@everywheredev/cli 0.0.5 → 0.0.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@everywheredev/cli",
-  "version": "0.0.5",
+  "version": "0.0.7",
   "description": "PocketDev CLI — a Claude-Code-style TypeScript thin client for the PocketDev host (FULL-REMOTE Hydra OAuth2).",
   "type": "module",
   "license": "UNLICENSED",
@@ -29,7 +29,7 @@
     "node": ">=20"
   },
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "tsc -p tsconfig.json --noEmit && node scripts/build.mjs",
     "build:watch": "tsc -p tsconfig.json --watch",
     "dev": "node --import tsx ./src/index.ts",
     "test": "vitest run --passWithNoTests",
@@ -58,6 +58,7 @@
     "@types/node": "^20.14.0",
     "@types/react": "^18.3.3",
     "@types/ws": "^8.5.12",
+    "esbuild": "^0.24.0",
     "tsx": "^4.16.0",
     "typescript": "^5.5.0",
     "vitest": "^2.0.0"

package/scripts/build.mjs

@@ -0,0 +1,68 @@
+// Bundles the CLI into a single minified dist/index.js so the published package
+// is not trivially readable (the source repo stays private; only this bundle ships).
+//
+// Why esbuild-direct-from-src is safe: src/ uses no decorators and DI is wired with
+// manual factories (src/di/container.ts), so esbuild not emitting decorator metadata
+// is irrelevant. Type-checking is enforced separately via `tsc --noEmit` (see the
+// "build" script in package.json).
+
+import { rm } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+import { dirname, resolve } from "node:path";
+import { build } from "esbuild";
+
+const root = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+
+// Clear stale per-file tsc output so only the single bundle ships.
+await rm(resolve(root, "dist"), { recursive: true, force: true });
+
+await build({
+  absWorkingDir: root,
+  entryPoints: ["src/index.ts"],
+  outfile: "dist/index.js", // keep this path: bin/pocketdev.js and scripts/smoke.mjs import ../dist/index.js
+  bundle: true,
+  minify: true,
+  platform: "node",
+  format: "esm", // package is "type":"module"; preserves import.meta.url for createRequire
+  target: "node20",
+  legalComments: "none",
+  // ESM output has no `require`/__dirname/__filename globals, but bundled CJS deps (e.g. ws calling
+  // require("events")) and node-pty's createRequire path rely on them. Define them at the top of the
+  // bundle from import.meta.url so those calls resolve against the real Node module system.
+  banner: {
+    js: [
+      "import { createRequire as __everywhere_createRequire } from 'node:module';",
+      "import { fileURLToPath as __everywhere_fileURLToPath } from 'node:url';",
+      "import { dirname as __everywhere_dirname } from 'node:path';",
+      "const require = __everywhere_createRequire(import.meta.url);",
+      "const __filename = __everywhere_fileURLToPath(import.meta.url);",
+      "const __dirname = __everywhere_dirname(__filename);",
+    ].join("\n"),
+  },
+  // Native addons + dynamic-import natives stay external (resolved from node_modules at runtime).
+  // node-pty/puppeteer-core/ignore load via createRequire (not followed by the bundler), but we
+  // list them for clarity; keytar loads via dynamic import() which esbuild WOULD bundle otherwise.
+  // These are real `dependencies` installed in the user's node_modules; keep them external so the
+  // native/dynamic loaders (createRequire / dynamic import()) resolve them at runtime.
+  external: ["node-pty", "keytar", "puppeteer-core", "ignore"],
+  plugins: [
+    // ink statically imports react-devtools-core (only used when ink's DEV devtools are enabled).
+    // It isn't a dependency, so we can't externalize it (an external ESM import resolves eagerly at
+    // load and would crash). Stub it to an empty module — the devtools code path never runs for users.
+    {
+      name: "stub-react-devtools",
+      setup(b) {
+        b.onResolve({ filter: /^react-devtools-core$/ }, () => ({
+          path: "react-devtools-core",
+          namespace: "stub-react-devtools",
+        }));
+        b.onLoad({ filter: /.*/, namespace: "stub-react-devtools" }, () => ({
+          contents: "export default {};",
+          loader: "js",
+        }));
+      },
+    },
+  ],
+});
+
+process.stdout.write("built dist/index.js\n");

