@hasna/todos 0.15.52 → 0.17.0

package/README.md

@@ -11,6 +11,223 @@ Universal task management for AI coding agents - CLI + MCP server + interactive
 bun install -g @hasna/todos
 ```
 
+## Upgrading From 0.15.52
+
+0.16.0 puts every surface on one credential resolver and moves three command
+families to the shared API. Upgrading from 0.15.52 needs no data migration, but
+four things change:
+
+- **Configure a credential.** The `./sdk` client no longer reads
+  `~/.todos/config.json`, and the unprefixed `TODOS_URL` / key spellings are
+  legacy. Put the key in the macOS Keychain, in
+  `~/.hasna/todos/config/credentials` (owner-only `0400`/`0600`), or in
+  `HASNA_TODOS_API_KEY`, then confirm with `todos storage status --json`. With no
+  credential the CLI exits non-zero (`REMOTE_API_CONFIG_MISSING`) instead of
+  quietly serving local rows, and MCP tool calls fail closed rather than falling
+  back to the on-box store (see the third bullet below). The
+  retired locations — `~/.hasna/fleet-env`, `~/.hasna/cloud`, `~/.config/hasna`,
+  `$XDG_CONFIG_HOME` — are not read.
+- **`todos plans`, `todos task-lists` (`lists`, `tl`) and the template commands
+  are shared-API only.** They refuse `HASNA_TODOS_DB_PATH`, `TODOS_DB_PATH`,
+  `HASNA_TODOS_LOCAL` and `TODOS_LOCAL` before startup — any one of them set is
+  enough to refuse the command, and the refusal names the ones that are set.
+  `todos template-library` is unchanged and still credential-free. The MCP plan
+  tools (`create_plan`, `list_plans`, `get_plan`, `update_plan`, `delete_plan`)
+  and task-list tools (`create_task_list`, `list_task_lists`, `get_task_list`,
+  `update_task_list`, `delete_task_list`) are shared-API only as well.
+- **Most MCP tools that read the on-box store need `HASNA_TODOS_LOCAL=1`, and
+  every refusal is typed.** The MCP server no longer opens the on-box SQLite
+  store implicitly, so tools that still read it directly — the template family,
+  tags and labels, stale/blocked work, `doctor`, run ledger,
+  handoffs, review queues, retrospectives, risks, knowledge records, backups,
+  calendar, boards, focus/time reports and dispatches — fail on the default
+  posture with the typed `{"code":"API_DATABASE_FALLBACK_FORBIDDEN"}` payload,
+  whose `suggestion` names the opt-in; the server also logs the same code.
+  Measured at 0.16.0 with `TODOS_PROFILE=full`, that is 68 of the 125
+  zero-required-argument tools. A further 18 return the typed
+  `REMOTE_API_CONFIG_MISSING` — the 16 shared-API tools that need a credential
+  (`list_tasks`, `list_projects`, `list_agents`, `get_next_task`, `get_status`,
+  `bootstrap`, `get_context`, `get_my_tasks`, `get_my_workload`, `get_health`,
+  `standup`, `list_my_tasks`, `machines_register`, `machines_list`,
+  `machines_heartbeat`, `machines_topology`) plus `list_plans` and
+  `list_task_lists`. Five more refuse caller input or local state with the typed
+  `INVALID_INPUT` / `ENCRYPTION_KEY_UNAVAILABLE` / `ENCRYPTED_PAYLOAD_INVALID`,
+  and five answer a readable text refusal ("Provide agent_id, id, or name.").
+  No zero-argument tool returns an opaque `UNKNOWN_ERROR` on either posture —
+  the default one measured above, or the `HASNA_TODOS_LOCAL=1` opt-in these
+  tools are served under. Run the server with
+  `HASNA_TODOS_LOCAL=1` to keep using the on-box tools; that opt-in is ignored
+  when `HASNA_TODOS_API_KEY` or `HASNA_TODOS_API_URL` is set, because a
+  configured environment outranks it.
