@datasynx/agentic-crm 0.1.0

package/dist/agent-config-zPvcqu07.js

@@ -0,0 +1,14 @@
+import { z } from "zod";
+//#region src/schemas/agent-config.ts
+const AgentConfigSchema = z.object({
+	slug: z.string().min(1),
+	channel: z.enum(["telegram"]),
+	wakeOn: z.array(z.enum(["email", "calendar"])).default(["email"]),
+	createdAt: z.string(),
+	lastWake: z.string().nullable().default(null),
+	telegramChatId: z.string().optional()
+});
+//#endregion
+export { AgentConfigSchema as t };
+
+//# sourceMappingURL=agent-config-zPvcqu07.js.map

package/dist/agent-config-zPvcqu07.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-config-zPvcqu07.js","names":[],"sources":["../src/schemas/agent-config.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const AgentConfigSchema = z.object({\n  slug: z.string().min(1),\n  channel: z.enum([\"telegram\"]),\n  wakeOn: z.array(z.enum([\"email\", \"calendar\"])).default([\"email\"]),\n  createdAt: z.string(),\n  lastWake: z.string().nullable().default(null),\n  telegramChatId: z.string().optional(),\n});\n\nexport type AgentConfig = z.infer<typeof AgentConfigSchema>;\n"],"mappings":";;AAEA,MAAa,oBAAoB,EAAE,OAAO;CACxC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;CACtB,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC;CAC5B,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC;CAChE,WAAW,EAAE,OAAO;CACpB,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI;CAC5C,gBAAgB,EAAE,OAAO,EAAE,SAAS;AACtC,CAAC"}

package/dist/approvals-DpjxGHFp.js

@@ -0,0 +1,67 @@
+import path from "path";
+import fs from "fs";
+import "crypto";
+//#region src/core/approvals.ts
+function policyPath(dataDir) {
+	return path.join(dataDir, ".agentic", "policy.json");
+}
+function approvalsPath(dataDir) {
+	return path.join(dataDir, ".agentic", "approvals.json");
+}
+function loadPolicyConfig(dataDir) {
+	const p = policyPath(dataDir);
+	if (!fs.existsSync(p)) return {};
+	try {
+		return JSON.parse(fs.readFileSync(p, "utf-8"));
+	} catch {
+		return {};
+	}
+}
+function setPolicy(dataDir, tool, policy, slug) {
+	const cfg = loadPolicyConfig(dataDir);
+	if (slug) {
+		cfg.customers = cfg.customers ?? {};
+		cfg.customers[slug] = {
+			...cfg.customers[slug] ?? {},
+			[tool]: policy
+		};
+	} else cfg.tools = {
+		...cfg.tools ?? {},
+		[tool]: policy
+	};
+	const p = policyPath(dataDir);
+	fs.mkdirSync(path.dirname(p), { recursive: true });
+	fs.writeFileSync(p, JSON.stringify(cfg, null, 2), "utf-8");
+}
+function listApprovals(dataDir, status) {
+	const p = approvalsPath(dataDir);
+	if (!fs.existsSync(p)) return [];
+	try {
+		const all = JSON.parse(fs.readFileSync(p, "utf-8")).approvals;
+		const list = Array.isArray(all) ? all : [];
+		return status ? list.filter((a) => a.status === status) : list;
+	} catch {
+		return [];
+	}
+}
+function writeApprovals(dataDir, approvals) {
+	const p = approvalsPath(dataDir);
+	fs.mkdirSync(path.dirname(p), { recursive: true });
+	fs.writeFileSync(p, JSON.stringify({ approvals }, null, 2), "utf-8");
+}
+function decideApproval(dataDir, id, decision) {
+	const all = listApprovals(dataDir);
+	const idx = all.findIndex((a) => a.id === id);
+	if (idx < 0) return false;
+	all[idx] = {
+		...all[idx],
+		status: decision,
+		decidedAt: (/* @__PURE__ */ new Date()).toISOString()
+	};
+	writeApprovals(dataDir, all);
+	return true;
+}
+//#endregion
+export { decideApproval, listApprovals, setPolicy };
+
+//# sourceMappingURL=approvals-DpjxGHFp.js.map

