@cef-ai/cli 0.2.7 → 0.3.0

package/dist/build/duration.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Tiny duration parser for author-facing config strings like `"15m"`,
+ * `"30s"`, `"1h"`, `"500ms"`, `"2d"`. Used by `cef build` to convert the
+ * `idleTimeout` field declared in `cef.config.ts` into the integer
+ * milliseconds the manifest carries.
+ *
+ * Grammar (case-sensitive, whitespace between number and unit ignored):
+ *
+ *   <duration> ::= <integer | decimal> [<whitespace>] <unit>
+ *   <unit>     ::= "ms" | "s" | "m" | "h" | "d"
+ *
+ * Numbers may be integer or decimal (`"1.5h"` → 5_400_000 ms). The
+ * resulting milliseconds value is rounded down to an integer (the
+ * orchestrator's `IdleTimeout` is `int64`).
+ */
+/**
+ * Parse a duration string into integer milliseconds. Throws with a
+ * `[@cef-ai/cli]`-prefixed message on malformed input so authors get a
+ * pointer back at their config.
+ */
+export declare function parseDuration(input: string, fieldPath: string): number;
+//# sourceMappingURL=duration.d.ts.map

package/dist/build/duration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"duration.d.ts","sourceRoot":"","sources":["../../src/build/duration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAYH;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAoBtE"}

package/dist/build/duration.js

@@ -0,0 +1,44 @@
+/**
+ * Tiny duration parser for author-facing config strings like `"15m"`,
+ * `"30s"`, `"1h"`, `"500ms"`, `"2d"`. Used by `cef build` to convert the
+ * `idleTimeout` field declared in `cef.config.ts` into the integer
+ * milliseconds the manifest carries.
+ *
+ * Grammar (case-sensitive, whitespace between number and unit ignored):
+ *
+ *   <duration> ::= <integer | decimal> [<whitespace>] <unit>
+ *   <unit>     ::= "ms" | "s" | "m" | "h" | "d"
+ *
+ * Numbers may be integer or decimal (`"1.5h"` → 5_400_000 ms). The
+ * resulting milliseconds value is rounded down to an integer (the
+ * orchestrator's `IdleTimeout` is `int64`).
+ */
+const UNIT_MS = {
+    ms: 1,
+    s: 1_000,
+    m: 60 * 1_000,
+    h: 60 * 60 * 1_000,
+    d: 24 * 60 * 60 * 1_000,
+};
+const DURATION_RE = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)$/;
+/**
+ * Parse a duration string into integer milliseconds. Throws with a
+ * `[@cef-ai/cli]`-prefixed message on malformed input so authors get a
+ * pointer back at their config.
+ */
+export function parseDuration(input, fieldPath) {
+    if (typeof input !== "string") {
+        throw new Error(`[@cef-ai/cli] ${fieldPath} must be a duration string (e.g. "15m"), got ${typeof input}`);
+    }
+    const match = DURATION_RE.exec(input.trim());
+    if (!match) {
+        throw new Error(`[@cef-ai/cli] ${fieldPath} "${input}" is not a valid duration. Expected "<number><unit>" where unit is one of: ms, s, m, h, d (e.g. "15m", "30s", "500ms", "1.5h").`);
+    }
+    const value = Number.parseFloat(match[1]);
+    const unit = match[2];
+    if (!Number.isFinite(value) || value < 0) {
+        throw new Error(`[@cef-ai/cli] ${fieldPath} "${input}" must be a non-negative duration`);
+    }
+    return Math.floor(value * UNIT_MS[unit]);
+}
+//# sourceMappingURL=duration.js.map

package/dist/build/duration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"duration.js","sourceRoot":"","sources":["../../src/build/duration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,OAAO,GAA2B;IACtC,EAAE,EAAE,CAAC;IACL,CAAC,EAAE,KAAK;IACR,CAAC,EAAE,EAAE,GAAG,KAAK;IACb,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,KAAK;IAClB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK;CACxB,CAAC;AAEF,MAAM,WAAW,GAAG,kCAAkC,CAAC;AAEvD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,SAAiB;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,iBAAiB,SAAS,gDAAgD,OAAO,KAAK,EAAE,CACzF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,iBAAiB,SAAS,KAAK,KAAK,iIAAiI,CACtK,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IACvB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,iBAAiB,SAAS,KAAK,KAAK,mCAAmC,CACxE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAE,CAAC,CAAC;AAC5C,CAAC"}

