@corenel/harness 0.2.0 → 0.3.2

package/dist/acp/agentMap.d.ts

@@ -0,0 +1,34 @@
+import type { AgentEvent } from '@corenel/protocol';
+import type { AcpToolKind } from './types';
+/**
+ * Describe one of our tools in ACP's `kind` vocabulary.
+ *
+ * Accepts either a bare wire name (`write_file`) or a policy address
+ * (`fs:write_file`), because callers have one or the other depending on where in
+ * the loop they sit.
+ *
+ * The `fs` namespace fallback is `read` rather than `edit` on purpose: a tool we
+ * cannot name is more likely a reader, and this value drives only the client's
+ * icon and progress display. The AUTHORIZATION for that same call is decided by
+ * our own Policy before we ever emit this.
+ */
+export declare function kindForTool(nameOrAddress: string): AcpToolKind;
+/** An ACP `session/update` payload, as the agent sends it. */
+export interface AcpSessionUpdate {
+    sessionUpdate: string;
+    [k: string]: unknown;
+}
+/**
+ * Render one agent-loop event as an ACP `session/update`, or null when the event
+ * has no ACP equivalent worth sending.
+ *
+ * Returning null rather than a placeholder matters: our loop emits far more than
+ * ACP models (budget breaches, heals, policy notes, usage), and forwarding those
+ * as text would clutter a client's transcript with our internals. A client that
+ * wants them can read the run's RUN.jsonl.
+ */
+export declare function eventToSessionUpdate(ev: AgentEvent): AcpSessionUpdate | null;
+/** Map our loop's stop reason onto ACP's. Unknown reasons report `end_turn`
+ * rather than inventing a value the client would not recognize. */
+export declare function stopReasonForAcp(reason: string): string;
+//# sourceMappingURL=agentMap.d.ts.map

package/dist/acp/agentMap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentMap.d.ts","sourceRoot":"","sources":["../../acp/agentMap.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAmC3C;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,WAAW,CAQ9D;AAED,8DAA8D;AAC9D,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,UAAU,GAAG,gBAAgB,GAAG,IAAI,CA6B5E;AAED;mEACmE;AACnE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAavD"}

package/dist/acp/agentMap.js

@@ -0,0 +1,110 @@
+/** Explicit kinds for built-in tools whose namespace alone is ambiguous. */
+const TOOL_KINDS = {
+    read_file: 'read',
+    stat_file: 'read',
+    list_files: 'read',
+    search_files: 'search',
+    search_sessions: 'search',
+    search_packages: 'search',
+    write_file: 'edit',
+    create_file: 'edit',
+    propose_edit: 'edit',
+    delete_file: 'delete',
+    rename_file: 'move',
+    web_search: 'fetch',
+    compile_prompd: 'other',
+    todo_write: 'think',
+    ask_user: 'think',
+};
+/** Namespace fallbacks, for tools not named above (including dynamic MCP and
+ * skill tools, which cannot be enumerated). */
+const NAMESPACE_KINDS = {
+    fs: 'read',
+    shell: 'execute',
+    web: 'fetch',
+    memory: 'other',
+    agent: 'think',
+    prompd: 'other',
+    system: 'other',
+    mcp: 'other',
+    skill: 'other',
+};
+/**
+ * Describe one of our tools in ACP's `kind` vocabulary.
+ *
+ * Accepts either a bare wire name (`write_file`) or a policy address
+ * (`fs:write_file`), because callers have one or the other depending on where in
+ * the loop they sit.
+ *
+ * The `fs` namespace fallback is `read` rather than `edit` on purpose: a tool we
+ * cannot name is more likely a reader, and this value drives only the client's
+ * icon and progress display. The AUTHORIZATION for that same call is decided by
+ * our own Policy before we ever emit this.
+ */
+export function kindForTool(nameOrAddress) {
+    const colon = nameOrAddress.indexOf(':');
+    const ns = colon > 0 ? nameOrAddress.slice(0, colon) : '';
+    const name = colon > 0 ? nameOrAddress.slice(colon + 1) : nameOrAddress;
+    const byName = TOOL_KINDS[name];
+    if (byName)
+        return byName;
+    if (ns)
+        return NAMESPACE_KINDS[ns] ?? 'other';
+    return 'other';
+}
+/**
+ * Render one agent-loop event as an ACP `session/update`, or null when the event
+ * has no ACP equivalent worth sending.
+ *
+ * Returning null rather than a placeholder matters: our loop emits far more than
+ * ACP models (budget breaches, heals, policy notes, usage), and forwarding those
+ * as text would clutter a client's transcript with our internals. A client that
+ * wants them can read the run's RUN.jsonl.
+ */
+export function eventToSessionUpdate(ev) {
+    switch (ev.type) {
+        case 'assistant-delta':
+            return { sessionUpdate: 'agent_message_chunk', content: { type: 'text', text: ev.delta } };
+        case 'tool-call':
+            return {
+                sessionUpdate: 'tool_call',
+                toolCallId: ev.id,
+                title: ev.name,
+                kind: kindForTool(ev.name),
+                status: 'in_progress',
+                rawInput: ev.args,
+            };
+        case 'tool-result':
+            return {
+                sessionUpdate: 'tool_call_update',
+                toolCallId: ev.id,
+                status: ev.isError ? 'failed' : 'completed',
+                rawOutput: ev.result,
+            };
+        case 'error':
+            return { sessionUpdate: 'agent_message_chunk', content: { type: 'text', text: `Error: ${ev.message}` } };
+        default:
+            // 'assistant' duplicates the deltas already streamed; 'turn', 'usage',
+            // 'heal', 'offload', 'permission*', 'policy-violation', 'budget-*',
+            // 'artifact' and 'done' have no ACP shape. 'done' is reported as the
+            // prompt's stopReason instead, which is where ACP expects it.
+            return null;
+    }
+}
+/** Map our loop's stop reason onto ACP's. Unknown reasons report `end_turn`
+ * rather than inventing a value the client would not recognize. */
+export function stopReasonForAcp(reason) {
+    switch (reason) {
+        case 'cancelled':
+        case 'aborted':
+            return 'cancelled';
+        case 'max-turns':
+        case 'max_turns':
+            return 'max_turn_requests';
+        case 'refusal':
+            return 'refusal';
+        default:
+            return 'end_turn';
+    }
+}
+//# sourceMappingURL=agentMap.js.map

