@cloc/provider-ai-sdk 0.1.0

package/dist/config.js

@@ -0,0 +1,101 @@
+/**
+ * @cloc/provider-ai-sdk · config.ts — the declarative `cloc.yml` `agent:` slice (data-model §5).
+ *
+ * Selection + tuning is data, never code (Constitution Principle 1; Appendix L.1 — `cloc.yml`
+ * is declarative/non-executable, never `cloc.config.ts`). The model is a FIELD (a gateway
+ * `provider/model` string), changeable with NO adapter-code edit (FR-007, FR-014). The gateway
+ * credential is referenced BY NAME (`secretRef`) — a secret VALUE in `cloc.yml` is rejected
+ * (FR-009, NFR-005, Principle 9).
+ *
+ * TODO(C2 — spec Clarification 2): the bounded-repair `maxAttempts` default below is provisional;
+ *   the design doc names "validate / repair" without a limit. Routed to Governance (research.md C2).
+ * TODO(C1 — spec Clarification 1): whether a built-in default provider/model ships (so the block
+ *   is optional) vs. BYO before the first synthesis request. Routed to Governance (research.md C1).
+ */
+import { z } from "zod";
+/** Provisional default repair bound. TODO(C2): routed to Governance (research.md C2). */
+export const DEFAULT_REPAIR_POLICY = {
+    maxAttempts: 2,
+    onExhaustion: "reject",
+};
+/** This plugin's id; also the default `provider` value when the block omits it. */
+export const PROVIDER_ID = "provider-ai-sdk";
+const ModelFieldSchema = z.object({
+    vendor: z.string().min(1),
+    name: z.string().min(1),
+});
+const RoutingSchema = z.object({
+    fallbacks: z.array(ModelFieldSchema).default([]),
+});
+const RepairSchema = z.object({
+    maxAttempts: z.number().int().positive(),
+    onExhaustion: z.literal("reject"),
+});
+/**
+ * A `secretRef` is a NAME, never a value. We reject anything that looks like an inlined
+ * credential (whitespace, an obvious key prefix, or an over-long opaque token) so a secret
+ * value in `cloc.yml` fails loud (FR-009, NFR-005, Principle 9). Heuristic, but conservative:
+ * real env-style names are short, contain no spaces, and are not `sk-…`/`gsk_…`-style keys.
+ */
+function looksLikeSecretValue(ref) {
+    if (/\s/.test(ref))
+        return true; // names have no whitespace
+    if (/^(sk|gsk|pk|rk|api|key|bearer)[-_]/i.test(ref))
+        return true; // common key prefixes
+    if (ref.length > 64)
+        return true; // names are short; opaque tokens are long
+    return false;
+}
+const SecretRefSchema = z
+    .string()
+    .min(1)
+    .refine((v) => !looksLikeSecretValue(v), {
+    message: "secretRef must be a NAME, never an inlined secret value — store the value in the secrets provider (FR-009, NFR-005, Principle 9)",
+});
+/** The raw `agent:` block schema as it appears in `cloc.yml`. */
+export const AgentConfigSchema = z.object({
+    provider: z.string().min(1).default(PROVIDER_ID),
+    model: ModelFieldSchema,
+    routing: RoutingSchema.optional(),
+    secretRef: SecretRefSchema,
+    repair: RepairSchema.optional(),
+});
+/**
+ * Parse + validate a raw `cloc.yml` `agent:` block into a normalized {@link AgentConfig}.
+ * Throws (Zod) on an invalid block — including a `secretRef` that holds a value, not a name.
+ */
+export function parseAgentConfig(raw) {
+    const parsed = AgentConfigSchema.parse(raw);
+    return {
+        provider: parsed.provider,
+        model: parsed.model,
+        ...(parsed.routing ? { routing: { fallbacks: parsed.routing.fallbacks } } : {}),
+        secretRef: parsed.secretRef,
+        repair: parsed.repair ?? DEFAULT_REPAIR_POLICY,
+    };
+}
+/** Render one {@link ModelField} as the gateway `provider/model` string the SDK routes on. */
+export function modelFieldToString(field) {
+    return `${field.vendor}/${field.name}`;
+}
+/**
+ * The ordered list of `provider/model` strings to try: primary first, then failovers, with
+ * consecutive/duplicate entries collapsed so the same provider is never retried twice in a row
+ * (a fallback identical to the primary would only waste a hop). Order is otherwise preserved.