package/dist/agent/agent-loop.d.ts

@@ -1,40 +0,0 @@
-import type { Renderer } from "../render/ports.js";
-import type { SessionStore } from "../session/ports.js";
-import type { HttpPort, StreamPort } from "../transport/ports.js";
-import { ApprovalGate } from "./approval.js";
-import { RunTracker } from "./run-tracker.js";
-/** Arguments for one agent prompt. */
-export interface PromptRequest {
-    prompt: string;
-    agentId?: string;
-    context?: string;
-    attachments?: string[];
-    /** Session to attribute the turns to (REPL); when absent, transcript is skipped. */
-    sessionId?: string;
-}
-/** Outcome of a completed run. */
-export interface RunOutcome {
-    runId: string;
-    agent: string;
-    code?: number;
-    error?: string;
-    /** Files the run touched, in first-seen order (for `/undo`). */
-    touchedPaths: string[];
-}
-export declare class AgentLoop {
-    private readonly http;
-    private readonly stream;
-    private readonly renderer;
-    private readonly approval;
-    private readonly tracker;
-    private readonly sessions;
-    constructor(http: HttpPort, stream: StreamPort, renderer: Renderer, approval: ApprovalGate, tracker: RunTracker, sessions: SessionStore);
-    /**
-     * Run one prompt to completion. Resolves when the host emits `agent:end` for this run.
-     * `signal` aborts streaming (the host run itself is cancelled by the host on disconnect).
-     */
-    run(req: PromptRequest, signal: AbortSignal): Promise<RunOutcome>;
-    /** Run the approval gate for a tool event and record it for the transcript + undo. */
-    private handleTool;
-}
-//# sourceMappingURL=agent-loop.d.ts.map

package/dist/agent/agent-loop.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-loop.d.ts","sourceRoot":"","sources":["../../src/agent/agent-loop.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAkB,MAAM,qBAAqB,CAAC;AACxE,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAe,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAmB,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,sCAAsC;AACtC,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,oFAAoF;IACpF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,kCAAkC;AAClC,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AASD,qBAAa,SAAS;IAElB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBALR,IAAI,EAAE,QAAQ,EACd,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,UAAU,EACnB,QAAQ,EAAE,YAAY;IAGzC;;;OAGG;IACG,GAAG,CAAC,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAoFvE,sFAAsF;YACxE,UAAU;CAiBzB"}