package/dist/approvals-DpjxGHFp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals-DpjxGHFp.js","names":[],"sources":["../src/core/approvals.ts"],"sourcesContent":["import { randomBytes } from \"crypto\";\nimport fs from \"fs\";\nimport path from \"path\";\n\n/**\n * Human-in-the-loop / approval gate (domino D4 / F3). A per-tool, per-customer\n * autonomy policy (auto | approve | block) decides whether an agent action runs\n * immediately, is queued for human approval, or is blocked. The generic gate\n * wraps any write/automation action so later features get HITL for free.\n */\nexport type Policy = \"auto\" | \"approve\" | \"block\";\n\ninterface PolicyConfig {\n  default?: Policy;\n  tools?: Record<string, Policy>;\n  customers?: Record<string, Record<string, Policy>>;\n}\n\nexport interface Approval {\n  id: string;\n  tool: string;\n  slug?: string;\n  payload: unknown;\n  status: \"pending\" | \"approved\" | \"rejected\";\n  requestedAt: string;\n  decidedAt?: string;\n}\n\nfunction policyPath(dataDir: string): string {\n  return path.join(dataDir, \".agentic\", \"policy.json\");\n}\nfunction approvalsPath(dataDir: string): string {\n  return path.join(dataDir, \".agentic\", \"approvals.json\");\n}\n\nfunction loadPolicyConfig(dataDir: string): PolicyConfig {\n  const p = policyPath(dataDir);\n  if (!fs.existsSync(p)) return {};\n  try {\n    return JSON.parse(fs.readFileSync(p, \"utf-8\") as string) as PolicyConfig;\n  } catch {\n    return {};\n  }\n}\n\n/** Resolve the effective policy: customer-specific → global tool → default (auto). */\nexport function getPolicy(dataDir: string, tool: string, slug?: string): Policy {\n  const cfg = loadPolicyConfig(dataDir);\n  if (slug && cfg.customers?.[slug]?.[tool]) return cfg.customers[slug]![tool]!;\n  if (cfg.tools?.[tool]) return cfg.tools[tool]!;\n  return cfg.default ?? \"auto\";\n}\n\nexport function setPolicy(dataDir: string, tool: string, policy: Policy, slug?: string): void {\n  const cfg = loadPolicyConfig(dataDir);\n  if (slug) {\n    cfg.customers = cfg.customers ?? {};\n    cfg.customers[slug] = { ...(cfg.customers[slug] ?? {}), [tool]: policy };\n  } else {\n    cfg.tools = { ...(cfg.tools ?? {}), [tool]: policy };\n  }\n  const p = policyPath(dataDir);\n  fs.mkdirSync(path.dirname(p), { recursive: true });\n  fs.writeFileSync(p, JSON.stringify(cfg, null, 2), \"utf-8\");\n}\n\nexport function listApprovals(dataDir: string, status?: Approval[\"status\"]): Approval[] {\n  const p = approvalsPath(dataDir);\n  if (!fs.existsSync(p)) return [];\n  try {\n    const all = (JSON.parse(fs.readFileSync(p, \"utf-8\") as string) as { approvals?: Approval[] })\n      .approvals;\n    const list = Array.isArray(all) ? all : [];\n    return status ? list.filter((a) => a.status === status) : list;\n  } catch {\n    return [];\n  }\n}\n\nfunction writeApprovals(dataDir: string, approvals: Approval[]): void {\n  const p = approvalsPath(dataDir);\n  fs.mkdirSync(path.dirname(p), { recursive: true });\n  fs.writeFileSync(p, JSON.stringify({ approvals }, null, 2), \"utf-8\");\n}\n\nexport function requestApproval(\n  dataDir: string,\n  req: { tool: string; slug?: string; payload: unknown }\n): Approval {\n  const approval: Approval = {\n    id: `apr_${randomBytes(5).toString(\"hex\")}`,\n    tool: req.tool,\n    ...(req.slug ? { slug: req.slug } : {}),\n    payload: req.payload,\n    status: \"pending\",\n    requestedAt: new Date().toISOString(),\n  };\n  writeApprovals(dataDir, [...listApprovals(dataDir), approval]);\n  return approval;\n}\n\nexport function decideApproval(\n  dataDir: string,\n  id: string,\n  decision: \"approved\" | \"rejected\"\n): boolean {\n  const all = listApprovals(dataDir);\n  const idx = all.findIndex((a) => a.id === id);\n  if (idx < 0) return false;\n  all[idx] = { ...all[idx]!, status: decision, decidedAt: new Date().toISOString() };\n  writeApprovals(dataDir, all);\n  return true;\n}\n\nexport interface GateResult<T> {\n  status: \"executed\" | \"pending\" | \"blocked\";\n  result?: T;\n  approvalId?: string;\n}\n\n/** Gate an action by the effective policy: run, queue for approval, or block. */\nexport async function gateAction<T>(\n  dataDir: string,\n  action: { tool: string; slug?: string; payload: unknown },\n  execute: () => T | Promise<T>\n): Promise<GateResult<T>> {\n  const policy = getPolicy(dataDir, action.tool, action.slug);\n  if (policy === \"block\") return { status: \"blocked\" };\n  if (policy === \"approve\") {\n    const approval = requestApproval(dataDir, action);\n    return { status: \"pending\", approvalId: approval.id };\n  }\n  return { status: \"executed\", result: await execute() };\n}\n"],"mappings":";;;;AA4BA,SAAS,WAAW,SAAyB;CAC3C,OAAO,KAAK,KAAK,SAAS,YAAY,aAAa;AACrD;AACA,SAAS,cAAc,SAAyB;CAC9C,OAAO,KAAK,KAAK,SAAS,YAAY,gBAAgB;AACxD;AAEA,SAAS,iBAAiB,SAA+B;CACvD,MAAM,IAAI,WAAW,OAAO;CAC5B,IAAI,CAAC,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC;CAC/B,IAAI;EACF,OAAO,KAAK,MAAM,GAAG,aAAa,GAAG,OAAO,CAAW;CACzD,QAAQ;EACN,OAAO,CAAC;CACV;AACF;AAUA,SAAgB,UAAU,SAAiB,MAAc,QAAgB,MAAqB;CAC5F,MAAM,MAAM,iBAAiB,OAAO;CACpC,IAAI,MAAM;EACR,IAAI,YAAY,IAAI,aAAa,CAAC;EAClC,IAAI,UAAU,QAAQ;GAAE,GAAI,IAAI,UAAU,SAAS,CAAC;IAAK,OAAO;EAAO;CACzE,OACE,IAAI,QAAQ;EAAE,GAAI,IAAI,SAAS,CAAC;GAAK,OAAO;CAAO;CAErD,MAAM,IAAI,WAAW,OAAO;CAC5B,GAAG,UAAU,KAAK,QAAQ,CAAC,GAAG,EAAE,WAAW,KAAK,CAAC;CACjD,GAAG,cAAc,GAAG,KAAK,UAAU,KAAK,MAAM,CAAC,GAAG,OAAO;AAC3D;AAEA,SAAgB,cAAc,SAAiB,QAAyC;CACtF,MAAM,IAAI,cAAc,OAAO;CAC/B,IAAI,CAAC,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC;CAC/B,IAAI;EACF,MAAM,MAAO,KAAK,MAAM,GAAG,aAAa,GAAG,OAAO,CAAW,EAC1D;EACH,MAAM,OAAO,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC;EACzC,OAAO,SAAS,KAAK,QAAQ,MAAM,EAAE,WAAW,MAAM,IAAI;CAC5D,QAAQ;EACN,OAAO,CAAC;CACV;AACF;AAEA,SAAS,eAAe,SAAiB,WAA6B;CACpE,MAAM,IAAI,cAAc,OAAO;CAC/B,GAAG,UAAU,KAAK,QAAQ,CAAC,GAAG,EAAE,WAAW,KAAK,CAAC;CACjD,GAAG,cAAc,GAAG,KAAK,UAAU,EAAE,UAAU,GAAG,MAAM,CAAC,GAAG,OAAO;AACrE;AAkBA,SAAgB,eACd,SACA,IACA,UACS;CACT,MAAM,MAAM,cAAc,OAAO;CACjC,MAAM,MAAM,IAAI,WAAW,MAAM,EAAE,OAAO,EAAE;CAC5C,IAAI,MAAM,GAAG,OAAO;CACpB,IAAI,OAAO;EAAE,GAAG,IAAI;EAAO,QAAQ;EAAU,4BAAW,IAAI,KAAK,GAAE,YAAY;CAAE;CACjF,eAAe,SAAS,GAAG;CAC3B,OAAO;AACT"}