+ */
+export function modelChain(config) {
+    const primary = modelFieldToString(config.model);
+    const fallbacks = (config.routing?.fallbacks ?? []).map(modelFieldToString);
+    const ordered = [primary, ...fallbacks];
+    // Dedupe while preserving first-seen order (a duplicate fallback adds no failover value).
+    const seen = new Set();
+    const chain = [];
+    for (const id of ordered) {
+        if (seen.has(id))
+            continue;
+        seen.add(id);
+        chain.push(id);
+    }
+    return chain;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsCxB,yFAAyF;AACzF,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IACjD,WAAW,EAAE,CAAC;IACd,YAAY,EAAE,QAAQ;CACvB,CAAC;AAEF,mFAAmF;AACnF,MAAM,CAAC,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAE7C,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACjD,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CAClC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,GAAW;IACvC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,2BAA2B;IAC5D,IAAI,qCAAqC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,sBAAsB;IACxF,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,0CAA0C;IAC5E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE;IACvC,OAAO,EACL,kIAAkI;CACrI,CAAC,CAAC;AAEL,iEAAiE;AACjE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAChD,KAAK,EAAE,gBAAgB;IACvB,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,eAAe;IAC1B,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAIH;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,qBAAqB;KAC/C,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,OAAO,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC5C,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC;IACxC,0FAA0F;IAC1F,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC3B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/gateway.d.ts

@@ -0,0 +1,74 @@
+/**
+ * @cloc/provider-ai-sdk · gateway.ts — hosted-first routing via the Vercel AI Gateway (FR-006/7/8).
+ *
+ * A declarative `provider/model` string ("anthropic/claude-…", "openai/gpt-…") becomes a routed,
+ * failover-capable inference call. The adapter assumes NO local GPU/runtime (FR-006, invariant 3):
+ * every call goes through the gateway. Per-request failover walks `routing.fallbacks` in order;
+ * on full exhaustion it raises a fatal `gateway-exhausted` error — never partial/fabricated output
+ * (edge case, data-model §4).
+ *
+ * AI SDK v6 surface (verified against the v6 docs, not stale memory):
+ *   - The AI Gateway is the DEFAULT global provider, so a plain `provider/model` string passed as
+ *     `model:` to `generateText`/`streamText` is already a routed gateway call.
+ *   - The gateway credential is the `AI_GATEWAY_API_KEY` env var; we resolve it BY NAME via the
+ *     secrets boundary (secrets.ts) and hand it to the SDK through the gateway provider options.
+ *   - `gateway` (from 'ai') lets us bind the resolved key explicitly rather than relying on ambient
+ *     env, keeping the credential under the least-privilege grant (secrets.ts).
+ */
+import type { LanguageModel } from "ai";
+import { type AgentConfig } from "./config.js";
+/**
+ * The well-known surfaced error codes. A FREE-FORM `string` is still accepted (the param type is
+ * `AgentErrorCode | (string & {})`) so adapters/hosts can mint their own codes — but the named set
+ * gives callers autocomplete + exhaustiveness without narrowing the existing `string` contract.