+- **The advertised command list is route-dependent.** 0.15.52 listed all 166
+  commands to every caller because the local fallback was implicit. 0.16.0
+  lists only what the resolved route exposes: 76 root commands on the hosted
+  route once a credential resolves, 75 with none configured (the extra verb,
+  `stale-lock-handoff`, is advertised only when the shared-API authority is),
+  and the full 166 only with `HASNA_TODOS_LOCAL=1` set, because the on-box
+  families fail closed on the default posture. No command was removed —
+  `todos --help`, `todos manual` and
+  the generated completions all honour the same rule, and every verb still
+  resolves once its posture is configured. `todos storage status` also reports
+  credential-source disagreements as a `warnings` array (`--json`) and a yellow
+  stderr line (human mode); the entries name sources and env key names, never a
+  value.
+
+Everything else still runs offline with `HASNA_TODOS_LOCAL=1` (when the
+environment configures no authority or credential of its own). The per-surface
+detail lives under `apps/todos/docs/` (`PLAN_API.md`,
+`TASK_LIST_API.md`, `TEMPLATE_API.md`, `TASK_QUERY_API.md`,
+`native-storage.md`). The npm tarball ships this README, `CHANGELOG.md` and those
+five documents alongside `dist/`, so they are readable from an installed
+package; `docs/cli-help.md` is repo-only.
+
+## HTTP request budget
+
+`todos-serve` defaults to **12,000 requests per minute per network peer**, per
+server process. Set `HASNA_TODOS_RATE_LIMIT_MAX` to an integer from `1` to
+`1000000` to choose a different finite budget. The legacy `TODOS_RATE_LIMIT_MAX`
+variable still works; the canonical variable takes precedence when both are set.
+An absent or blank value uses the default. Invalid values fail startup before
+the database is opened or the server listens.
+
+The fixed one-minute window covers all routes, including health checks and
+unauthenticated requests, except CORS `OPTIONS`. Exceeding the budget returns
+HTTP `429` with `Retry-After` in seconds. Authentication requirements stay the
+same. This setting is a request allowance, not a throughput guarantee; size a
+deployment using observed latency, database load, and its gateway limits.
+
+Behind a reverse proxy, callers share the proxy's bucket unless the operator
+has explicitly configured trusted forwarding. Keep proxy trust off for direct
+traffic. Only enable `TODOS_TRUST_PROXY=1` when network rules restrict access to
+proxies that overwrite forwarding headers; `TODOS_TRUSTED_PROXIES` helps resolve
+the forwarded chain and does not itself restrict which sockets may connect.
+
+## Credentials and Service Authority
+
+The CLI, the MCP server and the `./sdk` client all resolve their credential
+through one resolver — the client chain in `@hasna/contracts` — so there is
+exactly one place to put a key and exactly one precedence to learn. Resolution
+happens **on every call**, never once at process start, so rotating a key heals
+a long-running shell, MCP server or agent without restarting it: a `TodosClient`
+built at startup and held for hours re-reads the Keychain and the credentials
+file on each request and picks up the new key on the next one.
+
+Two things are deliberately *not* re-resolved. An explicit `apiKey` argument is
+tier 1 — a pin the caller owns — and the **service authority is fixed for the
+life of a client**, because a credential written for one authority must never be
+sent to another; build a new client to point somewhere else.
+
+That second rule binds the credential too. `new TodosClient({ baseUrl })` with
+no `apiKey` pins the authority *and* sends no credential at all: the key in your
+Keychain or `~/.hasna/todos/config/credentials` was written for the fleet, so it
+is never re-resolved onto a URL you named — a local `todos-serve`, a staging
+box, a test double. Pass `apiKey` alongside `baseUrl` when that authority is
+supposed to get a credential. Per-call re-resolution applies to a client that
+resolved its own hosted authority, which is where rotation matters.