package/dist/acp/agentMap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentMap.js","sourceRoot":"","sources":["../../acp/agentMap.ts"],"names":[],"mappings":"AAmBA,4EAA4E;AAC5E,MAAM,UAAU,GAAgC;IAC9C,SAAS,EAAE,MAAM;IACjB,SAAS,EAAE,MAAM;IACjB,UAAU,EAAE,MAAM;IAClB,YAAY,EAAE,QAAQ;IACtB,eAAe,EAAE,QAAQ;IACzB,eAAe,EAAE,QAAQ;IACzB,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,MAAM;IACnB,YAAY,EAAE,MAAM;IACpB,WAAW,EAAE,QAAQ;IACrB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,OAAO;IACnB,cAAc,EAAE,OAAO;IACvB,UAAU,EAAE,OAAO;IACnB,QAAQ,EAAE,OAAO;CAClB,CAAC;AAEF;+CAC+C;AAC/C,MAAM,eAAe,GAAgC;IACnD,EAAE,EAAE,MAAM;IACV,KAAK,EAAE,SAAS;IAChB,GAAG,EAAE,OAAO;IACZ,MAAM,EAAE,OAAO;IACf,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,OAAO;IACf,GAAG,EAAE,OAAO;IACZ,KAAK,EAAE,OAAO;CACf,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CAAC,aAAqB;IAC/C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IACxE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,EAAE;QAAE,OAAO,eAAe,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC;IAC9C,OAAO,OAAO,CAAC;AACjB,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAc;IACjD,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,iBAAiB;YACpB,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7F,KAAK,WAAW;YACd,OAAO;gBACL,aAAa,EAAE,WAAW;gBAC1B,UAAU,EAAE,EAAE,CAAC,EAAE;gBACjB,KAAK,EAAE,EAAE,CAAC,IAAI;gBACd,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,aAAa;gBACrB,QAAQ,EAAE,EAAE,CAAC,IAAI;aAClB,CAAC;QACJ,KAAK,aAAa;YAChB,OAAO;gBACL,aAAa,EAAE,kBAAkB;gBACjC,UAAU,EAAE,EAAE,CAAC,EAAE;gBACjB,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW;gBAC3C,SAAS,EAAE,EAAE,CAAC,MAAM;aACrB,CAAC;QACJ,KAAK,OAAO;YACV,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC;QAC3G;YACE,uEAAuE;YACvE,oEAAoE;YACpE,qEAAqE;YACrE,8DAA8D;YAC9D,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;mEACmE;AACnE,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,SAAS;YACZ,OAAO,WAAW,CAAC;QACrB,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW;YACd,OAAO,mBAAmB,CAAC;QAC7B,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB;YACE,OAAO,UAAU,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/acp/index.d.ts

