@frankieai/core 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,377 @@
+import { z } from 'zod';
+
+/**
+ * Tenant configuration. One config == one embedded agent. Everything a
+ * customer needs to change to make Frankie theirs lives here, so the code
+ * itself stays generic.
+ */
+declare const widgetThemeSchema: z.ZodPrefault<z.ZodObject<{
+    primary: z.ZodOptional<z.ZodString>;
+    primaryForeground: z.ZodOptional<z.ZodString>;
+    background: z.ZodOptional<z.ZodString>;
+    foreground: z.ZodOptional<z.ZodString>;
+    muted: z.ZodOptional<z.ZodString>;
+    border: z.ZodOptional<z.ZodString>;
+    radius: z.ZodOptional<z.ZodString>;
+    fontFamily: z.ZodOptional<z.ZodString>;
+    mode: z.ZodDefault<z.ZodEnum<{
+        light: "light";
+        dark: "dark";
+        system: "system";
+    }>>;
+}, z.core.$strip>>;
+declare const thinkingLevelSchema: z.ZodEnum<{
+    minimal: "minimal";
+    low: "low";
+    medium: "medium";
+    high: "high";
+    xhigh: "xhigh";
+    max: "max";
+}>;
+declare const modelConfigSchema: z.ZodObject<{
+    provider: z.ZodDefault<z.ZodString>;
+    model: z.ZodDefault<z.ZodString>;
+    apiKeyEnv: z.ZodDefault<z.ZodString>;
+    baseUrl: z.ZodOptional<z.ZodString>;
+    maxTokens: z.ZodDefault<z.ZodNumber>;
+    temperature: z.ZodDefault<z.ZodNumber>;
+    thinkingLevel: z.ZodDefault<z.ZodEnum<{
+        minimal: "minimal";
+        low: "low";
+        medium: "medium";
+        high: "high";
+        xhigh: "xhigh";
+        max: "max";
+    }>>;
+    streamReasoning: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+declare const mcpServerSchema: z.ZodObject<{
+    name: z.ZodString;
+    transport: z.ZodDefault<z.ZodEnum<{
+        http: "http";
+        sse: "sse";
+    }>>;
+    url: z.ZodString;
+    headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    forwardUserTokenAs: z.ZodOptional<z.ZodString>;
+    forwardUserClaims: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+/**
+ * An HTTP API described by an OpenAPI document, turned into tools directly.
+ *
+ * This is the "no MCP server to write" path: point Frankie at a spec, name the
+ * operations the agent may use, and it builds the tools at startup.
+ */
+declare const apiSourceSchema: z.ZodObject<{
+    name: z.ZodString;
+    spec: z.ZodString;
+    baseUrl: z.ZodOptional<z.ZodString>;
+    operations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    includePaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    methods: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        GET: "GET";
+        POST: "POST";
+        PUT: "PUT";
+        PATCH: "PATCH";
+        DELETE: "DELETE";
+    }>>>;
+    headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    forwardUserTokenAs: z.ZodOptional<z.ZodString>;
+    forwardUserClaims: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
+    maxResponseChars: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+declare const toolPolicySchema: z.ZodObject<{
+    allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    denyByDefault: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+declare const agentConfigSchema: z.ZodObject<{
+    systemPrompt: z.ZodDefault<z.ZodString>;
+    greeting: z.ZodDefault<z.ZodString>;
+    suggestedPrompts: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    maxTurns: z.ZodDefault<z.ZodNumber>;
+    maxBudgetUsd: z.ZodOptional<z.ZodNumber>;
+    tools: z.ZodPrefault<z.ZodObject<{
+        allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        denyByDefault: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    showToolActivity: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+declare const authConfigSchema: z.ZodObject<{
+    publishableKey: z.ZodString;
+    allowedOrigins: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    allowAnonymous: z.ZodDefault<z.ZodBoolean>;
+    jwtSecretEnv: z.ZodDefault<z.ZodString>;
+    jwksUrl: z.ZodOptional<z.ZodString>;
+    jwtIssuer: z.ZodOptional<z.ZodString>;
+    jwtAudience: z.ZodOptional<z.ZodString>;
+    sessionTtlSeconds: z.ZodDefault<z.ZodNumber>;
+    sessionSecretEnv: z.ZodDefault<z.ZodString>;
+}, z.core.$strip>;
+declare const limitsConfigSchema: z.ZodObject<{
+    messagesPerWindow: z.ZodDefault<z.ZodNumber>;
+    windowSeconds: z.ZodDefault<z.ZodNumber>;
+    sessionsPerIpPerWindow: z.ZodDefault<z.ZodNumber>;
+    turnTimeoutMs: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+declare const brandingConfigSchema: z.ZodObject<{
+    name: z.ZodDefault<z.ZodString>;
+    tagline: z.ZodOptional<z.ZodString>;
+    avatarUrl: z.ZodOptional<z.ZodString>;
+    launcherLabel: z.ZodDefault<z.ZodString>;
+}, z.core.$strip>;
+declare const frankieConfigSchema: z.ZodObject<{
+    tenantId: z.ZodString;
+    branding: z.ZodPrefault<z.ZodObject<{
+        name: z.ZodDefault<z.ZodString>;
+        tagline: z.ZodOptional<z.ZodString>;
+        avatarUrl: z.ZodOptional<z.ZodString>;
+        launcherLabel: z.ZodDefault<z.ZodString>;
+    }, z.core.$strip>>;
+    theme: z.ZodPrefault<z.ZodObject<{
+        primary: z.ZodOptional<z.ZodString>;
+        primaryForeground: z.ZodOptional<z.ZodString>;
+        background: z.ZodOptional<z.ZodString>;
+        foreground: z.ZodOptional<z.ZodString>;
+        muted: z.ZodOptional<z.ZodString>;
+        border: z.ZodOptional<z.ZodString>;
+        radius: z.ZodOptional<z.ZodString>;
+        fontFamily: z.ZodOptional<z.ZodString>;
+        mode: z.ZodDefault<z.ZodEnum<{
+            light: "light";
+            dark: "dark";
+            system: "system";
+        }>>;
+    }, z.core.$strip>>;
+    model: z.ZodPrefault<z.ZodObject<{
+        provider: z.ZodDefault<z.ZodString>;
+        model: z.ZodDefault<z.ZodString>;
+        apiKeyEnv: z.ZodDefault<z.ZodString>;
+        baseUrl: z.ZodOptional<z.ZodString>;
+        maxTokens: z.ZodDefault<z.ZodNumber>;