+
+**Credential, highest to lowest:**
+
+| # | Tier | Where |
+| --- | --- | --- |
+| 1 | explicit argument | `apiKey` on `new TodosClient({...})` — the `todos` CLI exposes no hosted-credential flag of its own (`todos ai --profile` is a runtime profile, not a credential tier) |
+| 2 | deliberate env pointer | `HASNA_TODOS_API_KEY_OVERRIDE`, `HASNA_PROFILE`, `HASNA_TODOS_API_KEY_REF` (a secrets-vault item key, never a value) |
+| 3 | macOS Keychain | generic password `hasna.credentials.todos.api-key`, account `HASNA_STATION` → `hostname -s` → `USER` |
+| 4 | disk | `~/.hasna/todos/config/credentials`, owner-only `0400`/`0600` |
+| 5 | environment | `HASNA_TODOS_API_KEY` |
+
+Tier 3 is account-scoped, not host-scoped: the item is looked up under the
+station name, so a key stored for one station is invisible on another. Set
+`HASNA_STATION` explicitly (a wrapper, a launchd plist, a CI job) when the
+account name is not the first of `hostname -s` / `USER`; with none of the three
+matching the item's account, the lookup misses and the run fails closed with
+`REMOTE_API_CONFIG_MISSING` rather than silently resolving something else.
+
+Tiers 1 and 2 are *deliberate*: if one is set and cannot be honoured, the run
+fails — it never quietly authenticates as a different principal. Tier 5 is a
+first-class tier, not a deprecated one (a wrapper that injects the key per
+process is correct), and it sits **below** disk so a rotated on-disk key beats a
+stale `export` in an old shell. Nothing is read from `~/.hasna/fleet-env`,
+`~/.hasna/cloud`, `~/.config/hasna`, `$XDG_CONFIG_HOME`, or `~/.todos/config.json`.
+
+**Service authority**, same shape:
+
+`HASNA_TODOS_API_URL` → the Keychain `hasna.credentials.todos.api-url` item →
+`~/.hasna/todos/config/credentials` → the fleet gateway
+`https://api.hasna.com/todos`. Configure the URL only to point somewhere else;
+the client appends `/v1` itself, and sources that disagree are refused rather
+than silently preferred. `HASNA_HOME` and `HASNA_CONFIG_HOME` move the disk
+root; the older unprefixed spellings of these two variables (without the
+`HASNA_` prefix) still work as a silent fallback for one release, but the
+`HASNA_TODOS_*` names are canonical and are what every diagnostic names.
+
+The credentials file is a plain env file, and its permissions are enforced — a
+group- or world-readable one is refused rather than read:
+
+```bash
+install -m 700 -d ~/.hasna/todos/config
+printf 'HASNA_TODOS_API_KEY=%s\n' "$KEY" > ~/.hasna/todos/config/credentials
+chmod 600 ~/.hasna/todos/config/credentials
+```
+
+**Hosted mode fails closed.** With no credential the CLI exits non-zero
+(`REMOTE_API_CONFIG_MISSING`) and names the tiers it consulted; the stdio MCP
+server exits the same way before answering `initialize`. Once a hosted
+authority resolves, each call fails instead of serving local rows — the
+credential-gated tools with the typed `REMOTE_API_CONFIG_MISSING` and the
+on-box tools with the typed `REMOTE_COMMAND_UNSUPPORTED` (or
+`API_DATABASE_FALLBACK_FORBIDDEN` on surfaces without a startup refusal), both
+described under
+[Upgrading From 0.15.52](#upgrading-from-01552). Neither surface falls back to
+the local SQLite store, because serving local rows while authentication is broken
+prints healthy output for a broken system.
+
+The `./sdk` surface fails closed the same way: with nothing resolved,
+`new TodosClient()` and `createTodosV1Client()` both throw
+`TODOS_CREDENTIAL_MISSING` naming every tier they consulted. `TodosClient` can
+speak to the on-box `todos-serve` at `http://localhost:19427` — that is a real
+mode for it — but only under the explicit opt-in below, never as a fallback.
+Every other refusal is a throw on all three surfaces too — aliases that
+disagree, an unreadable credential file, a URL with no key — because those are
+misconfigurations, not an absence of configuration.
+
+A **declared-but-blank** authority variable is deliberately *not* one of those
+refusals. At the Todos seam a blank has always meant "unset" — helpers in the
+wild blank rather than delete — so every authority variable that is declared
+but empty is removed before the resolver runs. `HASNA_TODOS_API_KEY=` therefore
+resolves the machine's ambient Keychain item exactly as an unset variable does:
+it neither configures a credential nor withholds one. To force the on-box store
+from a wrapper, set `HASNA_TODOS_LOCAL=1` — a blank authority variable counts as
+absent for the opt-in too, so the opt-in is still honoured when
+`HASNA_TODOS_API_KEY` is present but empty — instead of blanking a credential
+variable.
