@deepwatch/dsh-client-settings 0.1.0

package/lib/client/binding-state.js

@@ -0,0 +1,543 @@
+/**
+ * The browser's view of what is configured, assembled from four Host answers.
+ *
+ * A person saved an OpenRouter credential, saw a green dot and the words
+ * "Saved openrouter.", and reasonably concluded the product was ready. It was
+ * not: no model had been chosen and nothing had been assigned to anything. The
+ * dot was answering "is a credential stored?" while the reader was asking "can
+ * I send a message?", and those turn out to be four separate questions.
+ *
+ * So this store never derives readiness itself. It gathers the four facts —
+ * from `llm.providers`, `llm.models`, `credentials.describe` and the stored
+ * bindings in `settings.describe` — and hands them to `roleReadiness`, which
+ * is the only thing in this product allowed to answer "ready". A surface that
+ * wanted to shade a dot green would have to go through the same gate.
+ *
+ * **Nothing here contacts a provider.** Opening a settings page must not spend
+ * somebody's money or rate budget, so reachability stays `unknown` until a
+ * person asks for a check. That is why a freshly saved credential reads
+ * "Credential saved · not yet assigned" rather than a claim about whether it
+ * works: the honest state after a save is *stored*, and the product says so.
+ *
+ * **No value crosses this boundary.** `credentials.describe` is structurally
+ * value-free — it answers `configured`, `source`, `writable` and has no slot
+ * for a value — and the binding this store writes holds a reference the Host
+ * resolves. There is nowhere in this file for a key to be, which is the
+ * property that makes the store safe to render, log and screenshot.
+ *
+ * @module @deepwatch/dsh-client-settings/binding-state
+ */
+import { BINDABLE_ROLES, BINDINGS_NAMESPACE, BINDINGS_VERSION, EMPTY_BINDINGS, PRIMARY_ROLE, ROLE_MODALITIES, assertNoSecretMaterial, bindingFor, readBindings, roleReadiness, withBinding, withoutBinding, } from '@deepwatch/dsh-contracts';
+/**
+ * Upstream's own settings section for the selection a new session starts with.
+ *
+ * Spelled here rather than imported: `AGENT_DEFAULT_MODEL_SETTINGS_NAMESPACE`
+ * lives in a Host package, and a browser bundle that imported it would carry
+ * the Harness's server-side settings machinery to learn one string.
+ * `tests/binding-flow.test.mjs` holds it to the value the pinned baseline
+ * composes.
+ */
+export const DEFAULT_MODEL_NAMESPACE = 'agent-default-model';
+/**
+ * The identity a provider test result belongs to.
+ *
+ * Provider and model alone are not enough. Rebinding a role to a route served
+ * through a different credential must not inherit the previous verdict — that
+ * is the same "saved means working" claim this whole file exists to remove,
+ * wearing a route it was never asked about. So the credential *reference* is
+ * part of the key.
+ *
+ * What it deliberately cannot see: a value rotated behind a reference that
+ * did not change. No credential value crosses this boundary, so the browser
+ * half has nothing to compare. A result therefore lives only as long as the
+ * session that produced it, and is never persisted or restored — an untested
+ * binding after a reload reads as untested, which is the truthful answer.
+ */
+export function providerTestKey(provider, model, credentialRef) {
+    return [provider, model, credentialRef ?? ''].join('\u0000');
+}
+const EMPTY = {
+    status: 'idle',
+    error: null,
+    writable: false,
+    providers: [],
+    roles: [],
+    bindings: EMPTY_BINDINGS,
+    saving: false,
+    testingRole: null,
+    testMessage: null,
+};
+/* ── deriving the four facts ────────────────────────────────────────────── */
+/**
+ * The credential reference a provider's own settings section names.
+ *
+ * Walked out of the described value rather than asked for separately: the
+ * settings domain already returns each namespace's resolved value, and
+ * `apiKeyEnv` is a field in it. The walk is plain property access because the
+ * described value is plain JSON — the secret slots have already been removed
+ * by the seam, which is what makes reading this safe.
+ */
+export function credentialRefOf(view, path) {
+    if (view === undefined)
+        return null;
+    let cursor = view.value;
+    for (const step of path) {
+        if (typeof cursor !== 'object' || cursor === null)
+            return null;
+        cursor = cursor[step];
+    }
+    if (typeof cursor !== 'object' || cursor === null)
+        return null;
+    const ref = cursor['apiKeyEnv'];
+    return typeof ref === 'string' && ref !== '' ? ref : null;
+}
+/**
+ * What is known about a provider's credential.
+ *
+ * `configured_unverified` rather than `verified` is the whole point. The Host
+ * can say a value resolves; only a provider can say it works, and nothing here
+ * has asked one. Calling a stored credential verified is the claim that sent a
+ * prompt to a provider nobody had configured.