+ */
+export type AgentErrorCode = "validation-exhausted" | "gateway-exhausted" | "tool-failed" | "aborted";
+/** A fatal, surfaced agent error (mirrors the contract's AgentError, adapter-internal). */
+export declare class AgentError extends Error {
+    /** One of {@link AgentErrorCode} (or a host-minted string). */
+    readonly code: AgentErrorCode | (string & {});
+    /** True only when NO valid output was produced; any streamed partial MUST be invalidated. */
+    readonly fatal: boolean;
+    constructor(
+    /** One of {@link AgentErrorCode} (or a host-minted string). */
+    code: AgentErrorCode | (string & {}), message: string, 
+    /** True only when NO valid output was produced; any streamed partial MUST be invalidated. */
+    fatal?: boolean, options?: {
+        cause?: unknown;
+    });
+}
+/** True when `err` is an abort (an `AbortError`/`DOMException` name, or our `aborted` code). */
+export declare function isAbortError(err: unknown): boolean;
+/** A resolved gateway provider bound to the credential (or the ambient default). */
+export interface ResolvedGateway {
+    /** Turn a `provider/model` string into a routed language model the AI SDK can call. */
+    model(id: string): LanguageModel;
+    /** The ordered `provider/model` chain to try: primary, then failovers. */
+    chain: string[];
+}
+/**
+ * Build a gateway bound to the resolved credential. When `apiKey` is provided we create a scoped
+ * gateway so the key stays under the plugin's grant; otherwise we fall back to the ambient default
+ * provider (the SDK reads `AI_GATEWAY_API_KEY` itself), used in tests / OIDC deployments.
+ */
+export declare function resolveGateway(config: AgentConfig, apiKey?: string): ResolvedGateway;
+/**
+ * Run `attempt` against each model in the failover chain in order. The first success wins;
+ * `onAttempt` reports the routed id + hop index so the trace can record `gateway.fallback`.
+ * If every provider errors, raise a fatal `gateway-exhausted` error (FR-008, edge case).
+ *
+ * `attempt` receives the routed {@link LanguageModel} and the hop index (0 = primary).
+ *
+ * ABORT short-circuit: if an attempt throws because the caller's {@link AbortSignal} fired, the
+ * chain STOPS immediately and an `aborted` AgentError is raised — an explicit cancel must NOT burn
+ * every fallback hop (it is not a provider failure; §conformance C1 / A6). Pass `opts.signal` so the
+ * loop can also reject BEFORE the next hop if the signal fires between attempts.
+ */
+export declare function withFailover<T>(gw: ResolvedGateway, attempt: (model: LanguageModel, modelId: string, hop: number) => Promise<T>, onAttempt?: (modelId: string, hop: number) => void, opts?: {
+    signal?: AbortSignal;
+}): Promise<{
+    value: T;
+    modelId: string;
+    hop: number;
+}>;
+//# sourceMappingURL=gateway.d.ts.map

package/dist/gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxC,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAE3D;;;;GAIG;AACH,MAAM,MAAM,cAAc,GACtB,sBAAsB,GACtB,mBAAmB,GACnB,aAAa,GACb,SAAS,CAAC;AAEd,2FAA2F;AAC3F,qBAAa,UAAW,SAAQ,KAAK;IAEjC,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IAE7C,6FAA6F;IAC7F,QAAQ,CAAC,KAAK,EAAE,OAAO;;IAJvB,+DAA+D;IACtD,IAAI,EAAE,cAAc,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,EAC7C,OAAO,EAAE,MAAM;IACf,6FAA6F;IACpF,KAAK,GAAE,OAAc,EAC9B,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAKhC;AAED,gGAAgG;AAChG,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAIlD;AAED,oFAAoF;AACpF,MAAM,WAAW,eAAe;IAC9B,uFAAuF;IACvF,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,CAAC;IACjC,0EAA0E;IAC1E,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,eAAe,CAMpF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,EAAE,EAAE,eAAe,EACnB,OAAO,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,EAC3E,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,EAClD,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GAC9B,OAAO,CAAC;IAAE,KAAK,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAgCrD"}

package/dist/gateway.js

@@ -0,0 +1,96 @@
+/**
+ * @cloc/provider-ai-sdk · gateway.ts — hosted-first routing via the Vercel AI Gateway (FR-006/7/8).
+ *
+ * A declarative `provider/model` string ("anthropic/claude-…", "openai/gpt-…") becomes a routed,
+ * failover-capable inference call. The adapter assumes NO local GPU/runtime (FR-006, invariant 3):
+ * every call goes through the gateway. Per-request failover walks `routing.fallbacks` in order;
+ * on full exhaustion it raises a fatal `gateway-exhausted` error — never partial/fabricated output
+ * (edge case, data-model §4).