+
+On the hosted route the MCP server never opens the local store either: the
+tools and `todos://` resources that only exist for the on-box SQLite file
+(dispatch, templates, handoffs, boards, runs, `todos://projects`, …) answer
+`REMOTE_COMMAND_UNSUPPORTED` naming the opt-in, instead of reading an empty
+local file and reporting it as the fleet. Machine and task tools are
+shared-API routed on that route and refuse under their own `REMOTE_API_*`
+code when the authority cannot serve them.
+
+**Local mode is deliberate, and it says so.** `@hasna/todos` is usable entirely
+offline against an on-box SQLite store — set `HASNA_TODOS_LOCAL=1` (alias
+`TODOS_LOCAL=1`). It is honoured only when the environment configures no
+authority and no credential, it is answered *before* the resolver runs (so no
+Keychain item and no credential file is read), and every local run prints one
+line on stderr saying it is local.
+
+Three command families are exempt from local mode and are shared-API only:
+`todos plans`, `todos task-lists` (aliases `lists`, `tl`) and the template
+commands (`templates`, `template-init`, `template-preview`, `template-export`,
+`template-import`, `template-history`). They refuse `HASNA_TODOS_DB_PATH`,
+`TODOS_DB_PATH`, `HASNA_TODOS_LOCAL` and `TODOS_LOCAL` before startup and need a
+credential. `todos template-library` is the exception on the other side: it
+renders the library bundled in the package and stays credential-free.
+
+```bash
+todos storage status --json    # which tier supplied the key, and which URL applied
+```
+
 ## CLI Usage
 
 ```bash
@@ -25,6 +242,13 @@ todos completions zsh > ~/.zsh/completions/_todos
 todos completions fish > ~/.config/fish/completions/todos.fish
 ```
 
+`--help`, `manual` and the completions all derive from the same tree, and that
+tree is filtered by the resolved route: the default posture advertises the
+commands that can run against the hosted surface, and `HASNA_TODOS_LOCAL=1`
+advertises the full on-box set. See
+[Upgrading From 0.15.52](#upgrading-from-01552) and
+`apps/todos/docs/cli-help.md`.
+
 Print the local CLI manual when you need install/update commands, examples,
 JSON output contracts, error behavior, and the command catalog:
 
@@ -282,8 +506,10 @@ todos extract-watch . --dry-run --max-runs 1 --json
 ```
 
 Created tasks are tagged with `extracted` and linked back to the source file.
-MCP clients can call `extract_todos` and `watch_source_todos` for the same
-offline workflow; no hosted code search, hosted sync, or telemetry is used.
+The source index is CLI-only: the former `extract_todos` / `watch_source_todos`
+MCP tools were removed (a filesystem watcher is not an MCP tool call, and the
+scan runs against the local checkout, not the hosted fleet). No hosted code
+search, hosted sync, or telemetry is used.
 
 ## Local Editor Integrations
 
@@ -464,7 +690,7 @@ OpenLoops updates those pointers after admission or evaluator progress:
 todos task workflow-pointers <task-id> \
   --invocation <workflow-invocation-id> \
   --run <workflow-run-id> \
-  --manifest /home/hasna/.hasna/loops/runs/<project>/<subject>/<run>/manifest.json \
+  --manifest ~/.hasna/loops/runs/<project>/<subject>/<run>/manifest.json \
   --state working \
   --json
 ```
@@ -700,34 +926,60 @@ MCP clients get the same local coordination through `claim_next_task`,
 `claim_next_task` can opt into stale recovery with `steal_stale` and
 `stale_minutes`.