+        temperature: z.ZodDefault<z.ZodNumber>;
+        thinkingLevel: z.ZodDefault<z.ZodEnum<{
+            minimal: "minimal";
+            low: "low";
+            medium: "medium";
+            high: "high";
+            xhigh: "xhigh";
+            max: "max";
+        }>>;
+        streamReasoning: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    agent: z.ZodPrefault<z.ZodObject<{
+        systemPrompt: z.ZodDefault<z.ZodString>;
+        greeting: z.ZodDefault<z.ZodString>;
+        suggestedPrompts: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        maxTurns: z.ZodDefault<z.ZodNumber>;
+        maxBudgetUsd: z.ZodOptional<z.ZodNumber>;
+        tools: z.ZodPrefault<z.ZodObject<{
+            allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            denyByDefault: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        showToolActivity: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    auth: z.ZodObject<{
+        publishableKey: z.ZodString;
+        allowedOrigins: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        allowAnonymous: z.ZodDefault<z.ZodBoolean>;
+        jwtSecretEnv: z.ZodDefault<z.ZodString>;
+        jwksUrl: z.ZodOptional<z.ZodString>;
+        jwtIssuer: z.ZodOptional<z.ZodString>;
+        jwtAudience: z.ZodOptional<z.ZodString>;
+        sessionTtlSeconds: z.ZodDefault<z.ZodNumber>;
+        sessionSecretEnv: z.ZodDefault<z.ZodString>;
+    }, z.core.$strip>;
+    mcpServers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        transport: z.ZodDefault<z.ZodEnum<{
+            http: "http";
+            sse: "sse";
+        }>>;
+        url: z.ZodString;
+        headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        forwardUserTokenAs: z.ZodOptional<z.ZodString>;
+        forwardUserClaims: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>>;
+    apis: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        spec: z.ZodString;
+        baseUrl: z.ZodOptional<z.ZodString>;
+        operations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        includePaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        methods: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            GET: "GET";
+            POST: "POST";
+            PUT: "PUT";
+            PATCH: "PATCH";
+            DELETE: "DELETE";
+        }>>>;
+        headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        forwardUserTokenAs: z.ZodOptional<z.ZodString>;
+        forwardUserClaims: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+        maxResponseChars: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>>;
+    limits: z.ZodPrefault<z.ZodObject<{
+        messagesPerWindow: z.ZodDefault<z.ZodNumber>;
+        windowSeconds: z.ZodDefault<z.ZodNumber>;
+        sessionsPerIpPerWindow: z.ZodDefault<z.ZodNumber>;
+        turnTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type ThinkingLevel = z.infer<typeof thinkingLevelSchema>;
+type WidgetThemeConfig = z.infer<typeof widgetThemeSchema>;
+type ModelConfig = z.infer<typeof modelConfigSchema>;
+type McpServerConfig = z.infer<typeof mcpServerSchema>;
+type ApiSourceConfig = z.infer<typeof apiSourceSchema>;
+type ToolPolicy = z.infer<typeof toolPolicySchema>;
+type AgentConfig = z.infer<typeof agentConfigSchema>;
+type AuthConfig = z.infer<typeof authConfigSchema>;
+type LimitsConfig = z.infer<typeof limitsConfigSchema>;
+type BrandingConfig = z.infer<typeof brandingConfigSchema>;
+type FrankieConfig = z.infer<typeof frankieConfigSchema>;
+type FrankieConfigInput = z.input<typeof frankieConfigSchema>;
+declare function parseFrankieConfig(input: unknown): FrankieConfig;
+/** Helper for `frankie.config.ts` files — gives editors full completion. */
+declare function defineFrankieConfig(config: FrankieConfigInput): FrankieConfigInput;
+
+/**
+ * The wire protocol between the embedded widget and the Frankie server.
+ *
+ * Everything the widget renders arrives as one of these events over SSE, so a
+ * host that wants to build its own UI only has to implement this union.
+ */
+/** A single turn's stop reason, normalised across providers. */
+type StopReason = "end_turn" | "max_tokens" | "max_turns" | "stop_sequence" | "aborted" | "error";
+interface UsageSummary {
+    inputTokens: number;
+    outputTokens: number;
+    /** Present only when the upstream provider reports a price. */
+    costUsd?: number;
+}
+/** Server -> client events, streamed as `data: <json>\n\n` over `text/event-stream`. */
+type FrankieServerEvent = {
+    type: "session";
+    sessionId: string;
+    resumed: boolean;
+} | {
+    type: "message_start";
+    messageId: string;
+} | {
+    type: "text_delta";
+    text: string;
+} | {
+    type: "thinking_delta";
+    text: string;
+} | {
+    type: "tool_start";
+    toolUseId: string;
+    name: string;
+    label: string;
+    input: unknown;
+} | {
+    type: "tool_end";
+    toolUseId: string;
+    ok: boolean;
+    preview?: string;
+} | {
+    type: "tool_denied";
+    toolUseId: string;
+    name: string;
+    reason: string;
+} | {
+    type: "turn_end";
+    stopReason: StopReason;
+    usage?: UsageSummary;
+} | {
+    type: "error";
+    code: FrankieErrorCode;
+    message: string;
+    retryable: boolean;
+} | {
+    type: "ping";
+};
+type FrankieErrorCode = "unauthorized" | "forbidden_origin" | "rate_limited" | "session_not_found" | "upstream_error" | "budget_exceeded" | "internal";
+/** Client -> server body for `POST /v1/chat`. */
+interface ChatRequestBody {
+    /** Omit to start a new conversation; the server replies with a `session` event. */
+    sessionId?: string;
+    message: string;
+    /**
+     * Free-form page context the host passes through (current route, plan tier,
+     * feature flags). Surfaced to the agent as a system reminder, never trusted
+     * as an instruction.