+ */
+export function credentialStatusOf(ref, described, readable) {
+    if (ref === null)
+        return 'absent';
+    // A store that could not be read is a fault to report, not an empty slot to
+    // fill: telling somebody to add a credential they already added is how a
+    // person ends up entering a key three times.
+    if (!readable)
+        return 'inaccessible';
+    return described[ref]?.configured === true ? 'configured_unverified' : 'absent';
+}
+/** The route capability a provider row amounts to. */
+function routeOf(row, role) {
+    if (row === undefined || !row.active)
+        return null;
+    return {
+        provider: row.provider,
+        // Every bindable role, because DSH's directory describes routes rather
+        // than roles: a chat-completions endpoint is not annotated with which of
+        // this product's capabilities it could serve. Narrowing it here would
+        // invent a restriction the provider never stated.
+        roles: [...BINDABLE_ROLES],
+        modalities: ROLE_MODALITIES[role],
+        // Null, not empty, when the provider advertised nothing: "nobody asked" and
+        // "the provider offers no models" are different, and only the second one
+        // should make a stored model read as unavailable.
+        models: row.models.length === 0 ? null : row.models.map(model => model.id),
+    };
+}
+/** Everything known about one role, folded through the single readiness gate. */
+export function roleRowOf(role, bindings, providers, tests = new Map()) {
+    const binding = bindingFor(bindings, role);
+    const row = binding === null
+        ? undefined
+        : providers.find(entry => entry.provider === binding.provider);
+    const route = routeOf(row, role);
+    const known = route?.models ?? null;
+    const tested = binding === null
+        ? undefined
+        : tests.get(providerTestKey(binding.provider, binding.model, row?.credentialRef ?? null));
+    const readiness = roleReadiness(role, {
+        binding,
+        credential: tested?.credential ?? row?.credential ?? 'absent',
+        // Never probed from a settings page. A person asks for a check; opening a
+        // screen is not asking.
+        reachability: tested?.reachability ?? 'unknown',
+        model: binding === null
+            ? 'none'
+            : known === null || known.includes(binding.model) ? 'selected' : 'unavailable',
+        route,
+        consentGranted: true,
+        policyPermits: true,
+        contractMatches: true,
+    });
+    return {
+        role,
+        provider: binding?.provider ?? null,
+        model: binding?.model ?? null,
+        readiness,
+    };
+}
+/* ── the store ──────────────────────────────────────────────────────────── */
+/**
+ * The binding store, shaped for `useSyncExternalStore`.
+ *
+ * Deliberately a plain object with `subscribe`/`getSnapshot` rather than a
+ * framework store: this package's browser half is loaded into somebody else's
+ * React tree, and bringing a state library into a plugin bundle to hold six
+ * fields is how a distribution ends up shipping two of them.
+ */
+export class BindingStore {
+    api;
+    providerTester;
+    readinessReader;
+    snapshot = EMPTY;
+    listeners = new Set();
+    /** Guards against a slow load landing after a newer one. */
+    generation = 0;
+    revision;
+    defaultRevision;
+    providerTests = new Map();
+    providerTestAbort = null;
+    constructor(api, providerTester, readinessReader) {
+        this.api = api;
+        this.providerTester = providerTester;
+        this.readinessReader = readinessReader;
+    }
+    /**
+     * Replace what this tab believes about tested routes with what the Host says.
+     *
+     * The browser used to be the only place a provider-test verdict lived, and a
+     * tab cannot see a Host restart, an edit made in another tab, or a key
+     * rotated behind a reference that did not change. It drew a tested badge over
+     * routes the Host had already stopped being willing to serve, and the
+     * composer that badge unlocks opened onto a refusal.
+     *
+     * So the Host is asked, per bound route, and its answer wins in both
+     * directions: a route it still proves is tested even in a tab that has just
+     * been reloaded and ran no test, and a route it no longer proves stops being
+     * tested here the moment this is read.
+     */
+    async reconcileReadiness(bindings, providers, signal) {
+        if (this.readinessReader === undefined)
+            return;
+        for (const role of BINDABLE_ROLES) {
+            const binding = bindingFor(bindings, role);
+            if (binding === null)
+                continue;
+            const credentialRef = providers
+                .find(entry => entry.provider === binding.provider)?.credentialRef ?? null;
+            const key = providerTestKey(binding.provider, binding.model, credentialRef);
+            let verdict;
+            try {
+                verdict = await this.readinessReader(binding.provider, binding.model, signal);
+            }
+            catch {
+                // A read that failed says nothing about the route, and inventing
+                // either answer would be the defect. The tab keeps what it has.