package/dist/ask-CID3jnuL.js

@@ -0,0 +1,52 @@
+import { r as readInteractions } from "./interactions-writer-SLHnoEeE.js";
+import { t as readPipeline } from "./pipeline-writer-BvVquKIe.js";
+import { t as hybridSearch } from "./hybrid-search-BmHttLrR.js";
+import { n as loadMemories } from "./memory-Bb6ky3kb.js";
+import { r as loadSops } from "./sop-Vp0UPWFW.js";
+//#region src/core/ask.ts
+async function gatherCorpus(dataDir, slug) {
+	const docs = [];
+	for (const m of loadMemories(dataDir, slug)) docs.push({
+		id: `mem:${m.id}`,
+		text: m.text
+	});
+	for (const s of loadSops(dataDir, slug)) docs.push({
+		id: `sop:${s.id}`,
+		text: `${s.title} ${s.triggers.join(" ")} ${s.body}`
+	});
+	if (slug) {
+		(await readInteractions(dataDir, slug).catch(() => "")).split(/(?=^## )/m).map((e) => e.trim()).filter((e) => e && !e.startsWith("# ")).forEach((e, i) => docs.push({
+			id: `int:${slug}:${i}`,
+			text: e
+		}));
+		const deals = await readPipeline(dataDir, slug).catch(() => []);
+		for (const d of deals) docs.push({
+			id: `deal:${d.name}`,
+			text: `${d.name} stage ${d.stage} value ${d.value ?? ""} ${d.notes ?? ""}`
+		});
+	}
+	return docs;
+}
+async function askCrm(dataDir, question, slug) {
+	const corpus = await gatherCorpus(dataDir, slug);
+	const ranked = hybridSearch(question, corpus, { limit: 6 });
+	const byId = new Map(corpus.map((d) => [d.id, d]));
+	const sources = ranked.map((r) => byId.get(r.id)).filter(Boolean);
+	if (sources.length === 0) return { sources: [] };
+	try {
+		const { callLlm } = await import("./llm-DEjWcqmW.js");
+		return {
+			answer: await callLlm(`Answer the question using ONLY the context. Cite snippet numbers. If unknown, say so.\n\nQuestion: ${question}\n\nContext:\n${sources.map((s, i) => `[${i + 1}] ${s.text}`).join("\n")}`, {
+				tool: "ask_crm",
+				...slug ? { slug } : {}
+			}),
+			sources
+		};
+	} catch {
+		return { sources };
+	}
+}
+//#endregion
+export { askCrm };
+
+//# sourceMappingURL=ask-CID3jnuL.js.map

package/dist/ask-CID3jnuL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask-CID3jnuL.js","names":[],"sources":["../src/core/ask.ts"],"sourcesContent":["import { hybridSearch, type HybridDoc } from \"./hybrid-search.js\";\nimport { loadMemories } from \"./memory.js\";\nimport { loadSops } from \"./sop.js\";\nimport { readInteractions } from \"../fs/interactions-writer.js\";\nimport { readPipeline } from \"../fs/pipeline-writer.js\";\n\n/**\n * Ask-your-CRM (domino D10 / C2): natural-language Q&A over CRM data. Gathers a\n * corpus (interactions, pipeline, memories, SOPs), retrieves relevant snippets\n * via hybrid search, and — when an LLM is available — synthesizes a grounded\n * answer. Without an LLM it returns the ranked sources (still useful).\n */\nexport interface AskResult {\n  answer?: string;\n  sources: Array<{ id: string; text: string }>;\n}\n\nexport async function gatherCorpus(dataDir: string, slug?: string): Promise<HybridDoc[]> {\n  const docs: HybridDoc[] = [];\n\n  for (const m of loadMemories(dataDir, slug)) docs.push({ id: `mem:${m.id}`, text: m.text });\n  for (const s of loadSops(dataDir, slug))\n    docs.push({ id: `sop:${s.id}`, text: `${s.title} ${s.triggers.join(\" \")} ${s.body}` });\n\n  if (slug) {\n    const interactions = await readInteractions(dataDir, slug).catch(() => \"\");\n    interactions\n      .split(/(?=^## )/m)\n      .map((e) => e.trim())\n      .filter((e) => e && !e.startsWith(\"# \"))\n      .forEach((e, i) => docs.push({ id: `int:${slug}:${i}`, text: e }));\n\n    const deals = await readPipeline(dataDir, slug).catch(() => []);\n    for (const d of deals)\n      docs.push({\n        id: `deal:${d.name}`,\n        text: `${d.name} stage ${d.stage} value ${d.value ?? \"\"} ${d.notes ?? \"\"}`,\n      });\n  }\n\n  return docs;\n}\n\nexport async function askCrm(dataDir: string, question: string, slug?: string): Promise<AskResult> {\n  const corpus = await gatherCorpus(dataDir, slug);\n  const ranked = hybridSearch(question, corpus, { limit: 6 });\n  const byId = new Map(corpus.map((d) => [d.id, d]));\n  const sources = ranked.map((r) => byId.get(r.id)!).filter(Boolean);\n\n  if (sources.length === 0) return { sources: [] };\n\n  try {\n    const { callLlm } = await import(\"./llm.js\");\n    const context = sources.map((s, i) => `[${i + 1}] ${s.text}`).join(\"\\n\");\n    const answer = await callLlm(\n      `Answer the question using ONLY the context. Cite snippet numbers. If unknown, say so.\\n\\n` +\n        `Question: ${question}\\n\\nContext:\\n${context}`,\n      { tool: \"ask_crm\", ...(slug ? { slug } : {}) }\n    );\n    return { answer, sources };\n  } catch {\n    return { sources };\n  }\n}\n"],"mappings":";;;;;;AAiBA,eAAsB,aAAa,SAAiB,MAAqC;CACvF,MAAM,OAAoB,CAAC;CAE3B,KAAK,MAAM,KAAK,aAAa,SAAS,IAAI,GAAG,KAAK,KAAK;EAAE,IAAI,OAAO,EAAE;EAAM,MAAM,EAAE;CAAK,CAAC;CAC1F,KAAK,MAAM,KAAK,SAAS,SAAS,IAAI,GACpC,KAAK,KAAK;EAAE,IAAI,OAAO,EAAE;EAAM,MAAM,GAAG,EAAE,MAAM,GAAG,EAAE,SAAS,KAAK,GAAG,EAAE,GAAG,EAAE;CAAO,CAAC;CAEvF,IAAI,MAAM;EAER,CAAA,MAD2B,iBAAiB,SAAS,IAAI,EAAE,YAAY,EAAE,GAEtE,MAAM,WAAW,EACjB,KAAK,MAAM,EAAE,KAAK,CAAC,EACnB,QAAQ,MAAM,KAAK,CAAC,EAAE,WAAW,IAAI,CAAC,EACtC,SAAS,GAAG,MAAM,KAAK,KAAK;GAAE,IAAI,OAAO,KAAK,GAAG;GAAK,MAAM;EAAE,CAAC,CAAC;EAEnE,MAAM,QAAQ,MAAM,aAAa,SAAS,IAAI,EAAE,YAAY,CAAC,CAAC;EAC9D,KAAK,MAAM,KAAK,OACd,KAAK,KAAK;GACR,IAAI,QAAQ,EAAE;GACd,MAAM,GAAG,EAAE,KAAK,SAAS,EAAE,MAAM,SAAS,EAAE,SAAS,GAAG,GAAG,EAAE,SAAS;EACxE,CAAC;CACL;CAEA,OAAO;AACT;AAEA,eAAsB,OAAO,SAAiB,UAAkB,MAAmC;CACjG,MAAM,SAAS,MAAM,aAAa,SAAS,IAAI;CAC/C,MAAM,SAAS,aAAa,UAAU,QAAQ,EAAE,OAAO,EAAE,CAAC;CAC1D,MAAM,OAAO,IAAI,IAAI,OAAO,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;CACjD,MAAM,UAAU,OAAO,KAAK,MAAM,KAAK,IAAI,EAAE,EAAE,CAAE,EAAE,OAAO,OAAO;CAEjE,IAAI,QAAQ,WAAW,GAAG,OAAO,EAAE,SAAS,CAAC,EAAE;CAE/C,IAAI;EACF,MAAM,EAAE,YAAY,MAAM,OAAO;EAOjC,OAAO;GAAE,QAAA,MALY,QACnB,sGACe,SAAS,gBAHV,QAAQ,KAAK,GAAG,MAAM,IAAI,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,IAGnB,KAC9C;IAAE,MAAM;IAAW,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;GAAG,CAC/C;GACiB;EAAQ;CAC3B,QAAQ;EACN,OAAO,EAAE,QAAQ;CACnB;AACF"}