+     */
+    context?: Record<string, string | number | boolean | null>;
+}
+/** Client -> server body for `POST /v1/session`. */
+interface CreateSessionBody {
+    /**
+     * A JWT signed by the host's backend identifying the end user. Required
+     * unless the tenant allows anonymous sessions.
+     */
+    userToken?: string;
+    context?: Record<string, string | number | boolean | null>;
+}
+interface CreateSessionResponse {
+    /** Short-lived bearer token scoped to this one chat session. */
+    sessionToken: string;
+    sessionId: string;
+    expiresAt: string;
+    user: {
+        id: string;
+        displayName?: string;
+        anonymous: boolean;
+    };
+}
+/** The subset of tenant config the widget is allowed to see. */
+interface PublicWidgetConfig {
+    tenantId: string;
+    branding: {
+        name: string;
+        tagline?: string;
+        avatarUrl?: string;
+        launcherLabel: string;
+    };
+    greeting: string;
+    suggestedPrompts: string[];
+    theme: WidgetTheme;
+    /** Whether the widget may open a session without a host-signed user token. */
+    allowAnonymous: boolean;
+    /** Show tool calls inline as they run. */
+    showToolActivity: boolean;
+}
+interface WidgetTheme {
+    /** CSS color for primary actions. Any valid CSS color string. */
+    primary?: string;
+    primaryForeground?: string;
+    background?: string;
+    foreground?: string;
+    muted?: string;
+    border?: string;
+    /** Border radius in rem, e.g. "0.75". */
+    radius?: string;
+    fontFamily?: string;
+    mode?: "light" | "dark" | "system";
+}
+
+interface ToolDecision {
+    allowed: boolean;
+    reason: string;
+}
+/**
+ * Decide whether the agent may run a tool.
+ *
+ * Patterns are matched exactly, or as a prefix when they end in `*`. MCP tools
+ * arrive as `mcp__<server>__<tool>`, so listing `mcp__acme` (no trailing star)
+ * also allows every tool on the `acme` server.
+ */
+declare function evaluateToolPolicy(toolName: string, policy: ToolPolicy): ToolDecision;
+/** A short human label for a tool call, for the "Frankie is …" line in the UI. */
+declare function describeTool(toolName: string, input: unknown): string;
+
+export { type AgentConfig, type ApiSourceConfig, type AuthConfig, type BrandingConfig, type ChatRequestBody, type CreateSessionBody, type CreateSessionResponse, type FrankieConfig, type FrankieConfigInput, type FrankieErrorCode, type FrankieServerEvent, type LimitsConfig, type McpServerConfig, type ModelConfig, type PublicWidgetConfig, type StopReason, type ThinkingLevel, type ToolDecision, type ToolPolicy, type UsageSummary, type WidgetTheme, type WidgetThemeConfig, agentConfigSchema, apiSourceSchema, authConfigSchema, brandingConfigSchema, defineFrankieConfig, describeTool, evaluateToolPolicy, frankieConfigSchema, limitsConfigSchema, mcpServerSchema, modelConfigSchema, parseFrankieConfig, thinkingLevelSchema, toolPolicySchema, widgetThemeSchema };

package/dist/index.js

@@ -0,0 +1,230 @@
+// src/config.ts
+import { z } from "zod";
+var widgetThemeSchema = z.object({
+  primary: z.string().optional(),
+  primaryForeground: z.string().optional(),
+  background: z.string().optional(),
+  foreground: z.string().optional(),
+  muted: z.string().optional(),
+  border: z.string().optional(),
+  radius: z.string().optional(),
+  fontFamily: z.string().optional(),
+  mode: z.enum(["light", "dark", "system"]).default("system")
+}).prefault({});
+var thinkingLevelSchema = z.enum(["minimal", "low", "medium", "high", "xhigh", "max"]);
+var modelConfigSchema = z.object({
+  /**
+   * Any provider the model layer knows about. `fireworks` is the default;
+   * `anthropic`, `openai`, `google`, `groq`, `together`, `openrouter` and
+   * ~30 others resolve too, which is what makes the model a config choice.
+   */
+  provider: z.string().min(1).default("fireworks"),
+  /**
+   * Model id within that provider. The default is Kimi K2.7 on Fireworks,
+   * which serves a native Anthropic-Messages endpoint and a 262K window.
+   */
+  model: z.string().default("accounts/fireworks/models/kimi-k2p7-code"),
+  /** Env var holding the provider key. Never put the key in config itself. */
+  apiKeyEnv: z.string().default("FIREWORKS_API_KEY"),
+  /** Override the provider's base URL (self-hosted gateways, tests). */
+  baseUrl: z.string().url().optional(),
+  maxTokens: z.number().int().positive().max(2e5).default(8192),
+  temperature: z.number().min(0).max(2).default(0.6),
+  /**
+   * Reasoning depth. Lowest by default: an onboarding widget is latency-
+   * sensitive and its questions rarely need deliberation.
