@astram/frontend-core 0.11.0 → 0.12.1

package/dist/agent/sseParser.js

@@ -0,0 +1,216 @@
+/** `^task_[A-Za-z0-9_-]{22}$` (§3, M0 §10 H). */
+const TASK_ID = /^task_[A-Za-z0-9_-]{22}$/;
+/** The heartbeat comment the gateway writes every 15 s (§3 B). */
+export const SSE_HEARTBEAT = ': hb\n\n';
+/**
+ * The §3 B frame for one envelope, exactly as the gateway writes it (the SSE fixtures are stored
+ * as envelopes; their frames are derived with this rule). Used by the scripted transport.
+ */
+export function toSseFrame(event) {
+    const id = event.type === 'replay.truncated' ? '' : `id: ${event.seq}\n`;
+    return `${id}event: ${event.type}\ndata: ${JSON.stringify(event)}\n\n`;
+}
+function isPlainObject(v) {
+    return v !== null && typeof v === 'object' && !Array.isArray(v);
+}
+/** Create a parser for ONE stream (open, continue or replay). */
+export function parseSseFrames(options = {}) {
+    const dropped = [];
+    let taskId = null;
+    let lastSeq = null;
+    let accepted = 0;
+    // Line assembly across chunks.
+    let pending = '';
+    let pendingCR = false;
+    let started = false;
+    let ended = false;
+    // The frame being collected.
+    let dataLines = [];
+    let eventType = '';
+    let frameId = null;
+    const drop = (reason, seq) => {
+        const d = { reason, seq };
+        dropped.push(d);
+        try {
+            options.onDrop?.(d);
+        }
+        catch {
+            /* reporting is best-effort */
+        }
+    };
+    const check = (data, type, id) => {
+        let raw;
+        try {
+            raw = JSON.parse(data);
+        }
+        catch {
+            drop('malformed', null);
+            return null;
+        }
+        if (!isPlainObject(raw)) {
+            drop('malformed', null);
+            return null;
+        }
+        const seq = Number.isSafeInteger(raw.seq) ? raw.seq : null;
+        const truncated = raw.type === 'replay.truncated';
+        if (raw.v !== 0 ||
+            seq === null ||
+            seq < (truncated ? 0 : 1) ||
+            typeof raw.taskId !== 'string' ||
+            !TASK_ID.test(raw.taskId) ||
+            typeof raw.type !== 'string' ||
+            raw.type === '' ||
+            typeof raw.ts !== 'string' ||
+            !isPlainObject(raw.payload)) {
+            drop('malformed', seq);
+            return null;
+        }
+        if (raw.type !== type) {
+            drop('type_mismatch', seq);
+            return null;
+        }
+        if (truncated) {
+            const first = raw.payload.firstRetainedSeq;
+            if (!Number.isSafeInteger(first) || first < 1 || seq !== first - 1) {
+                drop('malformed', seq);
+                return null;
+            }
+            if (id !== null) {
+                drop('id_mismatch', seq);
+                return null;
+            }
+            if (accepted > 0) {
+                drop('seq', seq);
+                return null;
+            }
+        }
+        else if (id !== String(seq)) {
+            drop('id_mismatch', seq);
+            return null;
+        }
+        if (taskId !== null && raw.taskId !== taskId) {
+            drop('task_mismatch', seq);
+            return null;
+        }
+        if (lastSeq !== null && seq !== lastSeq + 1) {
+            drop('seq', seq);
+            return null;
+        }
+        taskId = raw.taskId;
+        lastSeq = seq;
+        accepted += 1;
+        return {
+            v: 0,