@@ -0,0 +1,4 @@
+export { acpToSubject, acpDisplayTitle, levelToOptionId, ACP_KIND_ADDRESSES, ALLOW_KINDS, REJECT_KINDS, type AcpPermissionAnswer, } from './policyMap';
+export { kindForTool, eventToSessionUpdate, stopReasonForAcp, type AcpSessionUpdate, } from './agentMap';
+export type { AcpToolKind, AcpToolCallLocation, AcpToolCallUpdate, AcpPermissionOption, AcpPermissionOptionKind, AcpRequestPermissionRequest, } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/acp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../acp/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,YAAY,EACZ,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,gBAAgB,GACtB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,SAAS,CAAC"}

package/dist/acp/index.js

@@ -0,0 +1,6 @@
+/* ACP module barrel — the client-side translation between the Agent Client
+ * Protocol and this harness's governance layer. Pure: no transport, no node.
+ * The wire lives in packages/sidecar/src/acp/. */
+export { acpToSubject, acpDisplayTitle, levelToOptionId, ACP_KIND_ADDRESSES, ALLOW_KINDS, REJECT_KINDS, } from './policyMap';
+export { kindForTool, eventToSessionUpdate, stopReasonForAcp, } from './agentMap';
+//# sourceMappingURL=index.js.map

package/dist/acp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../acp/index.ts"],"names":[],"mappings":"AAAA;;kDAEkD;AAClD,OAAO,EACL,YAAY,EACZ,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,WAAW,EACX,YAAY,GAEb,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,gBAAgB,GAEjB,MAAM,YAAY,CAAC"}

package/dist/acp/policyMap.d.ts

@@ -0,0 +1,55 @@
+import type { PermissionSubject } from '../guardrail/permission-service';
+import type { PermissionDecision } from '@corenel/protocol';
+import type { AcpPermissionOption, AcpPermissionOptionKind, AcpToolCallUpdate } from './types';
+/**
+ * Translate an ACP tool call into the subject our PermissionService resolves.
+ *
+ * THE INVARIANT: an unknown, absent, or unrecognized `kind` is MUTATING.
+ * ACP marks `kind` optional with a default of 'other', so an agent that does not
+ * label its calls reports nothing at all. Were that mapped to non-mutating,
+ * STANDARD_POLICY — which sets no defaultPermission and falls through to the
+ * read/write heuristic — would resolve it via `defaultForReadOnly` ('allow') and
+ * silently auto-approve a destructive call. Absence must never read as
+ * permissive.
+ *
+ * `name` is deliberately the SAME string as `address`, not the human title:
+ * PermissionService matches policy globs against a subject's address AND its
+ * name (subjectMatches), and matches session pre-approvals against the name
+ * alone (decide -> sessionAllow). Letting agent-supplied text be the name would
+ * hand an external process a second, softer path into policy matching — a title
+ * of `fs:acp_read` could satisfy a rule or a pre-approval written for the real
+ * thing. One identity, derived entirely from data we control. The human-readable
+ * title is carried separately by acpDisplayTitle() for the approval prompt.
+ */
+export declare function acpToSubject(call: AcpToolCallUpdate): PermissionSubject;
+/** The human-facing label for an approval prompt. Raw agent text — safe to
+ * DISPLAY, never safe to match policy against (see acpToSubject). */
+export declare function acpDisplayTitle(call: AcpToolCallUpdate): string;
+/** Our answer, expressed in the agent's own option vocabulary. */
+export type AcpPermissionAnswer = {
+    ok: true;
+    optionId: string;
+} | {
+    ok: false;
+    reason: string;
+};
+declare const ALLOW_KINDS: AcpPermissionOptionKind[];
+declare const REJECT_KINDS: AcpPermissionOptionKind[];
+/**
+ * Turn a resolved decision into an `optionId` drawn from what the agent OFFERED.
+ * We never synthesize an id: the agent defines its own option set, and answering
+ * with an unknown id is a protocol error.
+ *
+ * FAILS CLOSED. If no acceptable option exists we return `ok: false` rather than
+ * throwing or falling back to something permissive — an agent that offers only
+ * allow-shaped options must not thereby win a denial. The caller reports the
+ * refusal and cancels the call.
+ */
+export declare function levelToOptionId(decision: PermissionDecision, options: readonly AcpPermissionOption[], opts?: {
+    sessionApproved?: boolean;
+}): AcpPermissionAnswer;
+/** Exported for tests and for a capabilities UI that wants to show what a
+ * proxied agent can address. */
+export declare const ACP_KIND_ADDRESSES: readonly string[];
+export { ALLOW_KINDS, REJECT_KINDS };
+//# sourceMappingURL=policyMap.d.ts.map