 
-## Local Plan Templates
-
-Reusable plan templates live in the local SQLite database. The package also
-ships a marketplace-free local library for bug fixes, feature implementation,
-security review, releases, migrations, incidents, docs refreshes, QA, and open
-source package bootstraps. Templates can create one task or a full ordered plan
-with dependencies, variables, priorities, tags, and descriptions:
-
-```bash
-todos template-library --json
-todos template-library --write .todos/templates
-todos template-init
-todos template-preview <template-id> --var name=api
-todos templates --use <template-id> --var name=api
-todos template-export <template-id> > plan-template.json
-todos template-import plan-template.json
-```
+`get_stale_tasks` (and the other MCP tools that read the on-box store) require
+the deliberate local opt-in: start the MCP server with `HASNA_TODOS_LOCAL=1`, or
+the call fails on the default posture with the typed
+`API_DATABASE_FALLBACK_FORBIDDEN` refusal. See
+[Upgrading From 0.15.52](#upgrading-from-01552) for the affected families and
+the one case where the opt-in is ignored.
+
+## Plan Templates
+
+The package ships a marketplace-free template library for bug fixes, feature
+implementation, security review, releases, migrations, incidents, docs
+refreshes, QA, and open source package bootstraps. Templates can create one
+task or a full ordered plan with dependencies, variables, priorities, tags, and
+descriptions.
+
+Two surfaces are involved, and they are not the same store:
+
+- `todos template-library` renders the library bundled in the package. It is
+  credential-free and never opens a database, so it works offline:
+
+  ```bash
+  todos template-library --json
+  todos template-library --write .todos/templates
+  ```
+
+- The remaining template commands are served by the authenticated shared API.
+  `todos template-init`, `todos template-preview`, `todos templates --use`,
+  `todos template-export`, `todos template-import` and `todos template-history`
+  require `HASNA_TODOS_API_URL` and `HASNA_TODOS_API_KEY` (or saved account
+  credentials) and refuse an on-box database selection before startup:
+
+  ```bash
+  todos template-init
+  todos template-preview <template-id> --var name=api
+  todos templates --use <template-id> --var name=api
+  todos template-export <template-id> > plan-template.json
+  todos template-import plan-template.json
+  ```
 
 `todos template-library --write` writes editable JSON files that use the same
 shape as `todos template-import`, so teams can fork a built-in workflow without
 contacting any hosted marketplace. `todos templates --use` creates every task in
-a multi-task template and wires its local dependency graph, so agents can
-immediately run `todos ready`, `todos blocked`, or
-`todos deps <task-id> --graph` against the generated plan. The same local-only
-workflow is available to MCP clients through `list_template_library`,
-`write_template_library`, `init_templates`, `create_template`, `list_templates`,
+a multi-task template and wires its dependency graph in the shared account, so
+agents can immediately run `todos ready`, `todos blocked`, or
+`todos deps <task-id> --graph` against the generated plan. MCP clients reach the
+bundled library through `list_template_library` and `write_template_library`,
+which are credential-free and open no store. The remaining MCP template tools —
+`init_templates`, `create_template`, `list_templates`,
 `create_task_from_template`, `preview_template`, `export_template`, and
-`import_template`.
+`import_template` — read the on-box SQLite store and are not served on the
+default posture: start the MCP server with `HASNA_TODOS_LOCAL=1` to use them.
+That opt-in is ignored when the environment sets `HASNA_TODOS_API_KEY` or
+`HASNA_TODOS_API_URL`, which leaves these tools unreachable (see
+[Upgrading From 0.15.52](#upgrading-from-01552)).
 
 ## Moving Tasks Between Plans
 
@@ -748,8 +1000,21 @@ todos plans --show <plan-id>                  # verify the plan's task set
 
 Plan references accept a UUID, a plan slug, a plan name, or a unique id prefix.
 An unknown or ambiguous reference exits non-zero before any task is modified.
-All of these run against whichever store the CLI is configured for: the local
-SQLite file, or the shared dataset behind a hosted `/v1` authority.
+`todos add`, `todos update` and `todos bulk` follow whichever store the CLI is
+configured for — the local SQLite file, or the shared dataset behind a hosted
+`/v1` authority. `todos plans` does not: it is served by the authenticated
+shared API only and refuses `HASNA_TODOS_DB_PATH`, `TODOS_DB_PATH`,
+`HASNA_TODOS_LOCAL` and `TODOS_LOCAL` before startup.
