@beacon-build/sdk 2.5.0 → 2.5.1

package/dist/manifest.ops-entries.js

@@ -1,282 +0,0 @@
-/**
- * SDK Endpoint Manifest — Ops entries (F224)
- *
- * Covers: /api/v1/* with authMode 'ops'.
- */
-export const MANIFEST_OPS_ENTRIES = [
-    // ── Projects (Ops) ────────────────────────────────────────────────────────
-    {
-        method: 'POST',
-        path: '/api/v1/projects/upsert',
-        sdkPath: 'ops.projects.upsert',
-        authMode: 'ops',
-    },
-    // ── Agents (Ops) ──────────────────────────────────────────────────────────
-    {
-        method: 'POST',
-        path: '/api/v1/agents/upsert',
-        sdkPath: 'ops.agents.upsert',
-        authMode: 'ops',
-    },
-    // ── Tasks (Ops) ───────────────────────────────────────────────────────────
-    { method: 'POST', path: '/api/v1/tasks', sdkPath: 'ops.tasks.create', authMode: 'ops' },
-    {
-        method: 'POST',
-        path: '/api/v1/tasks/{id}/complete',
-        sdkPath: 'ops.tasks.complete',
-        authMode: 'ops',
-    },
-    // ── Usage (Ops) ───────────────────────────────────────────────────────────
-    // C568 (FS54/7): path moved from `/api/v1/usage/workflows` — folded into the canonical
-    // workflow-instances resource as its `/log` sub-resource. sdkPath (client property name)
-    // is unchanged.
-    {
-        method: 'POST',
-        path: '/api/v1/workflow-instances/log',
-        sdkPath: 'ops.usageWorkflows.log',
-        authMode: 'ops',
-    },
-    {
-        method: 'GET',
-        path: '/api/v1/workflow-instances/log',
-        sdkPath: 'ops.usageWorkflows.list',
-        authMode: 'ops',
-    },
-    // ── Metrics (C823) ────────────────────────────────────────────────────────
-    // F515/AC-6: Ops-gated (Argus system-JWT/org-less admin-vendor JWT/OPS_API_KEY) —
-    // see `clients/ops/metrics-ops.client.ts`.
-    {
-        method: 'GET',
-        path: '/api/v1/metrics/correlation',
-        sdkPath: 'ops.metrics.correlation',
-        authMode: 'ops',
-    },
-    // ── Campaign events (C823/B762) ───────────────────────────────────────────
-    // C796/AC-2: deliberately unauthenticated on the wire (no visitor identity), but
-    // reachable server-side via the Ops SDK — see `clients/ops/campaign-events-ops.client.ts`.
-    {
-        method: 'POST',
-        path: '/api/v1/campaign-events',
-        sdkPath: 'ops.campaignEvents.create',
-        authMode: 'ops',
-    },
-    // ── Sessions (Ops) ────────────────────────────────────────────────────────
-    { method: 'POST', path: '/api/v1/sessions', sdkPath: 'ops.sessions.create', authMode: 'ops' },
-    {
-        method: 'POST',
-        path: '/api/v1/sessions/{id}/heartbeat',
-        sdkPath: 'ops.sessions.heartbeat',
-        authMode: 'ops',
-    },
-    {
-        method: 'POST',
-        path: '/api/v1/sessions/{id}/terminate',
-        sdkPath: 'ops.sessions.terminate',
-        authMode: 'ops',
-    },
-    {
-        method: 'POST',
-        path: '/api/v1/sessions/terminate-by-agent',
-        sdkPath: 'ops.sessions.terminateByAgent',
-        authMode: 'ops',
-    },
-    {
-        method: 'POST',
-        path: '/api/v1/sessions/{id}/external-id',
-        sdkPath: 'ops.sessions.registerExternalId',
-        authMode: 'ops',
-    },
-    // ── Conversation Messages (Ops) ───────────────────────────────────────────
-    {
-        method: 'POST',
-        path: '/api/v1/conversation-messages',
-        sdkPath: 'ops.conversationMessages.create',
-        authMode: 'ops',
-    },
-    // ── Realtime ──────────────────────────────────────────────────────────────
-    {
-        method: 'POST',
-        path: '/api/v1/realtime/notify',
-        sdkPath: 'ops.realtime.notify',
-        authMode: 'ops',
-    },
-    // ── Ops DB ────────────────────────────────────────────────────────────────
-    { method: 'GET', path: '/api/v1/ops/db/stats', sdkPath: 'ops.db.stats', authMode: 'ops' },
-    {
-        method: 'GET',
-        path: '/api/v1/ops/db/migrations',
-        sdkPath: 'ops.db.migrations',
-        authMode: 'ops',
-    },
-    {
-        method: 'GET',
-        path: '/api/v1/ops/db/migration-status',
-        sdkPath: 'ops.db.migrationStatus',
-        authMode: 'ops',
-    },
-    {
-        method: 'POST',
-        path: '/api/v1/ops/db/migrate',
-        sdkPath: 'ops.db.migrate',