package/dist/audit-log-DNMY9mUZ.js

@@ -0,0 +1,49 @@
+import path from "path";
+import fs from "fs";
+//#region src/fs/audit-log.ts
+const AUDIT_LOG_PATH = ".agentic/audit.log";
+function getActor() {
+	const actor = process.env["DXCRM_ACTOR"];
+	return actor && actor.trim().length > 0 ? actor.trim() : "system";
+}
+function writeAuditEntry(dataDir, entry) {
+	const logPath = path.join(dataDir, AUDIT_LOG_PATH);
+	const logDir = path.dirname(logPath);
+	if (!fs.existsSync(logDir)) fs.mkdirSync(logDir, { recursive: true });
+	const truncatedSummary = entry.summary.slice(0, 120);
+	const line = `${entry.timestamp} | ${entry.actor} | ${entry.tool} | ${entry.slug} | ${truncatedSummary}\n`;
+	fs.appendFileSync(logPath, line, "utf-8");
+}
+function readAuditLog(dataDir) {
+	const logPath = path.join(dataDir, AUDIT_LOG_PATH);
+	if (!fs.existsSync(logPath)) return [];
+	const lines = fs.readFileSync(logPath, "utf-8").split("\n");
+	const entries = [];
+	for (const line of lines) {
+		const trimmed = line.trim();
+		if (!trimmed) continue;
+		const parts = trimmed.split(" | ");
+		if (parts.length < 5) continue;
+		const [timestamp, actor, tool, slug, ...summaryParts] = parts;
+		const summary = summaryParts.join(" | ");
+		if (timestamp && actor && tool && slug) entries.push({
+			timestamp,
+			actor,
+			tool,
+			slug,
+			summary: summary ?? ""
+		});
+	}
+	return entries;
+}
+function filterAuditLog(entries, opts) {
+	let filtered = entries;
+	if (opts.slug !== void 0) filtered = filtered.filter((e) => e.slug === opts.slug);
+	if (opts.actor !== void 0) filtered = filtered.filter((e) => e.actor === opts.actor);
+	if (opts.limit !== void 0) filtered = filtered.slice(-opts.limit);
+	return filtered;
+}
+//#endregion
+export { writeAuditEntry as i, getActor as n, readAuditLog as r, filterAuditLog as t };
+
+//# sourceMappingURL=audit-log-DNMY9mUZ.js.map

