@corenel/harness 0.1.0

package/dist/guardrail/store.js

@@ -0,0 +1,109 @@
+import { BUILTIN_POLICIES, STANDARD_POLICY } from './builtins';
+import { validatePolicy } from './validate';
+const LS_CUSTOM = 'prompd.web.agent.policies.v1';
+const LS_SELECTED = 'prompd.web.agent.policy';
+/** The stored map verbatim (null-prototype so policy names like "__proto__"
+ * can't reach Object.prototype slots), WITHOUT dropping entries that fail
+ * validation — so a write never erases a sibling this build can't parse (e.g.
+ * a policy authored by a newer schema). Used for read-modify-write. */
+function readRaw() {
+    const out = Object.create(null);
+    try {
+        const raw = localStorage.getItem(LS_CUSTOM);
+        const obj = raw ? JSON.parse(raw) : {};
+        if (obj && typeof obj === 'object') {
+            for (const k of Object.keys(obj))
+                out[k] = obj[k];
+        }
+    }
+    catch { /* corrupt blob — start empty */ }
+    return out;
+}
+/** Only the entries that validate cleanly, for USE (listing/resolving). Invalid
+ * entries are hidden but left on disk (readRaw keeps them). */
+function readCustom() {
+    const out = Object.create(null);
+    const raw = readRaw();
+    for (const k of Object.keys(raw)) {
+        const r = validatePolicy(raw[k]);
+        if (r.ok && r.policy)
+            out[k] = r.policy;
+    }
+    return out;
+}
+function writeRaw(map) {
+    try {
+        localStorage.setItem(LS_CUSTOM, JSON.stringify(map));
+    }
+    catch { /* ignore quota */ }
+}
+export function isBuiltinPolicy(name) {
+    return Object.prototype.hasOwnProperty.call(BUILTIN_POLICIES, name);
+}
+/** Built-ins (in declared order) followed by custom policies (alphabetical). */
+export function listPolicies() {
+    const builtins = Object.keys(BUILTIN_POLICIES).map((name) => ({
+        name, policy: BUILTIN_POLICIES[name], builtin: true,
+    }));
+    const custom = readCustom();
+    const customs = Object.keys(custom)
+        .filter((name) => !isBuiltinPolicy(name))
+        .sort()
+        .map((name) => ({ name, policy: custom[name], builtin: false }));
+    return [...builtins, ...customs];
+}
+/** Resolve a policy by name. Built-ins win; falls back to a stored custom. */
+export function getPolicy(name) {
+    if (isBuiltinPolicy(name))
+        return BUILTIN_POLICIES[name];
+    return readCustom()[name];
+}
+/** Persist a custom policy. Rejects built-in names (rename to save a copy) and
+ * any policy that fails validation. */
+export function saveCustomPolicy(p) {
+    const r = validatePolicy(p);
+    if (!r.ok || !r.policy)
+        return { ok: false, errors: r.errors };
+    if (isBuiltinPolicy(r.policy.name)) {
+        return { ok: false, errors: [`"${r.policy.name}" is a built-in policy — rename to save a custom copy.`] };
+    }
+    // Read-modify-write the RAW map so unrelated (incl. unparseable) policies
+    // survive — never the validated view, which would drop and then persist-away
+    // siblings this build can't parse.
+    const map = readRaw();
+    map[r.policy.name] = r.policy;
+    writeRaw(map);
+    return { ok: true, errors: [] };
+}
+/** Remove a custom policy. No-op on built-ins. Returns true if something was removed. */
+export function deleteCustomPolicy(name) {
+    if (isBuiltinPolicy(name))
+        return false;
+    const map = readRaw();
+    if (!Object.prototype.hasOwnProperty.call(map, name))
+        return false;
+    delete map[name];
+    writeRaw(map);
+    return true;
+}
+/** The persisted selection, falling back to 'standard' if unset/stale. */
+export function getSelectedPolicyName() {
+    try {
+        const name = localStorage.getItem(LS_SELECTED);
+        if (name && getPolicy(name))
+            return name;
+    }
+    catch { /* ignore */ }
+    return STANDARD_POLICY.name;
+}
+export function setSelectedPolicyName(name) {
+    try {
+        localStorage.setItem(LS_SELECTED, name);
+    }
+    catch { /* ignore */ }
+}
+/** The selected policy object, always defined (defaults to STANDARD_POLICY). */
+export function resolveSelectedPolicy() {
+    return getPolicy(getSelectedPolicyName()) ?? STANDARD_POLICY;
+}
+//# sourceMappingURL=store.js.map