package/dist/acp/policyMap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policyMap.d.ts","sourceRoot":"","sources":["../../acp/policyMap.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EACvB,iBAAiB,EAElB,MAAM,SAAS,CAAC;AAiDjB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,iBAAiB,GAAG,iBAAiB,CAQvE;AAED;qEACqE;AACrE,wBAAgB,eAAe,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAI/D;AAED,kEAAkE;AAClE,MAAM,MAAM,mBAAmB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,QAAA,MAAM,WAAW,EAAE,uBAAuB,EAAmC,CAAC;AAC9E,QAAA,MAAM,YAAY,EAAE,uBAAuB,EAAqC,CAAC;AAajF;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,SAAS,mBAAmB,EAAE,EACvC,IAAI,GAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAO,GACvC,mBAAmB,CAarB;AAED;gCACgC;AAChC,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAEJ,CAAC;AAE7C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC"}

package/dist/acp/policyMap.js

@@ -0,0 +1,121 @@
+/** How each ACP kind addresses into our policy namespaces, and whether it has
+ * side effects. Anything NOT in this table is mutating — see toSafety(). */
+const KIND_MAP = {
+    read: { ns: 'fs', mutates: false },
+    search: { ns: 'fs', mutates: false },
+    think: { ns: 'agent', mutates: false },
+    edit: { ns: 'fs', mutates: true },
+    delete: { ns: 'fs', mutates: true },
+    move: { ns: 'fs', mutates: true },
+    execute: { ns: 'shell', mutates: true },
+    fetch: { ns: 'web', mutates: true },
+    other: { ns: 'other', mutates: true },
+};
+/** Upper bound on the slug derived from an agent-supplied title. Long enough to
+ * stay readable in a policy file, short enough that a hostile title cannot bloat
+ * an address. */
+const SLUG_MAX = 48;
+/**
+ * Reduce untrusted agent-supplied text to a policy-safe token.
+ *
+ * SECURITY. `title` is free text from an external process, and it reaches a
+ * policy ADDRESS. Without this, a title of `fs:read` would forge an address in a
+ * privileged namespace, and a title containing `*` would inject a glob wildcard
+ * into the very expression being matched. Everything outside [a-z0-9_] is
+ * collapsed, so neither `:` nor `*` can survive.
+ */
+function slugify(raw) {
+    const slug = (raw ?? '')
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '_')
+        .replace(/^_+|_+$/g, '')
+        .slice(0, SLUG_MAX)
+        .replace(/_+$/g, '');
+    return slug || 'unknown';
+}
+/** Resolve a wire `kind` to its table entry. An absent, unrecognized, or
+ * newer-protocol kind lands on `other`, which is MUTATING. */
+function toSafety(kind) {
+    if (kind && Object.prototype.hasOwnProperty.call(KIND_MAP, kind)) {
+        return KIND_MAP[kind];
+    }
+    return KIND_MAP.other;
+}
+/**
+ * Translate an ACP tool call into the subject our PermissionService resolves.
+ *
+ * THE INVARIANT: an unknown, absent, or unrecognized `kind` is MUTATING.
+ * ACP marks `kind` optional with a default of 'other', so an agent that does not
+ * label its calls reports nothing at all. Were that mapped to non-mutating,
+ * STANDARD_POLICY — which sets no defaultPermission and falls through to the
+ * read/write heuristic — would resolve it via `defaultForReadOnly` ('allow') and
+ * silently auto-approve a destructive call. Absence must never read as
+ * permissive.
+ *
+ * `name` is deliberately the SAME string as `address`, not the human title:
+ * PermissionService matches policy globs against a subject's address AND its
+ * name (subjectMatches), and matches session pre-approvals against the name
+ * alone (decide -> sessionAllow). Letting agent-supplied text be the name would
+ * hand an external process a second, softer path into policy matching — a title
+ * of `fs:acp_read` could satisfy a rule or a pre-approval written for the real
+ * thing. One identity, derived entirely from data we control. The human-readable
+ * title is carried separately by acpDisplayTitle() for the approval prompt.
+ */
+export function acpToSubject(call) {
+    const { ns, mutates } = toSafety(call.kind);
+    // A recognized kind addresses by that kind (fs:acp_edit) so one policy rule
+    // covers every edit the agent makes. An unrecognized one has no such handle,
+    // so it falls back to the sanitized title to stay at least distinguishable.
+    const leaf = ns === 'other' ? slugify(call.title) : slugify(call.kind);
+    const address = `${ns}:acp_${leaf}`;
+    return { name: address, address, mutates };
+}
+/** The human-facing label for an approval prompt. Raw agent text — safe to
+ * DISPLAY, never safe to match policy against (see acpToSubject). */
+export function acpDisplayTitle(call) {