package/dist/build/esbuild-plugin.d.ts

@@ -0,0 +1,32 @@
+/**
+ * IIFE footer appended to every agent bundle.
+ *
+ * Contract (`sdk-runtime-integration-contract.md` §1, ADR-019 H2): the bundle
+ * exposes one INSTANCE PER ENGAGEMENT via
+ * `globalThis.__cefAgent = { engagements: { [engagementId]: instance } }`.
+ * Routing (which method handles which event, per-engagement) lives in the
+ * manifest the orchestrator reads.
+ *
+ * The build pipeline (`bundleAgent` in `commands/build.ts`) emits a temp
+ * wrapper module that re-exports each engagement's class as
+ * `export const engagements = { [id]: Class, ... }`. esbuild bundles that
+ * wrapper as an IIFE with `globalName: "__cefBundle"`, which makes
+ * `globalThis.__cefBundle.engagements` reachable here. We instantiate every
+ * class and assemble the public `__cefAgent` shape, then delete the
+ * intermediate `__cefBundle` global so the runtime sandbox sees a clean
+ * surface with only `__cefAgent` set.
+ *
+ * The footer does NOT assert per-class decorator presence — that check moved
+ * to build-time (`bundleAgent`), where the error message can name the
+ * specific engagement id. The footer only fails when the wrapper export is
+ * structurally missing, which is a build-pipeline bug rather than a user
+ * error.
+ */
+export declare const IIFE_FOOTER: string;
+/**
+ * Global name esbuild uses to expose the bundled module's exports. Kept in
+ * sync with {@link IIFE_FOOTER} above so callers can wire both pieces from
+ * a single source of truth.
+ */
+export declare const ESBUILD_GLOBAL_NAME = "__cefBundle";
+//# sourceMappingURL=esbuild-plugin.d.ts.map

package/dist/build/esbuild-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"esbuild-plugin.d.ts","sourceRoot":"","sources":["../../src/build/esbuild-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,WAAW,QAqBhB,CAAC;AAET;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,gBAAgB,CAAC"}

package/dist/build/esbuild-plugin.js

@@ -0,0 +1,53 @@
+/**
+ * IIFE footer appended to every agent bundle.
+ *
+ * Contract (`sdk-runtime-integration-contract.md` §1, ADR-019 H2): the bundle
+ * exposes one INSTANCE PER ENGAGEMENT via
+ * `globalThis.__cefAgent = { engagements: { [engagementId]: instance } }`.
+ * Routing (which method handles which event, per-engagement) lives in the
+ * manifest the orchestrator reads.
+ *
+ * The build pipeline (`bundleAgent` in `commands/build.ts`) emits a temp
+ * wrapper module that re-exports each engagement's class as
+ * `export const engagements = { [id]: Class, ... }`. esbuild bundles that
+ * wrapper as an IIFE with `globalName: "__cefBundle"`, which makes
+ * `globalThis.__cefBundle.engagements` reachable here. We instantiate every
+ * class and assemble the public `__cefAgent` shape, then delete the
+ * intermediate `__cefBundle` global so the runtime sandbox sees a clean
+ * surface with only `__cefAgent` set.
+ *
+ * The footer does NOT assert per-class decorator presence — that check moved
+ * to build-time (`bundleAgent`), where the error message can name the
+ * specific engagement id. The footer only fails when the wrapper export is
+ * structurally missing, which is a build-pipeline bug rather than a user
+ * error.
+ */
+export const IIFE_FOOTER = `
+;(function () {
+  var classes = (typeof globalThis.__cefBundle !== "undefined" && globalThis.__cefBundle.engagements)
+    ? globalThis.__cefBundle.engagements
+    : null;
+  if (!classes) {
+    throw new Error("@cef-ai/agent-sdk: bundle has no engagements (export const engagements missing from wrapper)");
+  }
+  var instances = {};
+  var ids = Object.keys(classes);
+  for (var i = 0; i < ids.length; i++) {
+    var id = ids[i];
+    var Cls = classes[id];
+    if (!Cls) {
+      throw new Error("@cef-ai/agent-sdk: engagement \\"" + id + "\\" has no class export");
+    }
+    instances[id] = new Cls();
+  }
+  globalThis.__cefAgent = { engagements: instances };
+  try { delete globalThis.__cefBundle; } catch (_) { globalThis.__cefBundle = undefined; }
+})();
+`.trim();
+/**
+ * Global name esbuild uses to expose the bundled module's exports. Kept in
+ * sync with {@link IIFE_FOOTER} above so callers can wire both pieces from
+ * a single source of truth.
+ */
+export const ESBUILD_GLOBAL_NAME = "__cefBundle";
+//# sourceMappingURL=esbuild-plugin.js.map