package/dist/guardrail/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../guardrail/store.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,SAAS,GAAG,8BAA8B,CAAC;AACjD,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAQ9C;;;uEAGuE;AACvE,SAAS,OAAO;IACd,MAAM,GAAG,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAI,GAA+B,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,gCAAgC,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC;AACb,CAAC;AAED;+DAC+D;AAC/D,SAAS,UAAU;IACjB,MAAM,GAAG,GAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,GAA4B;IAC5C,IAAI,CAAC;QAAC,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,YAAY;IAC1B,MAAM,QAAQ,GAAkB,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3E,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI;KACpD,CAAC,CAAC,CAAC;IACJ,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAkB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;SAC/C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;SACxC,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,IAAI,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAID;uCACuC;AACvC,MAAM,UAAU,gBAAgB,CAAC,CAAS;IACxC,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/D,IAAI,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,wDAAwD,CAAC,EAAE,CAAC;IAC5G,CAAC;IACD,0EAA0E;IAC1E,6EAA6E;IAC7E,mCAAmC;IACnC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,CAAC,CAAC;IACd,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAClC,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,QAAQ,CAAC,GAAG,CAAC,CAAC;IACd,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,qBAAqB;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACxB,OAAO,eAAe,CAAC,IAAI,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,IAAI,CAAC;QAAC,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;AACzE,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,qBAAqB;IACnC,OAAO,SAAS,CAAC,qBAAqB,EAAE,CAAC,IAAI,eAAe,CAAC;AAC/D,CAAC"}

package/dist/guardrail/validate.d.ts

@@ -0,0 +1,8 @@
+import type { Policy } from '@corenel/protocol';
+export interface PolicyValidationResult {
+    ok: boolean;
+    policy?: Policy;
+    errors: string[];
+}
+export declare function validatePolicy(input: unknown): PolicyValidationResult;
+//# sourceMappingURL=validate.d.ts.map

package/dist/guardrail/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../guardrail/validate.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAoC,MAAM,mBAAmB,CAAC;AAiBlF,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAqBD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CA4DrE"}