+    const t = (call.title ?? '').trim();
+    if (t)
+        return t;
+    return call.kind ? `${call.kind} (untitled)` : 'untitled tool call';
+}
+const ALLOW_KINDS = ['allow_once', 'allow_always'];
+const REJECT_KINDS = ['reject_once', 'reject_always'];
+function pick(options, preferred) {
+    for (const kind of preferred) {
+        const hit = options.find((o) => o.kind === kind);
+        if (hit)
+            return hit;
+    }
+    return undefined;
+}
+/**
+ * Turn a resolved decision into an `optionId` drawn from what the agent OFFERED.
+ * We never synthesize an id: the agent defines its own option set, and answering
+ * with an unknown id is a protocol error.
+ *
+ * FAILS CLOSED. If no acceptable option exists we return `ok: false` rather than
+ * throwing or falling back to something permissive — an agent that offers only
+ * allow-shaped options must not thereby win a denial. The caller reports the
+ * refusal and cancels the call.
+ */
+export function levelToOptionId(decision, options, opts = {}) {
+    if (decision === 'allow') {
+        // A session pre-approval is durable on our side, so prefer the durable
+        // option when the agent offers one — it stops the agent re-asking for
+        // something the user already blanket-approved.
+        const order = opts.sessionApproved
+            ? ['allow_always', 'allow_once']
+            : ['allow_once', 'allow_always'];
+        const hit = pick(options, order);
+        return hit ? { ok: true, optionId: hit.optionId } : { ok: false, reason: 'agent offered no allow option' };
+    }
+    const hit = pick(options, REJECT_KINDS);
+    return hit ? { ok: true, optionId: hit.optionId } : { ok: false, reason: 'agent offered no reject option' };
+}
+/** Exported for tests and for a capabilities UI that wants to show what a
+ * proxied agent can address. */
+export const ACP_KIND_ADDRESSES = Object.entries(KIND_MAP)
+    .filter(([kind]) => kind !== 'other')
+    .map(([kind, v]) => `${v.ns}:acp_${kind}`);
+export { ALLOW_KINDS, REJECT_KINDS };
+//# sourceMappingURL=policyMap.js.map

package/dist/acp/policyMap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policyMap.js","sourceRoot":"","sources":["../../acp/policyMap.ts"],"names":[],"mappings":"AAuBA;4EAC4E;AAC5E,MAAM,QAAQ,GAA0D;IACtE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;IAClC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;IACpC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;IACtC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IACjC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IACnC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IACjC,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;IACvC,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;IACnC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;CACtC,CAAC;AAEF;;iBAEiB;AACjB,MAAM,QAAQ,GAAG,EAAE,CAAC;AAEpB;;;;;;;;GAQG;AACH,SAAS,OAAO,CAAC,GAAuB;IACtC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;SACrB,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;SAClB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvB,OAAO,IAAI,IAAI,SAAS,CAAC;AAC3B,CAAC;AAED;8DAC8D;AAC9D,SAAS,QAAQ,CAAC,IAAwB;IACxC,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;QACjE,OAAO,QAAQ,CAAC,IAAmB,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,YAAY,CAAC,IAAuB;IAClD,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,IAAI,GAAG,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;IACpC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC7C,CAAC;AAED;qEACqE;AACrE,MAAM,UAAU,eAAe,CAAC,IAAuB;IACrD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,oBAAoB,CAAC;AACtE,CAAC;AAOD,MAAM,WAAW,GAA8B,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AAC9E,MAAM,YAAY,GAA8B,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;AAEjF,SAAS,IAAI,CACX,OAAuC,EACvC,SAA6C;IAE7C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACjD,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;IACtB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,QAA4B,EAC5B,OAAuC,EACvC,OAAsC,EAAE;IAExC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,uEAAuE;QACvE,sEAAsE;QACtE,+CAA+C;QAC/C,MAAM,KAAK,GAA8B,IAAI,CAAC,eAAe;YAC3D,CAAC,CAAC,CAAC,cAAc,EAAE,YAAY,CAAC;YAChC,CAAC,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IAC7G,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;AAC9G,CAAC;AAED;gCACgC;AAChC,MAAM,CAAC,MAAM,kBAAkB,GAAsB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;KAC1E,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC;KACpC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;AAE7C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC"}