package/dist/build/esbuild-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"esbuild-plugin.js","sourceRoot":"","sources":["../../src/build/esbuild-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;CAqB1B,CAAC,IAAI,EAAE,CAAC;AAET;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC"}

package/dist/build/lints.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Static lint pass for `cef build`. Runs BEFORE bundling so authors get a
+ * clear, actionable error before esbuild has a chance to produce a bundle
+ * that the runtime would later reject. The rules are all syntactic, so we
+ * use `ts.createSourceFile` (no type-checker / Program) for speed.
+ *
+ * Rules enforced (per `agent-sdk.md` §7 + the build plan):
+ *
+ * - `@OnEvent(...)` argument MUST be a string literal.
+ * - `ctx.publish(t, ...)` first arg MUST be a string literal.
+ * - `ctx.cubby("alias")` first arg MUST be a string literal AND a declared
+ *   alias from `cef.config.ts` `cubbies[].alias`.
+ * - `ctx.models.X` member access MUST refer to a declared model alias from
+ *   `cef.config.ts` `models`.
+ * - `import x from "<m>"` / `require("<m>")` / `import("<m>")` against the
+ *   banned module list (Node built-ins + sync DB/network npm packages).
+ *
+ * Lint failures THROW — there is no error-collection mode in v1; the first
+ * violation aborts the build with a single, well-formatted message.
+ *
+ * `lintAgentSource` also collects every literal `ctx.publish(t, ...)` first
+ * argument it encounters and returns the deduped sorted set as
+ * `publishes[]`. The caller (`cefBuild`) feeds this into the manifest when
+ * the user has not declared `publishes` in `cef.config.ts`.
+ *
+ * v1 scope: lints the agent's *entry file* only. Helper modules imported
+ * via `./` paths are not yet scanned. Banned-import rules still apply
+ * transitively at bundle time (esbuild will resolve them and inline their
+ * source, but the rules here will catch the import edge in the entry; deep
+ * import auditing is a follow-up if needed).
+ */
+export interface LintInputBase {
+    declaredCubbyAliases: Set<string>;
+    declaredModelAliases: Set<string>;
+}
+export interface LintInputFromPath extends LintInputBase {
+    /** Absolute path to the agent's entry `.ts` file. */
+    entryPath: string;
+    source?: never;
+    sourceFilename?: never;
+}
+export interface LintInputFromSource extends LintInputBase {
+    /** Inline TypeScript source — used by tests and ad-hoc callers. */
+    source: string;
+    /** Filename used in error messages. Defaults to `<source>`. */
+    sourceFilename?: string;
+    entryPath?: never;
+}
+export type LintInput = LintInputFromPath | LintInputFromSource;
+export interface LintResult {
+    /** Deduped, sorted list of literal `ctx.publish(...)` first-arg values. */
+    publishes: string[];
+}
+export declare function lintAgentSource(input: LintInput): LintResult;
+//# sourceMappingURL=lints.d.ts.map

package/dist/build/lints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lints.d.ts","sourceRoot":"","sources":["../../src/build/lints.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,WAAW,aAAa;IAC5B,oBAAoB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,oBAAoB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACtD,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,cAAc,CAAC,EAAE,KAAK,CAAC;CACxB;AAED,MAAM,WAAW,mBAAoB,SAAQ,aAAa;IACxD,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,KAAK,CAAC;CACnB;AAED,MAAM,MAAM,SAAS,GAAG,iBAAiB,GAAG,mBAAmB,CAAC;AAEhE,MAAM,WAAW,UAAU;IACzB,2EAA2E;IAC3E,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AA+GD,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,GAAG,UAAU,CA+J5D"}