+ *
+ * AI SDK v6 surface (verified against the v6 docs, not stale memory):
+ *   - The AI Gateway is the DEFAULT global provider, so a plain `provider/model` string passed as
+ *     `model:` to `generateText`/`streamText` is already a routed gateway call.
+ *   - The gateway credential is the `AI_GATEWAY_API_KEY` env var; we resolve it BY NAME via the
+ *     secrets boundary (secrets.ts) and hand it to the SDK through the gateway provider options.
+ *   - `gateway` (from 'ai') lets us bind the resolved key explicitly rather than relying on ambient
+ *     env, keeping the credential under the least-privilege grant (secrets.ts).
+ */
+import { gateway as defaultGateway, createGateway } from "ai";
+import { modelChain } from "./config.js";
+/** A fatal, surfaced agent error (mirrors the contract's AgentError, adapter-internal). */
+export class AgentError extends Error {
+    code;
+    fatal;
+    constructor(
+    /** One of {@link AgentErrorCode} (or a host-minted string). */
+    code, message, 
+    /** True only when NO valid output was produced; any streamed partial MUST be invalidated. */
+    fatal = true, options) {
+        super(message, options);
+        this.code = code;
+        this.fatal = fatal;
+        this.name = "AgentError";
+    }
+}
+/** True when `err` is an abort (an `AbortError`/`DOMException` name, or our `aborted` code). */
+export function isAbortError(err) {
+    if (err instanceof AgentError)
+        return err.code === "aborted";
+    const name = err?.name;
+    return name === "AbortError" || name === "TimeoutError";
+}
+/**
+ * Build a gateway bound to the resolved credential. When `apiKey` is provided we create a scoped
+ * gateway so the key stays under the plugin's grant; otherwise we fall back to the ambient default
+ * provider (the SDK reads `AI_GATEWAY_API_KEY` itself), used in tests / OIDC deployments.
+ */
+export function resolveGateway(config, apiKey) {
+    const provider = apiKey ? createGateway({ apiKey }) : defaultGateway;
+    return {
+        model: (id) => provider(id),
+        chain: modelChain(config),
+    };
+}
+/**
+ * Run `attempt` against each model in the failover chain in order. The first success wins;
+ * `onAttempt` reports the routed id + hop index so the trace can record `gateway.fallback`.
+ * If every provider errors, raise a fatal `gateway-exhausted` error (FR-008, edge case).
+ *
+ * `attempt` receives the routed {@link LanguageModel} and the hop index (0 = primary).
+ *
+ * ABORT short-circuit: if an attempt throws because the caller's {@link AbortSignal} fired, the
+ * chain STOPS immediately and an `aborted` AgentError is raised — an explicit cancel must NOT burn
+ * every fallback hop (it is not a provider failure; §conformance C1 / A6). Pass `opts.signal` so the
+ * loop can also reject BEFORE the next hop if the signal fires between attempts.
+ */
+export async function withFailover(gw, attempt, onAttempt, opts) {
+    // A chain MUST have at least one model; an empty chain is a config error, surfaced clearly.
+    if (gw.chain.length === 0) {
+        throw new AgentError("gateway-exhausted", "no gateway model configured (empty failover chain)", true);
+    }
+    let lastError;
+    for (let hop = 0; hop < gw.chain.length; hop++) {
+        const modelId = gw.chain[hop];
+        if (modelId === undefined)
+            continue;
+        // Cancelled between hops → reject with `aborted` rather than starting another provider.
+        if (opts?.signal?.aborted) {
+            throw new AgentError("aborted", "request aborted before completing", true, { cause: lastError });
+        }
+        onAttempt?.(modelId, hop);
+        try {
+            const value = await attempt(gw.model(modelId), modelId, hop);
+            return { value, modelId, hop };
+        }
+        catch (err) {
+            lastError = err;
+            // An abort is a cancel, not a provider failure: stop the chain immediately (don't fail over).
+            if (isAbortError(err) || opts?.signal?.aborted) {
+                throw new AgentError("aborted", "request aborted during generation", true, { cause: err });
+            }
+            // otherwise try the next failover; the loop exhausting means all providers failed.