package/dist/acp/types.d.ts

@@ -0,0 +1,41 @@
+/** How the agent categorizes a tool call. A UI hint in ACP, and our only signal
+ * for whether the call has side effects. OPTIONAL on the wire, defaulting to
+ * 'other' — see the ACP_KINDS note in policyMap.ts. */
+export type AcpToolKind = 'read' | 'edit' | 'delete' | 'move' | 'search' | 'execute' | 'think' | 'fetch' | 'other';
+/** Where a tool call acts. Present only when the agent chooses to report it. */
+export interface AcpToolCallLocation {
+    path: string;
+    line?: number;
+}
+/** The tool-call description carried by a permission request. ACP models this as
+ * a partial update, so everything except the id may be absent. */
+export interface AcpToolCallUpdate {
+    toolCallId?: string;
+    /** Human-readable description of what the tool is doing. UNTRUSTED text from
+     * an external process — never interpolate it into an address without
+     * sanitizing (policyMap.ts slugifies it). */
+    title?: string;
+    kind?: AcpToolKind;
+    status?: 'pending' | 'in_progress' | 'completed' | 'failed';
+    locations?: AcpToolCallLocation[];
+    /** The original parameters the agent passed to its tool. Opaque to us; passed
+     * through to the permission prompt so a human sees what they are approving. */
+    rawInput?: unknown;
+}
+/** Scope of a permission answer, as offered by the agent. */
+export type AcpPermissionOptionKind = 'allow_once' | 'allow_always' | 'reject_once' | 'reject_always';
+/** One choice the agent is willing to accept back. We must answer with an
+ * `optionId` drawn from the offered list — never a synthesized one. */
+export interface AcpPermissionOption {
+    optionId: string;
+    name: string;
+    kind: AcpPermissionOptionKind;
+}
+/** `session/request_permission` — an agent asking the CLIENT to authorize a tool
+ * call. We are the client, so this is where our Policy is consulted. */
+export interface AcpRequestPermissionRequest {
+    sessionId: string;
+    toolCall: AcpToolCallUpdate;
+    options: AcpPermissionOption[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/acp/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../acp/types.ts"],"names":[],"mappings":"AAaA;;uDAEuD;AACvD,MAAM,MAAM,WAAW,GACnB,MAAM,GACN,MAAM,GACN,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,SAAS,GACT,OAAO,GACP,OAAO,GACP,OAAO,CAAC;AAEZ,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;kEACkE;AAClE,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;iDAE6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,MAAM,CAAC,EAAE,SAAS,GAAG,aAAa,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC5D,SAAS,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAClC;mFAC+E;IAC/E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,6DAA6D;AAC7D,MAAM,MAAM,uBAAuB,GAC/B,YAAY,GACZ,cAAc,GACd,aAAa,GACb,eAAe,CAAC;AAEpB;uEACuE;AACvE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,uBAAuB,CAAC;CAC/B;AAED;wEACwE;AACxE,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,EAAE,mBAAmB,EAAE,CAAC;CAChC"}

package/dist/acp/types.js

@@ -0,0 +1,14 @@
+/* The subset of the Agent Client Protocol wire format we consume as an ACP
+ * CLIENT (driving an external agent such as Claude Code).
+ *
+ * Hand-written rather than generated from the published schema.json: we touch a
+ * handful of fields on two messages, and a generated multi-thousand-line mirror
+ * would be a maintenance liability that hides which parts we actually depend on.
+ *
+ * Source: agentclientprotocol.com/protocol/{tool-calls,schema}. Every field the
+ * spec marks optional is optional here too — that faithfulness is load-bearing,
+ * because `kind` being absent is exactly the case the policy mapping must fail
+ * closed on (see policyMap.ts).
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/acp/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../acp/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/api/backend.d.ts