package/dist/build/lints.js

@@ -0,0 +1,214 @@
+import fs from "node:fs";
+import ts from "typescript";
+/**
+ * Modules an agent is forbidden from importing. Per `agent-sdk.md` §7.
+ *
+ * Note `crypto` (and `node:crypto`) are banned: agents that need
+ * cryptographic primitives use the WebCrypto API exposed on
+ * `globalThis.crypto` by the runtime — no Node import is required.
+ */
+const BANNED_NODE_MODULES = new Set([
+    "fs",
+    "fs/promises",
+    "path",
+    "net",
+    "tls",
+    "dgram",
+    "dns",
+    "http",
+    "https",
+    "http2",
+    "child_process",
+    "worker_threads",
+    "cluster",
+    "os",
+    "process",
+    "readline",
+    "repl",
+    "vm",
+    "stream",
+    "zlib",
+    "buffer",
+    "crypto",
+]);
+/** Sync DB / network packages we don't allow agents to use. */
+const BANNED_NPM_PACKAGES = new Set([
+    "pg",
+    "pg-native",
+    "mysql2",
+    "mysql",
+    "mongodb",
+    "redis",
+    "ioredis",
+    "sqlite3",
+    "better-sqlite3",
+    "ws",
+    "node-fetch",
+    "axios",
+]);
+function isBannedModule(specifier) {
+    if (BANNED_NPM_PACKAGES.has(specifier))
+        return true;
+    // Match both `fs` and `node:fs`. Subpath imports (`fs/promises`,
+    // `node:fs/promises`) are matched against the base + full string.
+    const stripped = specifier.startsWith("node:") ? specifier.slice(5) : specifier;
+    if (BANNED_NODE_MODULES.has(stripped))
+        return true;
+    // Subpaths like `node:fs/promises` → check the head.
+    const head = stripped.split("/", 1)[0];
+    if (BANNED_NODE_MODULES.has(head))
+        return true;
+    return false;
+}
+function locFor(sf, node) {
+    const { line, character } = ts.getLineAndCharacterOfPosition(sf, node.getStart(sf));
+    return `${sf.fileName}:${line + 1}:${character + 1}`;
+}
+function lintError(sf, node, msg) {
+    return new Error(`[cef build] ${locFor(sf, node)} — ${msg}`);
+}
+function isOnEventDecorator(decorator) {
+    const expr = decorator.expression;
+    if (!ts.isCallExpression(expr))
+        return false;
+    const callee = expr.expression;
+    return ts.isIdentifier(callee) && callee.text === "OnEvent";
+}
+/**
+ * True when `expr` is the property-access chain `ctx.<name>`. We check the
+ * head identifier text rather than threading symbol resolution through the
+ * checker — agent code by convention names the context parameter `ctx`.
+ */
+function isCtxAccess(expr, name) {
+    if (!ts.isPropertyAccessExpression(expr))
+        return false;
+    if (expr.name.text !== name)
+        return false;
+    const obj = expr.expression;
+    return ts.isIdentifier(obj) && obj.text === "ctx";
+}
+/**
+ * True when `expr` is `ctx.models` — used to detect `ctx.models.X` accesses
+ * regardless of what comes after.
+ */
+function isCtxModels(expr) {
+    if (!ts.isPropertyAccessExpression(expr))
+        return false;
+    if (expr.name.text !== "models")
+        return false;
+    const obj = expr.expression;
+    return ts.isIdentifier(obj) && obj.text === "ctx";
+}
+function readSource(input) {
+    if (input.source !== undefined) {
+        return { source: input.source, filename: input.sourceFilename ?? "<source>" };
+    }
+    const source = fs.readFileSync(input.entryPath, "utf8");
+    return { source, filename: input.entryPath };
+}
+export function lintAgentSource(input) {
+    const { source, filename } = readSource(input);
+    const sf = ts.createSourceFile(filename, source, ts.ScriptTarget.ES2022, true, ts.ScriptKind.TS);
+    const publishes = new Set();
+    const declaredCubbies = input.declaredCubbyAliases;
+    const declaredModels = input.declaredModelAliases;
+    const visit = (node) => {
+        // -------- @OnEvent("...") --------
+        // ts.canHaveDecorators / ts.getDecorators is the modern API; fall back
+        // to the legacy `node.decorators` for older TS layouts that the source
+        // file may produce when SyntaxKind hasn't been re-canonicalised.
+        const decorators = ts.canHaveDecorators(node) ? ts.getDecorators(node) : undefined;
+        if (decorators) {
+            for (const d of decorators) {
+                if (isOnEventDecorator(d)) {
+                    const args = d.expression.arguments;
+                    if (args.length === 0 || !ts.isStringLiteralLike(args[0])) {
+                        const got = args.length === 0
+                            ? "no arguments"
+                            : `${ts.SyntaxKind[args[0].kind]} "${args[0].getText(sf)}"`;