package/dist/audit-log-DNMY9mUZ.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log-DNMY9mUZ.js","names":[],"sources":["../src/fs/audit-log.ts"],"sourcesContent":["import fs from \"fs\";\nimport path from \"path\";\n\nexport interface AuditEntry {\n  timestamp: string; // ISO 8601\n  actor: string; // DXCRM_ACTOR env var, or \"system\"\n  tool: string; // \"log_interaction\" | \"update_deal\" | \"update_customer_facts\" | etc.\n  slug: string; // customer slug\n  summary: string; // short description (first 120 chars of summary/deal name)\n}\n\n// File format (one line per entry, append-only):\n// 2026-06-01T09:14:00Z | alice | log_interaction | acme-corp | Called about Q3 renewal...\n\nconst AUDIT_LOG_PATH = \".agentic/audit.log\";\n\nexport function getActor(): string {\n  const actor = process.env[\"DXCRM_ACTOR\"];\n  return actor && actor.trim().length > 0 ? actor.trim() : \"system\";\n}\n\nexport function writeAuditEntry(dataDir: string, entry: AuditEntry): void {\n  const logPath = path.join(dataDir, AUDIT_LOG_PATH);\n  const logDir = path.dirname(logPath);\n\n  if (!fs.existsSync(logDir)) {\n    fs.mkdirSync(logDir, { recursive: true });\n  }\n\n  const truncatedSummary = entry.summary.slice(0, 120);\n  const line = `${entry.timestamp} | ${entry.actor} | ${entry.tool} | ${entry.slug} | ${truncatedSummary}\\n`;\n\n  fs.appendFileSync(logPath, line, \"utf-8\");\n}\n\nexport function readAuditLog(dataDir: string): AuditEntry[] {\n  const logPath = path.join(dataDir, AUDIT_LOG_PATH);\n\n  if (!fs.existsSync(logPath)) {\n    return [];\n  }\n\n  const content = fs.readFileSync(logPath, \"utf-8\") as string;\n  const lines = content.split(\"\\n\");\n\n  const entries: AuditEntry[] = [];\n  for (const line of lines) {\n    const trimmed = line.trim();\n    if (!trimmed) continue;\n\n    const parts = trimmed.split(\" | \");\n    if (parts.length < 5) continue;\n\n    const [timestamp, actor, tool, slug, ...summaryParts] = parts;\n    const summary = summaryParts.join(\" | \");\n\n    if (timestamp && actor && tool && slug) {\n      entries.push({ timestamp, actor, tool, slug, summary: summary ?? \"\" });\n    }\n  }\n\n  return entries;\n}\n\nexport function filterAuditLog(\n  entries: AuditEntry[],\n  opts: { slug?: string; actor?: string; limit?: number }\n): AuditEntry[] {\n  let filtered = entries;\n\n  if (opts.slug !== undefined) {\n    filtered = filtered.filter((e) => e.slug === opts.slug);\n  }\n\n  if (opts.actor !== undefined) {\n    filtered = filtered.filter((e) => e.actor === opts.actor);\n  }\n\n  if (opts.limit !== undefined) {\n    filtered = filtered.slice(-opts.limit);\n  }\n\n  return filtered;\n}\n"],"mappings":";;;AAcA,MAAM,iBAAiB;AAEvB,SAAgB,WAAmB;CACjC,MAAM,QAAQ,QAAQ,IAAI;CAC1B,OAAO,SAAS,MAAM,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,IAAI;AAC3D;AAEA,SAAgB,gBAAgB,SAAiB,OAAyB;CACxE,MAAM,UAAU,KAAK,KAAK,SAAS,cAAc;CACjD,MAAM,SAAS,KAAK,QAAQ,OAAO;CAEnC,IAAI,CAAC,GAAG,WAAW,MAAM,GACvB,GAAG,UAAU,QAAQ,EAAE,WAAW,KAAK,CAAC;CAG1C,MAAM,mBAAmB,MAAM,QAAQ,MAAM,GAAG,GAAG;CACnD,MAAM,OAAO,GAAG,MAAM,UAAU,KAAK,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK,MAAM,KAAK,KAAK,iBAAiB;CAEvG,GAAG,eAAe,SAAS,MAAM,OAAO;AAC1C;AAEA,SAAgB,aAAa,SAA+B;CAC1D,MAAM,UAAU,KAAK,KAAK,SAAS,cAAc;CAEjD,IAAI,CAAC,GAAG,WAAW,OAAO,GACxB,OAAO,CAAC;CAIV,MAAM,QADU,GAAG,aAAa,SAAS,OACrB,EAAE,MAAM,IAAI;CAEhC,MAAM,UAAwB,CAAC;CAC/B,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,UAAU,KAAK,KAAK;EAC1B,IAAI,CAAC,SAAS;EAEd,MAAM,QAAQ,QAAQ,MAAM,KAAK;EACjC,IAAI,MAAM,SAAS,GAAG;EAEtB,MAAM,CAAC,WAAW,OAAO,MAAM,MAAM,GAAG,gBAAgB;EACxD,MAAM,UAAU,aAAa,KAAK,KAAK;EAEvC,IAAI,aAAa,SAAS,QAAQ,MAChC,QAAQ,KAAK;GAAE;GAAW;GAAO;GAAM;GAAM,SAAS,WAAW;EAAG,CAAC;CAEzE;CAEA,OAAO;AACT;AAEA,SAAgB,eACd,SACA,MACc;CACd,IAAI,WAAW;CAEf,IAAI,KAAK,SAAS,KAAA,GAChB,WAAW,SAAS,QAAQ,MAAM,EAAE,SAAS,KAAK,IAAI;CAGxD,IAAI,KAAK,UAAU,KAAA,GACjB,WAAW,SAAS,QAAQ,MAAM,EAAE,UAAU,KAAK,KAAK;CAG1D,IAAI,KAAK,UAAU,KAAA,GACjB,WAAW,SAAS,MAAM,CAAC,KAAK,KAAK;CAGvC,OAAO;AACT"}

package/dist/auth-CyFuu9X_.js

@@ -0,0 +1,2 @@
+import { t as createMcpToken } from "./auth-DFWwWcYD.js";
+export { createMcpToken };

package/dist/auth-DFWwWcYD.js

@@ -0,0 +1,93 @@
+import path from "path";
+import fs from "fs";
+import { createHash, randomBytes, timingSafeEqual } from "crypto";
+//#region src/mcp/auth.ts
+function tokensPath(dataDir) {
+	return path.join(dataDir, ".agentic", "mcp-tokens.json");
+}
+/** SHA-256 hex of a token. Only hashes are ever persisted. */
+function hashToken(token) {
+	return createHash("sha256").update(token).digest("hex");
+}
+function loadMcpTokens(dataDir) {
+	const p = tokensPath(dataDir);
+	if (!fs.existsSync(p)) return [];
+	try {
+		const data = JSON.parse(fs.readFileSync(p, "utf-8"));
+		return Array.isArray(data.tokens) ? data.tokens : [];
+	} catch {
+		return [];
+	}
+}
+/**
+* Whether the HTTP MCP endpoint must require a bearer token.
+* - `DXCRM_MCP_AUTH=required` forces auth on (even with no tokens yet).
+* - `DXCRM_MCP_AUTH=off` forces it off.
+* - Otherwise: on as soon as at least one token is configured (opt-in by
+*   provisioning a token; stays open for local/firewalled dev by default).
+*/
+function isAuthRequired(dataDir) {
+	const mode = process.env["DXCRM_MCP_AUTH"];
+	if (mode === "required") return true;
+	if (mode === "off") return false;
+	return loadMcpTokens(dataDir).length > 0;
+}
+/** Validate an `Authorization: Bearer <token>` header against stored hashes. */
+function verifyBearer(authHeader, dataDir) {
+	if (!authHeader || !authHeader.startsWith("Bearer ")) return { ok: false };
+	const token = authHeader.slice(7).trim();
+	if (!token) return { ok: false };
+	const candidate = hashToken(token);
+	const candidateBuf = Buffer.from(candidate, "hex");
+	for (const rec of loadMcpTokens(dataDir)) {
+		if (rec.hash.length !== candidate.length) continue;
+		let recBuf;
+		try {
+			recBuf = Buffer.from(rec.hash, "hex");
+		} catch {
+			continue;
+		}
+		if (recBuf.length === candidateBuf.length && timingSafeEqual(recBuf, candidateBuf)) return {
+			ok: true,
+			actor: rec.actor,
+			role: rec.role
+		};
+	}
+	return { ok: false };
+}
+/**
+* Mint a new token: generates a random secret, persists only its hash mapped
+* to an actor/role, and returns the plaintext ONCE (never stored).
+*/
+function createMcpToken(dataDir, actor, role, label) {
+	const token = randomBytes(24).toString("base64url");
+	const records = loadMcpTokens(dataDir);
+	records.push({
+		hash: hashToken(token),
+		actor,
+		role,
+		...label ? { label } : {},
+		createdAt: (/* @__PURE__ */ new Date()).toISOString()
+	});
+	const p = tokensPath(dataDir);
+	fs.mkdirSync(path.dirname(p), { recursive: true });
+	fs.writeFileSync(p, JSON.stringify({ tokens: records }, null, 2), "utf-8");
+	return token;
+}
+/** RFC 9728 OAuth 2.0 Protected Resource Metadata document. */
+function protectedResourceMetadata(resourceUrl) {
+	return {
+		resource: resourceUrl,
+		authorization_servers: [],
+		bearer_methods_supported: ["header"],
+		scopes_supported: ["crm:read", "crm:write"]
+	};
+}
+/** Value for the `WWW-Authenticate` header on a 401 (RFC 9728 §5.1). */
+function wwwAuthenticateHeader(metadataUrl) {
+	return `Bearer resource_metadata="${metadataUrl}"`;
+}
+//#endregion
+export { protectedResourceMetadata as a, loadMcpTokens as i, hashToken as n, verifyBearer as o, isAuthRequired as r, wwwAuthenticateHeader as s, createMcpToken as t };
+
+//# sourceMappingURL=auth-DFWwWcYD.js.map