package/dist/guardrail/validate.js

@@ -0,0 +1,105 @@
+const LEVELS = ['allow', 'ask', 'deny'];
+const ACTIONS = ['stop', 'warn'];
+/** Older spellings accepted on input and normalized to the canonical vocabulary,
+ * so policies persisted before the rename (and hand-written `auto`) still load. */
+const LEVEL_ALIASES = {
+    allow: 'allow', ask: 'ask', deny: 'deny',
+    auto: 'allow', 'deny-by-default': 'deny',
+};
+/** Canonicalize a level string, or undefined if it is not a known level/alias. */
+function normalizeLevel(v) {
+    return typeof v === 'string' ? LEVEL_ALIASES[v] : undefined;
+}
+function isStringArray(v) {
+    return Array.isArray(v) && v.every((x) => typeof x === 'string');
+}
+function isPosInt(v) {
+    return typeof v === 'number' && Number.isInteger(v) && v > 0;
+}
+/** Recognized keys — anything else is a typo (e.g. `denied:` for `deny:`) that
+ * would SILENTLY not apply, so it's rejected rather than ignored. */
+const POLICY_KEYS = new Set([
+    'version', 'name', 'description', 'onViolation', 'maxTurns', 'maxToolCalls',
+    'tools', 'mustCall', 'permissions', 'defaultPermission', 'mutatingDefault',
+]);
+const TOOLS_KEYS = new Set(['allow', 'deny']);
+/** Names that would collide with Object.prototype slots — saving one corrupts
+ * the policy map (see store.ts) and getPolicy returns a non-Policy object. */
+const RESERVED_NAMES = new Set(['__proto__', 'prototype', 'constructor']);
+export function validatePolicy(input) {
+    const errors = [];
+    if (!input || typeof input !== 'object') {
+        return { ok: false, errors: ['Policy must be an object.'] };
+    }
+    const o = input;
+    for (const k of Object.keys(o)) {
+        if (!POLICY_KEYS.has(k))
+            errors.push(`Unknown policy key "${k}".`);
+    }
+    if (o.version !== 1)
+        errors.push('Policy.version must be 1.');
+    if (typeof o.name !== 'string' || !o.name.trim())
+        errors.push('Policy.name is required.');
+    else if (RESERVED_NAMES.has(o.name.trim()))
+        errors.push(`Policy.name "${o.name.trim()}" is reserved — choose another name.`);
+    if (o.description !== undefined && typeof o.description !== 'string')
+        errors.push('Policy.description must be a string.');
+    if (o.onViolation !== undefined && !ACTIONS.includes(o.onViolation)) {
+        errors.push(`Policy.onViolation must be one of: ${ACTIONS.join(', ')}.`);
+    }
+    if (o.maxTurns !== undefined && !isPosInt(o.maxTurns))
+        errors.push('Policy.maxTurns must be a positive integer.');
+    if (o.maxToolCalls !== undefined && !isPosInt(o.maxToolCalls))
+        errors.push('Policy.maxToolCalls must be a positive integer.');
+    if (o.tools !== undefined) {
+        if (!o.tools || typeof o.tools !== 'object') {
+            errors.push('Policy.tools must be an object.');
+        }
+        else {
+            const t = o.tools;
+            for (const k of Object.keys(t)) {
+                if (!TOOLS_KEYS.has(k))
+                    errors.push(`Unknown key "${k}" in Policy.tools (expected allow/deny).`);
+            }
+            if (t.allow !== undefined && !isStringArray(t.allow))
+                errors.push('Policy.tools.allow must be a string[].');
+            if (t.deny !== undefined && !isStringArray(t.deny))
+                errors.push('Policy.tools.deny must be a string[].');
+        }
+    }
+    if (o.mustCall !== undefined && !isStringArray(o.mustCall))
+        errors.push('Policy.mustCall must be a string[].');
+    if (o.permissions !== undefined) {
+        if (!o.permissions || typeof o.permissions !== 'object') {
+            errors.push('Policy.permissions must be an object.');
+        }
+        else {
+            const perms = o.permissions;
+            for (const [k, v] of Object.entries(perms)) {
+                const norm = normalizeLevel(v);
+                if (!norm)
+                    errors.push(`Policy.permissions["${k}"] must be one of: ${LEVELS.join(', ')}.`);
+                else
+                    perms[k] = norm; // normalize aliases in place
+            }
+        }
+    }
+    if (o.defaultPermission !== undefined) {
+        const norm = normalizeLevel(o.defaultPermission);
+        if (!norm)
+            errors.push(`Policy.defaultPermission must be one of: ${LEVELS.join(', ')}.`);
+        else
+            o.defaultPermission = norm;
+    }
+    if (o.mutatingDefault !== undefined) {
+        const norm = normalizeLevel(o.mutatingDefault);
+        if (!norm)
+            errors.push(`Policy.mutatingDefault must be one of: ${LEVELS.join(', ')}.`);
+        else
+            o.mutatingDefault = norm;
+    }
+    if (errors.length)
+        return { ok: false, errors };
+    return { ok: true, policy: input, errors: [] };
+}
+//# sourceMappingURL=validate.js.map

