@angri450/zvec-grep 0.2.2

package/README_CN.md

@@ -0,0 +1,297 @@
+<p align="right">
+  <a href="./README.md">English</a> | 中文
+</p>
+
+<div align="center">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="./.github/assets/zg-logo-dark.svg">
+    <img src="./.github/assets/zg-logo.svg" width="150" alt="zg logo" />
+  </picture>
+  <p><strong>Know the words—or don’t. Just zg.</strong></p>
+  <p>面向人与 Agent 的本地优先统一检索层。</p>
+
+  <p>
+    <a href="https://www.npmjs.com/package/@zvec/zvec-grep"><img src="https://img.shields.io/npm/v/@zvec/zvec-grep.svg" alt="npm 版本" /></a>
+    <a href="https://github.com/zvec-ai/zvec-grep/actions/workflows/ci.yml"><img src="https://github.com/zvec-ai/zvec-grep/actions/workflows/ci.yml/badge.svg" alt="CI" /></a>
+    <a href="./LICENSE"><img src="https://img.shields.io/badge/license-Apache%202.0-blue.svg" alt="Apache 2.0 许可证" /></a>
+    <img src="https://img.shields.io/badge/node-%3E%3D22-blue.svg" alt="Node.js 22 或更新版本" />
+  </p>
+
+  <p>
+    <a href="https://trendshift.io/repositories/200612?utm_source=trendshift-badge&amp;utm_medium=badge&amp;utm_campaign=badge-trendshift-200612" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/trendshift/repositories/200612/daily?language=TypeScript" alt="zvec-ai/zvec-grep | Trendshift TypeScript 日榜" width="250" height="55" /></a>
+    <a href="https://trendshift.io/repositories/200612?utm_source=trendshift-badge&amp;utm_medium=badge&amp;utm_campaign=badge-trendshift-200612" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/trendshift/repositories/200612/daily" alt="zvec-ai/zvec-grep | Trendshift 全语言日榜" width="250" height="55" /></a>
+  </p>
+
+  <p>
+    <a href="#tour">🎬 <strong>功能演示</strong></a> |
+    <a href="#features">💫 <strong>核心特性</strong></a> |
+    <a href="#try-it-yourself">🚀 <strong>动手体验</strong></a> |
+    <a href="./docs/README.md">📚 <strong>文档</strong></a> |
+    <a href="#benchmarks">📊 <strong>性能测试</strong></a> |
+    <a href="#community">🤝 <strong>社区</strong></a>
+  </p>
+</div>
+
+**zg**（**z**vec-**g**rep），由 [zvec](https://github.com/alibaba/zvec) 驱动，
+将 ripgrep、BM25 与向量检索统一在一个[本地优先的检索入口](./docs/05-architecture.md)中。
+既可以由人在终端中搜索，也可以让 Agent 根据问题选择合适的本地检索方式。
+
+<a id="tour"></a>
+
+## 🎬 功能演示
+
+<div align="center">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="./.github/assets/zvec-grep-tour-dark.gif">
+    <img src="./.github/assets/zvec-grep-tour.gif" width="1000" alt="安装 Agent 集成、为工作区建索引并让 Agent 使用 zvec-grep 检索本地内容" />
+  </picture>
+</div>
+
+<a id="features"></a>
+
+## 💫 为什么选择 zg？
+
+- **人与 Agent 开箱即用**：安装一次、索引一次，即可在 macOS、Linux 和
+  Windows 上通过 CLI 或 Agent 复用同一个工作区。
+- **不止关键词搜索**：先按语义发现内容、按相关性排序，再在需要时使用精确文本
+  或正则完成验证。
+- **多格式检索**：搜索源代码、文档和结构化数据，同时保留有用的内容结构与
+  来源位置。
+- **更少搜索，更少上下文**：经过排序并保留来源的结果，可以减少工具调用、
+  Token 消耗与无关噪声，更快找到所需证据。
+- **默认本地运行**：文件、索引与本地模型都留在本机；只有经过你的授权，远程
+  Embedding 服务才能接收数据。
+
+<a id="try-it-yourself"></a>
+
+## 🚀 动手体验
+
+### 1. 准备示例书架
+
+```bash
+# 需要 Node.js 22 或更新版本。
+npm install -g @zvec/zvec-grep
+
+mkdir zg-mystery && cd zg-mystery
+curl --retry 3 --retry-all-errors --progress-bar -fL \
+  -o alice-in-wonderland.txt https://raw.githubusercontent.com/GITenberg/Alice-s-Adventures-in-Wonderland_11/master/11.txt \
+  -o sherlock-holmes.txt https://raw.githubusercontent.com/GITenberg/The-Memoirs-of-Sherlock-Holmes_834/master/834.txt
+
+zg index --embedding local/potion-retrieval-32m
+```
+
+> [!NOTE]
+> 索引保存在被索引项目根目录的 `.zvec-grep/` 中。
+
+> [!TIP]
+> `zg index` 或 `zg query` 失败时，在原命令后加 `--debug` 重跑，查看诊断信息（direct 和 server 模式均支持）。
+> 在同一项目下，可用 `zg status --mode direct --debug` 或
+> `zg status --mode server --debug` 查看已记录的索引错误。