+            seq,
+            taskId: raw.taskId,
+            type: raw.type,
+            ts: raw.ts,
+            payload: raw.payload,
+        };
+    };
+    const dispatch = (out) => {
+        const lines = dataLines;
+        const type = eventType === '' ? 'message' : eventType;
+        const id = frameId;
+        dataLines = [];
+        eventType = '';
+        frameId = null;
+        if (lines.length === 0)
+            return; // no data ⇒ no event (SSE rule)
+        const event = check(lines.join('\n'), type, id);
+        if (event)
+            out.push(event);
+    };
+    const line = (text, out) => {
+        if (text === '') {
+            dispatch(out);
+            return;
+        }
+        if (text.startsWith(':'))
+            return; // comment (heartbeat)
+        const colon = text.indexOf(':');
+        const field = colon < 0 ? text : text.slice(0, colon);
+        let value = colon < 0 ? '' : text.slice(colon + 1);
+        if (value.startsWith(' '))
+            value = value.slice(1);
+        switch (field) {
+            case 'data':
+                dataLines.push(value);
+                break;
+            case 'event':
+                eventType = value;
+                break;
+            case 'id':
+                if (!value.includes('\u0000'))
+                    frameId = value;
+                break;
+            default:
+                break; // `retry` and unknown fields are ignored
+        }
+    };
+    return {
+        push(text) {
+            const out = [];
+            if (ended || typeof text !== 'string' || text.length === 0)
+                return out;
+            let s = text;
+            if (!started) {
+                started = true;
+                if (s.charCodeAt(0) === 0xfeff)
+                    s = s.slice(1);
+            }
+            let i = 0;
+            if (pendingCR) {
+                pendingCR = false;
+                if (s.charCodeAt(0) === 0x0a)
+                    i = 1; // the LF of a CRLF split across chunks
+            }
+            while (i < s.length) {
+                let j = i;
+                while (j < s.length) {
+                    const c = s.charCodeAt(j);
+                    if (c === 0x0a || c === 0x0d)
+                        break;
+                    j += 1;
+                }
+                if (j === s.length) {
+                    pending += s.slice(i);
+                    break;
+                }
+                const text = pending + s.slice(i, j);
+                pending = '';
+                if (s.charCodeAt(j) === 0x0d) {
+                    if (j + 1 < s.length) {
+                        if (s.charCodeAt(j + 1) === 0x0a)
+                            j += 1;
+                    }
+                    else {
+                        pendingCR = true;
+                    }
+                }
+                line(text, out);
+                i = j + 1;
+            }
+            return out;
+        },
+        end() {
+            ended = true;
+            pending = '';
+            pendingCR = false;
+            dataLines = [];
+            eventType = '';
+            frameId = null;
+            return [];
+        },
+        get dropped() {
+            return dropped;
+        },
+        get taskId() {
+            return taskId;
+        },
+        get lastSeq() {
+            return lastSeq;
+        },
+    };
+}
+//# sourceMappingURL=sseParser.js.map

