@gobing-ai/ts-ai-decision 0.5.30 → 0.5.32

package/README.md

@@ -1,15 +1,53 @@
 # @gobing-ai/ts-ai-decision
 
-Declarative YAML **decision catalogs** over the `DecisionMaker` surface of
-`@gobing-ai/ts-ai-runner`, served through a fallback-guaranteed **`DecisionHub`** (ADR-033). A
-catalog declares named, static decision points whose shape follows TypeSafe AI's Jev question
-spec (`type` / `instructions` / `criteria`), with a required `fallback` so every decision always
-has a concrete answer.
+The home of the **decision family** in ts-libs: declarative YAML **decision catalogs**, the
+**`DecisionMakerRegistry`** that names every decision maker, and the fallback-guaranteed
+**`DecisionHub`** that serves them (ADR-033). Applications depend on this package; the concrete
+decision backends stay in their own packages and are bundled or registered here.
 
-The package owns three layers: the strict catalog schema and loader (JSON Schema + zod,
-`${params.*}` template validation/rendering, load-time consistency checks), the
-`DecisionMakerRegistry` (makers picked by name), and the `DecisionHub` (one Jev question per
-`decide`, declared fallback on every backend outcome).
+A catalog declares named, static decision points whose shape follows TypeSafe AI's Jev question
+spec (`type` / `instructions` / `criteria`), with a required `fallback`, so every decision always
+has a concrete answer no matter which backend is configured or available.
+
+## The decision family at a glance
+
+| Layer | Package | Owns |
+|-------|---------|------|
+| Contract | `@gobing-ai/ts-ai-runner` | Neutral `Question` / `Answer` types, `DecisionDriver`, `createDecisionMaker`, `validateQuestions` / `validateAnswers`, the `Decision*Error` taxonomy |
+| Hub (this package) | `@gobing-ai/ts-ai-decision` | Catalog schema + loader, parameter rendering, `DecisionMakerRegistry`, `DecisionHub`, `createDecisionHub`, the TypeSafe and `llm-agent` drivers |
+| Backends | `ts-decision-fm`, `ts-laya-mlx`, `ts-decision-clef` | One `DecisionDriver` each; they depend only on the contract, never on this package |
+
+The dependency direction is fixed: backends → contract, hub → contract + bundled backends. That is
+why backends live outside this package (ADR-033, ADR-037) — a backend that imported the hub would
+create a cycle with the bundled built-ins.
+
+### Decision makers
+
+| Maker name | Backend | Package | Registered | Needs | Probabilities |
+|------------|---------|---------|------------|-------|---------------|
+| `typesafe` | TypeSafe Jev (hosted) | this package (`@typesafe-ai/sdk` 0.7.0) | built-in, lazy; hub default | `TYPESAFE_API_KEY` | from the API |
+| `fm-local` | Apple Foundation Models via `fm` (ADR-029/030) | `ts-decision-fm` | built-in, lazy | macOS on Apple silicon, `fm` CLI | k-sample frequencies |
+| `laya-local` | Laya on MLX, warm Python worker (ADR-027/028) | `ts-laya-mlx` | built-in, lazy | Apple silicon, Laya model + Python env | from the local model |
+| `llm-agent` | Any `ts-ai-runner` coding agent / model (ADR-038) | this package (`ts-ai-runner` surface) | built-in, lazy | an installed agent CLI | k-sample frequencies (accepted = all samples agreed) |
+| `clef` | Cloudflare Workers AI Clef (ADR-037) | `ts-decision-clef` | consumer-registered | Cloudflare account ID + API token | from the API |
+
+Built-ins are registered lazily: naming, listing and describing makers never constructs a driver,
+so a host without a backend's prerequisites only notices when a decision actually routes to it —
+and then gets the declared fallback (`reason: 'no-backend'` or `'error'`), not an exception.
+
+## Quick start
+
+```ts
+import { createDecisionHub } from '@gobing-ai/ts-ai-decision';
+
+const hub = await createDecisionHub({ catalogs: ['decisions/support.yaml'] });
+
+const r = await hub.decide('category', { instructions: ticketText, channel: 'chat' });
+// { id, type, value, confidence, source, reason, maker, durationMs }
+```
+
+`createDecisionHub` composes registry + catalogs in one call and never returns a partially built
+hub. See `examples/decisions.yaml` for a complete catalog.
 
 ## Catalog format
 
@@ -56,9 +94,6 @@ answer vocabulary stays static. `${env.*}` and any other namespace are rejected
 
 ## DecisionHub
 
-`DecisionHub` loads catalogs and serves `decide(id, input)` with a guaranteed concrete answer —
-see `examples/decisions.yaml` for a complete catalog:
-
 ```ts
 import { DecisionHub } from '@gobing-ai/ts-ai-decision';
 
@@ -68,25 +103,69 @@ await hub.loadFile('decisions/support.yaml');  // or hub.load(loadedCatalog)
 hub.list();                                    // [{ id, type, description, source }] — pure discovery
 hub.describe('category');                      // parameters (incl. instructions), criteria, fallback,
                                                // effective minConfidence, maker and model
-const r = await hub.decide('category', { instructions: ticketText, channel: 'chat' });
-// { id, type, value, confidence, source, reason, maker, durationMs }
-const r2 = await hub.decide('category', { instructions: ticketText }, { maker: 'fm-local' });
+const r = await hub.decide('category', { instructions: ticketText }, { maker: 'fm-local' });
 ```
 