+                        throw lintError(sf, args.length === 0 ? d : args[0], `@OnEvent argument must be a string literal (got ${got}). Use a literal like @OnEvent("user_message").`);
+                    }
+                }
+            }
+        }
+        // -------- ctx.publish(t, ...) / ctx.cubby("...") --------
+        if (ts.isCallExpression(node)) {
+            const callee = node.expression;
+            // ctx.publish(...)
+            if (isCtxAccess(callee, "publish")) {
+                const arg0 = node.arguments[0];
+                if (!arg0 || !ts.isStringLiteralLike(arg0)) {
+                    const got = !arg0
+                        ? "no arguments"
+                        : `${ts.SyntaxKind[arg0.kind]} "${arg0.getText(sf)}"`;
+                    throw lintError(sf, arg0 ?? callee, `ctx.publish first argument must be a string literal (got ${got}). Use a literal event-type like ctx.publish("greeting", payload).`);
+                }
+                publishes.add(arg0.text);
+            }
+            // ctx.cubby("...")
+            if (isCtxAccess(callee, "cubby")) {
+                const arg0 = node.arguments[0];
+                if (!arg0 || !ts.isStringLiteralLike(arg0)) {
+                    const got = !arg0
+                        ? "no arguments"
+                        : `${ts.SyntaxKind[arg0.kind]} "${arg0.getText(sf)}"`;
+                    throw lintError(sf, arg0 ?? callee, `ctx.cubby first argument must be a string literal (got ${got}). Use a literal alias like ctx.cubby("history").`);
+                }
+                if (!declaredCubbies.has(arg0.text)) {
+                    const declared = [...declaredCubbies].sort();
+                    throw lintError(sf, arg0, `ctx.cubby alias "${arg0.text}" is not declared in cef.config.ts cubbies[] (declared: [${declared.join(", ")}]).`);
+                }
+            }
+            // require("...") — banned-import check via dynamic-call form.
+            if (ts.isIdentifier(callee) &&
+                callee.text === "require" &&
+                node.arguments.length === 1 &&
+                ts.isStringLiteralLike(node.arguments[0])) {
+                const spec = node.arguments[0].text;
+                if (isBannedModule(spec)) {
+                    throw lintError(sf, node.arguments[0], `banned import "${spec}". Agent sandbox forbids Node built-ins and sync DB/network libs (see agent-sdk.md §7).`);
+                }
+            }
+        }
+        // import("...")
+        if (ts.isCallExpression(node) &&
+            node.expression.kind === ts.SyntaxKind.ImportKeyword &&
+            node.arguments.length === 1 &&
+            ts.isStringLiteralLike(node.arguments[0])) {
+            const spec = node.arguments[0].text;
+            if (isBannedModule(spec)) {
+                throw lintError(sf, node.arguments[0], `banned import "${spec}". Agent sandbox forbids Node built-ins and sync DB/network libs (see agent-sdk.md §7).`);
+            }
+        }
+        // -------- ctx.models.X --------
+        // PropertyAccess where `.expression` is `ctx.models`; the `name` text is
+        // the model alias being referenced.
+        if (ts.isPropertyAccessExpression(node) && isCtxModels(node.expression)) {
+            const alias = node.name.text;
+            if (!declaredModels.has(alias)) {
+                const declared = [...declaredModels].sort();
+                throw lintError(sf, node.name, `ctx.models.${alias} is not declared in cef.config.ts models (declared: [${declared.join(", ")}]).`);
+            }
+        }
+        // -------- import "..." --------
+        if (ts.isImportDeclaration(node) && ts.isStringLiteralLike(node.moduleSpecifier)) {
+            const spec = node.moduleSpecifier.text;
+            if (isBannedModule(spec)) {
+                throw lintError(sf, node.moduleSpecifier, `banned import "${spec}". Agent sandbox forbids Node built-ins and sync DB/network libs (see agent-sdk.md §7).`);
+            }
+        }
+        // export ... from "..." — same banned-list check.
+        if (ts.isExportDeclaration(node) &&
+            node.moduleSpecifier !== undefined &&
+            ts.isStringLiteralLike(node.moduleSpecifier)) {
+            const spec = node.moduleSpecifier.text;
+            if (isBannedModule(spec)) {
+                throw lintError(sf, node.moduleSpecifier, `banned import "${spec}". Agent sandbox forbids Node built-ins and sync DB/network libs (see agent-sdk.md §7).`);
+            }
+        }
+        ts.forEachChild(node, visit);
+    };
+    visit(sf);
+    return { publishes: [...publishes].sort() };
+}
+//# sourceMappingURL=lints.js.map