package/dist/agent/agent-loop.js

@@ -1,162 +0,0 @@
-// src/agent/agent-loop.ts — the agent + tool loop (cli.md §7).
-//
-// Flow:  prompt → POST /api/agent/prompt {runId} → stream agent:output / agent:tool /
-//        agent:end over the WS → approval gate on write/exec tools → render → transcript.
-//
-// The host runs the model and APPLIES edits server-side (enforcing Casbin); the CLI renders
-// the stream, runs the LOCAL approval gate (UX only), tracks runId for /undo and resume, and
-// appends turns to the SessionStore. DIP: depends only on ports + the gate/tracker.
-import { randomUUID } from "node:crypto";
-import { CliError } from "../core/errors.js";
-export class AgentLoop {
-    http;
-    stream;
-    renderer;
-    approval;
-    tracker;
-    sessions;
-    constructor(http, stream, renderer, approval, tracker, sessions) {
-        this.http = http;
-        this.stream = stream;
-        this.renderer = renderer;
-        this.approval = approval;
-        this.tracker = tracker;
-        this.sessions = sessions;
-    }
-    /**
-     * Run one prompt to completion. Resolves when the host emits `agent:end` for this run.
-     * `signal` aborts streaming (the host run itself is cancelled by the host on disconnect).
-     */
-    async run(req, signal) {
-        await this.stream.connect();
-        // Subscribe BEFORE issuing the prompt so we never miss the first chunk. Until the POST
-        // returns the runId, `activeRunId` is undefined and handlers accept any run; once set we
-        // filter strictly on it.
-        let activeRunId;
-        const subs = [];
-        // The user's turn is appended immediately (crash-safe) for resume.
-        if (req.sessionId) {
-            await this.sessions.append(req.sessionId, makeTurn("user", req.prompt));
-        }
-        let outputBuffer = "";
-        const toolCalls = [];
-        const result = new Promise((resolve, reject) => {
-            const onOutput = (p) => {
-                if (activeRunId && p.runId !== activeRunId)
-                    return;
-                outputBuffer += p.chunk;
-                this.renderer.stream(p.chunk);
-            };
-            const onTool = (p) => {
-                if (activeRunId && p.runId !== activeRunId)
-                    return;
-                // Defer the async approval so the synchronous event handler stays cheap.
-                void this.handleTool(p, toolCalls);
-            };
-            const onEnd = (p) => {
-                if (activeRunId && p.runId !== activeRunId)
-                    return;
-                cleanup();
-                this.tracker.end(p.runId, { code: p.code, error: p.error });
-                const run = this.tracker.get(p.runId);
-                const touchedPaths = run?.touchedPaths ?? [];
-                // Append the agent's turn (collected output + tool calls) to the transcript.
-                if (req.sessionId) {
-                    const turn = makeTurn("agent", outputBuffer, p.runId);
-                    if (toolCalls.length)
-                        turn.toolCalls = toolCalls;
-                    void this.sessions.append(req.sessionId, turn);
-                }
-                if (p.error) {
-                    this.renderer.error(`agent run ${shortId(p.runId)} failed: ${p.error}`);
-                }
-                else if (touchedPaths.length) {
-                    // Offer undo for the first touched path (the REPL surfaces the full list).
-                    this.renderer.stream(`\n[run ${shortId(p.runId)} done — undo with: pocketdev undo ${p.runId} <path>]\n`);
-                }
-                resolve({ runId: p.runId, agent: run?.agent ?? "", code: p.code, error: p.error, touchedPaths });
-            };
-            const onAbort = () => {
-                cleanup();
-                reject(new CliError("network", "agent run aborted before completion."));
-            };
-            const cleanup = () => {
-                for (const off of subs)
-                    off();
-                signal.removeEventListener("abort", onAbort);
-            };
-            subs.push(this.stream.on("agent:output", onOutput));
-            subs.push(this.stream.on("agent:tool", onTool));
-            subs.push(this.stream.on("agent:end", onEnd));
-            signal.addEventListener("abort", onAbort, { once: true });
-        });
-        // Now issue the prompt; map 422 (agent unavailable) to a friendly CliError upstream.
-        const res = await this.http.post("/api/agent/prompt", {
-            ...(req.agentId ? { agentId: req.agentId } : {}),
-            prompt: req.prompt,
-            ...(req.context ? { context: req.context } : {}),
-            ...(req.attachments ? { attachments: req.attachments } : {}),
-        });
-        activeRunId = res.runId;
-        this.tracker.begin(res.runId, res.agent);
-        return result;
-    }
-    /** Run the approval gate for a tool event and record it for the transcript + undo. */
-    async handleTool(p, toolCalls) {
-        const path = typeof p.path === "string" ? p.path : undefined;
-        const action = normalizeAction(p.action);
-        const sideEffect = sideEffectFor(p.kind);
-        if (path)
-            this.tracker.touch(p.runId, path);
-        toolCalls.push({ kind: kindFor(p.kind), action, path });
-        // Reads are auto-allowed by the default policy; writes/execs prompt the user.
-        const allowed = await this.approval.guard({ name: toolName(p.kind, action), sideEffect, path });
-        if (!allowed) {
-            this.renderer.error(`Denied ${toolName(p.kind, action)}${path ? ` on ${path}` : ""}.`, "The host may have already applied this server-side; review with `pocketdev diff`.");
-        }
-    }
-}
-// ── helpers ───────────────────────────────────────────────────────────────────
-function makeTurn(role, text, runId) {
-    return { id: randomUUID(), role, text, at: Date.now(), ...(runId ? { runId } : {}) };
-}
-function sideEffectFor(kind) {
-    switch (kind) {
-        case "read":
-            return "read";
-        case "file":
-            return "write";
-        case "cmd":
-            return "exec";
-        default:
-            return "exec";
-    }
-}
-function kindFor(kind) {
-    switch (kind) {
-        case "read":
-            return "read";
-        case "file":
-            return "file";
-        case "cmd":
-            return "cmd";
-        default:
-            return "cmd";
-    }
-}
-function normalizeAction(action) {
-    if (action === "create" || action === "modify" || action === "delete")
-        return action;
-    return undefined;
-}
-function toolName(kind, action) {
-    if (kind === "file")
-        return action ? `file:${action}` : "file";
-    if (kind === "cmd")
-        return "command";
-    return "read";
-}
-function shortId(id) {
-    return id.slice(0, 8);
-}
-//# sourceMappingURL=agent-loop.js.map