+                continue;
+            }
+            if (signal.aborted)
+                return;
+            if (verdict.proved) {
+                this.providerTests.set(key, {
+                    provider: binding.provider,
+                    model: binding.model,
+                    ok: true,
+                    credential: 'verified',
+                    reachability: 'reachable',
+                    // Deliberately not "the provider test succeeded": this tab did not
+                    // run one. What is true is that the Host still holds the proof.
+                    message: 'The Host still holds a proof for this route.',
+                });
+            }
+            else {
+                this.providerTests.delete(key);
+            }
+        }
+    }
+    /** @returns the current snapshot; stable between changes. */
+    getSnapshot = () => this.snapshot;
+    /** @param listener - called after every change. @returns the unsubscriber. */
+    subscribe = (listener) => {
+        this.listeners.add(listener);
+        return () => { this.listeners.delete(listener); };
+    };
+    publish(next) {
+        this.snapshot = { ...this.snapshot, ...next };
+        for (const listener of this.listeners)
+            listener();
+    }
+    /**
+     * Ask the Host everything, and fold it into one snapshot.
+     *
+     * The three reads run together because they are independent and a settings
+     * page that took three round trips in series felt broken on a slow link.
+     * Their failures are not equal, though: providers and settings are the page,
+     * so losing either is an error, while a credential describe that fails
+     * downgrades those providers to `inaccessible` and leaves the rest readable.
+     */
+    async load() {
+        const generation = ++this.generation;
+        this.publish({ status: 'loading', error: null });
+        let providers;
+        let namespaces;
+        let groups = [];
+        let failures = [];
+        let writable = false;
+        try {
+            const [directory, settings, catalogue] = await Promise.all([
+                this.api.llm.providers({}),
+                this.api.settings.describe({}),
+                // A catalogue read can fail per provider without failing the page, so
+                // its rejection is absorbed rather than allowed to take the load down.
+                this.api.llm.models({}).catch(() => null),
+            ]);
+            if (!directory.result.ok)
+                throw new Error(directory.result.error.message);
+            if (!settings.result.ok)
+                throw new Error(settings.result.error.message);
+            providers = directory.result.value.providers;
+            namespaces = settings.result.value.namespaces;
+            writable = settings.result.value.writable;
+            if (catalogue !== null && catalogue.result.ok) {
+                groups = catalogue.result.value.groups;
+                failures = catalogue.result.value.failures;
+            }
+        }
+        catch (error) {
+            if (generation !== this.generation)
+                return;
+            this.publish({
+                status: 'error',
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return;
+        }
+        const byNs = new Map(namespaces.map(view => [view.ns, view]));
+        const stored = byNs.get(BINDINGS_NAMESPACE);
+        this.revision = stored?.revision;
+        const bindings = readBindings(stored?.value);
+        const refs = new Map();
+        for (const entry of providers) {
+            refs.set(entry.provider, credentialRefOf(byNs.get(entry.settingsNs), entry.settingsPath));
+        }
+        const wanted = [...new Set([...refs.values()].filter((ref) => ref !== null))];
+        let credentials = {};
+        let readable = true;
+        if (wanted.length > 0) {
+            try {
+                const answer = await this.api.credentials.describe({ refs: wanted });
+                if (answer.result.ok)
+                    credentials = answer.result.value.credentials;
+                else
+                    readable = false;
+            }
+            catch {
+                readable = false;
+            }
+        }
+        if (generation !== this.generation)
+            return;
+        const catalogByProvider = new Map(groups.map(group => [group.id, group]));
+        const failureByProvider = new Map(failures.map(entry => [entry.id, entry.message]));
+        const rows = providers.map((entry) => {
+            const ref = refs.get(entry.provider) ?? null;
+            return {
+                provider: entry.provider,
+                displayName: entry.displayName,
+                active: entry.active,
+                credentialRef: ref,
+                credential: credentialStatusOf(ref, credentials, readable),
+                models: catalogByProvider.get(entry.provider)?.models ?? [],
+                catalogError: failureByProvider.get(entry.provider) ?? null,
+            };
+        });
+        // Before the first publish, so no frame is ever drawn from this tab's own
+        // memory when the Host has a different answer.
+        const readiness = new AbortController();
+        await this.reconcileReadiness(bindings, rows, readiness.signal);
+        if (generation !== this.generation)
+            return;
+        this.publish({
+            status: 'ready',
+            error: null,
+            writable,
+            providers: rows,
+            bindings,
+            roles: BINDABLE_ROLES.map(role => roleRowOf(role, bindings, rows, this.providerTests)),
+        });
+        // The binding is the authority; the Harness selection is a projection of
+        // it. Reconciling on read rather than only on write means a profile bound
+        // by an earlier build -- or a settings file somebody edited by hand -- is
+        // repaired by being looked at, instead of staying in the state this whole
+        // subsystem exists to prevent: a decision recorded, and a runtime that
+        // never heard about it.