package/dist/auth-DFWwWcYD.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-DFWwWcYD.js","names":[],"sources":["../src/mcp/auth.ts"],"sourcesContent":["import { createHash, randomBytes, timingSafeEqual } from \"crypto\";\nimport fs from \"fs\";\nimport path from \"path\";\n\nexport type McpRole = \"admin\" | \"manager\" | \"rep\";\n\nexport interface McpTokenRecord {\n  hash: string;\n  actor: string;\n  role: McpRole;\n  label?: string;\n  createdAt?: string;\n}\n\nexport interface AuthResult {\n  ok: boolean;\n  actor?: string;\n  role?: McpRole;\n}\n\nfunction tokensPath(dataDir: string): string {\n  return path.join(dataDir, \".agentic\", \"mcp-tokens.json\");\n}\n\n/** SHA-256 hex of a token. Only hashes are ever persisted. */\nexport function hashToken(token: string): string {\n  return createHash(\"sha256\").update(token).digest(\"hex\");\n}\n\nexport function loadMcpTokens(dataDir: string): McpTokenRecord[] {\n  const p = tokensPath(dataDir);\n  if (!fs.existsSync(p)) return [];\n  try {\n    const data = JSON.parse(fs.readFileSync(p, \"utf-8\") as string) as { tokens?: McpTokenRecord[] };\n    return Array.isArray(data.tokens) ? data.tokens : [];\n  } catch {\n    return [];\n  }\n}\n\n/**\n * Whether the HTTP MCP endpoint must require a bearer token.\n * - `DXCRM_MCP_AUTH=required` forces auth on (even with no tokens yet).\n * - `DXCRM_MCP_AUTH=off` forces it off.\n * - Otherwise: on as soon as at least one token is configured (opt-in by\n *   provisioning a token; stays open for local/firewalled dev by default).\n */\nexport function isAuthRequired(dataDir: string): boolean {\n  const mode = process.env[\"DXCRM_MCP_AUTH\"];\n  if (mode === \"required\") return true;\n  if (mode === \"off\") return false;\n  return loadMcpTokens(dataDir).length > 0;\n}\n\n/** Validate an `Authorization: Bearer <token>` header against stored hashes. */\nexport function verifyBearer(authHeader: string | undefined, dataDir: string): AuthResult {\n  if (!authHeader || !authHeader.startsWith(\"Bearer \")) return { ok: false };\n  const token = authHeader.slice(\"Bearer \".length).trim();\n  if (!token) return { ok: false };\n\n  const candidate = hashToken(token);\n  const candidateBuf = Buffer.from(candidate, \"hex\");\n  for (const rec of loadMcpTokens(dataDir)) {\n    if (rec.hash.length !== candidate.length) continue;\n    let recBuf: Buffer;\n    try {\n      recBuf = Buffer.from(rec.hash, \"hex\");\n    } catch {\n      continue;\n    }\n    if (recBuf.length === candidateBuf.length && timingSafeEqual(recBuf, candidateBuf)) {\n      return { ok: true, actor: rec.actor, role: rec.role };\n    }\n  }\n  return { ok: false };\n}\n\n/**\n * Mint a new token: generates a random secret, persists only its hash mapped\n * to an actor/role, and returns the plaintext ONCE (never stored).\n */\nexport function createMcpToken(\n  dataDir: string,\n  actor: string,\n  role: McpRole,\n  label?: string\n): string {\n  const token = randomBytes(24).toString(\"base64url\");\n  const records = loadMcpTokens(dataDir);\n  records.push({\n    hash: hashToken(token),\n    actor,\n    role,\n    ...(label ? { label } : {}),\n    createdAt: new Date().toISOString(),\n  });\n  const p = tokensPath(dataDir);\n  fs.mkdirSync(path.dirname(p), { recursive: true });\n  fs.writeFileSync(p, JSON.stringify({ tokens: records }, null, 2), \"utf-8\");\n  return token;\n}\n\n/** RFC 9728 OAuth 2.0 Protected Resource Metadata document. */\nexport function protectedResourceMetadata(resourceUrl: string): Record<string, unknown> {\n  return {\n    resource: resourceUrl,\n    // Self-hosted default: tokens are provisioned out-of-band (createMcpToken).\n    // Populate with an external Authorization Server to enable full OAuth flows.\n    authorization_servers: [] as string[],\n    bearer_methods_supported: [\"header\"],\n    scopes_supported: [\"crm:read\", \"crm:write\"],\n  };\n}\n\n/** Value for the `WWW-Authenticate` header on a 401 (RFC 9728 §5.1). */\nexport function wwwAuthenticateHeader(metadataUrl: string): string {\n  return `Bearer resource_metadata=\"${metadataUrl}\"`;\n}\n"],"mappings":";;;;AAoBA,SAAS,WAAW,SAAyB;CAC3C,OAAO,KAAK,KAAK,SAAS,YAAY,iBAAiB;AACzD;;AAGA,SAAgB,UAAU,OAAuB;CAC/C,OAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AACxD;AAEA,SAAgB,cAAc,SAAmC;CAC/D,MAAM,IAAI,WAAW,OAAO;CAC5B,IAAI,CAAC,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC;CAC/B,IAAI;EACF,MAAM,OAAO,KAAK,MAAM,GAAG,aAAa,GAAG,OAAO,CAAW;EAC7D,OAAO,MAAM,QAAQ,KAAK,MAAM,IAAI,KAAK,SAAS,CAAC;CACrD,QAAQ;EACN,OAAO,CAAC;CACV;AACF;;;;;;;;AASA,SAAgB,eAAe,SAA0B;CACvD,MAAM,OAAO,QAAQ,IAAI;CACzB,IAAI,SAAS,YAAY,OAAO;CAChC,IAAI,SAAS,OAAO,OAAO;CAC3B,OAAO,cAAc,OAAO,EAAE,SAAS;AACzC;;AAGA,SAAgB,aAAa,YAAgC,SAA6B;CACxF,IAAI,CAAC,cAAc,CAAC,WAAW,WAAW,SAAS,GAAG,OAAO,EAAE,IAAI,MAAM;CACzE,MAAM,QAAQ,WAAW,MAAM,CAAgB,EAAE,KAAK;CACtD,IAAI,CAAC,OAAO,OAAO,EAAE,IAAI,MAAM;CAE/B,MAAM,YAAY,UAAU,KAAK;CACjC,MAAM,eAAe,OAAO,KAAK,WAAW,KAAK;CACjD,KAAK,MAAM,OAAO,cAAc,OAAO,GAAG;EACxC,IAAI,IAAI,KAAK,WAAW,UAAU,QAAQ;EAC1C,IAAI;EACJ,IAAI;GACF,SAAS,OAAO,KAAK,IAAI,MAAM,KAAK;EACtC,QAAQ;GACN;EACF;EACA,IAAI,OAAO,WAAW,aAAa,UAAU,gBAAgB,QAAQ,YAAY,GAC/E,OAAO;GAAE,IAAI;GAAM,OAAO,IAAI;GAAO,MAAM,IAAI;EAAK;CAExD;CACA,OAAO,EAAE,IAAI,MAAM;AACrB;;;;;AAMA,SAAgB,eACd,SACA,OACA,MACA,OACQ;CACR,MAAM,QAAQ,YAAY,EAAE,EAAE,SAAS,WAAW;CAClD,MAAM,UAAU,cAAc,OAAO;CACrC,QAAQ,KAAK;EACX,MAAM,UAAU,KAAK;EACrB;EACA;EACA,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;EACzB,4BAAW,IAAI,KAAK,GAAE,YAAY;CACpC,CAAC;CACD,MAAM,IAAI,WAAW,OAAO;CAC5B,GAAG,UAAU,KAAK,QAAQ,CAAC,GAAG,EAAE,WAAW,KAAK,CAAC;CACjD,GAAG,cAAc,GAAG,KAAK,UAAU,EAAE,QAAQ,QAAQ,GAAG,MAAM,CAAC,GAAG,OAAO;CACzE,OAAO;AACT;;AAGA,SAAgB,0BAA0B,aAA8C;CACtF,OAAO;EACL,UAAU;EAGV,uBAAuB,CAAC;EACxB,0BAA0B,CAAC,QAAQ;EACnC,kBAAkB,CAAC,YAAY,WAAW;CAC5C;AACF;;AAGA,SAAgB,sBAAsB,aAA6B;CACjE,OAAO,6BAA6B,YAAY;AAClD"}