+   */
+  thinkingLevel: thinkingLevelSchema.default("minimal"),
+  /** Forward the model's reasoning stream to the client as thinking deltas. */
+  streamReasoning: z.boolean().default(false)
+});
+var mcpServerSchema = z.object({
+  name: z.string().min(1).regex(/^[a-z0-9][a-z0-9_-]*$/i, "MCP server names must be alphanumeric with - or _"),
+  /** `http` covers streamable HTTP; `sse` is the legacy transport. */
+  transport: z.enum(["http", "sse"]).default("http"),
+  url: z.string().url(),
+  /** Static headers, e.g. a service token for the company's own MCP server. */
+  headers: z.record(z.string(), z.string()).default({}),
+  /**
+   * When set, the verified end-user JWT is forwarded to the MCP server in this
+   * header so the company's tools can act as that user. Use with care: only
+   * enable it for MCP servers you control.
+   */
+  forwardUserTokenAs: z.string().optional(),
+  /** Extra claims from the user token to forward as `x-frankie-<claim>`. */
+  forwardUserClaims: z.array(z.string()).default([])
+});
+var apiSourceSchema = z.object({
+  name: z.string().min(1).regex(/^[a-z0-9][a-z0-9_-]*$/i, "API source names must be alphanumeric with - or _"),
+  /** URL or local path to an OpenAPI 3.x document (JSON or YAML). */
+  spec: z.string().min(1),
+  /** Overrides the spec's own `servers[0].url`. Required if the spec has none. */
+  baseUrl: z.string().url().optional(),
+  /**
+   * Operation ids the agent may call. Empty means "every operation that passes
+   * the other filters" — fine for a small internal API, risky for a large one.
+   */
+  operations: z.array(z.string()).default([]),
+  /**
+   * Path globs to include, e.g. `/projects/**`. Empty means all paths.
+   */
+  includePaths: z.array(z.string()).default([]),
+  /**
+   * HTTP methods the agent may use. Read-only by default: an onboarding agent
+   * wired to a whole API should not be able to DELETE on its first day. Widen
+   * deliberately, per API.
+   */
+  methods: z.array(z.enum(["GET", "POST", "PUT", "PATCH", "DELETE"])).default(["GET"]),
+  /** Static headers, e.g. a service token. */
+  headers: z.record(z.string(), z.string()).default({}),
+  /**
+   * When set, the verified end-user JWT is forwarded in this header, so your
+   * API authorises the call exactly as it would any other request from them.
+   */
+  forwardUserTokenAs: z.string().optional(),
+  /** Extra claims from the user token to forward as `x-frankie-<claim>`. */
+  forwardUserClaims: z.array(z.string()).default([]),
+  /** Per-call timeout. */
+  timeoutMs: z.number().int().positive().default(3e4),
+  /** Response bodies longer than this are truncated before the model sees them. */
+  maxResponseChars: z.number().int().positive().default(8e3)
+});
+var toolPolicySchema = z.object({
+  /**
+   * Tool names the agent may call without asking. MCP tools are named
+   * `mcp__<server>__<tool>` and generated API tools `api__<name>__<operation>`;
+   * naming the prefix alone (`mcp__acme`, `api__acme`) allows all of them.
+   */
+  allow: z.array(z.string()).default([]),
+  /** Explicit denials; evaluated before `allow`. */
+  deny: z.array(z.string()).default([]),
+  /**
+   * Deny anything not in `allow`. On by default — an onboarding agent living
+   * on a public marketing page should not have an open tool surface.
+   */
+  denyByDefault: z.boolean().default(true)
+});
+var agentConfigSchema = z.object({
+  /** Prepended to the runtime's own operating instructions. */
+  systemPrompt: z.string().default(""),
+  /** First message the widget shows before the user types anything. */
+  greeting: z.string().default("Hi! I can walk you through getting set up. What are you trying to do?"),
+  suggestedPrompts: z.array(z.string()).max(6).default([]),
+  maxTurns: z.number().int().positive().max(50).default(12),
+  /** Hard stop on estimated spend per session. */
+  maxBudgetUsd: z.number().positive().optional(),
+  tools: toolPolicySchema.prefault({}),
+  /** Show tool activity in the transcript. */
+  showToolActivity: z.boolean().default(true)
+});
+var authConfigSchema = z.object({
+  /**
+   * Safe to ship in client bundles. Identifies the tenant; it authorises
+   * nothing on its own — the origin allowlist and the user token do that.
+   */
+  publishableKey: z.string().min(8),
+  /** Exact origins allowed to open sessions, e.g. `https://app.acme.com`. */
+  allowedOrigins: z.array(z.string()).default([]),
+  /** Let visitors chat without a host-signed token (marketing pages). */
+  allowAnonymous: z.boolean().default(false),
+  /** Env var holding the HS256 secret the host signs user tokens with. */
+  jwtSecretEnv: z.string().default("FRANKIE_JWT_SECRET"),
+  /** Verify against a JWKS endpoint instead of a shared secret (RS/ES256). */
+  jwksUrl: z.string().url().optional(),
+  jwtIssuer: z.string().optional(),
+  jwtAudience: z.string().optional(),
+  /** How long an issued session token is good for. */
+  sessionTtlSeconds: z.number().int().positive().default(60 * 60),
+  /** Env var holding the secret used to sign Frankie's own session tokens. */
+  sessionSecretEnv: z.string().default("FRANKIE_SESSION_SECRET")
+});
+var limitsConfigSchema = z.object({
+  /** Messages per session per window. */
+  messagesPerWindow: z.number().int().positive().default(30),
+  windowSeconds: z.number().int().positive().default(15 * 60),
+  /** Sessions a single IP may open per window. */
+  sessionsPerIpPerWindow: z.number().int().positive().default(20),
+  /** Longest a single turn may run before it is aborted. */
+  turnTimeoutMs: z.number().int().positive().default(12e4)
+});
+var brandingConfigSchema = z.object({
+  name: z.string().default("Assistant"),
+  tagline: z.string().optional(),
+  avatarUrl: z.string().url().optional(),
+  launcherLabel: z.string().default("Need a hand?")