package/dist/build/lints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lints.js","sourceRoot":"","sources":["../../src/build/lints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,MAAM,YAAY,CAAC;AA4D5B;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS;IAC1C,IAAI;IACJ,aAAa;IACb,MAAM;IACN,KAAK;IACL,KAAK;IACL,OAAO;IACP,KAAK;IACL,MAAM;IACN,OAAO;IACP,OAAO;IACP,eAAe;IACf,gBAAgB;IAChB,SAAS;IACT,IAAI;IACJ,SAAS;IACT,UAAU;IACV,MAAM;IACN,IAAI;IACJ,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,QAAQ;CACT,CAAC,CAAC;AAEH,+DAA+D;AAC/D,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS;IAC1C,IAAI;IACJ,WAAW;IACX,QAAQ;IACR,OAAO;IACP,SAAS;IACT,OAAO;IACP,SAAS;IACT,SAAS;IACT,gBAAgB;IAChB,IAAI;IACJ,YAAY;IACZ,OAAO;CACR,CAAC,CAAC;AAEH,SAAS,cAAc,CAAC,SAAiB;IACvC,IAAI,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,iEAAiE;IACjE,kEAAkE;IAClE,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,qDAAqD;IACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;IACxC,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,EAAiB,EAAE,IAAa;IAC9C,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,6BAA6B,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,OAAO,GAAG,EAAE,CAAC,QAAQ,IAAI,IAAI,GAAG,CAAC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,SAAS,CAAC,EAAiB,EAAE,IAAa,EAAE,GAAW;IAC9D,OAAO,IAAI,KAAK,CAAC,eAAe,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAuB;IAGjD,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC;IAClC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;IAC/B,OAAO,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAmB,EAAE,IAAY;IACpD,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;IAC5B,OAAO,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,IAAmB;IACtC,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;IAC5B,OAAO,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC;AACpD,CAAC;AAED,SAAS,UAAU,CAAC,KAAgB;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,cAAc,IAAI,UAAU,EAAE,CAAC;IAChF,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACxD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAgB;IAC9C,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAEjG,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,eAAe,GAAG,KAAK,CAAC,oBAAoB,CAAC;IACnD,MAAM,cAAc,GAAG,KAAK,CAAC,oBAAoB,CAAC;IAElD,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,oCAAoC;QACpC,uEAAuE;QACvE,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,UAAU,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC3B,IAAI,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;oBACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;wBAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC;4BAC3B,CAAC,CAAC,cAAc;4BAChB,CAAC,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC;wBAChE,MAAM,SAAS,CACb,EAAE,EACF,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,EAChC,mDAAmD,GAAG,iDAAiD,CACxG,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,2DAA2D;QAC3D,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;YAE/B,mBAAmB;YACnB,IAAI,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC/B,