-        authMode: 'ops',
-        notes: 'SSE',
-    },
-    {
-        method: 'POST',
-        path: '/api/v1/ops/db/seed',
-        sdkPath: 'ops.db.seed',
-        authMode: 'ops',
-        notes: 'SSE',
-    },
-    {
-        method: 'POST',
-        path: '/api/v1/ops/db/reset',
-        sdkPath: 'ops.db.reset',
-        authMode: 'ops',
-        notes: 'SSE',
-    },
-    // ── Ops Storage ───────────────────────────────────────────────────────────
-    {
-        method: 'GET',
-        path: '/api/v1/ops/storage/buckets',
-        sdkPath: 'ops.storage.buckets',
-        authMode: 'ops',
-    },
-    {
-        method: 'GET',
-        path: '/api/v1/ops/storage/{bucket}',
-        sdkPath: 'ops.storage.list',
-        authMode: 'ops',
-    },
-    {
-        method: 'POST',
-        path: '/api/v1/ops/storage/{bucket}/upload',
-        sdkPath: 'ops.storage.upload',
-        authMode: 'ops',
-        notes: 'multipart/form-data',
-    },
-    {
-        method: 'GET',
-        path: '/api/v1/ops/storage/{bucket}/{key}',
-        sdkPath: 'ops.storage.download',
-        authMode: 'ops',
-        notes: 'binary',
-    },
-    {
-        method: 'DELETE',
-        path: '/api/v1/ops/storage/{bucket}/{key}',
-        sdkPath: 'ops.storage.delete',
-        authMode: 'ops',
-    },
-    // ── Ops Northflank ────────────────────────────────────────────────────────
-    {
-        method: 'GET',
-        path: '/api/v1/ops/services',
-        sdkPath: 'ops.northflank.listServices',
-        authMode: 'ops',
-    },
-    {
-        // T148/C278 — always-on control-plane env-status (management host, cross-project).
-        method: 'GET',
-        path: '/api/v1/ops/env-status',
-        sdkPath: 'ops.northflank.envStatus',
-        authMode: 'ops',
-    },
-    {
-        method: 'GET',
-        path: '/api/v1/ops/services/{id}',
-        sdkPath: 'ops.northflank.getService',
-        authMode: 'ops',
-    },
-    {
-        method: 'POST',
-        path: '/api/v1/ops/services/{id}/restart',
-        sdkPath: 'ops.northflank.restartService',
-        authMode: 'ops',
-    },
-    {
-        method: 'GET',
-        path: '/api/v1/ops/services/{id}/logs',
-        sdkPath: 'ops.northflank.streamLogs',
-        authMode: 'ops',
-        notes: 'SSE',
-    },
-    {
-        method: 'POST',
-        path: '/api/v1/ops/jobs/run',
-        sdkPath: 'ops.northflank.runJob',
-        authMode: 'ops',
-        notes: 'SSE',
-    },
-    {
-        method: 'GET',
-        path: '/api/v1/ops/jobs',
-        sdkPath: 'ops.northflank.listJobs',
-        authMode: 'ops',
-    },
-    // ── Ops MQ ────────────────────────────────────────────────────────────────
-    { method: 'GET', path: '/api/v1/ops/mq/stats', sdkPath: 'ops.mq.stats', authMode: 'ops' },
-    {
-        method: 'POST',
-        path: '/api/v1/ops/mq/{queue}/drain',
-        sdkPath: 'ops.mq.drain',
-        authMode: 'ops',
-    },
-    {
-        method: 'POST',
-        path: '/api/v1/ops/mq/{queue}/retry-failed',
-        sdkPath: 'ops.mq.retryFailed',
-        authMode: 'ops',
-    },
-    // ── Ops Logs ──────────────────────────────────────────────────────────────
-    { method: 'GET', path: '/api/v1/ops/logs', sdkPath: 'ops.logs.search', authMode: 'ops' },
-    // ── Ops Workers (F331/AC-12) ──────────────────────────────────────────────
-    {
-        method: 'GET',
-        path: '/api/v1/admin/ops/workers',
-        sdkPath: 'ops.workers.list',
-        authMode: 'ops',
-    },
-    {
-        method: 'GET',
-        path: '/api/v1/admin/ops/workers/{name}',
-        sdkPath: 'ops.workers.get',
-        authMode: 'ops',
-    },
-    {
-        method: 'GET',
-        path: '/api/v1/admin/ops/workers/{name}/recent-runs',
-        sdkPath: 'ops.workers.recentRuns',
-        authMode: 'ops',
-    },
-    {
-        method: 'PATCH',
-        path: '/api/v1/admin/ops/workers/{name}/config',
-        sdkPath: 'ops.workers.setConfig',
-        authMode: 'ops',
-    },
-    {
-        method: 'POST',
-        path: '/api/v1/admin/ops/workers/{name}/run-now',
-        sdkPath: 'ops.workers.runNow',
-        authMode: 'ops',
-    },
-    {
-        // C456/C455-AC-5: worker-crossing run history (Jobs → Runs table) — a
-        // sibling of `/admin/ops/workers/*`, not nested under it.