package/dist/agent/sseParser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sseParser.js","sourceRoot":"","sources":["../../src/agent/sseParser.ts"],"names":[],"mappings":"AAoBA,iDAAiD;AACjD,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAE3C,kEAAkE;AAClE,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;AAExC;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAuB;IAChD,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,GAAG,IAAI,CAAC;IACzE,OAAO,GAAG,EAAE,UAAU,KAAK,CAAC,IAAI,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;AACzE,CAAC;AAoBD,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,cAAc,CAAC,UAA4B,EAAE;IAC3D,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,+BAA+B;IAC/B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAK,GAAG,KAAK,CAAC;IAElB,6BAA6B;IAC7B,IAAI,SAAS,GAAa,EAAE,CAAC;IAC7B,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,OAAO,GAAkB,IAAI,CAAC;IAElC,MAAM,IAAI,GAAG,CAAC,MAAqB,EAAE,GAAkB,EAAQ,EAAE;QAC/D,MAAM,CAAC,GAAY,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAiB,EAA2B,EAAE;QACvF,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,GAAc,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAAC;QAClD,IACE,GAAG,CAAC,CAAC,KAAK,CAAC;YACX,GAAG,KAAK,IAAI;YACZ,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAC9B,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YACzB,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAC5B,GAAG,CAAC,IAAI,KAAK,EAAE;YACf,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ;YAC1B,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAC3B,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,IAAI,GAAG,KAAM,KAAgB,GAAG,CAAC,EAAE,CAAC;gBAC3F,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;gBACzB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACjB,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACjB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7C,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,IAAI,GAAG,KAAK,OAAO,GAAG,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACpB,OAAO,GAAG,GAAG,CAAC;QACd,QAAQ,IAAI,CAAC,CAAC;QACd,OAAO;YACL,CAAC,EAAE,CAAC;YACJ,GAAG;YACH,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,GAAuB,EAAQ,EAAE;QACjD,MAAM,KAAK,GAAG,SAAS,CAAC;QACxB,MAAM,IAAI,GAAG,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACtD,MAAM,EAAE,GAAG,OAAO,CAAC;QACnB,SAAS,GAAG,EAAE,CAAC;QACf,SAAS,GAAG,EAAE,CAAC;QACf,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,gCAAgC;QAChE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,GAAuB,EAAQ,EAAE;QAC3D,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,QAAQ,CAAC,GAAG,CAAC,CAAC;YACd,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,sBAAsB;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACtD,IAAI,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClD,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,MAAM;gBACT,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtB,MAAM;YACR,KAAK,OAAO;gBACV,SAAS,GAAG,KAAK,CAAC;gBAClB,MAAM;YACR,KAAK,IAAI;gBACP,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAAE,OAAO,GAAG,KAAK,CAAC;gBAC/C,MAAM;YACR;gBACE,MAAM,CAAC,yCAAyC;QACpD,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,CAAC,IAAY;YACf,MAAM,GAAG,GAAuB,EAAE,CAAC;YACnC,IAAI,KAAK,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,GAAG,CAAC;YACvE,IAAI,CAAC,GAAG,IAAI,CAAC;YACb,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM;oBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,IAAI,SAAS,EAAE,CAAC;gBACd,SAAS,GAAG,KAAK,CAAC;gBAClB,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI;oBAAE,CAAC,GAAG,CAAC,CAAC,CAAC,uCAAuC;YAC9E,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;gBACpB,IAAI,CAAC,GAAG,CAAC,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;oBACpB,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBAC1B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;wBAAE,MAAM;oBACpC,CAAC,IAAI,CAAC,CAAC;gBACT,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;oBACnB,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACtB,MAAM;gBACR,CAAC;gBACD,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC7B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;wBACrB,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;4BAAE,CAAC,IAAI,CAAC,CAAC;oBAC3C,CAAC;yBAAM,CAAC;wBACN,SAAS,GAAG,IAAI,CAAC;oBACnB,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAChB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,GAAG;YACD,KAAK,GAAG,IAAI,CAAC;YACb,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,GAAG,KAAK,CAAC;YAClB,SAAS,GAAG,EAAE,CAAC;YACf,SAAS,GAAG,EAAE,CAAC;YACf,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,OAAO;YACT,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,MAAM;YACR,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,OAAO;YACT,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/agent/types.d.ts