 `load` is all-or-nothing per catalog: a duplicate decision id across catalogs, or a `maker`
 name (decision or `defaults.maker`) that is not registered, throws `DecisionCatalogError` and
-registers nothing from the offending catalog. `list` and `describe` never construct a maker or
+registers nothing from the offending catalog.
+
+### Maker chains
+
+`maker` accepts a name or a non-empty ordered list — the first maker that does not fail as a
+backend answers, which is how "local first, hosted when the local backend is unavailable" is spelled:
+
+```yaml
+decisions:
+  triage:
+    maker: [fm-local, typesafe]   # ask fm-local, advance to typesafe only if it fails
+```
+
+The chain advances only on backend failure (`no-backend`, `timeout`, `error`). A `low-confidence`
+answer is an answer: it is returned from the maker that produced it and later makers stay
+unresolved, so their lazy factories never run. When every maker fails, the result is the declared
+fallback carrying the last failure's `reason`, `maker` and `error`, plus `attempts` — one
+`{ maker, reason, durationMs, error? }` per maker tried, present only when more than one ran.
+`describe` reports the effective chain as `makers`, with `maker` still the first name; a
+single-name decision's result carries no `attempts`, so nothing changes for existing catalogs.
+
+### Shadow makers
+
+`shadow` names a second maker to ask **beside** the primary on live traffic — the same rendered
+request, started at the same time — so a candidate can be evaluated without risking the decision:
+
+```yaml
+decisions:
+  triage:
+    maker: typesafe
+    shadow: fm-local        # asked on every call, reported, never served
+```
+
+Every served field (`value`, `source`, `reason`, `maker`, `confidence`, `error`, `attempts`) still
+comes from the primary chain; the shadow's own outcome rides beside it as `result.shadow` — its
+`maker`, the `value` it actually produced (absent when it fell back), `confidence`, `reason`,
+`durationMs` and `error?`. A failing or unregistered-at-call shadow never rejects `decide`.
+
+**Cost:** a shadow doubles the backend calls for that decision and the call's latency becomes the
+slower of the two, so it is a per-decision or per-call decision, not a catalog default (there is no
+`defaults.shadow`). Pass `shadow` per call to sample rather than shadow every request. `list` and `describe` never construct a maker or
 driver.
 
+The hub picks a maker purely by name — per-call `options.maker` → the decision's `maker` → the
+catalog's `defaults.maker` → the hub's `defaultMaker` (default `typesafe`). Catalog names are
+checked at `load`; a misspelled per-call name fails loudly instead of falling back.
+
 ### The fallback contract
 
 `decide` never rejects for backend outcomes — only caller mistakes throw (`UnknownDecisionError`
 for an unknown id, `DecisionInputError` for input breaking the parameter contract,
-`UnknownDecisionMakerError` for an unregistered per-call maker; the constructor throws for an
-unregistered `defaultMaker`). Every throw happens before any backend call.
+`UnknownDecisionMakerError` for an unregistered, empty or repeating per-call maker chain or an
+unregistered per-call shadow; the constructor throws for an unregistered `defaultMaker`). Every
+throw happens before any backend call.
 
-Exactly one Jev question keyed by the decision id goes through a single
-`maker.ask({ state, questions, model })`; `model` resolves decision → catalog default → omitted.
+Exactly one Jev question keyed by the decision id goes through
+`maker.ask({ state, questions, model })` — once per maker a chain tries, plus once for a shadow;
+`model` resolves decision → catalog default → omitted.
 Backend outcomes map to the declared fallback with `source: 'default'`:
 
 | Outcome | `reason` |
@@ -99,50 +178,137 @@ Backend outcomes map to the declared fallback with `source: 'default'`:
 
 Values: choice returns a string label, score the (possibly fractional) expected score, and noul
 `p >= 0.5` with `probability` and confidence `max(p, 1 - p)`. Every result names the selected
-`maker`.
+`maker`. Every failure reason (`no-backend`, `timeout`, `error`) also carries the caught cause as
+`error: { name, message }`, with the message truncated to 500 characters — persist it verbatim
+(Spur writes it to `decision_logs.error`); accepted and `low-confidence` results never carry one.
+
+Confidence is only as graded as the maker. Probability-native makers (`typesafe`, `laya-local`,
+`clef`) return a model distribution; **sampled** makers (`fm-local`, `llm-agent`)
+return entropy over k sample frequencies, so with k ≤ 5 any disagreement lands far below a 0.7
+floor (two options: 2-of-3 → 0.08, 4-of-5 → 0.28). For a sampled maker, `accepted` effectively
+means "all samples agreed", and a constant answer at confidence 1.0 is unanimity, not calibration.
+Choose a probability-native maker where the floor must discriminate.
 