-        method: 'GET',
-        path: '/api/v1/admin/ops/runs',
-        sdkPath: 'ops.workers.listRuns',
-        authMode: 'ops',
-    },
-    {
-        // B796: hourly throughput buckets — fix for the Ops Cockpit "Durchsatz (24h)"
-        // chart (server-side aggregation over the full window, not a capped page
-        // bucketized client-side). Sub-route of `/admin/ops/runs`.
-        method: 'GET',
-        path: '/api/v1/admin/ops/runs/throughput',
-        sdkPath: 'ops.workers.getThroughput',
-        authMode: 'ops',
-    },
-];
-//# sourceMappingURL=manifest.ops-entries.js.map

package/dist/manifest.ops-entries.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"manifest.ops-entries.js","sourceRoot":"","sources":["../src/manifest.ops-entries.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,CAAC,MAAM,oBAAoB,GAAoB;IACjD,6EAA6E;IAC7E;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,KAAK;KAClB;IAED,6EAA6E;IAC7E;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,mBAAmB;QAC5B,QAAQ,EAAE,KAAK;KAClB;IAED,6EAA6E;IAC7E,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,KAAK,EAAE;IACvF;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,KAAK;KAClB;IAED,6EAA6E;IAC7E,uFAAuF;IACvF,yFAAyF;IACzF,gBAAgB;IAChB;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,KAAK;KAClB;IAED,6EAA6E;IAC7E,kFAAkF;IAClF,2CAA2C;IAC3C;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,KAAK;KAClB;IAED,6EAA6E;IAC7E,iFAAiF;IACjF,2FAA2F;IAC3F;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,KAAK;KAClB;IAED,6EAA6E;IAC7E,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC7F;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,+BAA+B;QACxC,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,KAAK;KAClB;IAED,6EAA6E;IAC7E;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,KAAK;KAClB;IAED,6EAA6E;IAC7E;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,KAAK;KAClB;IAED,6EAA6E;IAC7E,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE;IACzF;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,mBAAmB;QAC5B,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,KAAK;KACf;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,KAAK;KACf;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,KAAK;KACf;IAED,6EAA6E;IAC7E;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,qBAAqB;KAC/B;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,QAAQ;KAClB;IACD;QACI,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,KAAK;KAClB;IAED,6EAA6E;IAC7E;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,6BAA6B;QACtC,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,mFAAmF;QACnF,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,+BAA+B;QACxC,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,KAAK;KACf;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,KAAK;KACf;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,KAAK;KAClB;IAED,6EAA6E;IAC7E,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE;IACzF;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,KAAK;KAClB;IAED,6EAA6E;IAC7E,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE;IAExF,6EAA6E;IAC7E;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,iBAAiB;QAC1B,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,8CAA8C;QACpD,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,yCAAyC;QAC/C,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,0CAA0C;QAChD,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,sEAAsE;QACtE,0DAA0D;QAC1D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,KAAK;KAClB;IACD;QACI,8EAA8E;QAC9E,yEAAyE;QACzE,2DAA2D;QAC3D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,KAAK;KAClB;CACJ,CAAA"}

package/dist/transport/ops-api-client.d.ts

@@ -1,80 +0,0 @@
-/**
- * OpsApiClient — HTTP client for beacon API /api/v1/* endpoints.