@@ -0,0 +1,201 @@
+/**
+ * Types of the agent client (G-036 M1, SPEC `docs/features/agent-read-capabilities/SPEC.md`
+ * §3 B–F, §5 frontend-core). DOM-free: the stream transport is injected (web: `fetch` with a
+ * streamed body, in the scaffolded app), so nothing here names `fetch`, `EventSource` or a DOM type.
+ *
+ * Model text (`answer`, `claims[].text`, `gaps`, question and option text) is plain text: render
+ * it as text, never as HTML or Markdown-to-HTML. Ids (`taskId`, `callId`) are opaque: never show them.
+ */
+import type { AbortSignalLike } from '../http/types.js';
+/** The gateway stream contract version (§3 B, Q12). */
+export declare const AGENT_STREAM_VERSION = 0;
+/** No event and no heartbeat for this long ⇒ the stream is treated as lost (§5 frontend-core). */
+export declare const AGENT_STREAM_STALL_MS = 45000;
+/** Event types the gateway emits in M1 (§3 B). Reserved types may arrive later and are ignored. */
+export type AgentEventType = 'task.started' | 'step' | 'tool.started' | 'tool.finished' | 'clarification.required' | 'answer' | 'done' | 'error' | 'replay.truncated';
+/**
+ * One event as sent on the stream (the frozen §3 B envelope). `payload` is passed on as received
+ * and read defensively by the reducer.
+ */
+export interface AgentStreamEvent {
+    readonly v: 0;
+    readonly seq: number;
+    readonly taskId: string;
+    /** One of {@link AgentEventType}, or a type a later gateway adds (ignored by the reducer). */
+    readonly type: string;
+    readonly ts: string;
+    readonly payload: Readonly<Record<string, unknown>>;
+}
+/** Why the parser refused a frame (it is dropped and reported, never applied). */
+export type SseDropReason = 
+/** Not JSON, not the §3 B envelope, or a bad `replay.truncated`. */
+'malformed'
+/** `taskId` differs from the stream's first event. */
+ | 'task_mismatch'
+/** `seq` is not the next one (or a `replay.truncated` that is not the first event). */
+ | 'seq'
+/** The `id:` line disagrees with the envelope `seq`, or is missing where one is required. */
+ | 'id_mismatch'
+/** The `event:` line disagrees with the envelope `type`. */
+ | 'type_mismatch';
+/** A refused frame. Carries no frame text (it may hold model text). */
+export interface SseDrop {
+    readonly reason: SseDropReason;
+    /** The envelope `seq` when it could be read, else null. */
+    readonly seq: number | null;
+}
+/** `Num` of the evidence kinds: a JSON number, an exact decimal string (never re-parsed), or null. */
+export type EvidenceNum = number | string | null;
+export interface MetricEvidence {
+    readonly kind: 'metric';
+    readonly label: string;
+    readonly value: EvidenceNum;
+    readonly unit?: string;
+    readonly asOf?: string;
+}
+export interface TableEvidence {
+    readonly kind: 'table';
+    readonly columns: readonly {
+        readonly key: string;
+        readonly label: string;
+        readonly numeric?: boolean;
+    }[];
+    readonly rows: readonly Readonly<Record<string, string | number | boolean | null>>[];
+}
+export interface SeriesEvidence {
+    readonly kind: 'series';
+    readonly label: string;
+    readonly unit?: string;
+    readonly points: readonly {
+        readonly x: string;
+        readonly y: EvidenceNum;
+    }[];
+}
+/** Evidence for the UI (§5 E). Decimal strings are kept as strings: format, never `parseFloat`. */
+export type AgentEvidence = MetricEvidence | TableEvidence | SeriesEvidence;
+/** A partial read: `shown` of `total` (`total: null` = more exist, count unknown). */
+export interface AgentPartial {
+    readonly shown: number;
+    readonly total: number | null;
+}
+/** `running` until `tool.finished`; then the M0 §10 C result status. */
+export type AgentToolStatus = 'running' | 'ok' | 'denied' | 'invalid' | 'failed' | 'timeout';
+export interface AgentToolState {
+    /** `id@version`; null when the `tool.started` event was not received (truncated replay). */
+    readonly capability: string | null;
+    /** Display title from the server registry; null as above. */
+    readonly title: string | null;
+    readonly status: AgentToolStatus;
+    readonly code: string | null;
+    readonly evidence: AgentEvidence | null;
+    readonly partial: AgentPartial | null;
+}
+export interface AgentStep {
+    readonly key: string;
+    /** Fixed server label (never model text). */
+    readonly label: string;
+}
+export interface AgentClaim {
+    readonly text: string;
+    /** `callId`s of `ok` results backing the claim. */
+    readonly refs: readonly string[];
+}
+export interface AgentAnswer {
+    readonly answer: string;
+    readonly claims: readonly AgentClaim[];
+    readonly gaps: readonly string[];
+}
+export interface AgentQuestionOption {
+    readonly value: string;
+    readonly label: string;
+}
+/** A clarification question (M0 §10 J shape). `options` only for `single` and `multi`. */
+export interface AgentQuestion {
+    readonly id: string;
+    readonly text: string;
+    readonly kind: 'single' | 'multi' | 'free_text';
+    readonly options?: readonly AgentQuestionOption[];
+}
+/** The task's error: an SSE `error`, a refusal before the stream, or the client's `connection_lost`. */
+export interface AgentTaskError {
+    readonly code: string;
+    readonly retryable: boolean;
+    /** Fixed text for the code (never server text). */
+    readonly message: string;
+}
+export interface AgentUsage {
+    readonly modelCalls: number;
+    readonly toolCalls: number;
+}
+export type AgentTaskStatus = 'idle' | 'streaming' | 'awaiting_clarification' | 'done' | 'error';
+/**
+ * The reducer state (§5 frontend-core). It shows the latest run of the task: `task.started`