+        }
+    }
+    throw new AgentError("gateway-exhausted", `all ${gw.chain.length} gateway provider(s) failed: [${gw.chain.join(", ")}]`, true, { cause: lastError });
+}
+//# sourceMappingURL=gateway.js.map

package/dist/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAE9D,OAAO,EAAE,UAAU,EAAoB,MAAM,aAAa,CAAC;AAa3D,2FAA2F;AAC3F,MAAM,OAAO,UAAW,SAAQ,KAAK;IAGxB;IAGA;IALX;IACE,+DAA+D;IACtD,IAAoC,EAC7C,OAAe;IACf,6FAA6F;IACpF,QAAiB,IAAI,EAC9B,OAA6B;QAE7B,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QANf,SAAI,GAAJ,IAAI,CAAgC;QAGpC,UAAK,GAAL,KAAK,CAAgB;QAI9B,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED,gGAAgG;AAChG,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,IAAI,GAAG,YAAY,UAAU;QAAE,OAAO,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC;IAC7D,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAC;IACtD,OAAO,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,cAAc,CAAC;AAC1D,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAmB,EAAE,MAAe;IACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;IACrE,OAAO;QACL,KAAK,EAAE,CAAC,EAAU,EAAiB,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAmB,EACnB,OAA2E,EAC3E,SAAkD,EAClD,IAA+B;IAE/B,4FAA4F;IAC5F,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,oDAAoD,EAAE,IAAI,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,SAAkB,CAAC;IACvB,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,wFAAwF;QACxF,IAAI,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,UAAU,CAAC,SAAS,EAAE,mCAAmC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,SAAS,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAC7D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,GAAG,GAAG,CAAC;YAChB,8FAA8F;YAC9F,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC/C,MAAM,IAAI,UAAU,CAAC,SAAS,EAAE,mCAAmC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,mFAAmF;QACrF,CAAC;IACH,CAAC;IACD,MAAM,IAAI,UAAU,CAClB,mBAAmB,EACnB,OAAO,EAAE,CAAC,KAAK,CAAC,MAAM,iCAAiC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC7E,IAAI,EACJ,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,47 @@
+/**
+ * @cloc/provider-ai-sdk — the default AgentProvider, backed by the Vercel AI SDK v6
+ * (+ AI Gateway, hosted-first). It implements the vendor-free `AgentProvider` contract owned by
+ * @cloc/core (generate/stream), routes hosted-first through the AI Gateway, and ends in a
+ * validated structured Output (`Output.object` + Zod) that is the json-render UI plan / IR.
+ *
+ * This package is the ONLY place `ai` (the Vercel AI SDK) is imported — @cloc/core carries no
+ * vendor edge (§34, §43 Listing 15; FR-002, Constitution Principle 8). Future siblings under
+ * packages/plugins: provider-ai-langchain, provider-ai-claude, provider-ai-open-ai (§34).
+ *
+ * The default export is the `definePlugin(...)` value the kernel loads; the named exports expose
+ * the Agent + its typed surface for hosts and tests.