package/dist/guardrail/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../guardrail/validate.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,GAAsB,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAC3D,MAAM,OAAO,GAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEpD;mFACmF;AACnF,MAAM,aAAa,GAAoC;IACrD,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM;IACxC,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM;CACzC,CAAC;AAEF,kFAAkF;AAClF,SAAS,cAAc,CAAC,CAAU;IAChC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAQD,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;AACnE,CAAC;AACD,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED;qEACqE;AACrE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc;IAC3E,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,mBAAmB,EAAE,iBAAiB;CAC3E,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAE9C;8EAC8E;AAC9E,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AAE1E,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,2BAA2B,CAAC,EAAE,CAAC;IAC9D,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAE3C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;SACrF,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAC;IAC7H,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC1H,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,WAA8B,CAAC,EAAE,CAAC;QACvF,MAAM,CAAC,IAAI,CAAC,sCAAsC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAClH,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAE9H,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,CAAC,KAAgC,CAAC;YAC7C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,0CAA0C,CAAC,CAAC;YACnG,CAAC;YACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YAC5G,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAE/G,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,CAAC,CAAC,WAAsC,CAAC;YACvD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;gBAC/B,IAAI,CAAC,IAAI;oBAAE,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,sBAAsB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;oBACtF,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,6BAA6B;YACrD,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,4CAA4C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;YACpF,CAAC,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,0CAA0C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;YAClF,CAAC,CAAC,eAAe,GAAG,IAAI,CAAC;IAChC,CAAC;IAED,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAe,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC3D,CAAC"}

package/dist/guards.d.ts

@@ -0,0 +1,37 @@
+/** Known feature ids (open set — new guarded features add their own). */
+export type FeatureId = 'llm-execution' | (string & {});
+/** What the user can do about a denial — drives the CTA a host renders. */
+export type GuardAction = {
+    kind: 'sign-in';
+} | {
+    kind: 'upgrade';
+    label?: string;
+};
+export type GuardVerdict = {
+    allowed: true;
+} | {
+    allowed: false;
+    guardId: string;
+    reason: string;
+    action?: GuardAction;
+};
+export declare const ALLOWED: GuardVerdict;
+export interface FeatureGuard {
+    /** Stable id ('auth', 'run-quota', 'token', …) — denials carry it for diagnostics. */
+    id: string;
+    /** Whether this guard has an opinion about the feature. */
+    appliesTo(feature: FeatureId): boolean;
+    /** Evaluate. May be async (e.g. a server-side quota check). */
+    check(feature: FeatureId): GuardVerdict | Promise<GuardVerdict>;
+    /** Subscribe to input changes (sign-in/out, quota tick) so hosts re-evaluate. */
+    onChange?(cb: () => void): () => void;
+}
+/** Install a guard (evaluation order = registration order). Returns a disposer
+ * that removes the guard and detaches its change subscription. */
+export declare function registerGuard(g: FeatureGuard): () => void;
+/** Evaluate every applicable guard in order; the first denial wins. The loop
+ * calls this before a tool that declares `requiresFeature` runs. */
+export declare function checkFeature(feature: FeatureId): Promise<GuardVerdict>;
+/** Fires when the guard set or any guard's inputs change (for host UIs). */
+export declare function onGuardsChange(cb: () => void): () => void;
+//# sourceMappingURL=guards.d.ts.map

package/dist/guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../guards.ts"],"names":[],"mappings":"AAUA,yEAAyE;AACzE,MAAM,MAAM,SAAS,GAAG,eAAe,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAExD,2EAA2E;AAC3E,MAAM,MAAM,WAAW,GAAG;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpF,MAAM,MAAM,YAAY,GACpB;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,CAAC;AAE9E,eAAO,MAAM,OAAO,EAAE,YAAgC,CAAC;AAEvD,MAAM,WAAW,YAAY;IAC3B,sFAAsF;IACtF,EAAE,EAAE,MAAM,CAAC;IACX,2DAA2D;IAC3D,SAAS,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC;IACvC,+DAA+D;IAC/D,KAAK,CAAC,OAAO,EAAE,SAAS,GAAG,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAChE,iFAAiF;IACjF,QAAQ,CAAC,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;CACvC;AAMD;kEACkE;AAClE,wBAAgB,aAAa,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,IAAI,CAUzD;AAED;oEACoE;AACpE,wBAAsB,YAAY,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,CAO5E;AAED,4EAA4E;AAC5E,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAGzD"}