package/dist/agent/agent-loop.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-loop.js","sourceRoot":"","sources":["../../src/agent/agent-loop.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,sFAAsF;AACtF,0FAA0F;AAC1F,EAAE;AACF,4FAA4F;AAC5F,6FAA6F;AAC7F,oFAAoF;AAEpF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAkC7C,MAAM,OAAO,SAAS;IAED;IACA;IACA;IACA;IACA;IACA;IANnB,YACmB,IAAc,EACd,MAAkB,EAClB,QAAkB,EAClB,QAAsB,EACtB,OAAmB,EACnB,QAAsB;QALtB,SAAI,GAAJ,IAAI,CAAU;QACd,WAAM,GAAN,MAAM,CAAY;QAClB,aAAQ,GAAR,QAAQ,CAAU;QAClB,aAAQ,GAAR,QAAQ,CAAc;QACtB,YAAO,GAAP,OAAO,CAAY;QACnB,aAAQ,GAAR,QAAQ,CAAc;IACtC,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,GAAkB,EAAE,MAAmB;QAC/C,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAE5B,uFAAuF;QACvF,yFAAyF;QACzF,yBAAyB;QACzB,IAAI,WAA+B,CAAC;QACpC,MAAM,IAAI,GAAkB,EAAE,CAAC;QAE/B,mEAAmE;QACnE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,YAAY,GAAG,EAAE,CAAC;QACtB,MAAM,SAAS,GAAe,EAAE,CAAC;QAEjC,MAAM,MAAM,GAAG,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzD,MAAM,QAAQ,GAAG,CAAC,CAAiC,EAAE,EAAE;gBACrD,IAAI,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW;oBAAE,OAAO;gBACnD,YAAY,IAAI,CAAC,CAAC,KAAK,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC,CAAC;YAEF,MAAM,MAAM,GAAG,CAAC,CAAY,EAAE,EAAE;gBAC9B,IAAI,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW;oBAAE,OAAO;gBACnD,yEAAyE;gBACzE,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACrC,CAAC,CAAC;YAEF,MAAM,KAAK,GAAG,CAAC,CAA8B,EAAE,EAAE;gBAC/C,IAAI,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW;oBAAE,OAAO;gBACnD,OAAO,EAAE,CAAC;gBACV,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACtC,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,EAAE,CAAC;gBAE7C,6EAA6E;gBAC7E,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;oBAClB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;oBACtD,IAAI,SAAS,CAAC,MAAM;wBAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;oBACjD,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBACjD,CAAC;gBAED,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;oBACZ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC1E,CAAC;qBAAM,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;oBAC/B,2EAA2E;oBAC3E,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC;gBAC3G,CAAC;gBAED,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YACnG,CAAC,CAAC;YAEF,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAC,CAAC;YAC1E,CAAC,CAAC;YAEF,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,KAAK,MAAM,GAAG,IAAI,IAAI;oBAAE,GAAG,EAAE,CAAC;gBAC9B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/C,CAAC,CAAC;YAEF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;YAC9C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,qFAAqF;QACrF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAiB,mBAAmB,EAAE;YACpE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC,CAAC;QAEH,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAEzC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sFAAsF;IAC9E,KAAK,CAAC,UAAU,CAAC,CAAY,EAAE,SAAqB;QAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAEzC,IAAI,IAAI;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC5C,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAExD,8EAA8E;QAC9E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAChG,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,CAAC,KAAK,CACjB,UAAU,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EACjE,mFAAmF,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,iFAAiF;AAEjF,SAAS,QAAQ,CAAC,IAAkB,EAAE,IAAY,EAAE,KAAc;IAChE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACvF,CAAC;AAED,SAAS,aAAa,CAAC,IAAuB;IAC5C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,OAAO,CAAC;QACjB,KAAK,KAAK;YACR,OAAO,MAAM,CAAC;QAChB;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAuB;IACtC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,KAAK;YACR,OAAO,KAAK,CAAC;QACf;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAAe;IACtC,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IACrF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAuB,EAAE,MAA2B;IACpE,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/D,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IACrC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,EAAU;IACzB,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxB,CAAC"}