+ * clears the run-scoped parts (steps, tools, answer, questions, error, usage).
+ */
+export interface AgentTaskState {
+    readonly taskId: string | null;
+    readonly status: AgentTaskStatus;
+    /** The run number from the last `task.started` (0 before one). */
+    readonly run: number;
+    readonly steps: readonly AgentStep[];
+    readonly tools: Readonly<Record<string, AgentToolState>>;
+    readonly answer: AgentAnswer | null;
+    readonly questions: readonly AgentQuestion[] | null;
+    readonly error: AgentTaskError | null;
+    /** The run's counts from `done`. */
+    readonly usage: AgentUsage | null;
+    /** The highest `seq` applied (0 = none). Pass it to `replay` to fetch what came after. */
+    readonly lastSeq: number;
+    /** `true` while a live stream (open or continue) is connected. */
+    readonly live: boolean;
+    /** `true` once events of this task were missed (a `replay.truncated`, or a `seq` gap). */
+    readonly truncated: boolean;
+}
+/**
+ * Client-side inputs to the reducer: stream lifecycle and refusals. Not sent by the server; the
+ * `local.` prefix cannot collide with a gateway type.
+ */
+export type AgentLocalEvent = {
+    readonly type: 'local.opened';
+    readonly live: boolean;
+} | {
+    readonly type: 'local.closed';
+} | {
+    readonly type: 'local.connection_lost';
+} | {
+    readonly type: 'local.refused';
+    readonly status: number;
+    readonly code: string | null;
+    readonly retryable: boolean;
+};
+/** The parsed §3 D body of a refusal before the first stream byte. */
+export interface AgentRefusalBody {
+    readonly code: string;
+    readonly retryable: boolean;
+}
+/** One request to the stream transport (§5 frontend-core). */
+export interface AgentStreamRequest {
+    readonly method: 'POST' | 'GET';
+    /** Path under the API base, e.g. `/agent/tasks`. */
+    readonly path: string;
+    /** JSON body for POST; null for GET. */
+    readonly body: unknown | null;
+    /** `Last-Event-ID` for a replay (`GET …/events`). */
+    readonly lastEventId?: number;
+    readonly signal: AbortSignalLike;
+}
+/** What the transport answers. `chunks` only with `status` 200; network failure ⇒ `status: 0`. */
+export interface AgentStreamResponse {
+    readonly status: number;
+    readonly error: AgentRefusalBody | null;
+    readonly chunks: AsyncIterable<string> | null;
+    close(): void;
+}
+/**
+ * The injected stream transport (web: `fetch` with a streamed body, never `EventSource`). It owns
+ * authentication of the stream request; a refresh is allowed only before the first byte.
+ */
+export interface AgentStreamTransport {
+    open(req: AgentStreamRequest): Promise<AgentStreamResponse>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/agent/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agent/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,uDAAuD;AACvD,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC,kGAAkG;AAClG,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAE5C,mGAAmG;AACnG,MAAM,MAAM,cAAc,GACtB,cAAc,GACd,MAAM,GACN,cAAc,GACd,eAAe,GACf,wBAAwB,GACxB,QAAQ,GACR,MAAM,GACN,OAAO,GACP,kBAAkB,CAAC;AAEvB;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8FAA8F;IAC9F,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACrD;AAED,kFAAkF;AAClF,MAAM,MAAM,aAAa;AACvB,oEAAoE;AAClE,WAAW;AACb,sDAAsD;GACpD,eAAe;AACjB,uFAAuF;GACrF,KAAK;AACP,6FAA6F;GAC3F,aAAa;AACf,4DAA4D;GAC1D,eAAe,CAAC;AAEpB,uEAAuE;AACvE,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,2DAA2D;IAC3D,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,sGAAsG;AACtG,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAEjD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS;QACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;KAC5B,EAAE,CAAC;IACJ,QAAQ,CAAC,IAAI,EAAE,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC;CACtF;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAA;KAAE,EAAE,CAAC;CAC7E;AAED,mGAAmG;AACnG,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,aAAa,GAAG,cAAc,CAAC;AAE5E,sFAAsF;AACtF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,wEAAwE;AACxE,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,IAAI,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE7F,MAAM,WAAW,cAAc;IAC7B,4FAA4F;IAC5F,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,0FAA0F;AAC1F,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAC;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACnD;AAED,wGAAwG;AACxG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,WAAW,GAAG,wBAAwB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEjG;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,kEAAkE;IAClE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IACzD,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,SAAS,aAAa,EAAE,GAAG,IAAI,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,CAAC;IACtC,oCAAoC;IACpC,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IAClC,0FAA0F;IAC1F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,0FAA0F;IAC1F,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GACzD;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GACjC;IAAE,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAA;CAAE,GAC1C;IACE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEN,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,8DAA8D;AAC9D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IAChC,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAC9B,qDAAqD;IACrD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;CAClC;AAED,kGAAkG;AAClG,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAC9C,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC7D"}