+ */
+import { plugin } from "./plugin.js";
+export default plugin;
+export { plugin, agentProvider, agentDepsFromContext, declaredNeeds, PLUGIN_NAME, GATEWAY_HOST } from "./plugin.js";
+export type { AgentBootContext } from "./plugin.js";
+export { AiSdkAgent, defaultRepairPrompt } from "./agent.js";
+export type { AgentDeps } from "./agent.js";
+export { parseAgentConfig, AgentConfigSchema, modelChain, modelFieldToString, DEFAULT_REPAIR_POLICY, PROVIDER_ID, } from "./config.js";
+export type { AgentConfig, ModelField, GatewayRouting, RepairPolicy, RawAgentConfig } from "./config.js";
+export { needsFor, resolveGatewayKey, assertNoInlineSecret } from "./secrets.js";
+export type { SecretHandle, AgentNeeds } from "./secrets.js";
+export { resolveGateway, withFailover, AgentError, isAbortError } from "./gateway.js";
+export type { ResolvedGateway, AgentErrorCode } from "./gateway.js";
+export { outputSpecFor, makeStructuredOutput } from "./output.js";
+export type { StructuredOutput } from "./output.js";
+export { validateOrRepair, validateOnce, ISSUE_SUMMARY_LIMIT } from "./validate.js";
+export type { ValidateOutcome, ValidationIssue, ValidateEvents } from "./validate.js";
+export { buildToolSet, buildAgenticToolSet, stopAfter, toAiStopWhen, toAiPrepareStep, DEFAULT_MAX_STEPS, } from "./tool-loop.js";
+export type { LoopEvent, PrepareStepResultModel } from "./tool-loop.js";
+export { unstorageMemoryStore, buildMemoryTools, MEMORY_ROOT, MEMORY_TOOL_NAMES, } from "./memory-tool.js";
+export type { UnstorageLike } from "./memory-tool.js";
+export { skillMetadata, frameSkillsForPrompt, activateSkill, openBundled, } from "./skills-loader.js";
+export type { SkillMetadataLine, ActivateResult, SkillActivated, SkillGateDenied, OpenBundledResult, BundledOpened, } from "./skills-loader.js";
+export { partialChunk, loopEventToChunk, chunkToDelta, toCoreOutput } from "./stream.js";
+export type { StreamChunk } from "./stream.js";
+export { startAgentSpan, NOOP_SPAN } from "./trace.js";
+export type { SpanSink, AgentGenerateAttributes, AgentGenerateContext, AgentGenerateEvent } from "./trace.js";
+export { frameGroundingAsData, frameToolResultAsData, collectProvenance } from "./safety.js";
+export type { GroundedContext, GroundedFact, Provenance } from "./safety.js";
+export { toAgentTurn, turnModelString } from "./request.js";
+export type { AgentTurn, AgentTool, TraceContext } from "./request.js";
+export { AgentProviderRef } from "./tokens.js";
+/** Package version marker (pre-alpha). */
+export declare const VERSION = "0.0.0";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,eAAe,MAAM,CAAC;AAGtB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,oBAAoB,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACpH,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAC7D,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAG5C,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,kBAAkB,EAClB,qBAAqB,EACrB,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACzG,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACjF,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG7D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACtF,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAGpE,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAClE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpF,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAOtF,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,SAAS,EACT,YAAY,EACZ,eAAe,EACf,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,EACX,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,aAAa,EACb,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzF,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvD,YAAY,EAAE,QAAQ,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAG9G,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC7F,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC5D,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAGvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,0CAA0C;AAC1C,eAAO,MAAM,OAAO,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1,46 @@
+/**
+ * @cloc/provider-ai-sdk — the default AgentProvider, backed by the Vercel AI SDK v6
+ * (+ AI Gateway, hosted-first). It implements the vendor-free `AgentProvider` contract owned by
+ * @cloc/core (generate/stream), routes hosted-first through the AI Gateway, and ends in a
+ * validated structured Output (`Output.object` + Zod) that is the json-render UI plan / IR.
+ *
+ * This package is the ONLY place `ai` (the Vercel AI SDK) is imported — @cloc/core carries no
+ * vendor edge (§34, §43 Listing 15; FR-002, Constitution Principle 8). Future siblings under
+ * packages/plugins: provider-ai-langchain, provider-ai-claude, provider-ai-open-ai (§34).
+ *
+ * The default export is the `definePlugin(...)` value the kernel loads; the named exports expose
+ * the Agent + its typed surface for hosts and tests.
+ */
+import { plugin } from "./plugin.js";
+// The plugin value the kernel discovers + loads (provides the AgentProvider token; FR-001).