package/dist/guards.js

@@ -0,0 +1,45 @@
+/* Feature guards (kernel) — the central gate for features that need an account, a
+ * quota, or (later) a paid plan. The harness LOOP consults checkFeature() before
+ * dispatching any tool that declares `requiresFeature`, so feature-gating is a
+ * host-agnostic kernel capability (browser, node CLI, sidecar all enforce it).
+ * Hosts register guards: the browser an auth/quota guard, the node CLI a token
+ * guard. Pure — the React `useGuardVerdict` hook lives host-side.
+ *
+ * Registered guards are consulted in registration order; the first denial wins;
+ * a feature no guard applies to is allowed. */
+export const ALLOWED = { allowed: true };
+const guards = [];
+const subs = new Set();
+const notify = () => subs.forEach((fn) => fn());
+/** Install a guard (evaluation order = registration order). Returns a disposer
+ * that removes the guard and detaches its change subscription. */
+export function registerGuard(g) {
+    guards.push(g);
+    const off = g.onChange?.(notify);
+    notify();
+    return () => {
+        const i = guards.indexOf(g);
+        if (i >= 0)
+            guards.splice(i, 1);
+        off?.();
+        notify();
+    };
+}
+/** Evaluate every applicable guard in order; the first denial wins. The loop
+ * calls this before a tool that declares `requiresFeature` runs. */
+export async function checkFeature(feature) {
+    for (const g of [...guards]) {
+        if (!g.appliesTo(feature))
+            continue;
+        const v = await g.check(feature);
+        if (!v.allowed)
+            return v;
+    }
+    return ALLOWED;
+}
+/** Fires when the guard set or any guard's inputs change (for host UIs). */
+export function onGuardsChange(cb) {
+    subs.add(cb);
+    return () => { subs.delete(cb); };
+}
+//# sourceMappingURL=guards.js.map

package/dist/guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.js","sourceRoot":"","sources":["../guards.ts"],"names":[],"mappings":"AAAA;;;;;;;;+CAQ+C;AAY/C,MAAM,CAAC,MAAM,OAAO,GAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAavD,MAAM,MAAM,GAAmB,EAAE,CAAC;AAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAc,CAAC;AACnC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAEhD;kEACkE;AAClE,MAAM,UAAU,aAAa,CAAC,CAAe;IAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,EAAE,CAAC;IACT,OAAO,GAAG,EAAE;QACV,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChC,GAAG,EAAE,EAAE,CAAC;QACR,MAAM,EAAE,CAAC;IACX,CAAC,CAAC;AACJ,CAAC;AAED;oEACoE;AACpE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAkB;IACnD,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,SAAS;QACpC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAAC,EAAc;IAC3C,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACb,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC"}

package/dist/log.d.ts

@@ -0,0 +1,4 @@
+export declare function setAgentLogging(on: boolean): void;
+export declare function isAgentLogging(): boolean;
+export declare function alog(...args: unknown[]): void;
+//# sourceMappingURL=log.d.ts.map

package/dist/log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../log.ts"],"names":[],"mappings":"AAOA,wBAAgB,eAAe,CAAC,EAAE,EAAE,OAAO,GAAG,IAAI,CAGjD;AAED,wBAAgB,cAAc,IAAI,OAAO,CAExC;AAED,wBAAgB,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAE7C"}

package/dist/log.js

@@ -0,0 +1,22 @@
+/* Agent debug logging — ON by default for development. The primary observability is the
+ * AgentEvent stream (rendered in the UI); this is console tracing for debugging.
+ * ON by default; a host disables it via setAgentLogging(false) at boot (the app
+ * wires VITE_AGENT_DEBUG=false to that) or at runtime from the console. The kernel
+ * stays env-agnostic — no import.meta.env / process.env here. */
+let enabled = true;
+export function setAgentLogging(on) {
+    enabled = on;
+    console.log(`[agent] logging ${on ? 'enabled' : 'disabled'}`);
+}
+export function isAgentLogging() {
+    return enabled;
+}
+export function alog(...args) {
+    if (enabled)
+        console.debug('[agent]', ...args);
+}
+// Expose setAgentLogging globally for console access
+if (typeof window !== 'undefined') {
+    window.setAgentLogging = setAgentLogging;
+}
+//# sourceMappingURL=log.js.map