+
+`todos plans --artifact <id-or-slug>` and `--write-artifacts` compare local
+Markdown against the shared plan record and therefore require an explicit
+`--artifact-root <directory>` — a trusted local project directory the caller
+chooses. Before 0.16.0 both options defaulted to the project path recorded in
+local SQLite, so the older form `todos plans --artifact <id-or-slug> --json`
+still appears in notes from that release; it now exits non-zero with
+`--artifact-root is required`. The files stay under
+`<artifact-root>/.hasna/todos/plans/<project-id>/`, and a path returned by the
+API is never used.
 
 ## Local Git Traceability
 
@@ -1471,16 +1736,19 @@ todos-mcp
 
 ## HTTP mode
 
-Shared Streamable HTTP transport for long-lived local MCP (stdio remains the default). MCP is mounted on the existing `todos-serve` HTTP server — no second server:
+The Streamable HTTP transport is served by `todos-serve`, never by `todos-mcp`
+(stdio only). `todos-mcp --http`, `todos-mcp --port <n>` and `MCP_HTTP=1` are
+refused with exit code 2 — the listener and its auth posture are server-only
+code and do not ship in a client binary that MCP clients spawn without a
+credential. Start the server instead:
 
 ```bash
-todos-mcp --http              # starts todos-serve with MCP mounted; or MCP_HTTP=1
-todos-mcp --port 8881         # explicit HTTP port (default MCP HTTP port is 8881)
+todos-serve                   # mounts POST /mcp next to /api/*; see "REST API" for the auth gate
 ```
 
-- Bind: `127.0.0.1` only
+- Bind: `127.0.0.1` by default
 - Health: `GET /health` → `{"status":"ok","name":"todos"}`
-- MCP: `POST /mcp` on the same server as the dashboard/API (Streamable HTTP, stateless)
+- MCP: `POST /mcp` on the same server as the REST API (Streamable HTTP, stateless)
 
 The MCP server defaults to the token-saving `TODOS_PROFILE=minimal` profile.
 Use `TODOS_PROFILE=standard` for broader task/project/resource tools, or
@@ -1502,7 +1770,7 @@ refuses to start unless one of the following is true:
 
 | Configuration | Result |
 | --- | --- |
-| `TODOS_API_KEY=<key>` (or `--api-key <key>`) | `/api/*` + `/mcp` require the key |
+| `HASNA_TODOS_SERVER_API_KEY=<key>` (or `--api-key <key>`) | `/api/*` + `/mcp` require the key |
 | at least one `todos api-keys create` key exists | `/api/*` + `/mcp` require a key |
 | `--allow-anonymous` **and** a loopback bind | anonymous, loopback peers only (local dev) |
 | a cloud `DATABASE_URL` is configured (hosted `/v1` deployment) | `/api/*` + `/mcp` are **not served**; `/v1` stays authenticated |
@@ -1510,24 +1778,68 @@ refuses to start unless one of the following is true:
 
 ```bash
 todos api-keys create "My app"          # then send x-api-key / Authorization: Bearer
-TODOS_API_KEY=<key> todos-serve --host 0.0.0.0
+HASNA_TODOS_SERVER_API_KEY=<key> todos-serve --host 0.0.0.0
 todos serve --allow-anonymous           # local dev only; refused for a non-loopback --host
 ```
 
 `--allow-anonymous` (or `TODOS_ALLOW_ANONYMOUS=1`) is refused for any non-loopback
 bind host, and even when enabled it only serves requests whose transport peer is
 itself loopback — so it can never publish an anonymous task read/write plane
-off-box. `todos-mcp --http` sets it implicitly because that transport is pinned to
-`127.0.0.1`; set `TODOS_API_KEY` (and send it from your MCP client) to require a
+off-box. (`todos-mcp --http` used to set it implicitly; that path is gone — the MCP
+bin is stdio-only and `todos-serve` is the only process that serves `/mcp`.) Set
+`HASNA_TODOS_SERVER_API_KEY` (and send it from your MCP client) to require a
 credential there too.
 
-Pass the generated key from your app as `x-api-key` or set `TODOS_API_KEY` for
-the SDK client.