+> Server 连接失败时，检查 `zg server status` 和[服务日志](./docs/06-server.md#logs-and-state)。
+
+### 2. 选择检索方式
+
+#### Agent：通过 OpenCode 提问
+
+配置好 [OpenCode](https://opencode.ai/) 后：
+
+```bash
+zg install --target opencode --yes
+opencode models
+opencode run --model opencode/nemotron-3-ultra-free \
+  "An unseen creature left a few marks. What did the detective infer? Cite local evidence."
+```
+
+免费模型的可用性可能变化。请通过 `opencode models` 检查，并将示例模型
+替换为当前环境中可用的模型。
+
+Prompt 中没有指定任何工具，OpenCode 会自主选择 zg。
+
+<details>
+<summary><strong>展开查看完整 Agent 调用与回答</strong></summary>
+
+```text
+⚙ zvec_grep_zvec_grep_search {"root":".../zg-mystery","query":"An unseen creature left a few marks. What did the detective infer?","fts":["marks","unseen creature","inferred","detective"],"fuse":true}
+→ Read sherlock-holmes.txt [offset=5440, limit=120]
+
+Answer:
+The detective is Sherlock Holmes in *The Adventure of the Crooked Man*.
+From the animal's foot-marks, he inferred:
+
+- It was not a dog, cat, monkey, or other familiar creature: its print had
+  five foot-pads, long nails, and was nearly as large as a dessert-spoon
+  (sherlock-holmes.txt:5479-5486).
+- It had a long body and very short legs: nearly two feet long, but with a
+  stride of only about three inches (sherlock-holmes.txt:5497-5502).
+- It was carnivorous because it climbed the curtain toward a canary's cage
+  (sherlock-holmes.txt:5509-5510).
+- It was probably from the weasel or stoat tribe, though unusually large
+  (sherlock-holmes.txt:5514-5516).
+
+Holmes also inferred that a man entered through the window with it and later
+left with the key (sherlock-holmes.txt:5464-5470, 5527-5528).
+```
+
+</details>
+
+#### 用户：直接检索
+
+不通过 Agent，直接搜索同一个书架：
+
+```bash
+zg query --human "An unseen creature left a few marks. What did the detective infer?" --limit 3
+```
+
+zg 会将 `sherlock-holmes.txt` 中的相关段落排在
+`alice-in-wonderland.txt` 前面。
+
+### 索引 Embedding 并发与 GPU 错误
+
+`zg --index --index-embedding-concurrency <n>` 和
+`ZVEC_GREP_INDEX_EMBEDDING_CONCURRENCY` 控制构建或更新索引时的 Embedding
+并发，对本地和远程模型均生效。环境变量也适用于自动建索引和刷新；这些设置
+不影响查询文本的向量推理。
+CLI 参数仅与 `--index` 一起使用。
+
+对于 llama.cpp，上限控制索引模型实例的 context 数；对于 Transformers.js，
+控制同一缓存 pipeline 中尚未完成的调用数，不保证原生运行时或 GPU 同时执行。
+这两个后端取正整数，超过 **8** 按 8 处理。对于 Potion/model2vec，上限控制
+并发 Embedding 批次数，没有该 8 路限制；默认为 **2**，CPU worker 池还有独立
+容量上限。对于远程模型，CLI 参数和环境变量均控制并发批次数，也不额外限制为
+8；原有自适应调度及默认值保持不变，遇到限流或可重试错误时可能降低并发。
+
+优先级为：显式 CLI/API 索引参数 > 索引环境变量 >
+`ZVEC_GREP_LLAMA_CONTEXT_PARALLELISM`（仅 llama.cpp 索引阶段）> 自动默认值。
+
+对于 llama.cpp 和 Transformers.js，未显式设置时，CPU 或没有显存查询接口的
+运行时使用 1。Transformers.js 目前没有该接口，因此自动上限为 1。
+GPU 运行时提供空闲显存时，按
+`floor(空闲显存 × 0.25 / 150 MiB)` 计算，并限制在 1–8；查询失败或返回
+无效值时使用 2。这里沿用原有的 150 MiB 启发式估算，不保证模型一定能装入显存。
+
+遇到 CUDA 错误、内存不足或原生运行时崩溃时，可将上限设为 1 后重试索引。
+以下示例使用直接执行模式，使新的环境变量立即生效：
+
+```bash
+export ZVEC_GREP_INDEX_EMBEDDING_CONCURRENCY=1
+zg --index --mode direct
+```
+
+Windows PowerShell：
+
+```powershell
+$env:ZVEC_GREP_INDEX_EMBEDDING_CONCURRENCY = "1"
+zg --index --mode direct
+```
+
+显式 CLI 参数会在本次索引操作中覆盖环境变量，使用后台服务时也会生效，
+无需为 CLI 参数重启后台服务：
+
+```bash
+export ZVEC_GREP_INDEX_EMBEDDING_CONCURRENCY=8
+zg --index --index-embedding-concurrency 1
+```
+
+若要修改后台服务的环境变量默认值，需更新其启动环境，然后在该环境中运行
+`zg --server off` 和 `zg --server on`。如果由 Agent 启动 zg，还需更新其环境并重启
+Agent/MCP 连接。JavaScript 异常可以捕获，但原生 abort 可能在 CPU 回退之前
+直接结束进程。将上限设为 1 可以降低并发，但不能避免所有 GPU 故障；也可使用
+`--device cpu` 重试。
+
+<a id="benchmarks"></a>
+
+## 📊 性能测试
+
+每项测试均采用配对 A/B 评测：任务、Agent/模型、Prompt、环境和
+资源限制保持一致，仅 zg 访问权限及使用说明不同。
+
+完整结果和复现细节参见[性能测试文档](./benchmarks/README_CN.md)。
+
+### 1. 跨领域 Agent Benchmark
+
+[SWE-QA-Bench](./benchmarks/swe-qa-bench/README_CN.md) 使用 Claude Code 与
+Claude Opus 5（high 推理强度）；