package/dist/autofill-Di_-SP7t.js

@@ -0,0 +1,51 @@
+//#region src/core/autofill.ts
+const NEXT_STEP_RE = /^(?:-?\s*\[ \]|next step|todo|follow.?up|action item)\b[:\-\s]*/i;
+const OBJECTION_RE = /\b(concern|worried|too expensive|expensive|hesitant|however|push back)\b/i;
+function detectStage(text) {
+	const t = text.toLowerCase();
+	if (t.includes("closed won") || t.includes("signed")) return "won";
+	if (t.includes("closed lost") || t.includes("lost the deal")) return "lost";
+	if (t.includes("negotiat")) return "negotiation";
+	if (t.includes("proposal") || t.includes("quote")) return "proposal";
+	if (t.includes("qualif")) return "qualified";
+}
+function heuristicExtract(transcript) {
+	const lines = transcript.split("\n").map((l) => l.trim()).filter(Boolean);
+	const nextSteps = lines.filter((l) => NEXT_STEP_RE.test(l)).map((l) => l.replace(NEXT_STEP_RE, "").trim()).filter(Boolean).slice(0, 10);
+	const objections = lines.filter((l) => OBJECTION_RE.test(l)).slice(0, 10);
+	const base = {
+		summary: transcript.slice(0, 400),
+		nextSteps,
+		objections
+	};
+	const stage = detectStage(transcript);
+	return stage === void 0 ? base : {
+		...base,
+		stage
+	};
+}
+async function extractAutofill(transcript, ctx) {
+	try {
+		const { callLlm } = await import("./llm-DEjWcqmW.js");
+		const raw = await callLlm(`Extract CRM fields from this meeting transcript. Return ONLY JSON: { "summary": string, "nextSteps": string[], "objections": string[], "stage": "lead"|"qualified"|"proposal"|"negotiation"|"won"|"lost"|null }.\n\n${transcript}`, {
+			tool: "autofill",
+			...ctx?.slug ? { slug: ctx.slug } : {}
+		});
+		const parsed = JSON.parse(raw);
+		const base = {
+			summary: parsed.summary ?? transcript.slice(0, 400),
+			nextSteps: Array.isArray(parsed.nextSteps) ? parsed.nextSteps : [],
+			objections: Array.isArray(parsed.objections) ? parsed.objections : []
+		};
+		return parsed.stage ? {
+			...base,
+			stage: parsed.stage
+		} : base;
+	} catch {
+		return heuristicExtract(transcript);
+	}
+}
+//#endregion
+export { extractAutofill };
+
+//# sourceMappingURL=autofill-Di_-SP7t.js.map