@@ -0,0 +1,39 @@
+import { CorenelApiClient } from './client';
+/** Capabilities a backend may advertise. Strings, not an enum: an older client
+ * must be able to read a newer backend's list without choking on a name it does
+ * not know. */
+export declare const CAP_SESSIONS = "sessions";
+export declare const CAP_BLOBS = "blobs";
+export declare const CAP_SNAPSHOTS = "snapshots";
+export interface BackendConfig {
+    /** e.g. https://api.corenel.ai/api/v1 — trailing slashes are trimmed. */
+    baseUrl: string;
+    getToken(): Promise<string> | string;
+    /** Injected so a test needs no network; defaults to the ambient fetch. */
+    fetch?: typeof fetch;
+}
+export interface Backend {
+    readonly baseUrl: string;
+    readonly client: CorenelApiClient;
+    /** What the last probe found. Empty before probing, and empty is honest: we
+     * have not asked, so we do not know. */
+    capabilities(): readonly string[];
+    supports(capability: string): boolean;
+    /** Ask the backend what it is. Safe to call more than once. */
+    probe(): Promise<readonly string[]>;
+}
+/**
+ * Point at a backend, or at none.
+ *
+ * Called by a HOST — the browser app, the sidecar, a hosted runner — and by
+ * nothing else. Passing null detaches, which a config change that removes the URL
+ * must do rather than leaving the last one running.
+ */
+export declare function configureBackend(cfg: BackendConfig | null): Backend | null;
+/** The configured backend, or null when this host runs local-only. */
+export declare function backend(): Backend | null;
+/** True when a backend is attached AND says it can do this. Both halves matter:
+ * attached-but-incapable is the prompd gateway, and using it for sessions would
+ * be a 404 on every push. */
+export declare function backendSupports(capability: string): boolean;
+//# sourceMappingURL=backend.d.ts.map

package/dist/api/backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../api/backend.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,gBAAgB,EAAqB,MAAM,UAAU,CAAC;AAE/D;;eAEe;AACf,eAAO,MAAM,YAAY,aAAa,CAAC;AACvC,eAAO,MAAM,SAAS,UAAU,CAAC;AACjC,eAAO,MAAM,aAAa,cAAc,CAAC;AAEzC,MAAM,WAAW,aAAa;IAC5B,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACrC,0EAA0E;IAC1E,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC;4CACwC;IACxC,YAAY,IAAI,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IACtC,+DAA+D;IAC/D,KAAK,IAAI,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;CACrC;AAuDD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,GAAG,IAAI,CAG1E;AAED,sEAAsE;AACtE,wBAAgB,OAAO,IAAI,OAAO,GAAG,IAAI,CAExC;AAED;;6BAE6B;AAC7B,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAE3D"}