+Pass the generated key from your app as `x-api-key` or `Authorization: Bearer`.
+
+`HASNA_TODOS_SERVER_API_KEY` is the **server's** own variable — the credential
+`todos-serve` demands from its callers. It is deliberately NOT one of the client
+credential names: `HASNA_TODOS_API_KEY` is how a client finds a key (the resolver
+documented under [Credentials and Service Authority](#credentials-and-service-authority)),
+and a fleet client key exported on a workstation must never silently become the
+local server's accepted key — one name cannot play both roles on opposite sides
+of the same trust boundary. `todos serve` prints one line at startup naming which
+variable supplied its accepted key. For one release the client names
+(`HASNA_TODOS_API_KEY` / `TODOS_API_KEY`) are still accepted as a documented
+fallback so an env written before 2026-09-05 keeps working; the startup line
+flags the deprecated spelling so operators can move the value.
 
 Always-on / hosted deployments should use the versioned `/v1` API, which
 authenticates independently against the cloud key store. `/health`, `/ready`,
 `/version` and `/openapi.json` are the only routes that are public by design.
 
+### Hosted `/v1` writes need a neutral `User-Agent`
+
+The hosted `/v1` plane is served through a Cloudflare-protected gateway that
+rejects automation-library default User-Agents. Python's `urllib` sends
+`Python-urllib/3.x` and `requests` sends `python-requests/x.y`; the gateway
+answers those with HTTP 403 (Cloudflare error 1010, browser-signature rule)
+even though the identical request from `curl` succeeds with the same headers
+and key. The origin is never reached, so no code change on the API server can
+help — the caller must present a non-python `User-Agent` on every request
+through the gateway:
+
+```python
+import json
+import urllib.request
+
+req = urllib.request.Request(
+    "https://api.hasna.com/todos/v1/tasks",
+    data=json.dumps({"title": "ship the parser"}).encode(),
+    method="POST",
+    headers={
+        "x-api-key": "<your-key>",          # or Authorization: Bearer <your-key>
+        "content-type": "application/json",
+        "user-agent": "hasna-todos/1.0",    # never the urllib default
+    },
+)
+urllib.request.urlopen(req)                  # 201, not 403 Cloudflare 1010
+```
+
+The `requests` equivalent sets the same `user-agent` header on the request or
+session; a fixed neutral product string works for both reads and writes. Do not
+rely on the library default User-Agent.
+
 Agent callers can trim REST responses with field selectors:
 
 ```bash
@@ -1542,9 +1854,11 @@ Data is stored in `~/.hasna/todos/`.
 
 ## Local-Only Security Boundary
 
-`@hasna/todos` is an open source, local-first package. The CLI, MCP server, SDK,
-and local dashboard read and write local state by default and do not require a
-hosted API, cloud account, billing provider, or remote model provider.
+`@hasna/todos` is an open source package with a local-first storage boundary.
+The CLI, MCP server, and SDK read and write on-box state under the explicit
+local opt-in (`HASNA_TODOS_LOCAL=1`) and otherwise talk only to the Todos `/v1`
+authority the operator configured. They never require a billing provider, a
+SaaS account, or a remote model provider.