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3C,MAAM,GAAG,GAAG,CAAC,IAAI;wBACf,CAAC,CAAC,cAAc;wBAChB,CAAC,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC;oBACxD,MAAM,SAAS,CACb,EAAE,EACF,IAAI,IAAI,MAAM,EACd,4DAA4D,GAAG,oEAAoE,CACpI,CAAC;gBACJ,CAAC;gBACD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YAED,mBAAmB;YACnB,IAAI,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC/B,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3C,MAAM,GAAG,GAAG,CAAC,IAAI;wBACf,CAAC,CAAC,cAAc;wBAChB,CAAC,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC;oBACxD,MAAM,SAAS,CACb,EAAE,EACF,IAAI,IAAI,MAAM,EACd,0DAA0D,GAAG,mDAAmD,CACjH,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpC,MAAM,QAAQ,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC7C,MAAM,SAAS,CACb,EAAE,EACF,IAAI,EACJ,oBAAoB,IAAI,CAAC,IAAI,4DAA4D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAClH,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,8DAA8D;YAC9D,IACE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC;gBACvB,MAAM,CAAC,IAAI,KAAK,SAAS;gBACzB,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;gBAC3B,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,EAC1C,CAAC;gBACD,MAAM,IAAI,GAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAA2B,CAAC,IAAI,CAAC;gBAC/D,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;oBACzB,MAAM,SAAS,CACb,EAAE,EACF,IAAI,CAAC,SAAS,CAAC,CAAC,CAAE,EAClB,kBAAkB,IAAI,yFAAyF,CAChH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,IACE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;YACzB,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,aAAa;YACpD,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAC3B,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,EAC1C,CAAC;YACD,MAAM,IAAI,GAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAA2B,CAAC,IAAI,CAAC;YAC/D,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,MAAM,SAAS,CACb,EAAE,EACF,IAAI,CAAC,SAAS,CAAC,CAAC,CAAE,EAClB,kBAAkB,IAAI,yFAAyF,CAChH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,yEAAyE;QACzE,oCAAoC;QACpC,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACxE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAC7B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC5C,MAAM,SAAS,CACb,EAAE,EACF,IAAI,CAAC,IAAI,EACT,cAAc,KAAK,wDAAwD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CACpG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YACvC,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,MAAM,SAAS,CACb,EAAE,EACF,IAAI,CAAC,eAAe,EACpB,kBAAkB,IAAI,yFAAyF,CAChH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,IACE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAC5B,IAAI,CAAC,eAAe,KAAK,SAAS;YAClC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,eAAe,CAAC,EAC5C,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YACvC,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,MAAM,SAAS,CACb,EAAE,EACF,IAAI,CAAC,eAAe,EACpB,kBAAkB,IAAI,yFAAyF,CAChH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,KAAK,CAAC,EAAE,CAAC,CAAC;IAEV,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AAC9C,CAAC"}