 ## Maker registry
 
-`DecisionMakerRegistry` maps plain names to `DecisionMaker`s — the three built-ins (`typesafe`,
-`fm-local`, `laya-local`) pre-registered lazily, plus anything consumers register (ADR-033):
+`DecisionMakerRegistry` maps plain names to `DecisionMaker`s — the built-ins above plus anything
+consumers register:
 
 ```ts
 import { createDecisionMaker } from '@gobing-ai/ts-ai-runner';
 import { DecisionMakerRegistry } from '@gobing-ai/ts-ai-decision';
+import { createClefDriver } from '@gobing-ai/ts-decision-clef';
 
 const registry = new DecisionMakerRegistry(); // pass `builtins: false` to start empty
-registry.register('scripted-judge', () => createDecisionMaker({ driver: myDriver }));
+registry.register('clef', () =>
+    createDecisionMaker({ driver: createClefDriver({ accountId, apiToken }) }),
+);
 
 registry.has('fm-local');                          // true — nothing was constructed yet
 const maker = await registry.resolve('fm-local');  // factory runs here, once, and is memoised
-registry.names();                                  // ['typesafe', 'fm-local', 'laya-local', 'scripted-judge']
+registry.names();                                  // ['typesafe', 'fm-local', 'laya-local', 'llm-agent', 'clef']
 ```
 
 Registering builds nothing; the first `resolve` runs a factory and memoises the maker, and a
 factory that throws is not memoised, so a later `resolve` retries. Invalid or duplicate names
 throw `DecisionRegistryError`; unknown names throw `UnknownDecisionMakerError { name }`; factory
-errors propagate unchanged. Pass `builtins: { makerOptions, driverOptions }` to tune the built-ins
-(env/keys/timeouts, or executor/client injection for the local drivers).
+errors propagate unchanged. Pass `builtins: { makerOptions, driverOptions }` to tune the
+built-ins (env/keys/timeouts via `makerOptions`; executor/client injection via
+`driverOptions['fm-local']` / `driverOptions['laya-local']` / `driverOptions['llm-agent']`).
 
-`dispose(name?)` releases the resources of already-`resolve`d makers — a `laya-local` maker holds a
-warm Python worker whose open pipes keep the calling process alive until it is closed (reachable from
-a hub as `hub.registry.dispose()`). It never runs an unresolved factory just to close it, ignores
-unknown names, and returns each entry to its unresolved state, so a later `resolve` builds a fresh
-maker instead of handing back a closed one.
+### Configuring `llm-agent`
 
-The hub picks a maker purely by name — no new driver code per routing:
-per-call `options.maker` → the decision's `maker` → the catalog's `defaults.maker` → the hub's
-`defaultMaker` (default `typesafe`). Catalog names are checked at `load`; a misspelled per-call
-name fails loudly instead of falling back. `createDecisionHub` composes the whole thing in one
-call and never returns a partially built hub:
+`llm-agent` turns any installed coding agent or model into a decision model. It samples the agent
+`k` times per ask, enum-checks every sample against the question's declared options, and reports
+empirical sample frequencies — the agent is never asked for a confidence (ADR-030).
 
 ```ts
-import { createDecisionHub } from '@gobing-ai/ts-ai-decision';
+import { createAgentDriver } from '@gobing-ai/ts-ai-decision';
+import { createDecisionMaker } from '@gobing-ai/ts-ai-runner';
 
-const hub = await createDecisionHub({
-    catalogs: ['decisions/support.yaml'],
-    makers: { 'scripted-judge': () => createDecisionMaker({ driver: myDriver }) },
+const registry = new DecisionMakerRegistry({
+    builtins: {
+        driverOptions: { 'llm-agent': { agent: 'claude', model: 'haiku', samples: 3 } },
+    },
 });
+// Extra instances under their own names, e.g. a cheap second opinion:
+registry.register('llm-haiku', () =>
+    createDecisionMaker({ driver: createAgentDriver({ agent: 'claude', model: 'haiku' }) }),
+);
+```
+
+| Option | Default | Meaning |
+|--------|---------|---------|
+| `agent` | first installed agent in `TIER1_PRIORITY` | Agent to sample. A configured agent is used as-is with no probe; a missing CLI then fails the sample. |
+| `model` | agent default | Model id forwarded to the agent; a per-ask `model` overrides it. |
+| `samples` | `3` | Agent invocations per ask — **cost is k runs per ask**, and answer resolution is 1/k. |
+| `deterministic` | `false` | One greedy sample; probabilities are one-hot. |
+| `concurrency` | `1` | Max samples in flight (sequential by default). |
+| `timeoutMs` | `120000` | Budget for one sample; expiry raises `DecisionTimeoutError`. |
+
+**Isolation.** Every ask samples in a fresh scratch directory under the runtime temp dir, removed
+when the ask ends — success or failure. This is load-bearing, not tidiness: the claude one-shot shim
+grants `--permission-mode acceptEdits --allowedTools Write Edit`, so the scratch directory is what
+stops a decision from editing the caller's workspace. The driver never passes `continue`, `sessionId`
+or `sessionDir`.
+
+**Availability.** Detection runs on the first `ask` (never at registration), so an agent installed
+later is picked up without rebuilding the maker; no agent at all raises `DecisionConfigError` with
+code `AGENT`, which the hub reports as `reason: 'no-backend'` so the decision uses its fallback.
+
+`dispose(name?)` releases the resources of already-`resolve`d makers — a `laya-local` maker holds
+a warm Python worker whose open pipes keep the calling process alive until it is closed
+(reachable from a hub as `hub.registry.dispose()`). It never runs an unresolved factory just to
+close it, ignores unknown names, and returns each entry to its unresolved state, so a later
+`resolve` builds a fresh maker instead of handing back a closed one.
+
+The same registry can be handed to `createDecisionHub({ registry })` or extended through
+`createDecisionHub({ makers: { name: factory } })`.
+
+## Adding a decision backend
+
+New backends follow the existing pattern rather than landing inside this package:
+
+1. Implement `DecisionDriver` from `@gobing-ai/ts-ai-runner` in its own package
+   (`packages/decision-<name>`, published as `@gobing-ai/ts-decision-<name>`). Depend only on the
+   contract (and ts-runtime / ts-infra seams for platform or HTTP access); never import
+   `@gobing-ai/ts-ai-decision`.
+2. Return answers that pass `validateAnswers`, translate every transport failure into the
+   `Decision*Error` taxonomy, and never invent a confidence the backend does not produce
+   (ADR-030: sampled backends report empirical frequencies only).
+3. Make it reachable by name: consumers register it (`clef` pattern), or — when it should be
+   available out of the box — add a lazy built-in to `DecisionMakerRegistry` with its options
+   under `builtins.driverOptions`.
+4. Add the boundary to `.spur/rules/typescript/decision-boundaries.yaml` and an ADR entry in
+   `docs/00_ADR.md`.
+
+Capabilities every maker benefits from (routing, fallback, catalog features, registry
+lifecycle) belong in this package.
+
+## TypeSafe driver
+
+`createTypesafeDriver(config)` ships here since task 0116 (ADR-039): `@gobing-ai/ts-ai-runner` keeps
+only the neutral contract, so the driver and the pinned `@typesafe-ai/sdk` (0.7.0) live in this
+package.
+
+```ts
+import { createTypesafeDriver } from '@gobing-ai/ts-ai-decision';
+import { createDecisionMaker } from '@gobing-ai/ts-ai-runner';
+
+const decisions = createDecisionMaker({ driver: createTypesafeDriver({ apiKey }) });
 ```
 