package/dist/autofill-Di_-SP7t.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autofill-Di_-SP7t.js","names":[],"sources":["../src/core/autofill.ts"],"sourcesContent":["/**\n * Call/Meeting → CRM autofill (domino D9 / C1): extract structured fields from a\n * transcript so they can be written to the CRM (through the D4 approval gate).\n * Uses the LLM when available, with a deterministic heuristic fallback so it\n * always returns something useful and is testable offline.\n */\nexport type StageName = \"lead\" | \"qualified\" | \"proposal\" | \"negotiation\" | \"won\" | \"lost\";\n\nexport interface AutofillResult {\n  summary: string;\n  nextSteps: string[];\n  objections: string[];\n  stage?: StageName;\n}\n\nconst NEXT_STEP_RE = /^(?:-?\\s*\\[ \\]|next step|todo|follow.?up|action item)\\b[:\\-\\s]*/i;\nconst OBJECTION_RE = /\\b(concern|worried|too expensive|expensive|hesitant|however|push back)\\b/i;\n\nfunction detectStage(text: string): StageName | undefined {\n  const t = text.toLowerCase();\n  if (t.includes(\"closed won\") || t.includes(\"signed\")) return \"won\";\n  if (t.includes(\"closed lost\") || t.includes(\"lost the deal\")) return \"lost\";\n  if (t.includes(\"negotiat\")) return \"negotiation\";\n  if (t.includes(\"proposal\") || t.includes(\"quote\")) return \"proposal\";\n  if (t.includes(\"qualif\")) return \"qualified\";\n  return undefined;\n}\n\nexport function heuristicExtract(transcript: string): AutofillResult {\n  const lines = transcript\n    .split(\"\\n\")\n    .map((l) => l.trim())\n    .filter(Boolean);\n\n  const nextSteps = lines\n    .filter((l) => NEXT_STEP_RE.test(l))\n    .map((l) => l.replace(NEXT_STEP_RE, \"\").trim())\n    .filter(Boolean)\n    .slice(0, 10);\n\n  const objections = lines.filter((l) => OBJECTION_RE.test(l)).slice(0, 10);\n\n  const base = { summary: transcript.slice(0, 400), nextSteps, objections };\n  const stage = detectStage(transcript);\n  return stage === undefined ? base : { ...base, stage };\n}\n\nexport async function extractAutofill(\n  transcript: string,\n  ctx?: { slug?: string }\n): Promise<AutofillResult> {\n  try {\n    const { callLlm } = await import(\"./llm.js\");\n    const prompt =\n      `Extract CRM fields from this meeting transcript. Return ONLY JSON: ` +\n      `{ \"summary\": string, \"nextSteps\": string[], \"objections\": string[], ` +\n      `\"stage\": \"lead\"|\"qualified\"|\"proposal\"|\"negotiation\"|\"won\"|\"lost\"|null }.\\n\\n${transcript}`;\n    const raw = await callLlm(prompt, {\n      tool: \"autofill\",\n      ...(ctx?.slug ? { slug: ctx.slug } : {}),\n    });\n    const parsed = JSON.parse(raw) as Partial<AutofillResult> & { stage?: string | null };\n    const base = {\n      summary: parsed.summary ?? transcript.slice(0, 400),\n      nextSteps: Array.isArray(parsed.nextSteps) ? parsed.nextSteps : [],\n      objections: Array.isArray(parsed.objections) ? parsed.objections : [],\n    };\n    return parsed.stage ? { ...base, stage: parsed.stage as StageName } : base;\n  } catch {\n    return heuristicExtract(transcript);\n  }\n}\n"],"mappings":";AAeA,MAAM,eAAe;AACrB,MAAM,eAAe;AAErB,SAAS,YAAY,MAAqC;CACxD,MAAM,IAAI,KAAK,YAAY;CAC3B,IAAI,EAAE,SAAS,YAAY,KAAK,EAAE,SAAS,QAAQ,GAAG,OAAO;CAC7D,IAAI,EAAE,SAAS,aAAa,KAAK,EAAE,SAAS,eAAe,GAAG,OAAO;CACrE,IAAI,EAAE,SAAS,UAAU,GAAG,OAAO;CACnC,IAAI,EAAE,SAAS,UAAU,KAAK,EAAE,SAAS,OAAO,GAAG,OAAO;CAC1D,IAAI,EAAE,SAAS,QAAQ,GAAG,OAAO;AAEnC;AAEA,SAAgB,iBAAiB,YAAoC;CACnE,MAAM,QAAQ,WACX,MAAM,IAAI,EACV,KAAK,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;CAEjB,MAAM,YAAY,MACf,QAAQ,MAAM,aAAa,KAAK,CAAC,CAAC,EAClC,KAAK,MAAM,EAAE,QAAQ,cAAc,EAAE,EAAE,KAAK,CAAC,EAC7C,OAAO,OAAO,EACd,MAAM,GAAG,EAAE;CAEd,MAAM,aAAa,MAAM,QAAQ,MAAM,aAAa,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,EAAE;CAExE,MAAM,OAAO;EAAE,SAAS,WAAW,MAAM,GAAG,GAAG;EAAG;EAAW;CAAW;CACxE,MAAM,QAAQ,YAAY,UAAU;CACpC,OAAO,UAAU,KAAA,IAAY,OAAO;EAAE,GAAG;EAAM;CAAM;AACvD;AAEA,eAAsB,gBACpB,YACA,KACyB;CACzB,IAAI;EACF,MAAM,EAAE,YAAY,MAAM,OAAO;EAKjC,MAAM,MAAM,MAAM,QAAQ,uNADwD,cAChD;GAChC,MAAM;GACN,GAAI,KAAK,OAAO,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;EACxC,CAAC;EACD,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,MAAM,OAAO;GACX,SAAS,OAAO,WAAW,WAAW,MAAM,GAAG,GAAG;GAClD,WAAW,MAAM,QAAQ,OAAO,SAAS,IAAI,OAAO,YAAY,CAAC;GACjE,YAAY,MAAM,QAAQ,OAAO,UAAU,IAAI,OAAO,aAAa,CAAC;EACtE;EACA,OAAO,OAAO,QAAQ;GAAE,GAAG;GAAM,OAAO,OAAO;EAAmB,IAAI;CACxE,QAAQ;EACN,OAAO,iBAAiB,UAAU;CACpC;AACF"}