- *
- * Uses OPS_API_KEY Bearer auth (vendor role, C80 bypass).
- * Supports retry with exponential backoff for transient errors (INV-5).
- * Logs errors with request context (INV-4).
- *
- * F217: Used by MCP, Sidecar, Janitor, Runtime to replace direct Prisma access.
- */
-export interface OpsApiClientConfig {
-    baseUrl: string;
-    /** OPS API key (vendor role). Either apiKey or jwt must be provided. */
-    apiKey?: string;
-    /** User or agent JWT for actor-scoped operations (e.g. thread messages).
-     *  Takes precedence over apiKey when both are provided. */
-    jwt?: string;
-    /**
-     * Dynamic bearer resolver, re-read on EVERY request. Lets a caller rotate a short-lived
-     * token WITHOUT reconstructing the client — e.g. the beacon-agent's Argus JWT, which the
-     * API expires after 8h (AGENT_TOKEN_EXPIRY_MS); a static `jwt` captured at boot silently
-     * lapsed and 401'd every call once past the TTL (the 2026-08-05 outage). When it returns a
-     * non-empty value it takes precedence over `jwt`/`apiKey`; when absent/empty, resolution
-     * falls back to `jwt` then `apiKey`, so existing string callers are unaffected.
-     */
-    jwtProvider?: () => string | undefined;
-    /** Max retry attempts for 5xx/network errors (default: 3) */
-    retries?: number;
-    /** Base delay ms for exponential backoff (default: 100) */
-    retryBaseMs?: number;
-    /**
-     * B843 (C902): decides whether an HTTP status is retried. Defaults to the curated
-     * `{429,500,502,503,504}` set below — the transient-overload cases every ordinary caller
-     * wants retried, deliberately NOT the full 5xx range (a 501/505/511 is not a transient
-     * overload). A caller that genuinely needs the old "retry ANY 5xx" B591 shape (mcp-core's
-     * remote-ops mint round-trip) passes its own predicate here instead of the global default
-     * being widened for everyone.
-     */
-    retryableStatus?: (status: number) => boolean;
-}
-export declare class OpsApiClient {
-    private readonly baseUrl;
-    private readonly apiKey;
-    private readonly jwt;
-    private readonly jwtProvider;
-    private readonly retries;
-    private readonly retryBaseMs;
-    private readonly retryableStatus;
-    constructor(config: OpsApiClientConfig);
-    getBaseUrl(): string;
-    getApiKey(): string;
-    /**
-     * Resolve the effective bearer token for THIS request. Precedence: the dynamic
-     * `jwtProvider` (re-read each call, so a rotated token is picked up without rebuilding the
-     * client) → the static `jwt` → the `apiKey`. Trims the provider's result defensively (same
-     * reason the constructor trims the static credentials).
-     */
-    private resolveBearer;
-    /**
-     * C434: the effective bearer token (jwt/provider takes precedence over apiKey, same rule
-     * `executeWithRetry` uses). Sibling transports that need the SAME auth as this client
-     * but aren't wired through `executeWithRetry` (MultipartClient/BinaryClient — raw
-     * `fetch`, no JSON body) use this instead of re-deriving the precedence themselves.
-     * `getApiKey()` above stays as-is (apiKey-only) for its existing callers.
-     */
-    getAuthToken(): string;
-    private buildUrl;
-    private executeWithRetry;
-    get<T>(path: string): Promise<T>;
-    post<T>(path: string, body?: unknown): Promise<T>;
-    patch<T>(path: string, body: unknown): Promise<T>;
-    put<T>(path: string, body?: unknown): Promise<T>;
-    delete<T>(path: string): Promise<T>;
-}
-/**
- * Create an OpsApiClient from environment variables.
- * Reads BEACON_API_URL and OPS_API_KEY from process.env.
- * For actor-scoped operations (thread messages), provide a jwt instead of apiKey.