-See `docs/design/ai-decision-catalog.md` for the full field reference.
+`createDecisionMaker({ backend: 'typesafe' })` and the implicit default still resolve the same driver
+through a deprecated dynamic-import bridge in `ts-ai-runner` for one release; that path requires this
+package to be installed and reports `DecisionConfigError` (`TYPESAFE_BACKEND`) with an install hint
+when it is not. `resolveApiKey` remains in `ts-ai-runner` and is what both paths use, so
+`TYPESAFE_API_KEY` precedence is unchanged.
+
+`@typesafe-ai/sdk` 0.7.0 raises its Node floor to 22 and compresses request bodies with zstd on
+runtimes that support it (Bun does).
+
+## References
+
+- `docs/design/ai-decision-catalog.md` — full catalog field reference, hub and registry design.
+- `docs/00_ADR.md` — ADR-027/028 (Laya), ADR-029/030/031 (fm), ADR-033 (catalog + hub),
+  ADR-037 (Clef), ADR-038/039 (llm-agent, TypeSafe relocation).

package/dist/agent-driver.d.ts

@@ -0,0 +1,59 @@
+/**
+ * The `llm-agent` decision driver (task 0115, ADR-038/ADR-039): any installed
+ * `ts-ai-runner` coding agent or model answering through the shared sampled-driver
+ * core. Each sample is one isolated one-shot prompt run; probabilities are sample
+ * frequencies (ADR-030) — the agent is never asked for a confidence.
+ *
+ * Every sample runs in a per-ask scratch directory. That is load-bearing, not
+ * tidiness: the claude one-shot shim grants `--permission-mode acceptEdits
+ * --allowedTools Write Edit`, so a decision must never be able to write into the
+ * caller's workspace (R6).
+ */
+import { AgentDetector, type AgentName, AiRunner, type Question, type SampledDecisionDriver } from '@gobing-ai/ts-ai-runner';
+import { type FileSystem } from '@gobing-ai/ts-runtime';
+/** The one runner method a sampled decision needs; a real `AiRunner` satisfies it. */
+export type AgentPromptRunner = Pick<AiRunner, 'runPromptCommand'>;
+/** The one detector method the driver needs; a real `AgentDetector` satisfies it. */
+export type AgentDetectorPort = Pick<AgentDetector, 'detectOne'>;
+/** Configuration options for {@link createAgentDriver}. */
+export interface AgentDriverOptions {
+    /** Agent to sample. Default: the first installed agent in `TIER1_PRIORITY` (fm is never auto-picked). */
+    readonly agent?: AgentName;
+    /** Model id forwarded as `PromptOptions.model`; a per-ask `model` overrides it. */
+    readonly model?: string;
+    /** Samples per ask. Default: 3. Ignored when `deterministic`. */
+    readonly samples?: number;
+    /** One greedy sample; probabilities are one-hot. Default: false. */
+    readonly deterministic?: boolean;
+    /** Max samples in flight. Default: 1 (sequential). */
+    readonly concurrency?: number;
+    /** Budget for one sample. Default: 120_000. */
+    readonly timeoutMs?: number;
+    /** Injected runner. Default: a lazy `new AiRunner()`. */
+    readonly runner?: AgentPromptRunner;
+    /** Injected detector. Default: a lazy `new AgentDetector({ runner })`. */
+    readonly detector?: AgentDetectorPort;
+    /** Scratch-directory lifecycle. Default: ts-runtime's node FileSystem. */
+    readonly fs?: Pick<FileSystem, 'ensureDir' | 'deleteFile'>;
+}
+/** The agent driver: a sampled decision driver named `llm-agent`. */
+export interface AgentDecisionDriver extends SampledDecisionDriver {
+    readonly name: 'llm-agent';
+}
+/**
+ * Instructions for a *generic* agent. fm's text mentions "the schema" because fm
+ * receives `--schema`; agents get no such flag, so this text never does.
+ */
+export declare const AGENT_INSTRUCTIONS: string;
+/**
+ * The per-ask reply contract appended to the prompt: every key with its allowed
+ * option strings, plus one example object. It never asks for probabilities or
+ * confidence (ADR-030).
+ */
+export declare function JSON_REPLY_SUFFIX(questions: Record<string, Question>): string;
+/**
+ * Build the `llm-agent` decision driver. Construction spawns nothing: the runner
+ * and detector are created lazily and the agent is resolved on the first `ask`.
+ */
+export declare function createAgentDriver(options?: AgentDriverOptions): AgentDecisionDriver;
+//# sourceMappingURL=agent-driver.d.ts.map