+        if (writable)
+            await this.reconcileDefaultSelection(bindings, byNs.get(DEFAULT_MODEL_NAMESPACE));
+    }
+    /**
+     * Write the Harness selection only when it disagrees with the binding.
+     *
+     * Guarded on disagreement because this runs on every load: rewriting an
+     * already-correct section would bump its revision, invalidate every other
+     * open editor's `expectedRevision`, and turn a read into a source of write
+     * conflicts.
+     */
+    async reconcileDefaultSelection(bindings, view) {
+        this.defaultRevision = view?.revision;
+        const chat = bindings.roles[PRIMARY_ROLE];
+        const wanted = chat === undefined
+            ? { provider: '', model: '' }
+            : { provider: chat.provider, model: chat.model };
+        const current = (view?.value ?? {});
+        if (current.provider === wanted.provider && current.model === wanted.model)
+            return;
+        await this.syncDefaultSelection(bindings);
+    }
+    /**
+     * Bind one role to one provider and model, and persist the decision.
+     *
+     * `replace` rather than `update`, because unbinding has to be expressible:
+     * a merge cannot remove a key, and a role that could be added but not
+     * removed is a role somebody is stuck with. The whole document is rewritten
+     * from the snapshot the caller is looking at, and `expectedRevision` is what
+     * turns a concurrent edit into a refusal rather than a silent overwrite.
+     */
+    async bind(role, provider, model) {
+        const row = this.snapshot.providers.find(entry => entry.provider === provider);
+        await this.write(withBinding(this.snapshot.bindings, role, {
+            provider,
+            model,
+            credentialRef: row?.credentialRef ?? null,
+            boundAt: new Date().toISOString(),
+            // This path is reached only from Role Bindings, where somebody chose a
+            // provider and a model and pressed Save. Nothing else in the product
+            // calls it, and a writer that cannot say this truthfully must leave the
+            // field alone rather than claim it.
+            boundBy: 'person',
+        }));
+    }
+    /** Remove one role's binding. The role becomes unbound, never inherited. */
+    async unbind(role) {
+        await this.write(withoutBinding(this.snapshot.bindings, role));
+    }
+    /** Run the exact bound route once; saving a credential never calls this. */
+    async testRole(role) {
+        const binding = bindingFor(this.snapshot.bindings, role);
+        if (binding === null || this.providerTester === undefined) {
+            this.publish({ testMessage: 'Assign a provider and model before running the test.' });
+            return;
+        }
+        const credentialRef = this.snapshot.providers
+            .find(entry => entry.provider === binding.provider)?.credentialRef ?? null;
+        const controller = new AbortController();
+        this.providerTestAbort?.abort();
+        this.providerTestAbort = controller;
+        this.publish({ testingRole: role, testMessage: null });
+        try {
+            const facts = await this.providerTester(binding.provider, binding.model, controller.signal);
+            if (controller.signal.aborted)
+                return;
+            this.providerTests.set(providerTestKey(binding.provider, binding.model, credentialRef), facts);
+            this.publish({
+                testingRole: null,
+                testMessage: facts.message,
+                roles: BINDABLE_ROLES.map(current => roleRowOf(current, this.snapshot.bindings, this.snapshot.providers, this.providerTests)),
+            });
+        }
+        catch {
+            if (controller.signal.aborted)
+                return;
+            this.publish({
+                testingRole: null,
+                testMessage: 'The provider test could not be started. Check Diagnostics and try again.',
+            });
+        }
+        finally {
+            if (this.providerTestAbort === controller)
+                this.providerTestAbort = null;
+        }
+    }
+    /** Cancel only the explicit provider probe; no Chat turn is involved. */
+    cancelProviderTest() {
+        if (this.providerTestAbort === null)
+            return;
+        this.providerTestAbort.abort();
+        this.providerTestAbort = null;
+        this.publish({
+            testingRole: null,
+            testMessage: 'Provider test cancelled. This binding remains not tested.',
+        });
+    }
+    /**
+     * Point the Harness's own default selection at what Chat is bound to.
+     *
+     * The link this subsystem was missing, and the failure it caused is worth
+     * stating plainly: a person added a provider, chose a model and assigned it
+     * to Chat, and still could not send. Every DeepWatch surface agreed the
+     * binding existed. It did — in DeepWatch's document. But the thing that
+     * actually routes a prompt is the Harness's model selection, which this
+     * distribution had *emptied* so that nothing would be chosen for anybody,
+     * and binding Chat never filled it in. Two records of one decision, and the
+     * one the runtime reads was the one nobody was writing.