+[BrowseComp-Plus](./benchmarks/browse-comp-plus/README_CN.md) 使用 Codex
+gpt-5.6-sol 与 medium 推理强度。两项测试中的 zg
+Profile 均使用 Qwen3.7 Text Embedding。
+
+<p align="center">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="./.github/assets/benchmark-overall-retrieval-indexed-v4-dark.svg">
+    <source media="(prefers-color-scheme: light)" srcset="./.github/assets/benchmark-overall-retrieval-indexed-v4-light.svg">
+    <img src="./.github/assets/benchmark-overall-retrieval-indexed-v4-light.svg" alt="zg 在 Coding 和通用文本检索场景中的整体测试结果，对比 Baseline 的答案质量、输入 Token、工具调用和 Agent 耗时" width="1200" />
+  </picture>
+</p>
+
+- **为何有效：** 语义发现先收窄搜索范围，排序后的词法检索再锚定精确标识符；
+  紧凑的证据结果减少了大范围扫描、重复工具调用和模型上下文。
+- **为何通用：** 同一检索流程可以适配不同内容：代码索引保留符号、签名和
+  层级路径，通用文本则按相关 section 与 chunk 返回证据。
+
+### 2. 真实案例分析
+
+<table align="center">
+  <tr>
+    <td align="center">
+      <picture>
+        <source media="(prefers-color-scheme: dark)" srcset="./.github/assets/benchmark-repository-top3-v2.png">
+        <source media="(prefers-color-scheme: light)" srcset="./.github/assets/benchmark-repository-top3-v2-light.png">
+        <img src="./.github/assets/benchmark-repository-top3-v2-light.png" alt="三个代码库理解任务中 Baseline 与 zg 的 Judge、输入 Token、工具调用和耗时对比" width="980" />
+      </picture>
+    </td>
+  </tr>
+</table>
+
+- **[Pylint](https://github.com/pylint-dev/pylint) — Python 静态分析器：** 任务需要理解 AST 节点处理如何区分带标注与
+  不带标注的属性初始化；由于架构入口事先未知，保留符号与层级路径的检索
+  更适合定位相关实现。
+- **[Matplotlib](https://github.com/matplotlib/matplotlib) — 绘图与渲染库：** 任务需要沿数学文本渲染的多个阶段追踪
+  `FontInfo` 与字体选择；语义与词法联合排序有助于还原跨文件的数据流和控制流。
+- **[Django](https://github.com/django/django) — Web 框架：** 任务关联 username 唯一约束、ORM 事务和 formset
+  批量操作；紧凑的排序证据便于汇集分散在多处的设计依据。
+
+<details>
+<summary><strong>测试仓库与具体问题</strong></summary>
+
+| 仓库 | 问题类型 | 具体问题 |
+| --- | --- | --- |
+| **`pylint-dev/pylint`** | What<br>架构探索 | 使用 AST 节点类型区分带类型标注和不带类型标注的实例属性初始化时，采用了什么架构模式？ |
+| **`matplotlib/matplotlib`** | Where<br>数据 / 控制流 | `FontInfo` NamedTuple 在数学文本渲染 Pipeline 中如何传递字体度量和字形数据？控制流如何决定在字符渲染的不同阶段使用 `postscript_name` 还是 `FT2Font` 对象？ |
+| **`django/django`** | Why<br>设计原理 | User 模型中 username 字段的唯一约束为什么会与 Django ORM 事务处理产生关联？如果在已有数据库中移除该约束，会对基于 formset 的批量操作产生哪些级联影响？ |
+
+</details>
+
+> zg 最适合目标位置未知、证据跨文件或模块分布的调用链、数据流和架构问题。
+> Agent 会自主决定何时及如何调用，结果因此会随模型和运行波动；多次运行均值更可靠。
+
+## 📚 文档
+
+| 指南 | 你可以完成什么 |
+| :--- | :--- |
+| [Agent 集成](./docs/01-agents.md) | 将 zg 接入 Codex、Claude Code、Qwen Code、Qoder、Cursor 或 OpenCode，并验证是否正常工作。 |
+| [CLI 指南](./docs/02-cli.md) | 在终端中搜索、索引和管理本地工作区。 |
+| [MCP 指南](./docs/03-mcp.md) | 了解 Agent 可以使用哪些 zg 工具，以及访问权限如何受到保护。 |
+| [检索 Pipeline](./docs/04-pipeline.md) | 选择索引范围、保持内容新鲜，并获得更好的检索结果。 |
+| [架构](./docs/05-architecture.md) | 了解 zg 如何处理查询，以及数据会保留在哪里。 |
+| [服务端与执行模式](./docs/06-server.md) | 在一次性命令和长期运行的本地服务之间选择。 |
+| [Embedding 模型](./docs/07-embedding.md) | 根据速度、检索质量、隐私和本机硬件选择合适的模型。 |
+| [Roadmap](./docs/08-roadmap.md) | 了解接下来的产品方向，并参与影响 zg 的优先级。 |
+
+<a id="community"></a>
+
+## 🤝 加入社区
+
+<div align="center">
+
+| 💬 钉钉群 | 📱 微信群 | 🎮 Discord | X (Twitter) |
+| :---: | :---: | :---: | :---: |
+| <img src="https://zvec.oss-cn-hongkong.aliyuncs.com/qrcode/dingding.png" width="150" alt="钉钉二维码"/> | <img src="https://zvec.oss-cn-hongkong.aliyuncs.com/qrcode/wechat.png?v5" width="150" alt="微信二维码"/> | [![Discord](https://img.shields.io/badge/Discord-Join%20Server-5865F2?style=for-the-badge&logo=discord&logoColor=white)](https://discord.gg/rKddFBBu9z) | [![X (formerly Twitter) Follow](https://img.shields.io/twitter/follow/ZvecAI)](<https://x.com/ZvecAI>) |
+| 扫码加入 | 扫码加入 | 点击加入 | 点击关注 |
+
+</div>
+
+## ❤️ 参与贡献
+
+始终欢迎社区贡献——缺陷修复、新功能和文档改进都会让 zvec-grep 变得更好。
+
+请查阅我们的[贡献指南](./CONTRIBUTING.md)开始参与！