package/dist/agent/types.js

@@ -0,0 +1,5 @@
+/** The gateway stream contract version (§3 B, Q12). */
+export const AGENT_STREAM_VERSION = 0;
+/** No event and no heartbeat for this long ⇒ the stream is treated as lost (§5 frontend-core). */
+export const AGENT_STREAM_STALL_MS = 45_000;
+//# sourceMappingURL=types.js.map

package/dist/agent/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/agent/types.ts"],"names":[],"mappings":"AAUA,uDAAuD;AACvD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,kGAAkG;AAClG,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC"}

package/dist/auth/index.d.ts

@@ -26,5 +26,5 @@ export type { RecordShareService, ShareRequest, ShareView, ShareGranteeKind, } f
 export { createServiceAccountService } from './serviceAccountService.js';
 export type { ServiceAccountService, ServiceAccountView, IssuedKey, CreateServiceAccountBody, UpdateServiceAccountBody, AssignableAccess, AssignableRole, AssignableScopeNode, AssignableResult, KeyExpiry, } from './serviceAccountService.js';
 export { isAuthenticated, accessTokenOf, tenantOf, principalOf } from './session.js';
-export { isRestorablePath, encodeReturnPath, decodeReturnPath } from './returnPath.js';
+export { isRestorablePath, encodeReturnPath, decodeReturnPath, safeReturnPath, } from './returnPath.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,YAAY,EACV,WAAW,EACX,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,WAAW,EACX,cAAc,EACd,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,UAAU,EACV,iBAAiB,EACjB,wBAAwB,EACxB,yBAAyB,EACzB,4BAA4B,EAC5B,2BAA2B,EAC3B,iCAAiC,GAClC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,YAAY,EACV,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,6BAA6B,EAC7B,0BAA0B,EAC1B,8BAA8B,EAC9B,oBAAoB,EACpB,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,YAAY,EACV,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,YAAY,EACV,cAAc,EACd,UAAU,EACV,WAAW,EACX,YAAY,EACZ,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,YAAY,EACV,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,cAAc,EACd,SAAS,EACT,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,YAAY,EACV,kBAAkB,EAClB,YAAY,EACZ,SAAS,EACT,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,YAAY,EACV,qBAAqB,EACrB,kBAAkB,EAClB,SAAS,EACT,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,SAAS,GACV,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,YAAY,EACV,WAAW,EACX,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,WAAW,EACX,cAAc,EACd,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,UAAU,EACV,iBAAiB,EACjB,wBAAwB,EACxB,yBAAyB,EACzB,4BAA4B,EAC5B,2BAA2B,EAC3B,iCAAiC,GAClC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,YAAY,EACV,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,6BAA6B,EAC7B,0BAA0B,EAC1B,8BAA8B,EAC9B,oBAAoB,EACpB,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,YAAY,EACV,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,YAAY,EACV,cAAc,EACd,UAAU,EACV,WAAW,EACX,YAAY,EACZ,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,YAAY,EACV,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,cAAc,EACd,SAAS,EACT,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,YAAY,EACV,kBAAkB,EAClB,YAAY,EACZ,SAAS,EACT,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,YAAY,EACV,qBAAqB,EACrB,kBAAkB,EAClB,SAAS,EACT,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,SAAS,GACV,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACrF,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,GACf,MAAM,iBAAiB,CAAC"}

package/dist/auth/index.js

@@ -17,5 +17,5 @@ export { createRecordPolicyService } from './recordPolicyService.js';
 export { createRecordShareService } from './recordShareService.js';
 export { createServiceAccountService } from './serviceAccountService.js';
 export { isAuthenticated, accessTokenOf, tenantOf, principalOf } from './session.js';
-export { isRestorablePath, encodeReturnPath, decodeReturnPath } from './returnPath.js';
+export { isRestorablePath, encodeReturnPath, decodeReturnPath, safeReturnPath, } from './returnPath.js';
 //# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAarD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAa7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAmBrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAazE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAQvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAUrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAOnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAazE,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAarD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAa7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAmBrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAazE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAQvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAUrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAOnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAazE,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACrF,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,GACf,MAAM,iBAAiB,CAAC"}