package/dist/agent/approval.d.ts

@@ -1,38 +0,0 @@
-import type { Renderer } from "../render/ports.js";
-/** Side effect class drives the gate: reads pass freely, writes/execs are gated. */
-export type SideEffect = "read" | "write" | "exec";
-/** A normalized request the gate reasons about (from a host `agent:tool` event or a Tool). */
-export interface ToolRequest {
-    readonly name: string;
-    readonly sideEffect: SideEffect;
-    readonly path?: string;
-}
-export type Decision = "ask" | "allow" | "deny";
-/**
- * PermissionPolicy decides ask/allow/deny per tool. Implementations are pluggable (OCP):
- * a default policy, a "yolo" auto-allow policy for `--dangerously-allow-all`, or a config
- * driven rule set. The gate depends only on this interface (DIP).
- */
-export interface PermissionPolicy {
-    decide(tool: ToolRequest): Decision;
-}
-/**
- * Default policy: reads are always allowed, writes/execs ask, unless a rule has been
- * remembered via `remember()` (the "always" answer) for that tool name.
- */
-export declare class DefaultPermissionPolicy implements PermissionPolicy {
-    private readonly autoAllowAll;
-    private readonly allowed;
-    constructor(autoAllowAll?: boolean);
-    decide(tool: ToolRequest): Decision;
-    /** Remember an "always" answer for the rest of the session. */
-    remember(toolName: string): void;
-}
-export declare class ApprovalGate {
-    private readonly policy;
-    private readonly renderer;
-    constructor(policy: PermissionPolicy, renderer: Renderer);
-    /** Returns true if the tool may proceed (the host still re-checks via Casbin). */
-    guard(tool: ToolRequest): Promise<boolean>;
-}
-//# sourceMappingURL=approval.d.ts.map

package/dist/agent/approval.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../../src/agent/approval.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD,oFAAoF;AACpF,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAEnD,8FAA8F;AAC9F,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC;AAEhD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,IAAI,EAAE,WAAW,GAAG,QAAQ,CAAC;CACrC;AAED;;;GAGG;AACH,qBAAa,uBAAwB,YAAW,gBAAgB;IAGlD,OAAO,CAAC,QAAQ,CAAC,YAAY;IAFzC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;gBAEhB,YAAY,UAAQ;IAEjD,MAAM,CAAC,IAAI,EAAE,WAAW,GAAG,QAAQ;IAOnC,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;CAGjC;AAED,qBAAa,YAAY;IAErB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,MAAM,EAAE,gBAAgB,EACxB,QAAQ,EAAE,QAAQ;IAGrC,kFAAkF;IAC5E,KAAK,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;CAkBjD"}

package/dist/agent/approval.js

@@ -1,55 +0,0 @@
-// src/agent/approval.ts — ApprovalGate + PermissionPolicy (cli.md §7).
-//
-// The approval gate is a LOCAL UX convenience. It is NEVER the sole guard: the host
-// independently authorizes every action via Casbin server-side. The gate prompts the user
-// before a write/exec tool is applied, and supports "always" to remember a decision for the
-// rest of the session.
-/**
- * Default policy: reads are always allowed, writes/execs ask, unless a rule has been
- * remembered via `remember()` (the "always" answer) for that tool name.
- */
-export class DefaultPermissionPolicy {
-    autoAllowAll;
-    allowed = new Set();
-    constructor(autoAllowAll = false) {
-        this.autoAllowAll = autoAllowAll;
-    }
-    decide(tool) {
-        if (this.autoAllowAll)
-            return "allow";
-        if (tool.sideEffect === "read")
-            return "allow";
-        if (this.allowed.has(tool.name))
-            return "allow";
-        return "ask";
-    }
-    /** Remember an "always" answer for the rest of the session. */
-    remember(toolName) {
-        this.allowed.add(toolName);
-    }
-}
-export class ApprovalGate {
-    policy;
-    renderer;
-    constructor(policy, renderer) {
-        this.policy = policy;
-        this.renderer = renderer;
-    }
-    /** Returns true if the tool may proceed (the host still re-checks via Casbin). */
-    async guard(tool) {
-        switch (this.policy.decide(tool)) {
-            case "allow":
-                return true;
-            case "deny":
-                return false;
-            case "ask": {
-                const answer = await this.renderer.prompt(`Allow ${tool.name}${tool.path ? ` on ${tool.path}` : ""}?`, ["yes", "no", "always"]);
-                if (answer === "always" && this.policy instanceof DefaultPermissionPolicy) {
-                    this.policy.remember(tool.name);
-                }
-                return answer !== "no";
-            }
-        }
-    }
-}
-//# sourceMappingURL=approval.js.map