package/dist/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../log.ts"],"names":[],"mappings":"AAAA;;;;iEAIiE;AACjE,IAAI,OAAO,GAAG,IAAI,CAAC;AAEnB,MAAM,UAAU,eAAe,CAAC,EAAW;IACzC,OAAO,GAAG,EAAE,CAAC;IACb,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,GAAG,IAAe;IACrC,IAAI,OAAO;QAAE,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,qDAAqD;AACrD,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;IACjC,MAA6C,CAAC,eAAe,GAAG,eAAe,CAAC;AACnF,CAAC"}

package/dist/promptCompiler.d.ts

@@ -0,0 +1,18 @@
+import type { FileService } from '@corenel/protocol';
+export interface PromptCompileResult {
+    output: string;
+    errors?: {
+        message: string;
+    }[];
+}
+/** Optional workspace context so a compile resolves inherits/includes against
+ * sibling files (the editor/agent workspace), not just the inline source. */
+export interface PromptCompileContext {
+    files?: FileService | null;
+    /** The file's workspace-relative path (enables sibling resolution). */
+    path?: string;
+}
+export type PromptCompiler = (source: string, values: Record<string, unknown>, ctx?: PromptCompileContext) => Promise<PromptCompileResult>;
+export declare function setPromptCompiler(fn: PromptCompiler): void;
+export declare function compilePrompt(source: string, values: Record<string, unknown>, ctx?: PromptCompileContext): Promise<PromptCompileResult>;
+//# sourceMappingURL=promptCompiler.d.ts.map

package/dist/promptCompiler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"promptCompiler.d.ts","sourceRoot":"","sources":["../promptCompiler.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAChC;AAED;6EAC6E;AAC7E,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC3B,uEAAuE;IACvE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,cAAc,GAAG,CAC3B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,GAAG,CAAC,EAAE,oBAAoB,KACvB,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAIlC,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,CAE1D;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,GAAG,CAAC,EAAE,oBAAoB,GACzB,OAAO,CAAC,mBAAmB,CAAC,CAK9B"}

package/dist/promptCompiler.js

@@ -0,0 +1,11 @@
+let compiler = null;
+export function setPromptCompiler(fn) {
+    compiler = fn;
+}
+export async function compilePrompt(source, values, ctx) {
+    if (!compiler) {
+        throw new Error('No prompt compiler registered — the host must call setPromptCompiler() at boot.');
+    }
+    return compiler(source, values, ctx);
+}
+//# sourceMappingURL=promptCompiler.js.map

package/dist/promptCompiler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promptCompiler.js","sourceRoot":"","sources":["../promptCompiler.ts"],"names":[],"mappings":"AAmCA,IAAI,QAAQ,GAA0B,IAAI,CAAC;AAE3C,MAAM,UAAU,iBAAiB,CAAC,EAAkB;IAClD,QAAQ,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,MAA+B,EAC/B,GAA0B;IAE1B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;AACvC,CAAC"}