package/dist/authorization/index.d.ts

@@ -0,0 +1,7 @@
+export { RemoteEmbeddingAuthorizationManager } from "./manager.js";
+export { createRemoteEmbeddingOperationPermit, remoteEmbeddingAuthorizationGuard, withRemoteEmbeddingOperationPermit, } from "./operation.js";
+export { RemoteEmbeddingAuthorizationStore } from "./store.js";
+export { formatRemoteEmbeddingAuthorizationPrompt, remoteEmbeddingDisclosureData, type RemoteEmbeddingAuthorizationPromptInput, } from "./prompt.js";
+export { indexStatusIsFresh, planRemoteIndexAuthorization, planRemoteSearchAuthorization, searchUsesVector, } from "./planner.js";
+export { canonicalizeWorkspaceRoots, createRemoteEmbeddingTarget, remoteEmbeddingTargetFingerprint, workspaceFingerprint, } from "./target.js";
+export type { RemoteEmbeddingAuthorizationPlan, RemoteEmbeddingAuthorizationScope, RemoteEmbeddingAuthorizationStatus, RemoteEmbeddingDataDisclosure, RemoteEmbeddingOperation, RemoteEmbeddingOperationPermit, RemoteEmbeddingTarget, RemoteEmbeddingWorkspaceGrant, } from "./types.js";

package/dist/authorization/index.js

@@ -0,0 +1,7 @@
+export { RemoteEmbeddingAuthorizationManager } from "./manager.js";
+export { createRemoteEmbeddingOperationPermit, remoteEmbeddingAuthorizationGuard, withRemoteEmbeddingOperationPermit, } from "./operation.js";
+export { RemoteEmbeddingAuthorizationStore } from "./store.js";
+export { formatRemoteEmbeddingAuthorizationPrompt, remoteEmbeddingDisclosureData, } from "./prompt.js";
+export { indexStatusIsFresh, planRemoteIndexAuthorization, planRemoteSearchAuthorization, searchUsesVector, } from "./planner.js";
+export { canonicalizeWorkspaceRoots, createRemoteEmbeddingTarget, remoteEmbeddingTargetFingerprint, workspaceFingerprint, } from "./target.js";
+//# sourceMappingURL=index.js.map

package/dist/authorization/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EACL,oCAAoC,EACpC,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EACL,wCAAwC,EACxC,6BAA6B,GAE9B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,EAClB,4BAA4B,EAC5B,6BAA6B,EAC7B,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,gCAAgC,EAChC,oBAAoB,GACrB,MAAM,aAAa,CAAC"}