- */
-export declare function createOpsApiClient(overrides?: Partial<OpsApiClientConfig>): OpsApiClient;
-//# sourceMappingURL=ops-api-client.d.ts.map

package/dist/transport/ops-api-client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ops-api-client.d.ts","sourceRoot":"","sources":["../../src/transport/ops-api-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAuBH,MAAM,WAAW,kBAAkB;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;+DAC2D;IAC3D,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;IACtC,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAA;CAChD;AAKD,qBAAa,YAAY;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAoB;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwC;IACpE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAQ;IACpC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA6B;gBAEjD,MAAM,EAAE,kBAAkB;IAYtC,UAAU,IAAI,MAAM;IAIpB,SAAS,IAAI,MAAM;IAInB;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAIrB;;;;;;OAMG;IACH,YAAY,IAAI,MAAM;IAItB,OAAO,CAAC,QAAQ;YAKF,gBAAgB;IA2G9B,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAIhC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAIjD,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAIjD,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAIhD,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAGtC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,YAAY,CAsBxF"}

package/dist/transport/ops-api-client.js

@@ -1,211 +0,0 @@
-/**
- * OpsApiClient — HTTP client for beacon API /api/v1/* endpoints.
- *
- * Uses OPS_API_KEY Bearer auth (vendor role, C80 bypass).
- * Supports retry with exponential backoff for transient errors (INV-5).
- * Logs errors with request context (INV-4).
- *
- * F217: Used by MCP, Sidecar, Janitor, Runtime to replace direct Prisma access.
- */
-import { SdkError, apiCodeToSdkCode, statusToSdkCode } from './errors.js';
-// Minimal logger for INV-4 — avoid pulling in @beacon-build/logger to keep client lean
-// INV-4b: 4xx errors (except 429) are NOT logged at level:50 — they are expected fallbacks.
-//         Only 5xx and network errors are logged as errors.
-function logError(msg, context) {
-    if (typeof process !== 'undefined' && process.stderr) {
-        process.stderr.write(JSON.stringify({ level: 50, time: Date.now(), msg, ...context }) + '\n');
-    }
-}
-function logDebug(msg, context) {
-    if (typeof process !== 'undefined' && process.stderr) {
-        process.stderr.write(JSON.stringify({ level: 20, time: Date.now(), msg, ...context }) + '\n');
-    }
-}
-const RETRYABLE_STATUSES = new Set([429, 500, 502, 503, 504]);
-const defaultRetryableStatus = (status) => RETRYABLE_STATUSES.has(status);
-export class OpsApiClient {
-    baseUrl;
-    apiKey;
-    jwt;
-    jwtProvider;
-    retries;
-    retryBaseMs;
-    retryableStatus;
-    constructor(config) {
-        // Trim credentials defensively — a stray newline/space in an injected env
-        // var (e.g. OPS_API_KEY) otherwise corrupts the Bearer token and 401s.
-        this.baseUrl = config.baseUrl.trim().replace(/\/$/, '');
-        this.apiKey = config.apiKey?.trim();
-        this.jwt = config.jwt?.trim();
-        this.jwtProvider = config.jwtProvider;
-        this.retries = config.retries ?? 3;
-        this.retryBaseMs = config.retryBaseMs ?? 100;
-        this.retryableStatus = config.retryableStatus ?? defaultRetryableStatus;
-    }
-    getBaseUrl() {
-        return this.baseUrl;
-    }
-    getApiKey() {
-        return this.apiKey ?? '';
-    }
-    /**
-     * Resolve the effective bearer token for THIS request. Precedence: the dynamic
-     * `jwtProvider` (re-read each call, so a rotated token is picked up without rebuilding the
-     * client) → the static `jwt` → the `apiKey`. Trims the provider's result defensively (same
-     * reason the constructor trims the static credentials).
-     */
-    resolveBearer() {
-        return (this.jwtProvider?.() ?? '').trim() || this.jwt || this.apiKey || '';
-    }
-    /**
-     * C434: the effective bearer token (jwt/provider takes precedence over apiKey, same rule
-     * `executeWithRetry` uses). Sibling transports that need the SAME auth as this client
-     * but aren't wired through `executeWithRetry` (MultipartClient/BinaryClient — raw
-     * `fetch`, no JSON body) use this instead of re-deriving the precedence themselves.
-     * `getApiKey()` above stays as-is (apiKey-only) for its existing callers.