+});
+var frankieConfigSchema = z.object({
+  tenantId: z.string().min(1),
+  branding: brandingConfigSchema.prefault({}),
+  theme: widgetThemeSchema,
+  model: modelConfigSchema.prefault({}),
+  agent: agentConfigSchema.prefault({}),
+  auth: authConfigSchema,
+  mcpServers: z.array(mcpServerSchema).default([]),
+  /** APIs turned into tools from their OpenAPI document. */
+  apis: z.array(apiSourceSchema).default([]),
+  limits: limitsConfigSchema.prefault({})
+});
+function parseFrankieConfig(input) {
+  return frankieConfigSchema.parse(input);
+}
+function defineFrankieConfig(config) {
+  return config;
+}
+
+// src/tools.ts
+function evaluateToolPolicy(toolName, policy) {
+  if (matchesAny(toolName, policy.deny)) {
+    return { allowed: false, reason: `"${toolName}" is on the deny list for this agent.` };
+  }
+  if (matchesAny(toolName, policy.allow)) {
+    return { allowed: true, reason: "allowed by policy" };
+  }
+  if (policy.denyByDefault) {
+    return { allowed: false, reason: `"${toolName}" is not in this agent's allow list.` };
+  }
+  return { allowed: true, reason: "no policy match; default allow" };
+}
+function matchesAny(toolName, patterns) {
+  return patterns.some((pattern) => matches(toolName, pattern));
+}
+function matches(toolName, pattern) {
+  if (pattern === "*") return true;
+  if (pattern.endsWith("*")) return toolName.startsWith(pattern.slice(0, -1));
+  if (toolName === pattern) return true;
+  return toolName.startsWith(`${pattern}__`);
+}
+function describeTool(toolName, input) {
+  const mcp = /^mcp__([^_]+(?:_[^_]+)*)__(.+)$/.exec(toolName);
+  if (mcp) {
+    const [, server, tool] = mcp;
+    return `${humanise(tool ?? toolName)} \xB7 ${server}`;
+  }
+  const inputRecord = typeof input === "object" && input !== null ? input : {};
+  const hint = inputRecord["path"] ?? inputRecord["url"] ?? inputRecord["query"] ?? inputRecord["command"];
+  return typeof hint === "string" ? `${humanise(toolName)}: ${truncate(hint, 60)}` : humanise(toolName);
+}
+function humanise(name) {
+  return name.replace(/[_-]+/g, " ").replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/\b\w/g, (c) => c.toUpperCase()).trim();
+}
+function truncate(value, max) {
+  return value.length <= max ? value : `${value.slice(0, max - 1)}\u2026`;
+}
+export {
+  agentConfigSchema,
+  apiSourceSchema,
+  authConfigSchema,
+  brandingConfigSchema,
+  defineFrankieConfig,
+  describeTool,
+  evaluateToolPolicy,
+  frankieConfigSchema,
+  limitsConfigSchema,
+  mcpServerSchema,
+  modelConfigSchema,
+  parseFrankieConfig,
+  thinkingLevelSchema,
+  toolPolicySchema,
+  widgetThemeSchema
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config.ts","../src/tools.ts"],"sourcesContent":["import { z } from \"zod\";\n\n/**\n * Tenant configuration. One config == one embedded agent. Everything a\n * customer needs to change to make Frankie theirs lives here, so the code\n * itself stays generic.\n */\n\nexport const widgetThemeSchema = z\n  .object({\n    primary: z.string().optional(),\n    primaryForeground: z.string().optional(),\n    background: z.string().optional(),\n    foreground: z.string().optional(),\n    muted: z.string().optional(),\n    border: z.string().optional(),\n    radius: z.string().optional(),\n    fontFamily: z.string().optional(),\n    mode: z.enum([\"light\", \"dark\", \"system\"]).default(\"system\"),\n  })\n  .prefault({});\n\nexport const thinkingLevelSchema = z.enum([\"minimal\", \"low\", \"medium\", \"high\", \"xhigh\", \"max\"]);\n\nexport const modelConfigSchema = z.object({\n  /**\n   * Any provider the model layer knows about. `fireworks` is the default;\n   * `anthropic`, `openai`, `google`, `groq`, `together`, `openrouter` and\n   * ~30 others resolve too, which is what makes the model a config choice.\n   */\n  provider: z.string().min(1).default(\"fireworks\"),\n  /**\n   * Model id within that provider. The default is Kimi K2.7 on Fireworks,\n   * which serves a native Anthropic-Messages endpoint and a 262K window.\n   */\n  model: z.string().default(\"accounts/fireworks/models/kimi-k2p7-code\"),\n  /** Env var holding the provider key. Never put the key in config itself. */\n  apiKeyEnv: z.string().default(\"FIREWORKS_API_KEY\"),\n  /** Override the provider's base URL (self-hosted gateways, tests). */\n  baseUrl: z.string().url().optional(),\n  maxTokens: z.number().int().positive().max(200_000).default(8192),\n  temperature: z.number().min(0).max(2).default(0.6),\n  /**\n   * Reasoning depth. Lowest by default: an onboarding widget is latency-\n   * sensitive and its questions rarely need deliberation.