package/dist/api/backend.js

@@ -0,0 +1,126 @@
+/* THE BACKEND: one place that knows where it is and what it can do.
+ *
+ * Replaces a per-host flag with a per-host CONFIGURATION. A sidecar had grown
+ * `--api`, the browser had an env var, and the hosted runner would have grown a
+ * third — three mechanisms for one decision, which is how they drift. A host
+ * configures a backend; everything else asks this.
+ *
+ * IT ASKS THE BACKEND WHAT IT IS, rather than being told by a flag. Pointing at
+ * `api.prompd.app` and pointing at `api.corenel.ai` are not the same thing —
+ * prompd's gateway has no sessions, no blobs and no lease — and a caller should
+ * not have to be configured with that fact when the server can simply say so.
+ * `probe()` reads `/meta`; a backend that does not answer, or answers without a
+ * capability, does not get used for it.
+ *
+ * WHY A PROBE AND NOT A SECOND FLAG. A flag can be wrong. A machine pointed at
+ * the wrong backend with `--api` set would push into a 404 forever and look like
+ * a quiet session; asking removes the class of error entirely, and costs one
+ * request at startup.
+ *
+ * Absent is normal. No backend means local-only, which is the correct state for a
+ * laptop working alone and never an error to report.
+ */
+import { CorenelApiClient } from './client';
+/** Capabilities a backend may advertise. Strings, not an enum: an older client
+ * must be able to read a newer backend's list without choking on a name it does
+ * not know. */
+export const CAP_SESSIONS = 'sessions';
+export const CAP_BLOBS = 'blobs';
+export const CAP_SNAPSHOTS = 'snapshots';
+class RemoteBackend {
+    constructor(cfg) {
+        Object.defineProperty(this, "baseUrl", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "client", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "caps", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: []
+        });
+        Object.defineProperty(this, "probed", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: null
+        });
+        Object.defineProperty(this, "fetchImpl", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        this.baseUrl = cfg.baseUrl.replace(/\/+$/, '');
+        this.fetchImpl = cfg.fetch ?? ((...args) => fetch(...args));
+        const transport = {
+            fetch: this.fetchImpl,
+            baseUrl: this.baseUrl,
+            getToken: cfg.getToken,
+        };
+        this.client = new CorenelApiClient(transport);
+    }
+    capabilities() {
+        return this.caps;
+    }
+    supports(capability) {
+        return this.caps.includes(capability);
+    }
+    probe() {
+        if (this.probed)
+            return this.probed;
+        this.probed = (async () => {
+            try {
+                // Unauthenticated on purpose: "what are you" must be answerable before a
+                // credential is sorted out, or a signed-out machine could never discover
+                // that signing in would be worth it.
+                const res = await this.fetchImpl(`${this.baseUrl}/meta`);
+                if (!res.ok)
+                    return [];
+                const body = await res.json();
+                this.caps = Array.isArray(body.capabilities)
+                    ? body.capabilities.filter((c) => typeof c === 'string')
+                    : [];
+                return this.caps;
+            }
+            catch {
+                // Unreachable, not JSON, or not a corenel backend at all. All of them
+                // mean the same thing: do not use it for anything.
+                this.caps = [];
+                return this.caps;
+            }
+        })();
+        return this.probed;
+    }
+}
+let current = null;
+/**
+ * Point at a backend, or at none.
+ *
+ * Called by a HOST — the browser app, the sidecar, a hosted runner — and by
+ * nothing else. Passing null detaches, which a config change that removes the URL
+ * must do rather than leaving the last one running.
+ */
+export function configureBackend(cfg) {
+    current = cfg && cfg.baseUrl ? new RemoteBackend(cfg) : null;
+    return current;
+}
+/** The configured backend, or null when this host runs local-only. */
+export function backend() {
+    return current;
+}
+/** True when a backend is attached AND says it can do this. Both halves matter:
+ * attached-but-incapable is the prompd gateway, and using it for sessions would
+ * be a 404 on every push. */
+export function backendSupports(capability) {
+    return current?.supports(capability) ?? false;
+}
+//# sourceMappingURL=backend.js.map

package/dist/api/backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../api/backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,gBAAgB,EAAqB,MAAM,UAAU,CAAC;AAE/D;;eAEe;AACf,MAAM,CAAC,MAAM,YAAY,GAAG,UAAU,CAAC;AACvC,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAAC;AACjC,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAC;AAqBzC,MAAM,aAAa;IAOjB,YAAY,GAAkB;QANrB;;;;;WAAgB;QAChB;;;;;WAAyB;QAC1B;;;;mBAA0B,EAAE;WAAC;QAC7B;;;;mBAA4C,IAAI;WAAC;QACxC;;;;;WAAwB;QAGvC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAiB;YAC9B,KAAK,EAAE,IAAI,CAAC,SAAS;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACvB,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,QAAQ,CAAC,UAAkB;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACxB,IAAI,CAAC;gBACH,yEAAyE;gBACzE,yEAAyE;gBACzE,qCAAqC;gBACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,OAAO,CAAC,CAAC;gBACzD,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,OAAO,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAgC,CAAC;gBAC5D,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;oBAC1C,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;oBACrE,CAAC,CAAC,EAAE,CAAC;gBACP,OAAO,IAAI,CAAC,IAAI,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,sEAAsE;gBACtE,mDAAmD;gBACnD,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,IAAI,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;AAED,IAAI,OAAO,GAAmB,IAAI,CAAC;AAEnC;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAyB;IACxD,OAAO,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,OAAO;IACrB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;6BAE6B;AAC7B,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,OAAO,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC;AAChD,CAAC"}