package/dist/authorization/manager.d.ts

@@ -0,0 +1,8 @@
+import { RemoteEmbeddingAuthorizationStore } from "./store.js";
+import type { RemoteEmbeddingAuthorizationPlan, RemoteEmbeddingAuthorizationScope, RemoteEmbeddingOperationPermit } from "./types.js";
+export declare class RemoteEmbeddingAuthorizationManager {
+    readonly store: RemoteEmbeddingAuthorizationStore;
+    constructor(store?: RemoteEmbeddingAuthorizationStore);
+    existingWorkspacePermit(plan: RemoteEmbeddingAuthorizationPlan): Promise<RemoteEmbeddingOperationPermit | undefined>;
+    grant(plan: RemoteEmbeddingAuthorizationPlan, scope: RemoteEmbeddingAuthorizationScope): Promise<RemoteEmbeddingOperationPermit>;
+}

package/dist/authorization/manager.js

@@ -0,0 +1,19 @@
+import { createRemoteEmbeddingOperationPermit } from "./operation.js";
+import { RemoteEmbeddingAuthorizationStore } from "./store.js";
+export class RemoteEmbeddingAuthorizationManager {
+    store;
+    constructor(store = new RemoteEmbeddingAuthorizationStore()) {
+        this.store = store;
+    }
+    async existingWorkspacePermit(plan) {
+        if (!(await this.store.hasGrant(plan.target)))
+            return undefined;
+        return createRemoteEmbeddingOperationPermit(plan.target, "workspace");
+    }
+    async grant(plan, scope) {
+        if (scope === "workspace")
+            await this.store.grant(plan.target);
+        return createRemoteEmbeddingOperationPermit(plan.target, scope);
+    }
+}
+//# sourceMappingURL=manager.js.map

package/dist/authorization/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/authorization/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAO/D,MAAM,OAAO,mCAAmC;IACrC,KAAK,CAAoC;IAElD,YAAY,KAAK,GAAG,IAAI,iCAAiC,EAAE;QACzD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,IAAsC;QAEtC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QAChE,OAAO,oCAAoC,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,KAAK,CACT,IAAsC,EACtC,KAAwC;QAExC,IAAI,KAAK,KAAK,WAAW;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/D,OAAO,oCAAoC,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;CACF"}

package/dist/authorization/operation.d.ts

@@ -0,0 +1,7 @@
+import { RemoteEmbeddingAuthorizationStore } from "./store.js";
+import { type RemoteEmbeddingAuthorizationScope, type RemoteEmbeddingOperationPermit, type RemoteEmbeddingRequest, type RemoteEmbeddingTarget } from "./types.js";
+export declare function createRemoteEmbeddingOperationPermit(target: RemoteEmbeddingTarget, scope: RemoteEmbeddingAuthorizationScope): RemoteEmbeddingOperationPermit;
+export declare function withRemoteEmbeddingOperationPermit<T>(permit: RemoteEmbeddingOperationPermit | undefined, operation: () => Promise<T>): Promise<T>;
+export declare function remoteEmbeddingAuthorizationGuard(options?: {
+    store?: RemoteEmbeddingAuthorizationStore;
+}): (request: RemoteEmbeddingRequest) => Promise<void>;

package/dist/authorization/operation.js

@@ -0,0 +1,50 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+import { randomUUID } from "node:crypto";
+import { EngineError } from "../engine/errors.js";
+import { RemoteEmbeddingAuthorizationStore } from "./store.js";
+import { REMOTE_EMBEDDING_CAPABILITY, } from "./types.js";
+const operationPermit = new AsyncLocalStorage();
+export function createRemoteEmbeddingOperationPermit(target, scope) {
+    return {
+        capability: REMOTE_EMBEDDING_CAPABILITY,
+        scope,
+        target,
+        issuedAt: Date.now(),
+        operationId: randomUUID(),
+    };
+}
+export async function withRemoteEmbeddingOperationPermit(permit, operation) {
+    if (!permit)
+        return await operation();
+    return await operationPermit.run(permit, operation);
+}
+export function remoteEmbeddingAuthorizationGuard(options = {}) {
+    const store = options.store ?? new RemoteEmbeddingAuthorizationStore();
+    return async (request) => {
+        const permit = operationPermit.getStore();
+        if (!permit ||
+            permit.capability !== REMOTE_EMBEDDING_CAPABILITY ||
+            permit.target.provider !== request.provider ||
+            permit.target.model !== request.model ||
+            permit.target.endpoint !== request.endpoint) {
+            throw authorizationRequiredError(request);
+        }
+        if (permit.scope === "workspace" &&
+            !(await store.hasGrant(permit.target))) {
+            throw authorizationRequiredError(request, "Workspace grant is missing, invalid, or revoked.");
+        }
+    };
+}
+function authorizationRequiredError(request, detail) {
+    return new EngineError("Remote Embedding authorization is required", {
+        code: "ZVEC_GREP.ENGINE.AUTH.REMOTE_EMBEDDING_REQUIRED",
+        context: [
+            `provider=${request.provider}`,
+            `model=${request.model}`,
+            `endpoint=${request.endpoint}`,
+            `purpose=${request.purpose}`,
+            ...(detail ? [`detail=${detail}`] : []),
+        ].join(" "),
+    });
+}
+//# sourceMappingURL=operation.js.map