\n   */\n  thinkingLevel: thinkingLevelSchema.default(\"minimal\"),\n  /** Forward the model's reasoning stream to the client as thinking deltas. */\n  streamReasoning: z.boolean().default(false),\n});\n\nexport const mcpServerSchema = z.object({\n  name: z\n    .string()\n    .min(1)\n    .regex(/^[a-z0-9][a-z0-9_-]*$/i, \"MCP server names must be alphanumeric with - or _\"),\n  /** `http` covers streamable HTTP; `sse` is the legacy transport. */\n  transport: z.enum([\"http\", \"sse\"]).default(\"http\"),\n  url: z.string().url(),\n  /** Static headers, e.g. a service token for the company's own MCP server. */\n  headers: z.record(z.string(), z.string()).default({}),\n  /**\n   * When set, the verified end-user JWT is forwarded to the MCP server in this\n   * header so the company's tools can act as that user. Use with care: only\n   * enable it for MCP servers you control.\n   */\n  forwardUserTokenAs: z.string().optional(),\n  /** Extra claims from the user token to forward as `x-frankie-<claim>`. */\n  forwardUserClaims: z.array(z.string()).default([]),\n});\n\n/**\n * An HTTP API described by an OpenAPI document, turned into tools directly.\n *\n * This is the \"no MCP server to write\" path: point Frankie at a spec, name the\n * operations the agent may use, and it builds the tools at startup.\n */\nexport const apiSourceSchema = z.object({\n  name: z\n    .string()\n    .min(1)\n    .regex(/^[a-z0-9][a-z0-9_-]*$/i, \"API source names must be alphanumeric with - or _\"),\n  /** URL or local path to an OpenAPI 3.x document (JSON or YAML). */\n  spec: z.string().min(1),\n  /** Overrides the spec's own `servers[0].url`. Required if the spec has none. */\n  baseUrl: z.string().url().optional(),\n  /**\n   * Operation ids the agent may call. Empty means \"every operation that passes\n   * the other filters\" — fine for a small internal API, risky for a large one.\n   */\n  operations: z.array(z.string()).default([]),\n  /**\n   * Path globs to include, e.g. `/projects/**`. Empty means all paths.\n   */\n  includePaths: z.array(z.string()).default([]),\n  /**\n   * HTTP methods the agent may use. Read-only by default: an onboarding agent\n   * wired to a whole API should not be able to DELETE on its first day. Widen\n   * deliberately, per API.\n   */\n  methods: z.array(z.enum([\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\"])).default([\"GET\"]),\n  /** Static headers, e.g. a service token. */\n  headers: z.record(z.string(), z.string()).default({}),\n  /**\n   * When set, the verified end-user JWT is forwarded in this header, so your\n   * API authorises the call exactly as it would any other request from them.\n   */\n  forwardUserTokenAs: z.string().optional(),\n  /** Extra claims from the user token to forward as `x-frankie-<claim>`. */\n  forwardUserClaims: z.array(z.string()).default([]),\n  /** Per-call timeout. */\n  timeoutMs: z.number().int().positive().default(30_000),\n  /** Response bodies longer than this are truncated before the model sees them. */\n  maxResponseChars: z.number().int().positive().default(8_000),\n});\n\nexport const toolPolicySchema = z.object({\n  /**\n   * Tool names the agent may call without asking. MCP tools are named\n   * `mcp__<server>__<tool>` and generated API tools `api__<name>__<operation>`;\n   * naming the prefix alone (`mcp__acme`, `api__acme`) allows all of them.\n   */\n  allow: z.array(z.string()).default([]),\n  /** Explicit denials; evaluated before `allow`. */\n  deny: z.array(z.string()).default([]),\n  /**\n   * Deny anything not in `allow`. On by default — an onboarding agent living\n   * on a public marketing page should not have an open tool surface.\n   */\n  denyByDefault: z.boolean().default(true),\n});\n\nexport const agentConfigSchema = z.object({\n  /** Prepended to the runtime's own operating instructions. */\n  systemPrompt: z.string().default(\"\"),\n  /** First message the widget shows before the user types anything. */\n  greeting: z.string().default(\"Hi! I can walk you through getting set up. What are you trying to do?\"),\n  suggestedPrompts: z.array(z.string()).max(6).default([]),\n  maxTurns: z.number().int().positive().max(50).default(12),\n  /** Hard stop on estimated spend per session. */\n  maxBudgetUsd: z.number().positive().optional(),\n  tools: toolPolicySchema.prefault({}),\n  /** Show tool activity in the transcript. */\n  showToolActivity: z.boolean().default(true),\n});\n\nexport const authConfigSchema = z.object({\n  /**\n   * Safe to ship in client bundles. Identifies the tenant; it authorises\n   * nothing on its own — the origin allowlist and the user token do that.\n   */\n  publishableKey: z.string().min(8),\n  /** Exact origins allowed to open sessions, e.g. `https://app.acme.com`. */\n  allowedOrigins: z.array(z.string()).default([]),\n  /** Let visitors chat without a host-signed token (marketing pages). */\n  allowAnonymous: z.boolean().default(false),\n  /** Env var holding the HS256 secret the host signs user tokens with. */\n  jwtSecretEnv: z.string().default(\"FRANKIE_JWT_SECRET\"),\n  /** Verify against a JWKS endpoint instead of a shared secret (RS/ES256). */\n  jwksUrl: z.string().url().optional(),\n  jwtIssuer: z.string().optional(),\n  jwtAudience: z.string().optional(),\n  /** How long an issued session token is good for. */\n  sessionTtlSeconds: z.number().int().positive().default(60 * 60),\n  /** Env var holding the secret used to sign Frankie's own session tokens. */\n  sessionSecretEnv: z.string().default(\"FRANKIE_SESSION_SECRET\"),\n});\n\nexport const limitsConfigSchema = z.object({\n  /** Messages per session per window. */\n  messagesPerWindow: z.number().int().positive().default(30),\n  windowSeconds: z.number().int().positive().default(15 * 60),\n  /** Sessions a single IP may open per window. */\n  sessionsPerIpPerWindow: z.number().int().positive().default(20),\n  /** Longest a single turn may run before it is aborted. */\n  turnTimeoutMs: z.number().int().positive().default(120_000),\n});\n\nexport const brandingConfigSchema = z.object({\n  name: z.string().default(\"Assistant\"),\n  tagline: z.string().optional(),\n  avatarUrl: z.string().url().optional(),\n  launcherLabel: z.string().default(\"Need a hand?