package/dist/auth/returnPath.d.ts

@@ -9,7 +9,19 @@
  * Obfuscation, not secrecy: the user owns their storage; the goal is "not human-readable".
  */
 /**
- * True for real in-app routes; false for empty, root, and auth/transient pages.
+ * The same-origin in-app path `path` names, or null when it could leave the app.
+ *
+ * An allowlist, checked on the raw value and again after percent-decoding and dot-segment
+ * resolution: one leading `/`, then a character that is neither `/` nor `\`, printable ASCII
+ * only. So `//host`, `/\host`, any backslash, control characters, Unicode slash and backslash
+ * look-alikes, `%2F` / `%5C` before the query, `/.//host`, and absolute or scheme URLs are all
+ * refused. Returns the input unchanged when it is safe. Use it on every return target before
+ * navigating (a stored blob, router state, or a query parameter).
+ */
+export declare function safeReturnPath(path: unknown): string | null;
+/**
+ * True for real same-origin in-app routes; false for empty, root, off-origin paths
+ * (see `safeReturnPath`) and auth/transient pages.
  */
 export declare function isRestorablePath(path: string | null | undefined): boolean;
 /**

package/dist/auth/returnPath.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"returnPath.d.ts","sourceRoot":"","sources":["../../src/auth/returnPath.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA2CH;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAQzE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAS/E;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAa/E"}
+{"version":3,"file":"returnPath.d.ts","sourceRoot":"","sources":["../../src/auth/returnPath.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAuFH;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAE3D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAQzE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAS/E;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAY/E"}

package/dist/auth/returnPath.js

@@ -43,17 +43,82 @@ function fromBase64Url(s) {
         b64 += '=';
     return b64;
 }
+// The allowlist for the final pathname: one leading '/', then (if anything) a character that
+// is neither '/', '\', a control character nor non-ASCII, then printable ASCII except '\'.
+const SAFE_PATHNAME = /^\/(?:[\x20-\x2E\x30-\x5B\x5D-\x7E][\x20-\x5B\x5D-\x7E]*)?$/;
+/** RFC 3986 §5.2.4 dot-segment removal for an absolute path (keeps empty segments). */
+function removeDotSegments(absPath) {
+    const parts = absPath.split('/').slice(1);
+    const out = [];
+    parts.forEach((seg, i) => {
+        if (seg === '.' || seg === '..') {
+            if (seg === '..')
+                out.pop();
+            if (i === parts.length - 1)
+                out.push('');
+        }
+        else {
+            out.push(seg);
+        }
+    });
+    return '/' + out.join('/');
+}
 /**
- * True for real in-app routes; false for empty, root, and auth/transient pages.
+ * The pathname a router or browser finally acts on (percent-decoded, then dot segments
+ * resolved; no query or hash), or null when `path` is not a safe same-origin in-app path.
+ * No `URL` dependency: frontend-core runs where `URL` is missing or partial (React Native).
+ */
+function safePathname(path) {
+    if (typeof path !== 'string' || path.length === 0)
+        return null;
+    // Raw form: a leading '/', printable ASCII only (no tab, newline or other control character
+    // a URL parser would strip, no Unicode look-alike), no '//' or '/\' authority, no '\' at all.
+    if (!/^\/[\x20-\x7E]*$/.test(path))
+        return null;
+    if (path.startsWith('//') || path.includes('\\'))
+        return null;
+    const rawPathname = path.split(/[?#]/, 1)[0] ?? '';
+    // An encoded slash or backslash in the path could become a separator after a decode.
+    if (/%(2f|5c)/i.test(rawPathname))
+        return null;
+    let decoded;
+    try {
+        decoded = decodeURIComponent(rawPathname);
+    }
+    catch {
+        return null;
+    }
+    const normalised = removeDotSegments(decoded);
+    if (!SAFE_PATHNAME.test(normalised))
+        return null;
+    return normalised;
+}
+/**
+ * The same-origin in-app path `path` names, or null when it could leave the app.
+ *
+ * An allowlist, checked on the raw value and again after percent-decoding and dot-segment
+ * resolution: one leading `/`, then a character that is neither `/` nor `\`, printable ASCII
+ * only. So `//host`, `/\host`, any backslash, control characters, Unicode slash and backslash
+ * look-alikes, `%2F` / `%5C` before the query, `/.//host`, and absolute or scheme URLs are all
+ * refused. Returns the input unchanged when it is safe. Use it on every return target before
+ * navigating (a stored blob, router state, or a query parameter).
+ */
+export function safeReturnPath(path) {
+    return safePathname(path) === null ? null : path;
+}
+/**
+ * True for real same-origin in-app routes; false for empty, root, off-origin paths
+ * (see `safeReturnPath`) and auth/transient pages.
  */
 export function isRestorablePath(path) {
-    if (!path || path === '/')
-        return false;
-    // Strip any hash fragment before matching so /login#x is also rejected.
-    const bare = path.split('#')[0];
-    if (!bare || bare === '/')
+    // Matched on the normalised pathname (no query or hash, percent-decoded, dot segments
+    // resolved, lower-cased like the router's matching), so /login#x, /login?x, /./login,
+    // /%6Cogin and /LOGIN are all refused.
+    const normalised = safePathname(path);
+    if (normalised === null || normalised === '/')
         return false;
-    return !NON_RESTORABLE_PREFIXES.some((p) => bare === p || bare.startsWith(p + '/') || bare.startsWith(p + '?'));
+    const bare = normalised.toLowerCase();
+    return !NON_RESTORABLE_PREFIXES.some((p) => bare === p || bare.startsWith(p + '/'));
 }
 /**
  * Obfuscate `path` to an opaque blob, or null if non-restorable / btoa unavailable.
@@ -82,10 +147,8 @@ export function decodeReturnPath(blob) {
         return null;
     try {
         const path = xor(atob(fromBase64Url(blob)));
-        // A tampered/corrupt blob can decode to arbitrary bytes; only accept a value that
-        // looks like a real path (leading slash, printable ASCII).
-        if (!/^\/[\x20-\x7E]*$/.test(path))
-            return null;
+        // A tampered/corrupt blob can decode to arbitrary bytes; isRestorablePath accepts only a
+        // same-origin in-app path (safeReturnPath) that is not an auth page.
         return isRestorablePath(path) ? path : null;
     }
     catch {

