2CACE,CAAC;AAE3C,+EAA+E;AAC/E,eAAO,MAAM,iCAAiC,kCACb,CAAC;AAElC;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,oBAAoB,CAAC;AAEjE;;;;GAIG;AACH,wBAAgB,mCAAmC,IAAI,OAAO,CAsB7D;AAiBD;;;;GAIG;AACH,wBAAgB,mCAAmC,IAAI,OAAO,CAM7D;AAED,uDAAuD;AACvD,MAAM,MAAM,qBAAqB,GAC7B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEN;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,OAAO,EACb,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,qBAAqB,CA0CvB"}