package/dist/agent-driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-driver.d.ts","sourceRoot":"","sources":["../src/agent-driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACH,aAAa,EACb,KAAK,SAAS,EACd,QAAQ,EAQR,KAAK,QAAQ,EACb,KAAK,qBAAqB,EAG7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAwB,KAAK,UAAU,EAA2B,MAAM,uBAAuB,CAAC;AAEvG,sFAAsF;AACtF,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;AAEnE,qFAAqF;AACrF,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;AAEjE,2DAA2D;AAC3D,MAAM,WAAW,kBAAkB;IAC/B,yGAAyG;IACzG,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,mFAAmF;IACnF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,sDAAsD;IACtD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,yDAAyD;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IACtC,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,GAAG,YAAY,CAAC,CAAC;CAC9D;AAED,qEAAqE;AACrE,MAAM,WAAW,mBAAoB,SAAQ,qBAAqB;IAC9D,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC9B;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAGM,CAAC;AAEtC;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,CAc7E;AAID;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,kBAAuB,GAAG,mBAAmB,CAgEvF"}

package/dist/agent-driver.js

@@ -0,0 +1,104 @@
+/**
+ * The `llm-agent` decision driver (task 0115, ADR-038/ADR-039): any installed
+ * `ts-ai-runner` coding agent or model answering through the shared sampled-driver
+ * core. Each sample is one isolated one-shot prompt run; probabilities are sample
+ * frequencies (ADR-030) — the agent is never asked for a confidence.
+ *
+ * Every sample runs in a per-ask scratch directory. That is load-bearing, not
+ * tidiness: the claude one-shot shim grants `--permission-mode acceptEdits
+ * --allowedTools Write Edit`, so a decision must never be able to write into the
+ * caller's workspace (R6).
+ */
+import { AgentDetector, AiRunner, createSampledDriver, DecisionBackendError, DecisionConfigError, DecisionTimeoutError, declaredOptions, extractJsonAnswer, TIER1_PRIORITY, } from '@gobing-ai/ts-ai-runner';
+import { createNodeFileSystem, getProcessEnv, joinPath } from '@gobing-ai/ts-runtime';
+/**
+ * Instructions for a *generic* agent. fm's text mentions "the schema" because fm
+ * receives `--schema`; agents get no such flag, so this text never does.
+ */
+export const AGENT_INSTRUCTIONS = 'You are a decision function. Read the context and questions, then reply with exactly one JSON ' +
+    'object mapping each question key to one of its allowed option strings. No prose, no code, no ' +
+    'tool use, no confidence values.';
+/**
+ * The per-ask reply contract appended to the prompt: every key with its allowed
+ * option strings, plus one example object. It never asks for probabilities or
+ * confidence (ADR-030).
+ */
+export function JSON_REPLY_SUFFIX(questions) {
+    const lines = ['', 'Reply with exactly one JSON object and nothing else.'];
+    for (const [key, question] of Object.entries(questions)) {
+        const options = declaredOptions(question)
+            .map((option) => `"${option}"`)
+            .join(', ');
+        lines.push(`- "${key}": one of ${options}`);
+    }
+    const example = {};
+    for (const [key, question] of Object.entries(questions)) {
+        example[key] = declaredOptions(question)[0] ?? '';
+    }
+    lines.push('', 'Example:', JSON.stringify(example));
+    return lines.join('\n');
+}
+const DEFAULT_TIMEOUT_MS = 120_000;
+/**
+ * Build the `llm-agent` decision driver. Construction spawns nothing: the runner
+ * and detector are created lazily and the agent is resolved on the first `ask`.
+ */
+export function createAgentDriver(options = {}) {
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const fs = options.fs ?? createNodeFileSystem();
+    // Created inside the factory, and only when not injected, so construction never spawns.
+    const runner = options.runner ?? new AiRunner();
+    // A real AiRunner satisfies AgentPromptRunner, so this cast only widens a fake back
+    // to the injected seam; a fake runner is always paired with its own fake detector.
+    const detector = options.detector ?? new AgentDetector({ runner: runner });
+    // Memoised on success only: a later ask retries an unresolved agent after an install.
+    let resolved;
+    async function resolveAgent() {
+        if (options.agent !== undefined)
+            return options.agent;
+        if (resolved !== undefined)
+            return resolved;
+        for (const candidate of TIER1_PRIORITY) {
+            const detected = await detector.detectOne(candidate);
+            if (detected.installed) {
+                resolved = detected.name;
+                return resolved;
+            }
+        }
+        throw new DecisionConfigError(`no coding agent available for llm-agent; install one of: ${TIER1_PRIORITY.join(', ')}`, 'AGENT');
+    }
+    return createSampledDriver({
+        name: 'llm-agent',
+        samples: options.samples ?? 3,
+        deterministic: options.deterministic ?? false,
+        concurrency: options.concurrency ?? 1,
+        instructions: AGENT_INSTRUCTIONS,
+        async open({ instructions, prompt, questions, model }) {
+            const agent = await resolveAgent();
+            const scratch = joinPath(getProcessEnv().TMPDIR ?? '/tmp', `llm-agent-${crypto.randomUUID()}`);
+            await fs.ensureDir(scratch);
+            const input = `${instructions}\n\n${prompt}${JSON_REPLY_SUFFIX(questions)}`;
+            const promptOptions = { input, mode: 'text' };
+            const effectiveModel = model ?? options.model;
+            if (effectiveModel !== undefined)
+                promptOptions.model = effectiveModel;
+            return {
+                async sample() {
+                    const result = await runner.runPromptCommand(agent, promptOptions, {
+                        cwd: scratch,
+                        timeout: timeoutMs,
+                    });
+                    if (result.exitCode === null) {
+                        throw new DecisionTimeoutError(`llm-agent sample timed out after ${timeoutMs}ms`, timeoutMs);
+                    }
+                    if (result.exitCode !== 0) {
+                        const firstLine = result.stderr.split('\n')[0]?.trim() ?? '';
+                        throw new DecisionBackendError(`llm-agent sample failed (${agent} exit ${result.exitCode}): ${firstLine}`, undefined);
+                    }
+                    return extractJsonAnswer(result.stdout);
+                },
+                close: () => fs.deleteFile(scratch),
+            };
+        },
+    });
+}