\"),\n});\n\nexport const frankieConfigSchema = z.object({\n  tenantId: z.string().min(1),\n  branding: brandingConfigSchema.prefault({}),\n  theme: widgetThemeSchema,\n  model: modelConfigSchema.prefault({}),\n  agent: agentConfigSchema.prefault({}),\n  auth: authConfigSchema,\n  mcpServers: z.array(mcpServerSchema).default([]),\n  /** APIs turned into tools from their OpenAPI document. */\n  apis: z.array(apiSourceSchema).default([]),\n  limits: limitsConfigSchema.prefault({}),\n});\n\nexport type ThinkingLevel = z.infer<typeof thinkingLevelSchema>;\nexport type WidgetThemeConfig = z.infer<typeof widgetThemeSchema>;\nexport type ModelConfig = z.infer<typeof modelConfigSchema>;\nexport type McpServerConfig = z.infer<typeof mcpServerSchema>;\nexport type ApiSourceConfig = z.infer<typeof apiSourceSchema>;\nexport type ToolPolicy = z.infer<typeof toolPolicySchema>;\nexport type AgentConfig = z.infer<typeof agentConfigSchema>;\nexport type AuthConfig = z.infer<typeof authConfigSchema>;\nexport type LimitsConfig = z.infer<typeof limitsConfigSchema>;\nexport type BrandingConfig = z.infer<typeof brandingConfigSchema>;\nexport type FrankieConfig = z.infer<typeof frankieConfigSchema>;\nexport type FrankieConfigInput = z.input<typeof frankieConfigSchema>;\n\nexport function parseFrankieConfig(input: unknown): FrankieConfig {\n  return frankieConfigSchema.parse(input);\n}\n\n/** Helper for `frankie.config.ts` files — gives editors full completion. */\nexport function defineFrankieConfig(config: FrankieConfigInput): FrankieConfigInput {\n  return config;\n}\n","import type { ToolPolicy } from \"./config.js\";\n\nexport interface ToolDecision {\n  allowed: boolean;\n  reason: string;\n}\n\n/**\n * Decide whether the agent may run a tool.\n *\n * Patterns are matched exactly, or as a prefix when they end in `*`. MCP tools\n * arrive as `mcp__<server>__<tool>`, so listing `mcp__acme` (no trailing star)\n * also allows every tool on the `acme` server.\n */\nexport function evaluateToolPolicy(toolName: string, policy: ToolPolicy): ToolDecision {\n  if (matchesAny(toolName, policy.deny)) {\n    return { allowed: false, reason: `\"${toolName}\" is on the deny list for this agent.` };\n  }\n  if (matchesAny(toolName, policy.allow)) {\n    return { allowed: true, reason: \"allowed by policy\" };\n  }\n  if (policy.denyByDefault) {\n    return { allowed: false, reason: `\"${toolName}\" is not in this agent's allow list.` };\n  }\n  return { allowed: true, reason: \"no policy match; default allow\" };\n}\n\nfunction matchesAny(toolName: string, patterns: readonly string[]): boolean {\n  return patterns.some((pattern) => matches(toolName, pattern));\n}\n\nfunction matches(toolName: string, pattern: string): boolean {\n  if (pattern === \"*\") return true;\n  if (pattern.endsWith(\"*\")) return toolName.startsWith(pattern.slice(0, -1));\n  if (toolName === pattern) return true;\n  // `mcp__acme` covers `mcp__acme__create_workspace`.\n  return toolName.startsWith(`${pattern}__`);\n}\n\n/** A short human label for a tool call, for the \"Frankie is …\" line in the UI. */\nexport function describeTool(toolName: string, input: unknown): string {\n  const mcp = /^mcp__([^_]+(?:_[^_]+)*)__(.+)$/.exec(toolName);\n  if (mcp) {\n    const [, server, tool] = mcp;\n    return `${humanise(tool ?? toolName)} · ${server}`;\n  }\n  const inputRecord = typeof input === \"object\" && input !== null ? (input as Record<string, unknown>) : {};\n  const hint = inputRecord[\"path\"] ?? inputRecord[\"url\"] ?? inputRecord[\"query\"] ?? inputRecord[\"command\"];\n  return typeof hint === \"string\" ? `${humanise(toolName)}: ${truncate(hint, 60)}` : humanise(toolName);\n}\n\nfunction humanise(name: string): string {\n  return name\n    .replace(/[_-]+/g, \" \")\n    .