+     *
+     * So a Chat binding writes both. `agent-default-model` is upstream's own
+     * settings section, read live by `AgentDefaultModelConfig` and re-read by a
+     * blank session on every look — so a session opened before the binding
+     * picks it up without being told.
+     *
+     * Only Chat. The other roles are DeepWatch's own concepts and have no
+     * upstream selection to keep in step; writing one for them would point the
+     * conversation at a model chosen for something else.
+     */
+    async syncDefaultSelection(next) {
+        const chat = next.roles[PRIMARY_ROLE];
+        const section = chat === undefined
+            // Emptied rather than removed: the row stays mounted and its schema
+            // requires both keys, so "nothing chosen" is two empty strings -- which
+            // is exactly the value a fresh profile composes.
+            ? { provider: '', model: '' }
+            : { provider: chat.provider, model: chat.model };
+        try {
+            const response = await this.api.settings.replace({
+                ns: DEFAULT_MODEL_NAMESPACE,
+                section,
+                ...this.defaultRevision === undefined ? {} : { expectedRevision: this.defaultRevision },
+            });
+            if (response.result.ok)
+                this.defaultRevision = response.result.value.revision;
+            else
+                this.publish({ error: response.result.error.message });
+        }
+        catch (error) {
+            this.publish({ error: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    async write(next) {
+        // Before the document leaves the browser, not after somebody reports it in
+        // a screenshot. Every write path builds this from a picker, so a value
+        // matching a credential shape means a code path started copying one.
+        assertNoSecretMaterial('the binding document', next);
+        this.publish({ saving: true, error: null });
+        try {
+            const response = await this.api.settings.replace({
+                ns: BINDINGS_NAMESPACE,
+                section: { version: BINDINGS_VERSION, roles: next.roles },
+                ...this.revision === undefined ? {} : { expectedRevision: this.revision },
+            });
+            if (!response.result.ok) {
+                this.publish({ saving: false, error: response.result.error.message });
+                return;
+            }
+            this.revision = response.result.value.revision;
+            const bindings = readBindings(response.result.value.value);
+            // After the binding is durable, never before: a default pointing at a
+            // binding that failed to save would route somewhere the record does not
+            // admit to.
+            await this.syncDefaultSelection(bindings);
+            this.publish({
+                saving: false,
+                bindings,
+                roles: BINDABLE_ROLES.map(role => roleRowOf(role, bindings, this.snapshot.providers, this.providerTests)),
+            });
+        }
+        catch (error) {
+            this.publish({
+                saving: false,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+}
+/**
+ * Whether the capability a conversation needs can actually run.
+ *
+ * The one question the composer asks, given its own name so no surface has to
+ * remember which role Chat is or re-derive readiness to find out.
+ */
+export function chatReadiness(snapshot) {
+    return snapshot.roles.find(row => row.role === PRIMARY_ROLE)?.readiness ?? null;
+}
+//# sourceMappingURL=binding-state.js.map

package/lib/client/binding-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding-state.js","sourceRoot":"","sources":["../../src/client/binding-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EACL,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,cAAc,EAAE,YAAY,EAClF,eAAe,EAAE,sBAAsB,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAChF,WAAW,EAAE,cAAc,GAC5B,MAAM,0BAA0B,CAAA;AAMjC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAA;AA6E5D;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAAE,KAAa,EAAE,aAA4B;IAE7D,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AAC9D,CAAC;AA4ED,MAAM,KAAK,GAAoB;IAC7B,MAAM,EAAE,MAAM;IACd,KAAK,EAAE,IAAI;IACX,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,EAAE;IACb,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,KAAK;IACb,WAAW,EAAE,IAAI;IACjB,WAAW,EAAE,IAAI;CAClB,CAAA;AAED,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC7B,IAA+B,EAAE,IAAuB;IAExD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACnC,IAAI,MAAM,GAAY,IAAI,CAAC,KAAK,CAAA;IAChC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC9D,MAAM,GAAI,MAAkC,CAAC,IAAI,CAAC,CAAA;IACpD,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC9D,MAAM,GAAG,GAAI,MAAkC,CAAC,WAAW,CAAC,CAAA;IAC5D,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAkB,EAAE,SAAyC,EAAE,QAAiB;IAEhF,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAA;IACjC,4EAA4E;IAC5E,yEAAyE;IACzE,6CAA6C;IAC7C,IAAI,CAAC,QAAQ;QAAE,OAAO,cAAc,CAAA;IACpC,OAAO,SAAS,CAAC,GAAG,CAAC,EAAE,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,QAAQ,CAAA;AACjF,CAAC;AAED,sDAAsD;AACtD,SAAS,OAAO,CAAC,GAA4B,EAAE,IAAkB;IAC/D,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACjD,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,uEAAuE;QACvE,yEAAyE;QACzE,sEAAsE;QACtE,kDAAkD;QAClD,KAAK,EAAE,CAAC,GAAG,cAAc,CAAC;QAC1B,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC;QACjC,4EAA4E;QAC5E,yEAAyE;QACzE,kDAAkD;QAClD,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;KAC3E,CAAA;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,SAAS,CACvB,IAAkB,EAAE,QAAuB,EAAE,SAAiC,EAC9E,QAAgD,IAAI,GAAG,EAAE;IAEzD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC1C,MAAM,GAAG,GAAG,OAAO,KAAK,IAAI;QAC1B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAChC,MAAM,KAAK,GAAG,KAAK,EAAE,MAAM,IAAI,IAAI,CAAA;IACnC,MAAM,MAAM,GAAG,OAAO,KAAK,IAAI;QAC7B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,aAAa,IAAI,IAAI,CAAC,CAAC,CAAA;IAC3F,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,EAAE;QACpC,OAAO;QACP,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,GAAG,EAAE,UAAU,IAAI,QAAQ;QAC7D,0EAA0E;QAC1E,wBAAwB;QACxB,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,SAAS;QAC/C,KAAK,EAAE,OAAO,KAAK,IAAI;YACrB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa;QAChF,KAAK;QACL,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,IAAI;KACtB,CAAC,CAAA;IACF,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,IAAI;QACnC,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI;QAC7B,SAAS;KACV,CAAA;AACH,CAAC;AAED,+EAA+E;AAE/E;;;;;;;GAOG;AACH,MAAM,OAAO,YAAY;IAWJ;IACA;IACA;IAZX,QAAQ,GAAoB,KAAK,CAAA;IACxB,SAAS,GAAG,IAAI,GAAG,EAAc,CAAA;IAClD,4DAA4D;IACpD,UAAU,GAAG,CAAC,CAAA;IACd,QAAQ,CAAoB;IAC5B,eAAe,CAAoB;IAC1B,aAAa,GAAG,IAAI,GAAG,EAA6B,CAAA;IAC7D,iBAAiB,GAA2B,IAAI,CAAA;IAExD,YACmB,GAAY,EACZ,cAA+B,EAC/B,eAAsC;QAFtC,QAAG,GAAH,GAAG,CAAS;QACZ,mBAAc,GAAd,cAAc,CAAiB;QAC/B,oBAAe,GAAf,eAAe,CAAuB;IACtD,CAAC;IAEJ;;;;;;;;;;;;;OAaG;IACK,KAAK,CAAC,kBAAkB,CAC9B,QAAuB,EAAE,SAAiC,EAAE,MAAmB;QAE/E,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS;YAAE,OAAM;QAC9C,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YAC1C,IAAI,OAAO,KAAK,IAAI;gBAAE,SAAQ;YAC9B,MAAM,aAAa,GAAG,SAAS;iBAC5B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC,EAAE,aAAa,IAAI,IAAI,CAAA;YAC5E,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;YAC3E,IAAI,OAA4B,CAAA;YAChC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;YAC/E,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;gBACjE,gEAAgE;gBAChE,SAAQ;YACV,CAAC;YACD,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAM;YAC1B,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE;oBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,EAAE,EAAE,IAAI;oBACR,UAAU,EAAE,UAAU;oBACtB,YAAY,EAAE,WAAW;oBACzB,mEAAmE;oBACnE,gEAAgE;oBAChE,OAAO,EAAE,8CAA8C;iBACxD,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,WAAW,GAAG,GAAoB,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAA;IAElD,8EAA8E;IAC9E,SAAS,GAAG,CAAC,QAAoB,EAAgB,EAAE;QACjD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC5B,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA,CAAC,CAAC,CAAA;IAClD,CAAC,CAAA;IAEO,OAAO,CAAC,IAA8B;QAC5C,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAA;QAC7C,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;YAAE,QAAQ,EAAE,CAAA;IACnD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,UAAU,GAAG,EAAE,IAAI,CAAC,UAAU,CAAA;QACpC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAEhD,IAAI,SAAkC,CAAA;QACtC,IAAI,UAAoC,CAAA;QACxC,IAAI,MAAM,GAA0B,EAAE,CAAA;QACtC,IAAI,QAAQ,GAA+C,EAAE,CAAA;QAC7D,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,IAAI,CAAC;YACH,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACzD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,sEAAsE;gBACtE,uEAAuE;gBACvE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;aAC1C,CAAC,CAAA;YACF,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACzE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACvE,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAA;YAC5C,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAA;YAC7C,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAA;YACzC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBAC9C,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAA;gBACtC,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAA;YAC5C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU;gBAAE,OAAM;YAC1C,IAAI,CAAC,OAAO,CAAC;gBACX,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;QAC3C,IAAI,CAAC,QAAQ,GAAG,MAAM,EAAE,QAAQ,CAAA;QAChC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAE5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAyB,CAAA;QAC7C,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAA;QAC3F,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAA;QAE5F,IAAI,WAAW,GAAmC,EAAE,CAAA;QACpD,IAAI,QAAQ,GAAG,IAAI,CAAA;QACnB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;gBACpE,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE;oBAAE,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAA;;oBAC9D,QAAQ,GAAG,KAAK,CAAA;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,KAAK,CAAA;YAClB,CAAC;QACH,CAAC;QACD,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU;YAAE,OAAM;QAE1C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;QACzE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACnF,MAAM,IAAI,GAAkB,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAA;YAC5C,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,aAAa,EAAE,GAAG;gBAClB,UAAU,EAAE,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC;gBAC1D,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,IAAI,EAAE;gBAC3D,YAAY,EAAE,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI;aAC5D,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,0EAA0E;QAC1E,+CAA+C;QAC/C,MAAM,SAAS,GAAG,IAAI,eAAe,EAAE,CAAA;QACvC,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;QAC/D,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU;YAAE,OAAM;QAE1C,IAAI,CAAC,OAAO,CAAC;YACX,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,IAAI;YACX,QAAQ;YACR,SAAS,EAAE,IAAI;YACf,QAAQ;YACR,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;SACvF,CAAC,CAAA;QAEF,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,uEAAuE;QACvE,wBAAwB;QACxB,IAAI,QAAQ;YAAE,MAAM,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAA;IACjG,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,yBAAyB,CACrC,QAAuB,EAAE,IAA+B;QAExD,IAAI,CAAC,eAAe,GAAG,IAAI,EAAE,QAAQ,CAAA;QACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QACzC,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC7B,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAA;QAClD,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAA4C,CAAA;QAC9E,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;YAAE,OAAM;QAClF,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAA;IAC3C,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,IAAI,CAAC,IAAkB,EAAE,QAAgB,EAAE,KAAa;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAA;QAC9E,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE;YACzD,QAAQ;YACR,KAAK;YACL,aAAa,EAAE,GAAG,EAAE,aAAa,IAAI,IAAI;YACzC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACjC,uEAAuE;YACvE,qEAAqE;YACrE,wEAAwE;YACxE,oCAAoC;YACpC,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC,CAAA;IACL,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,MAAM,CAAC,IAAkB;QAC7B,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAA;IAChE,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,QAAQ,CAAC,IAAkB;QAC/B,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACxD,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC1D,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,sDAAsD,EAAE,CAAC,CAAA;YACrF,OAAM;QACR,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS;aAC1C,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC,EAAE,aAAa,IAAI,IAAI,CAAA;QAC5E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAA;QAC/B,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAA;QACnC,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;YAC3F,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAM;YACrC,IAAI,CAAC,aAAa,CAAC,GAAG,CACpB,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAA;YACzE,IAAI,CAAC,OAAO,CAAC;gBACX,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,KAAK,CAAC,OAAO;gBAC1B,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAC5C,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAC7E,CAAC;aACH,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAM;YACrC,IAAI,CAAC,OAAO,CAAC;gBACX,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,0EAA0E;aACxF,CAAC,CAAA;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,iBAAiB,KAAK,UAAU;gBAAE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAA;QAC1E,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,kBAAkB;QAChB,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI;YAAE,OAAM;QAC3C,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAA;QAC9B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAA;QAC7B,IAAI,CAAC,OAAO,CAAC;YACX,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,2DAA2D;SACzE,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACK,KAAK,CAAC,oBAAoB,CAAC,IAAmB;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QACrC,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS;YAChC,oEAAoE;YACpE,wEAAwE;YACxE,iDAAiD;YACjD,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC7B,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAA;QAClD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC/C,EAAE,EAAE,uBAAuB;gBAC3B,OAAO;gBACP,GAAG,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,eAAe,EAAE;aACxF,CAAC,CAAA;YACF,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE;gBAAE,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAA;;gBACxE,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACjF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,IAAmB;QACrC,2EAA2E;QAC3E,uEAAuE;QACvE,qEAAqE;QACrE,sBAAsB,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAA;QACpD,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC/C,EAAE,EAAE,kBAAkB;gBACtB,OAAO,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;gBACzD,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,QAAQ,EAAE;aAC1E,CAAC,CAAA;YACF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;gBACrE,OAAM;YACR,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAA;YAC9C,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAC1D,sEAAsE;YACtE,wEAAwE;YACxE,YAAY;YACZ,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAA;YACzC,IAAI,CAAC,OAAO,CAAC;gBACX,MAAM,EAAE,KAAK;gBACb,QAAQ;gBACR,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CACzC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAC5D,CAAC;aACH,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC;gBACX,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,QAAyB;IACrD,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,SAAS,IAAI,IAAI,CAAA;AACjF,CAAC"}

package/lib/client/chat-gate.d.ts

@@ -0,0 +1,100 @@
+/**
+ * The composer, closed until something is actually bound to Chat — and the
+ * fastest way to bind it, offered where the person is standing.