package/dist/agent/approval.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"approval.js","sourceRoot":"","sources":["../../src/agent/approval.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,oFAAoF;AACpF,0FAA0F;AAC1F,4FAA4F;AAC5F,uBAAuB;AAyBvB;;;GAGG;AACH,MAAM,OAAO,uBAAuB;IAGL;IAFZ,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAE7C,YAA6B,eAAe,KAAK;QAApB,iBAAY,GAAZ,YAAY,CAAQ;IAAG,CAAC;IAErD,MAAM,CAAC,IAAiB;QACtB,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,OAAO,CAAC;QACtC,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC;QAC/C,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+DAA+D;IAC/D,QAAQ,CAAC,QAAgB;QACvB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,YAAY;IAEJ;IACA;IAFnB,YACmB,MAAwB,EACxB,QAAkB;QADlB,WAAM,GAAN,MAAM,CAAkB;QACxB,aAAQ,GAAR,QAAQ,CAAU;IAClC,CAAC;IAEJ,kFAAkF;IAClF,KAAK,CAAC,KAAK,CAAC,IAAiB;QAC3B,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC;YACd,KAAK,MAAM;gBACT,OAAO,KAAK,CAAC;YACf,KAAK,KAAK,CAAC,CAAC,CAAC;gBACX,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CACvC,SAAS,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAC3D,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CACxB,CAAC;gBACF,IAAI,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,YAAY,uBAAuB,EAAE,CAAC;oBAC1E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClC,CAAC;gBACD,OAAO,MAAM,KAAK,IAAI,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/agent/run-tracker.d.ts

@@ -1,26 +0,0 @@
-export interface TrackedRun {
-    readonly runId: string;
-    readonly agent: string;
-    readonly startedAt: number;
-    /** Paths the run created/modified, in first-seen order (for undo offers). */
-    readonly touchedPaths: string[];
-    endedAt?: number;
-    code?: number;
-    error?: string;
-}
-export declare class RunTracker {
-    private readonly runs;
-    begin(runId: string, agent: string): TrackedRun;
-    /** Record a file path a tool touched during a run (deduplicated, order-preserving). */
-    touch(runId: string, path: string): void;
-    end(runId: string, result: {
-        code?: number;
-        error?: string;
-    }): void;
-    get(runId: string): TrackedRun | undefined;
-    /** runIds still streaming — replayed in ResumeState after a reconnect. */
-    inFlight(): string[];
-    /** Most recent run (for `/undo` with no explicit runId). */
-    latest(): TrackedRun | undefined;
-}
-//# sourceMappingURL=run-tracker.d.ts.map

package/dist/agent/run-tracker.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"run-tracker.d.ts","sourceRoot":"","sources":["../../src/agent/run-tracker.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiC;IAEtD,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU;IAM/C,uFAAuF;IACvF,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAKxC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IASnE,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAI1C,0EAA0E;IAC1E,QAAQ,IAAI,MAAM,EAAE;IAIpB,4DAA4D;IAC5D,MAAM,IAAI,UAAU,GAAG,SAAS;CAOjC"}

package/dist/agent/run-tracker.js

@@ -1,43 +0,0 @@
-// src/agent/run-tracker.ts — tracks agent runs for /undo and reconnect/resume.
-//
-// SRP: remember which runIds are in-flight (so the StreamPort can resume them after a drop)
-// and which file paths a run touched (so `/undo runId path` can offer the right targets).
-export class RunTracker {
-    runs = new Map();
-    begin(runId, agent) {
-        const run = { runId, agent, startedAt: Date.now(), touchedPaths: [] };
-        this.runs.set(runId, run);
-        return run;
-    }
-    /** Record a file path a tool touched during a run (deduplicated, order-preserving). */
-    touch(runId, path) {
-        const run = this.runs.get(runId);
-        if (run && !run.touchedPaths.includes(path))
-            run.touchedPaths.push(path);
-    }
-    end(runId, result) {
-        const run = this.runs.get(runId);
-        if (run) {
-            run.endedAt = Date.now();
-            run.code = result.code;
-            run.error = result.error;
-        }
-    }
-    get(runId) {
-        return this.runs.get(runId);
-    }
-    /** runIds still streaming — replayed in ResumeState after a reconnect. */
-    inFlight() {
-        return [...this.runs.values()].filter((r) => r.endedAt === undefined).map((r) => r.runId);
-    }
-    /** Most recent run (for `/undo` with no explicit runId). */
-    latest() {
-        let newest;
-        for (const r of this.runs.values()) {
-            if (!newest || r.startedAt > newest.startedAt)
-                newest = r;
-        }
-        return newest;
-    }
-}
-//# sourceMappingURL=run-tracker.js.map