+export default plugin;
+// --- The Agent + its boot surface ---
+export { plugin, agentProvider, agentDepsFromContext, declaredNeeds, PLUGIN_NAME, GATEWAY_HOST } from "./plugin.js";
+export { AiSdkAgent, defaultRepairPrompt } from "./agent.js";
+// --- Config / secrets surface (declarative selection; secret-by-name) ---
+export { parseAgentConfig, AgentConfigSchema, modelChain, modelFieldToString, DEFAULT_REPAIR_POLICY, PROVIDER_ID, } from "./config.js";
+export { needsFor, resolveGatewayKey, assertNoInlineSecret } from "./secrets.js";
+// --- Gateway routing / failover + the surfaced error ---
+export { resolveGateway, withFailover, AgentError, isAbortError } from "./gateway.js";
+// --- Structured Output + validate/repair ---
+export { outputSpecFor, makeStructuredOutput } from "./output.js";
+export { validateOrRepair, validateOnce, ISSUE_SUMMARY_LIMIT } from "./validate.js";
+// --- Render-time agentic primitives: the budgeted ToolLoopAgent runner (027-agentic-primitives) ---
+// The render Agent runs a budgeted AI SDK 6 ToolLoopAgent (stopWhen / prepareStep) that surfaces
+// Skills + Memory + Tools from GenOpts (§16b). Skills load by three-level progressive disclosure;
+// Memory is the Anthropic memory-tool interface backed by an unstorage driver; every tool/skill/
+// memory access clears the §58 gate before execution (FR-014, FR-021).
+export { buildToolSet, buildAgenticToolSet, stopAfter, toAiStopWhen, toAiPrepareStep, DEFAULT_MAX_STEPS, } from "./tool-loop.js";
+export { unstorageMemoryStore, buildMemoryTools, MEMORY_ROOT, MEMORY_TOOL_NAMES, } from "./memory-tool.js";
+export { skillMetadata, frameSkillsForPrompt, activateSkill, openBundled, } from "./skills-loader.js";
+// --- Streaming (partial-object parse-and-heal) + trace subtree ---
+export { partialChunk, loopEventToChunk, chunkToDelta, toCoreOutput } from "./stream.js";
+export { startAgentSpan, NOOP_SPAN } from "./trace.js";
+// --- Safety (data-not-instructions) + request normalization ---
+export { frameGroundingAsData, frameToolResultAsData, collectProvenance } from "./safety.js";
+export { toAgentTurn, turnModelString } from "./request.js";
+// --- The token this plugin answers (re-exported for hosts/tests) ---
+export { AgentProviderRef } from "./tokens.js";
+/** Package version marker (pre-alpha). */
+export const VERSION = "0.0.0";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,4FAA4F;AAC5F,eAAe,MAAM,CAAC;AAEtB,uCAAuC;AACvC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,oBAAoB,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEpH,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAG7D,2EAA2E;AAC3E,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,kBAAkB,EAClB,qBAAqB,EACrB,WAAW,GACZ,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGjF,0DAA0D;AAC1D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAGtF,8CAA8C;AAC9C,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAElE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAGpF,qGAAqG;AACrG,iGAAiG;AACjG,kGAAkG;AAClG,iGAAiG;AACjG,uEAAuE;AACvE,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,SAAS,EACT,YAAY,EACZ,eAAe,EACf,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,EACX,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,aAAa,EACb,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAU5B,oEAAoE;AACpE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEzF,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAGvD,iEAAiE;AACjE,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE7F,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAG5D,sEAAsE;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,0CAA0C;AAC1C,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC"}

package/dist/memory-tool.d.ts

@@ -0,0 +1,63 @@
+/**
+ * @cloc/provider-ai-sdk · memory-tool.ts — the Anthropic Memory-tool interface, backed by Cloc's
+ * `unstorage` driver and joined to the render tool loop (027-agentic-primitives §16b.2; FR-007,
+ * FR-008, FR-009, FR-014, Principle 5).
+ *
+ * Memory is the Agent's per-site durable scratch/recall at `.cloc/memory/`. The model drives
+ * create/read/update/delete over a `/memory` path that persists across sessions; Cloc OWNS where
+ * the bytes live by backing the tool with a swappable `unstorage` driver (FS / Redis / KV, §43), so
+ * the SAME memory persists across runtimes (FR-008). The contract shape (`MemoryStore`) is owned by
+ * @cloc/core; this module wires the driver edge + exposes the CRUD as AI-SDK tools.
+ *
+ * Two surfaces:
+ *   1. {@link unstorageMemoryStore} — turn an `unstorage` instance into a vendor-free `MemoryStore`.