-     */
-    getAuthToken() {
-        return this.resolveBearer();
-    }
-    buildUrl(path) {
-        const p = path.startsWith('/') ? path : `/${path}`;
-        return `${this.baseUrl}${p}`;
-    }
-    async executeWithRetry(method, path, body) {
-        const url = this.buildUrl(path);
-        const token = this.resolveBearer();
-        const headers = {
-            'Content-Type': 'application/json',
-            Authorization: `Bearer ${token}`,
-        };
-        let lastError;
-        for (let attempt = 0; attempt <= this.retries; attempt++) {
-            if (attempt > 0) {
-                const delay = this.retryBaseMs * Math.pow(2, attempt - 1);
-                await new Promise((r) => setTimeout(r, delay));
-            }
-            let res;
-            try {
-                res = await fetch(url, {
-                    method,
-                    headers,
-                    body: body !== undefined ? JSON.stringify(body) : undefined,
-                    signal: AbortSignal.timeout(15_000),
-                });
-            }
-            catch (err) {
-                // Network error — retryable
-                const networkErr = new SdkError('network_error', err instanceof Error ? err.message : 'Network request failed');
-                lastError = networkErr;
-                if (attempt === this.retries) {
-                    // All retries exhausted — log with request context before throwing
-                    logError('OpsApiClient network error (all retries exhausted)', {
-                        method,
-                        path,
-                        attempt,
-                        error: networkErr.message,
-                    });
-                }
-                continue;
-            }
-            if (this.retryableStatus(res.status) && attempt < this.retries) {
-                lastError = new SdkError(statusToSdkCode(res.status), `HTTP ${res.status}`, res.status);
-                // Copilot #696 (via C902/B591 mcp-core remote-ops consolidation): drain the
-                // un-consumed body before retrying — an undrained body keeps the underlying
-                // socket busy and leaks connections under repeated retries, exactly the
-                // overload scenario this retry loop exists to survive. B843/CON-3: the cancel is
-                // strictly best-effort (the socket is being discarded either way), but log it at
-                // debug rather than swallowing silently, so a persistent drain failure is visible.
-                await res.body?.cancel().catch((e) => logDebug('OpsApiClient body drain-cancel failed (non-fatal)', {
-                    method,
-                    path,
-                    error: e instanceof Error ? e.message : String(e),
-                }));
-                continue;
-            }
-            if (!res.ok) {
-                let code = statusToSdkCode(res.status);
-                // Always preserve method+path for INV-4 context
-                let message = `HTTP ${res.status} ${method} ${path}`;
-                // B300: keep the body's own code — `code` above buckets anything unrecognised
-                // into the status default, which loses the distinction the API meant to draw.
-                let apiCode;
-                try {
-                    const b = await res.json();
-                    // Prefer body.code for precise error classification (e.g. 422 VALIDATION vs INVALID_TRANSITION)
-                    if (typeof b?.code === 'string') {
-                        apiCode = b.code;
-                        code = apiCodeToSdkCode(b.code, res.status);
-                    }
-                    if (b?.error?.message)
-                        message = `${message} — ${b.error.message}`;
-                    else if (typeof b?.error === 'string')
-                        message = `${message} — ${b.error}`;
-                }
-                catch (_err) {
-                    // ignore parse errors — `message`/`apiCode` already have a safe default above
-                }
-                // INV-4b: 4xx (except 429) = expected — log at debug, not error.
-                //         429/5xx = unexpected — log at error.
-                if (res.status >= 500 || res.status === 429) {
-                    logError('OpsApiClient error', { method, path, status: res.status, attempt });
-                }
-                else {
-                    logDebug('OpsApiClient 4xx', { method, path, status: res.status, attempt });
-                }
-                throw new SdkError(code, message, res.status, apiCode);
-            }
-            // 204 No Content
-            if (res.status === 204)
-                return undefined;
-            try {
-                return (await res.json());
-            }
-            catch (_err) {
-                // No/invalid JSON body on an otherwise-ok response — treat as no content.
-                return undefined;
-            }
-        }
-        throw lastError ?? new SdkError('network_error', `Failed after ${this.retries} retries`);
-    }
-    get(path) {
-        return this.executeWithRetry('GET', path);
-    }
-    post(path, body) {
-        return this.executeWithRetry('POST', path, body);
-    }
-    patch(path, body) {
-        return this.executeWithRetry('PATCH', path, body);
-    }
-    put(path, body) {
-        return this.executeWithRetry('PUT', path, body);
-    }
-    delete(path) {
-        return this.executeWithRetry('DELETE', path);
-    }
-}
-/**
- * Create an OpsApiClient from environment variables.
- * Reads BEACON_API_URL and OPS_API_KEY from process.env.
- * For actor-scoped operations (thread messages), provide a jwt instead of apiKey.
- */
-export function createOpsApiClient(overrides) {
-    // C675 (B596): BEACON_API_URL is a REQUIRED value for a real ops client — it decides
-    // which environment (prod vs. anything else) every subsequent call actually hits.