package/dist/auth/returnPath.js.map

@@ -1 +1 @@
-{"version":3,"file":"returnPath.js","sourceRoot":"","sources":["../../src/auth/returnPath.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,yDAAyD;AACzD,MAAM,OAAO,GAAG,kBAAkB,CAAC;AAEnC,mEAAmE;AACnE,MAAM,uBAAuB,GAAG;IAC9B,QAAQ;IACR,kBAAkB;IAClB,iBAAiB;IACjB,mBAAmB;CACpB,CAAC;AAEF,SAAS,OAAO;IACd,MAAM,CAAC,GAAG,UAAqE,CAAC;IAChF,OAAO,OAAO,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,OAAO;IACd,MAAM,CAAC,GAAG,UAAqE,CAAC;IAChF,OAAO,OAAO,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,gFAAgF;AAChF,kDAAkD;AAClD,SAAS,GAAG,CAAC,KAAa;IACxB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,GAAG,IAAI,GAAG,CAAC;IACxC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA+B;IAC9D,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACxC,wEAAwE;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA+B;IAC9D,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAc,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA+B;IAC9D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,kFAAkF;QAClF,2DAA2D;QAC3D,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"returnPath.js","sourceRoot":"","sources":["../../src/auth/returnPath.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,yDAAyD;AACzD,MAAM,OAAO,GAAG,kBAAkB,CAAC;AAEnC,mEAAmE;AACnE,MAAM,uBAAuB,GAAG;IAC9B,QAAQ;IACR,kBAAkB;IAClB,iBAAiB;IACjB,mBAAmB;CACpB,CAAC;AAEF,SAAS,OAAO;IACd,MAAM,CAAC,GAAG,UAAqE,CAAC;IAChF,OAAO,OAAO,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,OAAO;IACd,MAAM,CAAC,GAAG,UAAqE,CAAC;IAChF,OAAO,OAAO,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,gFAAgF;AAChF,kDAAkD;AAClD,SAAS,GAAG,CAAC,KAAa;IACxB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,GAAG,IAAI,GAAG,CAAC;IACxC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6FAA6F;AAC7F,2FAA2F;AAC3F,MAAM,aAAa,GAAG,6DAA6D,CAAC;AAEpF,uFAAuF;AACvF,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACvB,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAChC,IAAI,GAAG,KAAK,IAAI;gBAAE,GAAG,CAAC,GAAG,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,4FAA4F;IAC5F,8FAA8F;IAC9F,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,qFAAqF;IACrF,IAAI,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAe,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA+B;IAC9D,sFAAsF;IACtF,sFAAsF;IACtF,uCAAuC;IACvC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AACtF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA+B;IAC9D,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAc,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA+B;IAC9D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,yFAAyF;QACzF,qEAAqE;QACrE,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}