package/dist/catalog.js

@@ -248,6 +248,7 @@ function checkDecision(id, raw, source) {
         fallback: raw.fallback,
         ...(raw.minConfidence !== undefined ? { minConfidence: raw.minConfidence } : {}),
         ...(raw.maker !== undefined ? { maker: raw.maker } : {}),
+        ...(raw.shadow !== undefined ? { shadow: raw.shadow } : {}),
         ...(raw.model !== undefined ? { model: raw.model } : {}),
     };
 }

package/dist/hub.d.ts

@@ -1,7 +1,7 @@
 import { type Json } from '@gobing-ai/ts-ai-runner';
 import { type CatalogLoadOptions } from './catalog';
 import { type BuiltinMakerOptions, DecisionMakerRegistry, type MakerSource } from './registry';
-import type { DecisionCatalog, DecisionCriteria, DecisionParam, DecisionType } from './types';
+import type { DecisionCatalog, DecisionCriteria, DecisionParam, DecisionType, MakerRef } from './types';
 /**
  * DecisionHub (task 0090, ADR-033 § API / § decide algorithm): loads catalogs
  * over the 0089 loader and serves `decide` through makers resolved by name
@@ -16,6 +16,40 @@ import type { DecisionCatalog, DecisionCriteria, DecisionParam, DecisionType } f
 export declare const DEFAULT_MIN_CONFIDENCE = 0.7;
 /** Hub default when neither the per-call options, the decision nor the catalog names a maker. */
 export declare const DEFAULT_MAKER = "typesafe";
+/** Upper bound on a carried error message, in characters (ADR-040). */
+export declare const DECISION_ERROR_MESSAGE_MAX = 500;
+/**
+ * The caught failure, carried on a fallback result so a consumer can persist it (Spur stores
+ * `decision_logs.error`). Only `name` and `message`: a stack, a `cause` chain or the failing
+ * request would leak prompt text and internals into logs.
+ */
+export interface DecisionErrorInfo {
+    readonly name: string;
+    readonly message: string;
+}
+/**
+ * One maker's attempt inside a chain: what it was, how it ended, and how long it took. Present only
+ * when more than one maker was tried, so a single-name decision's result is unchanged.
+ */
+export interface DecisionAttempt {
+    readonly maker: string;
+    readonly reason: DecisionResultBase['reason'];
+    readonly durationMs: number;
+    readonly error?: DecisionErrorInfo;
+}
+/**
+ * What a shadow maker did with the same request. Observed only: it rides beside the served answer and
+ * never changes it (ADR-040). `value` is the answer the shadow itself produced, so it is absent when
+ * the shadow fell back.
+ */
+export interface ShadowOutcome {
+    readonly maker: string;
+    readonly value?: string | number | boolean;
+    readonly confidence: number | null;
+    readonly reason: DecisionResultBase['reason'];
+    readonly durationMs: number;
+    readonly error?: DecisionErrorInfo;
+}
 /** Shared envelope of every {@link DecisionResult} variant. */
 export interface DecisionResultBase {
     readonly id: string;
@@ -27,6 +61,12 @@ export interface DecisionResultBase {
     /** Registry name of the maker that was selected. */
     readonly maker: string;
     readonly durationMs: number;
+    /** The caught failure. Present only for `no-backend`, `timeout` and `error`. */
+    readonly error?: DecisionErrorInfo;
+    /** Every maker tried, in order. Present only when a chain tried more than one. */
+    readonly attempts?: readonly DecisionAttempt[];
+    /** The shadow's outcome. Present only when the decision or the call named a shadow. */
+    readonly shadow?: ShadowOutcome;
 }
 /** The fallback-guaranteed result of one `decide` call, shaped by the decision type. */
 export type DecisionResult = (DecisionResultBase & {
@@ -59,8 +99,12 @@ export interface DecisionDescriptor {
     readonly fallback: string | number | boolean;
     /** decision → catalog defaults → {@link DEFAULT_MIN_CONFIDENCE}. */
     readonly minConfidence: number;
-    /** decision → catalog defaults → hub defaultMaker. */
+    /** First name of the effective chain (decision → catalog defaults → hub defaultMaker). */
     readonly maker: string;
+    /** The full effective chain; a single name yields a one-element list. */
+    readonly makers: readonly string[];
+    /** The decision's configured shadow; a per-call shadow is not visible to `describe`. */
+    readonly shadow?: string;
     /** decision → catalog defaults; absent when neither declares one. */
     readonly model?: string;
 }
@@ -75,8 +119,13 @@ export interface DecisionHubOptions {
 }
 /** Per-call options for {@link DecisionHub.decide}. */
 export interface DecideOptions {
-    /** Per-call maker name; wins over the decision's, the catalog's and the hub default. */
-    readonly maker?: string;
+    /**
+     * Per-call maker name or ordered fallback chain (ADR-040); wins over the decision's, the
+     * catalog's and the hub default. Validated before any backend call.
+     */
+    readonly maker?: MakerRef;
+    /** Per-call shadow maker (ADR-040); wins over the decision's. Validated before any backend call. */
+    readonly shadow?: string;
 }
 /**
  * Hub over loaded catalogs and named makers (task 0090, ADR-033 § API):
@@ -93,8 +142,9 @@ export declare class DecisionHub {
     constructor(options?: DecisionHubOptions);
     /**
      * Register every decision of an already-loaded catalog. All-or-nothing: a
-     * duplicate decision id or an unregistered maker name (decision or
-     * `defaults.maker`) throws {@link DecisionCatalogError} and registers
+     * duplicate decision id or an unregistered maker name (any chain name of a
+     * decision or `defaults.maker`, or a decision `shadow`) throws
+     * {@link DecisionCatalogError} and registers
      * nothing from the offending catalog.
      */
     load(catalog: DecisionCatalog): void;
@@ -107,14 +157,26 @@ export declare class DecisionHub {
     /**
      * Serve one decision with a fallback-guaranteed answer. Resolves the input,
      * renders exactly one Jev question keyed by the decision id, selects the
-     * maker by name (per call → decision → catalog defaults → hub default) and
-     * issues a single `maker.ask`. Backend construction, transport, timeout,
+     * maker chain (per call → decision → catalog defaults → hub default) and
+     * asks its makers in order until one answers, with an optional shadow asked
+     * beside it (ADR-040). Backend construction, transport, timeout,
      * invalid answers and low confidence all resolve to the declared fallback;
      * only caller mistakes throw, before any backend call.
      */
     decide(id: string, input?: Record<string, Json>, options?: DecideOptions): Promise<DecisionResult>;
-    /** Maker-name precedence for discovery results: decision → catalog defaults → hub default. */
-    private effectiveMakerName;
+    /**
+     * Project a shadow's own result onto {@link ShadowOutcome}. `value` is carried only when the shadow
+     * actually answered — a served-model answer or a low-confidence one — never its declared fallback.
+     */
+    private toShadowOutcome;
+    /**
+     * Ask one maker and classify its outcome. `failed` is true exactly for `no-backend`, `timeout`
+     * and `error` — the reasons a chain advances past (ADR-040); `accepted` and `low-confidence`
+     * answer, so the chain stops there.
+     */
+    private askOne;
+    /** Maker-chain precedence for discovery results: decision → catalog defaults → hub default. */
+    private effectiveChain;
     private mustGet;
     /**
      * Build the declared-fallback envelope: `source: 'default'`, the observed