+ *
+ * A person typed a message into a composer that looked ready, pressed send,
+ * and the prompt was routed to a provider they had never configured. Nothing
+ * about the composer had told them otherwise: the model chip named a DeepSeek
+ * model they had not chosen, the send button was live, and the first thing
+ * that disagreed was a failed turn.
+ *
+ * This is the client half of preflight. It raises the block upstream provides
+ * for exactly this — *"Composer blocks: the one way another plugin stops a
+ * session's input"* — so the textarea goes inert, the send button stops
+ * accepting, and the placeholder says why in the words of whoever knows.
+ *
+ * **This is an affordance, and it is not the enforcement.** It lives in a
+ * browser tab. The Host refuses an unbound route regardless of what any client
+ * disables (`@deepwatch/dsh-technology/routing`), and the composed default
+ * names no route so the Harness's own admission boundary refuses a turn before
+ * one exists. The value of this layer is not that it makes refusal certain — it
+ * is that a person finds out *before* typing rather than after sending.
+ *
+ * **The draft survives.** Blocking is one inert textarea, never a second tree:
+ * the composer keeps its DOM, so whatever was typed is still there when the
+ * binding is fixed. That is upstream's design and this file's reason for using
+ * it rather than rendering a replacement.
+ *
+ * **The way out is here, not somewhere else.** The settings panel's open state
+ * is component-local to `SettingsRoot`, so no plugin can navigate to a section
+ * — and a button that names a screen it cannot open is worse than no button.
+ * So the fix is offered inline: the same provider-and-model picker the Role
+ * Bindings screen uses, writing through the same store, so the two surfaces
+ * cannot disagree about what a provider offers.
+ *
+ * @module @deepwatch/dsh-client-settings/chat-gate
+ */
+import type { ReactNode } from 'react';
+import type { BindingSnapshot, BindingStore } from './binding-state.js';
+/** The block registry, as `ctx.conversation.blocks` exposes it. */
+export interface ComposerBlocks {
+    set(sessionId: string, block: {
+        readonly reason: string;
+    } | undefined): void;
+}
+/** What the gate needs to do its job. */
+export interface ChatGateProps {
+    /** The session whose composer this gate governs. */
+    readonly sessionId: string;
+    readonly store: BindingStore;
+    /**
+     * The block registry, resolved when the gate renders rather than when the
+     * plugin loads.
+     *
+     * A getter, and the reason is a bug this had. Registering the seat behind
+     * `ctx.inject(['conversation'], …)` parked the registration on a service
+     * that arrives with the conversation plugin, and the callback never ran --
+     * so the card never drew and the composer was never blocked, silently, while
+     * every other surface in this package worked. Upstream's own model-selection
+     * plugin reaches the same registry with a plain `ctx.get('conversation')` at
+     * the moment it needs it, which is late enough to be there and cheap enough
+     * to repeat.
+     */
+    readonly blocks: () => ComposerBlocks | undefined;
+}
+/**
+ * The placeholder an inert composer carries.
+ *
+ * The blocker's own sentence, prefixed with the capability it is about. A
+ * placeholder reading only "Not configured" leaves a person guessing which of
+ * six things is missing, which is the failure the ordered blocker list exists
+ * to prevent.
+ */
+export declare function blockReason(detail: string): string;
+/**
+ * The block this snapshot calls for, or undefined when the composer may open.
+ *
+ * A pure function rather than a branch inside the effect, so the decision can
+ * be tested as the decision. A test that re-derived the same condition beside
+ * the component would agree with itself and prove nothing about what a person
+ * gets.
+ *
+ * `idle` and `loading` deliberately produce nothing. Blocking a composer
+ * because an answer has not arrived yet would make every reload look like a
+ * misconfiguration — and the Host refuses an unbound route regardless, so the
+ * safe direction here is to say nothing until something is known.
+ *
+ * @param snapshot - what the store currently knows.
+ * @returns the block to raise, or undefined to lift any standing one.
+ */
+export declare function blockFor(snapshot: BindingSnapshot): {
+    readonly reason: string;
+} | undefined;
+/**
+ * Raise or clear this session's composer block, and offer the way out.
+ *
+ * @param props - see {@link ChatGateProps}.
+ * @returns the setup card while Chat cannot run, and nothing once it can.
+ */
+export declare function ChatGate({ sessionId, store, blocks }: ChatGateProps): ReactNode;
+//# sourceMappingURL=chat-gate.d.ts.map