-    // This used to silently fall back to `http://localhost:4000` when unset, which would
-    // misdirect a caller (mcp/agent's memory-distill, agent-session.service) at the wrong
-    // API without any signal. In normal operation `loadBeaconEnv()` always sets
-    // BEACON_API_URL before this runs (defaulting it via `resolveMcpApiUrl()`), so hitting
-    // this branch means the caller's env was never loaded — fail loud instead of guessing.
-    const baseUrl = overrides?.baseUrl ?? process.env.BEACON_API_URL;
-    if (!baseUrl) {
-        throw new Error('BEACON_API_URL is required for OpsApiClient (or pass overrides.baseUrl) — check that loadBeaconEnv() ran, or ~/.beacon-platform/.env');
-    }
-    const apiKey = overrides?.apiKey ?? process.env.OPS_API_KEY ?? undefined;
-    const jwt = overrides?.jwt ?? process.env.BEACON_API_JWT ?? undefined;
-    if (!apiKey && !jwt && !overrides?.jwtProvider) {
-        throw new Error('OPS_API_KEY or BEACON_API_JWT is required for OpsApiClient — check ~/.beacon-platform/.env');
-    }
-    return new OpsApiClient({ baseUrl, apiKey, jwt, ...overrides });
-}
-//# sourceMappingURL=ops-api-client.js.map

package/dist/transport/ops-api-client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ops-api-client.js","sourceRoot":"","sources":["../../src/transport/ops-api-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAEzE,uFAAuF;AACvF,4FAA4F;AAC5F,4DAA4D;AAC5D,SAAS,QAAQ,CAAC,GAAW,EAAE,OAAgC;IAC3D,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,GAAG,IAAI,CAC1E,CAAA;IACL,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,OAAgC;IAC3D,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,GAAG,IAAI,CAC1E,CAAA;IACL,CAAC;AACL,CAAC;AAiCD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;AAC7D,MAAM,sBAAsB,GAAG,CAAC,MAAc,EAAW,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;AAE1F,MAAM,OAAO,YAAY;IACJ,OAAO,CAAQ;IACf,MAAM,CAAoB;IAC1B,GAAG,CAAoB;IACvB,WAAW,CAAwC;IACnD,OAAO,CAAQ;IACf,WAAW,CAAQ;IACnB,eAAe,CAA6B;IAE7D,YAAY,MAA0B;QAClC,0EAA0E;QAC1E,uEAAuE;QACvE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAA;QACnC,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;QAC7B,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAA;QACrC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAA;QAClC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,GAAG,CAAA;QAC5C,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,sBAAsB,CAAA;IAC3E,CAAC;IAED,UAAU;QACN,OAAO,IAAI,CAAC,OAAO,CAAA;IACvB,CAAC;IAED,SAAS;QACL,OAAO,IAAI,CAAC,MAAM,IAAI,EAAE,CAAA;IAC5B,CAAC;IAED;;;;;OAKG;IACK,aAAa;QACjB,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,CAAA;IAC/E,CAAC;IAED;;;;;;OAMG;IACH,YAAY;QACR,OAAO,IAAI,CAAC,aAAa,EAAE,CAAA;IAC/B,CAAC;IAEO,QAAQ,CAAC,IAAY;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAA;QAClD,OAAO,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,CAAA;IAChC,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAA;QAClC,MAAM,OAAO,GAA2B;YACpC,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,KAAK,EAAE;SACnC,CAAA;QAED,IAAI,SAAkB,CAAA;QACtB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBACd,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAA;gBACzD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;YAClD,CAAC;YAED,IAAI,GAAa,CAAA;YACjB,IAAI,CAAC;gBACD,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBACnB,MAAM;oBACN,OAAO;oBACP,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC3D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;iBACtC,CAAC,CAAA;YACN,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,4