package/dist/authorization/operation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation.js","sourceRoot":"","sources":["../../src/authorization/operation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EACL,2BAA2B,GAK5B,MAAM,YAAY,CAAC;AAEpB,MAAM,eAAe,GAAG,IAAI,iBAAiB,EAAkC,CAAC;AAEhF,MAAM,UAAU,oCAAoC,CAClD,MAA6B,EAC7B,KAAwC;IAExC,OAAO;QACL,UAAU,EAAE,2BAA2B;QACvC,KAAK;QACL,MAAM;QACN,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;QACpB,WAAW,EAAE,UAAU,EAAE;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,MAAkD,EAClD,SAA2B;IAE3B,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,SAAS,EAAE,CAAC;IACtC,OAAO,MAAM,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,UAEI,EAAE;IAEN,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,iCAAiC,EAAE,CAAC;IACvE,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,CAAC;QAC1C,IACE,CAAC,MAAM;YACP,MAAM,CAAC,UAAU,KAAK,2BAA2B;YACjD,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;YAC3C,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;YACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,EAC3C,CAAC;YACD,MAAM,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,IACE,MAAM,CAAC,KAAK,KAAK,WAAW;YAC5B,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EACtC,CAAC;YACD,MAAM,0BAA0B,CAC9B,OAAO,EACP,kDAAkD,CACnD,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,OAA+B,EAC/B,MAAe;IAEf,OAAO,IAAI,WAAW,CAAC,4CAA4C,EAAE;QACnE,IAAI,EAAE,iDAAiD;QACvD,OAAO,EAAE;YACP,YAAY,OAAO,CAAC,QAAQ,EAAE;YAC9B,SAAS,OAAO,CAAC,KAAK,EAAE;YACxB,YAAY,OAAO,CAAC,QAAQ,EAAE;YAC9B,WAAW,OAAO,CAAC,OAAO,EAAE;YAC5B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC,IAAI,CAAC,GAAG,CAAC;KACZ,CAAC,CAAC;AACL,CAAC"}

package/dist/authorization/planner.d.ts

@@ -0,0 +1,21 @@
+import type { NormalizedSearchInput } from "../mcp/input-normalization.js";
+import type { EmbeddingModelInfo } from "../engine/models/index.js";
+import type { ZvecGrepInfoResult } from "../engine/service/types.js";
+import { RemoteEmbeddingAuthorizationStore } from "./store.js";
+import type { RemoteEmbeddingAuthorizationPlan } from "./types.js";
+export declare function planRemoteIndexAuthorization(input: {
+    info: ZvecGrepInfoResult;
+    model: EmbeddingModelInfo;
+    rebuild?: boolean;
+    needsUpdate?: boolean;
+    store?: RemoteEmbeddingAuthorizationStore;
+}): Promise<RemoteEmbeddingAuthorizationPlan | undefined>;
+export declare function planRemoteSearchAuthorization(input: {
+    info: ZvecGrepInfoResult;
+    model: EmbeddingModelInfo;
+    search: NormalizedSearchInput;
+    runtimeNeedsReconciliation?: boolean;
+    store?: RemoteEmbeddingAuthorizationStore;
+}): Promise<RemoteEmbeddingAuthorizationPlan | undefined>;
+export declare function searchUsesVector(input: Pick<NormalizedSearchInput, "queries" | "routes">): boolean;
+export declare function indexStatusIsFresh(info: ZvecGrepInfoResult): boolean;