package/dist/agent/run-tracker.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"run-tracker.js","sourceRoot":"","sources":["../../src/agent/run-tracker.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,4FAA4F;AAC5F,0FAA0F;AAa1F,MAAM,OAAO,UAAU;IACJ,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEtD,KAAK,CAAC,KAAa,EAAE,KAAa;QAChC,MAAM,GAAG,GAAe,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,KAAa,EAAE,IAAY;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC;IAED,GAAG,CAAC,KAAa,EAAE,MAAyC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACvB,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,GAAG,CAAC,KAAa;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,0EAA0E;IAC1E,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5F,CAAC;IAED,4DAA4D;IAC5D,MAAM;QACJ,IAAI,MAA8B,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS;gBAAE,MAAM,GAAG,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/auth/device-flow.d.ts

@@ -1,61 +0,0 @@
-/** OIDC discovery document fields we use. */
-export interface OidcDiscovery {
-    issuer: string;
-    device_authorization_endpoint: string;
-    token_endpoint: string;
-    revocation_endpoint?: string;
-    jwks_uri: string;
-}
-/** RFC 8628 device-authorization response. */
-export interface DeviceAuthResponse {
-    device_code: string;
-    user_code: string;
-    verification_uri: string;
-    verification_uri_complete?: string;
-    expires_in: number;
-    interval?: number;
-}
-/** Token endpoint success response. */
-export interface TokenSet {
-    access_token: string;
-    token_type: string;
-    expires_in?: number;
-    refresh_token?: string;
-    id_token?: string;
-    scope?: string;
-    /** Absolute epoch-ms expiry computed from `expires_in` at receipt. */
-    expiresAt?: number;
-}
-export interface DeviceFlowConfig {
-    oidcIssuer: string;
-    clientId: string;
-    scopes: readonly string[];
-}
-/** Injected so the device flow stays testable and dependency-free (no global fetch coupling). */
-export type Fetch = typeof fetch;
-/** Called once with the user_code + verification URL so the renderer can prompt the user. */
-export type DevicePrompt = (info: {
-    userCode: string;
-    verificationUri: string;
-    verificationUriComplete?: string;
-    expiresIn: number;
-}) => void;
-export declare class DeviceFlow {
-    private readonly cfg;
-    private readonly fetchImpl;
-    private readonly sleep;
-    constructor(cfg: DeviceFlowConfig, fetchImpl?: Fetch, sleep?: (ms: number) => Promise<void>);
-    /** Discover the OIDC endpoints via /.well-known/openid-configuration. */
-    discover(): Promise<OidcDiscovery>;
-    /**
-     * Run the full grant: discover → request device code (with PKCE challenge) → prompt → poll.
-     * Resolves with a TokenSet (access + optional refresh/id tokens) on user approval.
-     */
-    authorize(prompt: DevicePrompt): Promise<TokenSet>;
-    /** Refresh an access token using a refresh_token grant. */
-    refresh(refreshToken: string): Promise<TokenSet>;
-    /** Revoke a token (refresh or access) at logout, if the issuer exposes a revocation endpoint. */
-    revoke(token: string): Promise<void>;
-    private poll;
-}
-//# sourceMappingURL=device-flow.d.ts.map

package/dist/auth/device-flow.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"device-flow.d.ts","sourceRoot":"","sources":["../../src/auth/device-flow.ts"],"names":[],"mappings":"AAUA,6CAA6C;AAC7C,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B,EAAE,MAAM,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,8CAA8C;AAC9C,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,uCAAuC;AACvC,MAAM,WAAW,QAAQ;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B;AAED,iGAAiG;AACjG,MAAM,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC;AAEjC,6FAA6F;AAC7F,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB,KAAK,IAAI,CAAC;AAEX,qBAAa,UAAU;IAEnB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAFL,GAAG,EAAE,gBAAgB,EACrB,SAAS,GAAE,KAAa,EACxB,KAAK,GAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAgB;IAGtE,yEAAyE;IACnE,QAAQ,IAAI,OAAO,CAAC,aAAa,CAAC;IAYxC;;;OAGG;IACG,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC;IA+BxD,2DAA2D;IACrD,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAkBtD,iGAAiG;IAC3F,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAY5B,IAAI;CAyCnB"}