BAA4B;gBAC5B,MAAM,UAAU,GAAG,IAAI,QAAQ,CAC3B,eAAe,EACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAChE,CAAA;gBACD,SAAS,GAAG,UAAU,CAAA;gBACtB,IAAI,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;oBAC3B,mEAAmE;oBACnE,QAAQ,CAAC,oDAAoD,EAAE;wBAC3D,MAAM;wBACN,IAAI;wBACJ,OAAO;wBACP,KAAK,EAAE,UAAU,CAAC,OAAO;qBAC5B,CAAC,CAAA;gBACN,CAAC;gBACD,SAAQ;YACZ,CAAC;YAED,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7D,SAAS,GAAG,IAAI,QAAQ,CACpB,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAC3B,QAAQ,GAAG,CAAC,MAAM,EAAE,EACpB,GAAG,CAAC,MAAM,CACb,CAAA;gBACD,4EAA4E;gBAC5E,4EAA4E;gBAC5E,wEAAwE;gBACxE,iFAAiF;gBACjF,iFAAiF;gBACjF,mFAAmF;gBACnF,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACjC,QAAQ,CAAC,mDAAmD,EAAE;oBAC1D,MAAM;oBACN,IAAI;oBACJ,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;iBACpD,CAAC,CACL,CAAA;gBACD,SAAQ;YACZ,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACV,IAAI,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBACtC,gDAAgD;gBAChD,IAAI,OAAO,GAAG,QAAQ,GAAG,CAAC,MAAM,IAAI,MAAM,IAAI,IAAI,EAAE,CAAA;gBACpD,8EAA8E;gBAC9E,8EAA8E;gBAC9E,IAAI,OAA2B,CAAA;gBAC/B,IAAI,CAAC;oBACD,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;oBAC1B,gGAAgG;oBAChG,IAAI,OAAO,CAAC,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC9B,OAAO,GAAG,CAAC,CAAC,IAAI,CAAA;wBAChB,IAAI,GAAG,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;oBAC/C,CAAC;oBACD,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO;wBAAE,OAAO,GAAG,GAAG,OAAO,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;yBAC7D,IAAI,OAAO,CAAC,EAAE,KAAK,KAAK,QAAQ;wBAAE,OAAO,GAAG,GAAG,OAAO,MAAM,CAAC,CAAC,KAAK,EAAE,CAAA;gBAC9E,CAAC;gBAAC,OAAO,IAAI,EAAE,CAAC;oBACZ,8EAA8E;gBAClF,CAAC;gBACD,iEAAiE;gBACjE,+CAA+C;gBAC/C,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC1C,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;gBACjF,CAAC;qBAAM,CAAC;oBACJ,QAAQ,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC/E,CAAC;gBACD,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YAC1D,CAAC;YAED,iBAAiB;YACjB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,SAAc,CAAA;YAE7C,IAAI,CAAC;gBACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAA;YAClC,CAAC;YAAC,OAAO,IAAI,EAAE,CAAC;gBACZ,0EAA0E;gBAC1E,OAAO,SAAc,CAAA;YACzB,CAAC;QACL,CAAC;QAED,MAAM,SAAS,IAAI,IAAI,QAAQ,CAAC,eAAe,EAAE,gBAAgB,IAAI,CAAC,OAAO,UAAU,CAAC,CAAA;IAC5F,CAAC;IAED,GAAG,CAAI,IAAY;QACf,OAAO,IAAI,CAAC,gBAAgB,CAAI,KAAK,EAAE,IAAI,CAAC,CAAA;IAChD,CAAC;IAED,IAAI,CAAI,IAAY,EAAE,IAAc;QAChC,OAAO,IAAI,CAAC,gBAAgB,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;IACvD,CAAC;IAED,KAAK,CAAI,IAAY,EAAE,IAAa;QAChC,OAAO,IAAI,CAAC,gBAAgB,CAAI,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;IACxD,CAAC;IAED,GAAG,CAAI,IAAY,EAAE,IAAc;QAC/B,OAAO,IAAI,CAAC,gBAAgB,CAAI,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;IACtD,CAAC;IAED,MAAM,CAAI,IAAY;QAClB,OAAO,IAAI,CAAC,gBAAgB,CAAI,QAAQ,EAAE,IAAI,CAAC,CAAA;IACnD,CAAC;CACJ;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAuC;IACtE,qFAAqF;IACrF,kFAAkF;IAClF,qFAAqF;IACrF,sFAAsF;IACtF,4EAA4E;IAC5E,uFAAuF;IACvF,uFAAuF;IACvF,MAAM,OAAO,GAAG,SAAS,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;IAChE,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACX,sIAAsI,CACzI,CAAA;IACL,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,SAAS,CAAA;IACxE,MAAM,GAAG,GAAG,SAAS,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,SAAS,CAAA;IACrE,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACX,4FAA4F,CAC/F,CAAA;IACL,CAAC;IACD,OAAO,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC,CAAA;AACnE,CAAC"}