package/dist/build/load-config.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Selection rule (mirrored structurally from `@cef-ai/agent-sdk/config`).
+ * Vocabulary v1: `priority` | `weight` | `limit` (numeric values).
+ */
+export interface Rule {
+    name: "priority" | "weight" | "limit";
+    value: number;
+}
+/** One row of `targeting.engagements[]`. */
+export interface TargetingEngagement {
+    id: string;
+    rules?: Rule[];
+}
+/** Engagement-selection table emitted into the manifest. */
+export interface Targeting {
+    engagements: TargetingEngagement[];
+}
+/** JSON Schema document, kept loose. */
+export type JSONSchema = Record<string, unknown>;
+/** Marketplace presentation card. */
+export interface AgentCard {
+    name: string;
+    description: string;
+    iconUrl?: string;
+    capabilities?: string[];
+}
+/**
+ * Subset of `AgentConfig` (from `@cef-ai/agent-sdk/config`) consumed across
+ * the CLI commands. Re-declared here so commands don't need to import the
+ * SDK's config package for type-only access — keeps the runtime/build/
+ * typegen layers decoupled from the public config surface.
+ */
+export interface AgentConfigLike {
+    id: string;
+    version: string;
+    alias?: string;
+    source?: string;
+    card?: AgentCard;
+    requiredScopes?: string[];
+    /** Per-Job idle timeout as a duration string (e.g. `"15m"`, `"30s"`,
+     *  `"500ms"`); default `"30m"`. Parsed into ms by the build step. */
+    idleTimeout?: string;
+    entry?: string;
+    engagements?: Array<{
+        id: string;
+        entry: string;
+    }>;
+    agents?: AgentConfigLike[];
+    cubbies?: Array<{
+        alias: string;
+        migrations?: string;
+    }>;
+    settings?: Array<{
+        key: string;
+        type: "string" | "number" | "boolean" | "url" | "secret";
+        required?: boolean;
+        label?: string;
+        description?: string;
+        default?: unknown;
+    }>;
+    models?: Record<string, string>;
+    uses?: Record<string, string>;
+    eventSchemas?: Record<string, JSONSchema>;
+    targeting?: Targeting;
+}
+/** Single engagement, normalized for build-pipeline consumers. */
+export interface NormalizedEngagement {
+    /** Stable engagement id (`[a-zA-Z][a-zA-Z0-9_-]*`). */
+    id: string;
+    /** Absolute path to the engagement entry source file. */
+    entry: string;
+}
+/**
+ * Compile `cef.config.ts` to a temp ESM file and dynamically import it.
+ *
+ * `@cef-ai/agent-sdk` and `@cef-ai/agent-sdk/config` are externalised so the
+ * `defineAgent` identity helper resolves from the host's node_modules at
+ * runtime — we don't want to bundle the SDK into the user's config.
+ *
+ * The temp file is placed inside an existing `node_modules` ancestor of
+ * the config (under `node_modules/.cef/config-cache/`), so node's ESM
+ * resolver finds the externalised packages without us having to create a
+ * stub `node_modules` next to the user's config.
+ *
+ * Shared by `cef build` and `cef typegen`.
+ */
+export declare function loadConfig(configPath: string, configDir: string): Promise<AgentConfigLike>;
+/**
+ * Flatten a (possibly nested) `AgentConfig` into a list of leaf agents.
+ * The single-agent case is a top-level config with `entry` (or
+ * `engagements`). The nested-agents case has an `agents[]` field; each
+ * entry is a full AgentConfig and is recursed into. We require either
+ * `entry` or `engagements[]` on every leaf.
+ */
+export declare function flattenAgents(cfg: AgentConfigLike): AgentConfigLike[];
+/**
+ * Normalize an agent's engagement-layer declaration into a list with absolute
+ * entry paths. Accepts either:
+ *
+ * - `entry: "./src/agent.ts"` shorthand → one engagement with id `"default"`.
+ * - `engagements: [{ id, entry }, ...]` explicit form → returned as-is with
+ *   relative entry paths resolved against `configDir`.
+ *
+ * Validates:
+ * - exactly one of `entry`/`engagements` is provided,
+ * - `engagements[]` has at least one entry when present,
+ * - every engagement id matches `[a-zA-Z][a-zA-Z0-9_-]*`,
+ * - engagement ids are unique within the agent.
+ *
+ * Throws on any violation with `[@cef-ai/cli]`-prefixed errors so failures point
+ * authors at their `cef.config.ts`.
+ */
+export declare function normalizeEngagements(agent: AgentConfigLike, configDir: string): NormalizedEngagement[];
+//# sourceMappingURL=load-config.d.ts.map

package/dist/build/load-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-config.d.ts","sourceRoot":"","sources":["../../src/build/load-config.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,4CAA4C;AAC5C,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;CAChB;AAED,4DAA4D;AAC5D,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,mBAAmB,EAAE,CAAC;CACpC;AAED,wCAAwC;AACxC,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEjD,qCAAqC;AACrC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;yEACqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxD,QAAQ,CAAC,EAAE,KAAK,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,CAAC;QACzD,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC1C,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,kEAAkE;AAClE,MAAM,WAAW,oBAAoB;IACnC,uDAAuD;IACvD,EAAE,EAAE,MAAM,CAAC;IACX,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;CACf;AA2BD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,eAAe,CAAC,CAqC1B;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,eAAe,GAAG,eAAe,EAAE,CAUrE;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,MAAM,GAChB,oBAAoB,EAAE,CAiDxB"}