package/dist/prompts/config.d.ts

@@ -0,0 +1,63 @@
+export type ConfigDecision = 'in-sync' | 'fast-forward' | 'conflict' | 'review' | 'local-only';
+/** The 3-way decision for one file from content hashes: current (user's), latest
+ * (shipped default), and baseline (last-synced default; undefined = untracked). */
+export declare function classifyConfig(curHash: string, defHash: string, baseHash: string | undefined): ConfigDecision;
+/** Seed + reconcile the config workspace against the shipped defaults (backfill
+ * missing, fast-forward unedited upstream changes). Conflicts are left for
+ * listConfigUpdates(). Runs once per load. */
+export declare function seedConfig(): Promise<void>;
+export type ConfigUpdateStatus = 'conflict' | 'review';
+export interface ConfigUpdate {
+    path: string;
+    /** 'conflict' = edited locally AND changed upstream; 'review' = differs but has
+     * no recorded baseline (predates tracking), so we won't guess. */
+    status: ConfigUpdateStatus;
+    current: string;
+    latest: string;
+}
+/** Config files still needing a manual decision after reconcile (fast-forwards and
+ * backfills already applied). */
+export declare function listConfigUpdates(): Promise<ConfigUpdate[]>;
+/** Resolve one update: 'replace' takes the shipped default; 'keep' keeps the
+ * user's content. Either way the baseline advances to the latest default, so the
+ * file won't resurface until the default changes again. */
+export declare function applyConfigUpdate(path: string, choice: 'replace' | 'keep'): Promise<void>;
+/** Replace every pending update with its shipped default. */
+export declare function replaceAllConfigUpdates(): Promise<void>;
+/** Read a config file, falling back to the shipped default when missing/empty —
+ * so compose() is never blocked on seeding and never returns an empty prompt. */
+export declare function readConfig(path: string): Promise<string>;
+/** Restore a config file to its shipped default (or remove it if not shipped). */
+export declare function resetConfig(path: string): Promise<void>;
+/** Whether a config path ships a default (so "reset to default" is meaningful). */
+export declare function hasConfigDefault(path: string): boolean;
+/** Persona file paths in the config workspace (personas/<id>.md). */
+export declare function listPersonaPaths(): Promise<string[]>;
+/** Persona id (the filename without .md) for a personas/<id>.md path. */
+export declare function personaIdFromPath(path: string): string;
+export interface PersonaEntry {
+    id: string;
+    name: string;
+    description?: string;
+}
+/** The personas available for the picker (read from personas/*.md, label from
+ * frontmatter `name`, else the filename). */
+export declare function loadPersonas(): Promise<PersonaEntry[]>;
+export interface ModeEntry {
+    id: string;
+    label: string;
+    description: string;
+    accent?: string;
+}
+/** The agent modes available for the composer — read from modes/*.md, so dropping
+ * a modes/<id>.md into the config workspace adds a selectable mode. Label and
+ * description come from the file's frontmatter (`name` / `description`); the file
+ * body is the mode's steering text, loaded separately at compose time. */
+export declare function loadModes(): Promise<ModeEntry[]>;
+/** Create (or overwrite) a persona file. Returns its id. */
+export declare function createPersona(name: string, system: string): Promise<string>;
+/** Delete a persona file. */
+export declare function deletePersona(id: string): Promise<void>;
+export declare function getSelectedPersona(): string;
+export declare function setSelectedPersona(id: string): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/prompts/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../prompts/config.ts"],"names":[],"mappings":"AAqCA,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,cAAc,GAAG,UAAU,GAAG,QAAQ,GAAG,YAAY,CAAC;AAC/F;mFACmF;AACnF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,cAAc,CAK7G;AAcD;;8CAE8C;AAC9C,wBAAgB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAG1C;AAoCD,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,QAAQ,CAAC;AACvD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb;sEACkE;IAClE,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;iCACiC;AACjC,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAajE;AAED;;2DAE2D;AAC3D,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ/F;AAED,6DAA6D;AAC7D,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAE7D;AAED;iFACiF;AACjF,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO9D;AAED,kFAAkF;AAClF,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7D;AAED,mFAAmF;AACnF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,qEAAqE;AACrE,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAI1D;AAED,yEAAyE;AACzE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,MAAM,WAAW,YAAY;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE;AAEhF;6CAC6C;AAC7C,wBAAsB,YAAY,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAa5D;AAGD,MAAM,WAAW,SAAS;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AAI9F;;;0EAG0E;AAC1E,wBAAsB,SAAS,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAgBtD;AAKD,4DAA4D;AAC5D,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIjF;AAED,6BAA6B;AAC7B,wBAAsB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7D;AAGD,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AACD,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAEnD"}