+ *   2. {@link buildMemoryTools} — expose that store to the loop as AI-SDK `tool()` defs the model
+ *      drives. EVERY access clears the §58 gate BEFORE the read/write (FR-014); memory CONTENTS are
+ *      DATA — the system MUST NOT execute instructions injected through them (Principle 5).
+ *
+ * Memory ≠ grounding (FR-009): this is recall, not RAG over the data repo (that stays the separate
+ * `GroundingProvider`). Memory ≠ `state.json` (machine A/B outcomes) ≠ `journal/` (human teaching).
+ *
+ * TODO(027/Governance, NEEDS CLARIFICATION): committed vs `.gitignore`d, and per-route/site/tenant
+ * scope of `.cloc/memory/`. §16b.2 says per-site/versioned; the privacy implication of committing
+ * model-written memory is unresolved. Routed to Governance — does not change this wiring.
+ */
+import type { ToolSet as AiToolSet } from "ai";
+import type { MemoryStore, MemoryBackend, PolicyGateHook } from "./tokens.js";
+import type { LoopEvent } from "./tool-loop.js";
+/** The mount root for memory under the data repo (`.cloc/memory/`), §16b.2. */
+export declare const MEMORY_ROOT = ".cloc/memory/";
+/**
+ * The minimal `unstorage` surface this module needs — modeled STRUCTURALLY so the runner is not
+ * forced to import a concrete driver across the public signature. A real `unstorage` `Storage`
+ * instance (from `createStorage({ driver })`) satisfies it; tests pass an in-memory stand-in.
+ * Cloc owns the driver choice (FS / Redis / KV), so the same memory persists across runtimes (§43).
+ */
+export interface UnstorageLike {
+    getItem(key: string): Promise<unknown>;
+    setItem(key: string, value: string): Promise<void>;
+    removeItem(key: string): Promise<void>;
+    getKeys(base?: string): Promise<string[]>;
+}
+/**
+ * Adapt an `unstorage` instance to the vendor-free {@link MemoryStore} (the memory-tool interface).
+ * Paths are normalized under a single namespace so the bytes live wherever the injected driver puts
+ * them (FR-008). `read` returns `null` for a missing note; `write` creates or overwrites.
+ */
+export declare function unstorageMemoryStore(storage: UnstorageLike, backend?: MemoryBackend): MemoryStore;
+/**
+ * The set of memory operations exposed to the model as AI-SDK tools, each GATED. The model invokes
+ * `memory.read` / `memory.write` / `memory.update` / `memory.delete` / `memory.list` over a
+ * `/memory` path; the tool's `execute` clears the §58 gate BEFORE touching the store and frames the
+ * result as DATA before it re-enters the loop (FR-014, Principle 5).
+ */
+export declare const MEMORY_TOOL_NAMES: readonly ["memory.read", "memory.write", "memory.update", "memory.delete", "memory.list"];
+/**
+ * Build the gated AI-SDK memory tool set the model drives. EVERY op clears `gate.check({ kind:
+ * 'memory', op, path })` BEFORE the store is touched; a denial DEGRADES (returns an attributable
+ * data block, never throws, never bypasses — FR-014, FR-021). Results re-enter the loop as DATA
+ * (frameToolResultAsData), so an injected "ignore previous instructions…" note is observed, never
+ * executed (Principle 5). Returns `{}` when no memory is enabled (FR-002, zero-cost baseline).
+ */
+export declare function buildMemoryTools(memory: MemoryStore | undefined, gate: PolicyGateHook, onEvent: (event: LoopEvent) => void): AiToolSet;
+//# sourceMappingURL=memory-tool.d.ts.map

package/dist/memory-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-tool.d.ts","sourceRoot":"","sources":["../src/memory-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,KAAK,EAAE,OAAO,IAAI,SAAS,EAAkB,MAAM,IAAI,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAY,cAAc,EAAE,MAAM,aAAa,CAAC;AAExF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,+EAA+E;AAC/E,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC3C;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,aAAa,EACtB,OAAO,CAAC,EAAE,aAAa,GACtB,WAAW,CA4Bb;AAsBD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,2FAMpB,CAAC;AA4BX;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,GAClC,SAAS,CA8DX"}