package/dist/hub.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hub.d.ts","sourceRoot":"","sources":["../src/hub.ts"],"names":[],"mappings":"AAAA,OAAO,EAKH,KAAK,IAAI,EAIZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,kBAAkB,EAAuB,MAAM,WAAW,CAAC;AAGzE,OAAO,EAAE,KAAK,mBAAmB,EAAE,qBAAqB,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAC/F,OAAO,KAAK,EAER,eAAe,EACf,gBAAgB,EAEhB,aAAa,EACb,YAAY,EAGf,MAAM,SAAS,CAAC;AAEjB;;;;;;;;;GASG;AAEH,uFAAuF;AACvF,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,iGAAiG;AACjG,eAAO,MAAM,aAAa,aAAa,CAAC;AAExC,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,gBAAgB,GAAG,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC;IACpF,oDAAoD;IACpD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B;AAED,wFAAwF;AACxF,MAAM,MAAM,cAAc,GACpB,CAAC,kBAAkB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GAC1E,CAAC,kBAAkB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GACzE,CAAC,kBAAkB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAAC;AAErH,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CAC3B;AAED,mGAAmG;AACnG,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IAC7D,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC7C,oEAAoE;IACpE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,sDAAsD;IACtD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,gDAAgD;AAChD,MAAM,WAAW,kBAAkB;IAC/B,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IAC1C,wFAAwF;IACxF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,yFAAyF;IACzF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC/B;AAED,uDAAuD;AACvD,MAAM,WAAW,aAAa;IAC1B,wFAAwF;IACxF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CAC3B;AAiDD;;;;;;GAMG;AACH,qBAAa,WAAW;IACpB,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyC;IACnE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEvB,OAAO,GAAE,kBAAuB;IAa5C;;;;;OAKG;IACH,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAsCpC,sFAAsF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7E,+EAA+E;IAC/E,IAAI,IAAI,eAAe,EAAE;IASzB,kGAAkG;IAClG,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,kBAAkB;IAiBxC;;;;;;;OAOG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAM,EAAE,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,cAAc,CAAC;IAkFhH,8FAA8F;IAC9F,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,OAAO;IAYf;;;;OAIG;IACH,OAAO,CAAC,cAAc;CA8BzB;AAED,mFAAmF;AACnF,MAAM,WAAW,wBAAyB,SAAQ,kBAAkB;IAChE,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,GAAG,KAAK,CAAC;IAChD,qFAAqF;IACrF,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IACxD,0FAA0F;IAC1F,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,0CAA0C;IAC1C,QAAQ,CAAC,cAAc,CAAC,EAAE,kBAAkB,CAAC;CAChD;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,GAAE,wBAA6B,GAAG,OAAO,CAAC,WAAW,CAAC,CAUpG"}
+{"version":3,"file":"hub.d.ts","sourceRoot":"","sources":["../src/hub.ts"],"names":[],"mappings":"AAAA,OAAO,EAKH,KAAK,IAAI,EAIZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,kBAAkB,EAAuB,MAAM,WAAW,CAAC;AAGzE,OAAO,EAAE,KAAK,mBAAmB,EAAE,qBAAqB,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAC/F,OAAO,KAAK,EAER,eAAe,EACf,gBAAgB,EAEhB,aAAa,EACb,YAAY,EAGZ,QAAQ,EACX,MAAM,SAAS,CAAC;AAEjB;;;;;;;;;GASG;AAEH,uFAAuF;AACvF,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,iGAAiG;AACjG,eAAO,MAAM,aAAa,aAAa,CAAC;AAExC,uEAAuE;AACvE,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAE9C;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B;AAcD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC;CACtC;AAED,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,gBAAgB,GAAG,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC;IACpF,oDAAoD;IACpD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC;IACnC,kFAAkF;IAClF,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC/C,uFAAuF;IACvF,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACnC;AAED,wFAAwF;AACxF,MAAM,MAAM,cAAc,GACpB,CAAC,kBAAkB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GAC1E,CAAC,kBAAkB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GACzE,CAAC,kBAAkB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAAC;AAErH,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CAC3B;AAED,mGAAmG;AACnG,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IAC7D,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC7C,oEAAoE;IACpE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,0FAA0F;IAC1F,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,wFAAwF;IACxF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,gDAAgD;AAChD,MAAM,WAAW,kBAAkB;IAC/B,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IAC1C,wFAAwF;IACxF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,yFAAyF;IACzF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC/B;AAED,uDAAuD;AACvD,MAAM,WAAW,aAAa;IAC1B;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAC1B,oGAAoG;IACpG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC5B;AAqFD;;;;;;GAMG;AACH,qBAAa,WAAW;IACpB,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyC;IACnE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEvB,OAAO,GAAE,kBAAuB;IAa5C;;;;;;OAMG;IACH,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAoDpC,sFAAsF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7E,+EAA+E;IAC/E,IAAI,IAAI,eAAe,EAAE;IASzB,kGAAkG;IAClG,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,kBAAkB;IAoBxC;;;;;;;;OAQG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAM,EAAE,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,cAAc,CAAC;IA4FhH;;;OAGG;IACH,OAAO,CAAC,eAAe;IAavB;;;;OAIG;YACW,MAAM;IA4FpB,+FAA+F;IAC/F,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,OAAO;IAYf;;;;OAIG;IACH,OAAO,CAAC,cAAc;CAgCzB;AAED,mFAAmF;AACnF,MAAM,WAAW,wBAAyB,SAAQ,kBAAkB;IAChE,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,GAAG,KAAK,CAAC;IAChD,qFAAqF;IACrF,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IACxD,0FAA0F;IAC1F,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,0CAA0C;IAC1C,QAAQ,CAAC,cAAc,CAAC,EAAE,kBAAkB,CAAC;CAChD;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,GAAE,wBAA6B,GAAG,OAAO,CAAC,WAAW,CAAC,CAUpG"}