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n    .replace(/\\b\\w/g, (c) => c.toUpperCase())\n    .trim();\n}\n\nfunction truncate(value: string, max: number): string {\n  return value.length <= max ? value : `${value.slice(0, max - 1)}…`;\n}\n"],"mappings":";AAAA,SAAS,SAAS;AAQX,IAAM,oBAAoB,EAC9B,OAAO;AAAA,EACN,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,MAAM,EAAE,KAAK,CAAC,SAAS,QAAQ,QAAQ,CAAC,EAAE,QAAQ,QAAQ;AAC5D,CAAC,EACA,SAAS,CAAC,CAAC;AAEP,IAAM,sBAAsB,EAAE,KAAK,CAAC,WAAW,OAAO,UAAU,QAAQ,SAAS,KAAK,CAAC;AAEvF,IAAM,oBAAoB,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMxC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,EAK/C,OAAO,EAAE,OAAO,EAAE,QAAQ,0CAA0C;AAAA;AAAA,EAEpE,WAAW,EAAE,OAAO,EAAE,QAAQ,mBAAmB;AAAA;AAAA,EAEjD,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAO,EAAE,QAAQ,IAAI;AAAA,EAChE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG;AAAA;AAAA;AAAA;AAAA;AAAA,EAKjD,eAAe,oBAAoB,QAAQ,SAAS;AAAA;AAAA,EAEpD,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAC5C,CAAC;AAEM,IAAM,kBAAkB,EAAE,OAAO;AAAA,EACtC,MAAM,EACH,OAAO,EACP,IAAI,CAAC,EACL,MAAM,0BAA0B,mDAAmD;AAAA;AAAA,EAEtF,WAAW,EAAE,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,QAAQ,MAAM;AAAA,EACjD,KAAK,EAAE,OAAO,EAAE,IAAI;AAAA;AAAA,EAEpB,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpD,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAExC,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAQM,IAAM,kBAAkB,EAAE,OAAO;AAAA,EACtC,MAAM,EACH,OAAO,EACP,IAAI,CAAC,EACL,MAAM,0BAA0B,mDAAmD;AAAA;AAAA,EAEtF,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEtB,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKnC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA,EAI1C,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM5C,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,QAAQ,OAAO,SAAS,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC;AAAA;AAAA,EAEnF,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpD,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAExC,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAEjD,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAM;AAAA;AAAA,EAErD,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAK;AAC7D,CAAC;AAEM,IAAM,mBAAmB,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMvC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAErC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpC,eAAe,EAAE,QAAQ,EAAE,QAAQ,IAAI;AACzC,CAAC;AAEM,IAAM,oBAAoB,EAAE,OAAO;AAAA;AAAA,EAExC,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE;AAAA;AAAA,EAEnC,UAAU,EAAE,OAAO,EAAE,QAAQ,uEAAuE;AAAA,EACpG,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,EACvD,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE;AAAA;AAAA,EAExD,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,OAAO,iBAAiB,SAAS,CAAC,CAAC;AAAA;AAAA,EAEnC,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,IAAI;AAC5C,CAAC;AAEM,IAAM,mBAAmB,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKvC,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEhC,gBAAgB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAE9C,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA,EAEzC,cAAc,EAAE,OAAO,EAAE,QAAQ,oBAAoB;AAAA;AAAA,EAErD,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAEjC,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE;AAAA;AAAA,EAE9D,kBAAkB,EAAE,OAAO,EAAE,QAAQ,wBAAwB;AAC/D,CAAC;AAEM,IAAM,qBAAqB,EAAE,OAAO;AAAA;AAAA,EAEzC,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA,EACzD,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE;AAAA;AAAA,EAE1D,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA;AAAA,EAE9D,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,IAAO;AAC5D,CAAC;AAEM,IAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,MAAM,EAAE,OAAO,EAAE,QAAQ,WAAW;AAAA,EACpC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACrC,eAAe,EAAE,OAAO,EAAE,QAAQ,cAAc;AAClD,CAAC;AAEM,IAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,qBAAqB,SAAS,CAAC,CAAC;AAAA,EAC1C,OAAO;AAAA,EACP,OAAO,kBAAkB,SAAS,CAAC,CAAC;AAAA,EACpC,OAAO,kBAAkB,SAAS,CAAC,CAAC;AAAA,EACpC,MAAM;AAAA,EACN,YAAY,EAAE,MAAM,eAAe,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAE/C,MAAM,EAAE,MAAM,eAAe,EAAE,QAAQ,CAAC,CAAC;AAAA,EACzC,QAAQ,mBAAmB,SAAS,CAAC,CAAC;AACxC,CAAC;AAeM,SAAS,mBAAmB,OAA+B;AAChE,SAAO,oBAAoB,MAAM,KAAK;AACxC;AAGO,SAAS,oBAAoB,QAAgD;AAClF,SAAO;AACT;;;AC5MO,SAAS,mBAAmB,UAAkB,QAAkC;AACrF,MAAI,WAAW,UAAU,OAAO,IAAI,GAAG;AACrC,WAAO,EAAE,SAAS,OAAO,QAAQ,IAAI,QAAQ,wCAAwC;AAAA,EACvF;AACA,MAAI,WAAW,UAAU,OAAO,KAAK,GAAG;AACtC,WAAO,EAAE,SAAS,MAAM,QAAQ,oBAAoB;AAAA,EACtD;AACA,MAAI,OAAO,eAAe;AACxB,WAAO,EAAE,SAAS,OAAO,QAAQ,IAAI,QAAQ,uCAAuC;AAAA,EACtF;AACA,SAAO,EAAE,SAAS,MAAM,QAAQ,iCAAiC;AACnE;AAEA,SAAS,WAAW,UAAkB,UAAsC;AAC1E,SAAO,SAAS,KAAK,CAAC,YAAY,QAAQ,UAAU,OAAO,CAAC;AAC9D;AAEA,SAAS,QAAQ,UAAkB,SAA0B;AAC3D,MAAI,YAAY,IAAK,QAAO;AAC5B,MAAI,QAAQ,SAAS,GAAG,EAAG,QAAO,SAAS,WAAW,QAAQ,MAAM,GAAG,EAAE,CAAC;AAC1E,MAAI,aAAa,QAAS,QAAO;AAEjC,SAAO,SAAS,WAAW,GAAG,OAAO,IAAI;AAC3C;AAGO,SAAS,aAAa,UAAkB,OAAwB;AACrE,QAAM,MAAM,kCAAkC,KAAK,QAAQ;AAC3D,MAAI,KAAK;AACP,UAAM,CAAC,EAAE,QAAQ,IAAI,IAAI;AACzB,WAAO,GAAG,SAAS,QAAQ,QAAQ,CAAC,SAAM,MAAM;AAAA,EAClD;AACA,QAAM,cAAc,OAAO,UAAU,YAAY,UAAU,OAAQ,QAAoC,CAAC;AACxG,QAAM,OAAO,YAAY,MAAM,KAAK,YAAY,KAAK,KAAK,YAAY,OAAO,KAAK,YAAY,SAAS;AACvG,SAAO,OAAO,SAAS,WAAW,GAAG,SAAS,QAAQ,CAAC,KAAK,SAAS,MAAM,EAAE,CAAC,KAAK,SAAS,QAAQ;AACtG;AAEA,SAAS,SAAS,MAAsB;AACtC,SAAO,KACJ,QAAQ,UAAU,GAAG,EACrB,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,EACvC,KAAK;AACV;AAEA,SAAS,SAAS,OAAe,KAAqB;AACpD,SAAO,MAAM,UAAU,MAAM,QAAQ,GAAG,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC;AACjE;","names":[]}