package/dist/authorization/planner.js

@@ -0,0 +1,97 @@
+import { createRemoteEmbeddingTarget } from "./target.js";
+import { RemoteEmbeddingAuthorizationStore } from "./store.js";
+export async function planRemoteIndexAuthorization(input) {
+    if (input.model.provider !== "qwen")
+        return undefined;
+    const needsEmbedding = input.rebuild === true ||
+        input.needsUpdate === true ||
+        !input.info.indexed ||
+        !indexStatusIsFresh(input.info);
+    if (!needsEmbedding)
+        return undefined;
+    const endpoint = input.model.endpoint;
+    if (endpoint === undefined) {
+        throw new Error(`Embedding model ${input.model.reference} did not provide a remote endpoint.`);
+    }
+    const target = await createRemoteEmbeddingTarget({
+        roots: workspaceRoots(input.info),
+        provider: input.model.provider,
+        model: input.model.name,
+        endpoint,
+    });
+    const store = input.store ?? new RemoteEmbeddingAuthorizationStore();
+    return {
+        operation: "index",
+        target,
+        disclosure: {
+            queryText: false,
+            workspaceContent: !input.info.indexed || input.rebuild ? "full" : "changed",
+        },
+        reason: input.rebuild
+            ? "index_rebuild"
+            : input.info.indexed
+                ? "index_update"
+                : "index_create",
+        grantPath: store.grantPath(target),
+    };
+}
+export async function planRemoteSearchAuthorization(input) {
+    const schema = input.info.workspaceIndex?.embedding;
+    if (!input.info.indexed || !schema || schema.provider !== "qwen") {
+        return undefined;
+    }
+    if (input.model.provider !== schema.provider ||
+        input.model.name !== schema.model) {
+        throw new Error(`Embedding model ${input.model.reference} does not match indexed model ${schema.provider}/${schema.model}.`);
+    }
+    const usesVector = searchUsesVector(input.search);
+    const needsUpdate = input.runtimeNeedsReconciliation === true ||
+        !indexStatusIsFresh(input.info);
+    const updatesIndex = needsUpdate &&
+        (input.search.autoUpdate || input.search.freshness === "wait_for_fresh");
+    if (!usesVector && !updatesIndex)
+        return undefined;
+    const endpoint = input.model.endpoint;
+    if (endpoint === undefined) {
+        throw new Error(`Embedding model ${input.model.reference} did not provide a remote endpoint.`);
+    }
+    const target = await createRemoteEmbeddingTarget({
+        roots: workspaceRoots(input.info),
+        provider: input.model.provider,
+        model: input.model.name,
+        endpoint,
+    });
+    const store = input.store ?? new RemoteEmbeddingAuthorizationStore();
+    return {
+        operation: usesVector
+            ? updatesIndex
+                ? "query_and_index"
+                : "query"
+            : "index",
+        target,
+        disclosure: {
+            queryText: usesVector,
+            workspaceContent: updatesIndex ? "changed" : "none",
+        },
+        reason: "query",
+        grantPath: store.grantPath(target),
+    };
+}
+export function searchUsesVector(input) {
+    return ((input.queries?.length ?? 0) > 0 ||
+        input.routes.some((route) => route.mode === "vector"));
+}
+export function indexStatusIsFresh(info) {
+    const status = info.status;
+    return Boolean(status &&
+        status.filesAdded === 0 &&
+        status.filesModified === 0 &&
+        status.filesDeleted === 0 &&
+        status.filesPending === 0 &&
+        status.filesFailed === 0);
+}
+function workspaceRoots(info) {
+    const roots = info.workspaceIndex?.rootPaths.map((root) => root.absolutePath) ?? [];
+    return roots.length > 0 ? roots : [info.root];
+}
+//# sourceMappingURL=planner.js.map

package/dist/authorization/planner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planner.js","sourceRoot":"","sources":["../../src/authorization/planner.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAG/D,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAMlD;IACC,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,cAAc,GAClB,KAAK,CAAC,OAAO,KAAK,IAAI;QACtB,KAAK,CAAC,WAAW,KAAK,IAAI;QAC1B,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO;QACnB,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,cAAc;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;IACtC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,mBAAmB,KAAK,CAAC,KAAK,CAAC,SAAS,qCAAqC,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC;QAC/C,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC;QACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;QACvB,QAAQ;KACT,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,iCAAiC,EAAE,CAAC;IACrE,OAAO;QACL,SAAS,EAAE,OAAO;QAClB,MAAM;QACN,UAAU,EAAE;YACV,SAAS,EAAE,KAAK;YAChB,gBAAgB,EACd,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SAC5D;QACD,MAAM,EAAE,KAAK,CAAC,OAAO;YACnB,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO;gBAClB,CAAC,CAAC,cAAc;gBAChB,CAAC,CAAC,cAAc;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAMnD;IACC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;QACxC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,EACjC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mBAAmB,KAAK,CAAC,KAAK,CAAC,SAAS,iCAAiC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,GAAG,CAC5G,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,WAAW,GACf,KAAK,CAAC,0BAA0B,KAAK,IAAI;QACzC,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,YAAY,GAChB,WAAW;QACX,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,KAAK,gBAAgB,CAAC,CAAC;IAC3E,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;IACtC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,mBAAmB,KAAK,CAAC,KAAK,CAAC,SAAS,qCAAqC,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC;QAC/C,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC;QACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;QACvB,QAAQ;KACT,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,iCAAiC,EAAE,CAAC;IACrE,OAAO;QACL,SAAS,EAAE,UAAU;YACnB,CAAC,CAAC,YAAY;gBACZ,CAAC,CAAC,iBAAiB;gBACnB,CAAC,CAAC,OAAO;YACX,CAAC,CAAC,OAAO;QACX,MAAM;QACN,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,gBAAgB,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;SACpD;QACD,MAAM,EAAE,OAAO;QACf,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAAwD;IAExD,OAAO,CACL,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QAChC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAwB;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,OAAO,OAAO,CACZ,MAAM;QACN,MAAM,CAAC,UAAU,KAAK,CAAC;QACvB,MAAM,CAAC,aAAa,KAAK,CAAC;QAC1B,MAAM,CAAC,YAAY,KAAK,CAAC;QACzB,MAAM,CAAC,YAAY,KAAK,CAAC;QACzB,MAAM,CAAC,WAAW,KAAK,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAwB;IAC9C,MAAM,KAAK,GACT,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IACxE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC"}

package/dist/authorization/prompt.d.ts

@@ -0,0 +1,12 @@
+import type { RemoteEmbeddingDataDisclosure } from "./types.js";
+export type RemoteEmbeddingAuthorizationPromptInput = {
+    workspaceRoots: readonly string[];
+    provider: string;
+    model: string;
+    endpoint?: string;
+    data: readonly string[];
+    note?: string;
+};
+export declare const REMOTE_EMBEDDING_ELICITATION_UNSUPPORTED_MESSAGE = "The connected MCP host does not support the Remote Embedding authorization interaction required by elicitation/create. The agent should use the current host's built-in user-question tool; for Qoder, the exact name is ask_user_question in Qoder IDE or AskUserQuestion in Qoder CLI/SDK. Ask the user to choose: allow Remote Embedding for this workspace, use local FTS only, or cancel. No user decision was received, and no remote data was sent.";
+export declare function remoteEmbeddingDisclosureData(disclosure: RemoteEmbeddingDataDisclosure): string[];
+export declare function formatRemoteEmbeddingAuthorizationPrompt(input: RemoteEmbeddingAuthorizationPromptInput): string;

package/dist/authorization/prompt.js

@@ -0,0 +1,63 @@
+import { basename } from "node:path";
+export const REMOTE_EMBEDDING_ELICITATION_UNSUPPORTED_MESSAGE = "The connected MCP host does not support the Remote Embedding authorization interaction required by elicitation/create. The agent should use the current host's built-in user-question tool; for Qoder, the exact name is ask_user_question in Qoder IDE or AskUserQuestion in Qoder CLI/SDK. Ask the user to choose: allow Remote Embedding for this workspace, use local FTS only, or cancel. No user decision was received, and no remote data was sent.";
+export function remoteEmbeddingDisclosureData(disclosure) {
+    return [
+        ...(disclosure.queryText ? ["query text"] : []),
+        ...(disclosure.workspaceContent === "selected"
+            ? ["selected workspace files"]
+            : disclosure.workspaceContent === "changed"
+                ? ["changed workspace files"]
+                : disclosure.workspaceContent === "full"
+                    ? ["selected workspace files"]
+                    : []),
+    ];
+}
+export function formatRemoteEmbeddingAuthorizationPrompt(input) {
+    const data = naturalList(input.data.length > 0 ? input.data : ["data required by this operation"]);
+    const lines = [
+        "Remote Embedding authorization",
+        "",
+        `Send ${data}?`,
+        "",
+        `  From  ${workspaceLabel(input.workspaceRoots)}`,
+        `  To    ${clip(`${input.provider}/${input.model}`, 72)}`,
+    ];
+    const host = endpointHost(input.endpoint);
+    if (host)
+        lines.push(`        ${clip(host, 72)}`);
+    if (input.note)
+        lines.push("", input.note);
+    lines.push("", "API charges may apply.");
+    return lines.join("\n");
+}
+function workspaceLabel(roots) {
+    const names = roots.map((root) => clip(basename(root) || root || "workspace", 32));
+    if (names.length === 0)
+        return "workspace";
+    if (names.length <= 2)
+        return names.join(", ");
+    return `${names.slice(0, 2).join(", ")} +${names.length - 2}`;
+}
+function endpointHost(endpoint) {
+    if (!endpoint)
+        return undefined;
+    try {
+        return new URL(endpoint).host;
+    }
+    catch {
+        return endpoint.replace(/^https?:\/\//, "").split("/")[0] || undefined;
+    }
+}
+function naturalList(items) {
+    if (items.length <= 1)
+        return items[0] ?? "data";
+    if (items.length === 2)
+        return `${items[0]} and ${items[1]}`;
+    return `${items.slice(0, -1).join(", ")}, and ${items.at(-1)}`;
+}
+function clip(value, maxLength) {
+    if (value.length <= maxLength)
+        return value;
+    return `${value.slice(0, Math.max(1, maxLength - 1))}…`;
+}
+//# sourceMappingURL=prompt.js.map

package/dist/authorization/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../src/authorization/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAYrC,MAAM,CAAC,MAAM,gDAAgD,GAC3D,4bAA4b,CAAC;AAE/b,MAAM,UAAU,6BAA6B,CAC3C,UAAyC;IAEzC,OAAO;QACL,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,UAAU,CAAC,gBAAgB,KAAK,UAAU;YAC5C,CAAC,CAAC,CAAC,0BAA0B,CAAC;YAC9B,CAAC,CAAC,UAAU,CAAC,gBAAgB,KAAK,SAAS;gBACzC,CAAC,CAAC,CAAC,yBAAyB,CAAC;gBAC7B,CAAC,CAAC,UAAU,CAAC,gBAAgB,KAAK,MAAM;oBACtC,CAAC,CAAC,CAAC,0BAA0B,CAAC;oBAC9B,CAAC,CAAC,EAAE,CAAC;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wCAAwC,CACtD,KAA8C;IAE9C,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iCAAiC,CAAC,CACzE,CAAC;IACF,MAAM,KAAK,GAAG;QACZ,gCAAgC;QAChC,EAAE;QACF,QAAQ,IAAI,GAAG;QACf,EAAE;QACF,WAAW,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE;QACjD,WAAW,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE;KAC1D,CAAC;IACF,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,cAAc,CAAC,KAAwB;IAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,WAAW,EAAE,EAAE,CAAC,CAChD,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,YAAY,CAAC,QAA4B;IAChD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAwB;IAC3C,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,IAAI,CAAC,KAAa,EAAE,SAAiB;IAC5C,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAC1D,CAAC"}