 
 Release checks enforce that boundary before publishing:
 

package/dist/ai-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai-tools.d.ts","sourceRoot":"","sources":["../src/ai-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,KAAK,EACV,iBAAiB,EAIjB,wBAAwB,EACzB,MAAM,SAAS,CAAC;AAWjB,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,SAAS,CAAC;AAYjB,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,0BAA0B,CAAC;AAIlC,OAAO,EAIL,KAAK,IAAI,EACT,KAAK,OAAO,EACZ,KAAK,IAAI,EACT,KAAK,UAAU,EACf,KAAK,eAAe,EACrB,MAAM,kBAAkB,CAAC;AAE1B,eAAO,MAAM,wBAAwB,oEAK3B,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,eAAO,MAAM,2BAA2B,4BAA6B,CAAC;AACtE,eAAO,MAAM,yBAAyB,0BAA2B,CAAC;AAElE,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAClF,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC9E,MAAM,MAAM,eAAe,GACvB,mBAAmB,GACnB,sBAAsB,GACtB,oBAAoB,CAAC;AAEzB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;CAY5B,CAAC;AAEX,eAAO,MAAM,4BAA4B;;;;CAI/B,CAAC;AAEX,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;AAC1C,KAAK,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAChD,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAE9C,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,MAAM,CAAC;IACnC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC/C,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,YAAY,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;IACxC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,UAAU,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpE,cAAc,CAAC,CACb,KAAK,EAAE,kCAAkC,GACxC,YAAY,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,kCAAkC;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,aAAa,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,aAAa,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IACxD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,kCAAkC;IACjD,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,KAAK,OAAO,CAAC;IACrF,gBAAgB,CAAC,EAAE,CACjB,KAAK,EAAE,kCAAkC,KACtC,YAAY,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAAC;IACtD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAmBD,wBAAgB,6BAA6B,CAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,kBAAkB,CAqBrF;AAiDD,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,kCAAuC,GAC/C,wBAAwB,CAmC1B;AAED,eAAO,MAAM,2BAA2B,gCAA0B,CAAC;AA0OnE,MAAM,WAAW,sCAAsC;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,iBAAiB,CAAC;CAC1B;AAED,MAAM,WAAW,iCAAiC;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,sCAAsC,GAC5C,iCAAiC,CAiBnC"}
+{"version":3,"file":"ai-tools.d.ts","sourceRoot":"","sources":["../src/ai-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,KAAK,EACV,iBAAiB,EAIjB,wBAAwB,EACzB,MAAM,SAAS,CAAC;AAWjB,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,SAAS,CAAC;AAYjB,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,0BAA0B,CAAC;AAIlC,OAAO,EAIL,KAAK,IAAI,EACT,KAAK,OAAO,EACZ,KAAK,IAAI,EACT,KAAK,UAAU,EACf,KAAK,eAAe,EACrB,MAAM,kBAAkB,CAAC;AAG1B,eAAO,MAAM,wBAAwB,oEAK3B,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,eAAO,MAAM,2BAA2B,4BAA6B,CAAC;AACtE,eAAO,MAAM,yBAAyB,0BAA2B,CAAC;AAElE,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAClF,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC9E,MAAM,MAAM,eAAe,GACvB,mBAAmB,GACnB,sBAAsB,GACtB,oBAAoB,CAAC;AAEzB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;CAY5B,CAAC;AAEX,eAAO,MAAM,4BAA4B;;;;CAI/B,CAAC;AAEX,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;AAC1C,KAAK,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAChD,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAE9C,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,MAAM,CAAC;IACnC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC/C,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,YAAY,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;IACxC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,UAAU,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpE,cAAc,CAAC,CACb,KAAK,EAAE,kCAAkC,GACxC,YAAY,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,kCAAkC;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,aAAa,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,aAAa,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IACxD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,kCAAkC;IACjD,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,KAAK,OAAO,CAAC;IACrF,gBAAgB,CAAC,EAAE,CACjB,KAAK,EAAE,kCAAkC,KACtC,YAAY,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAAC;IACtD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAmBD,wBAAgB,6BAA6B,CAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,kBAAkB,CAqBrF;AAiDD,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,kCAAuC,GAC/C,wBAAwB,CAmC1B;AAED,eAAO,MAAM,2BAA2B,gCAA0B,CAAC;AA0OnE,MAAM,WAAW,sCAAsC;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,iBAAiB,CAAC;CAC1B;AAED,MAAM,WAAW,iCAAiC;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,sCAAsC,GAC5C,iCAAiC,CAiBnC"}

package/dist/ai.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../src/ai.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,uBAAuB,EAAG,CAAU,CAAC;AAClD,eAAO,MAAM,iCAAiC,EAAG,CAAU,CAAC;AAC5D,eAAO,MAAM,0BAA0B,EAAG,yBAAkC,CAAC;AAC7E,eAAO,MAAM,kCAAkC,EAAG,yBAAkC,CAAC;AAErF,eAAO,MAAM,gBAAgB,0CAA2C,CAAC;AACzE,eAAO,MAAM,oBAAoB,2CAA4C,CAAC;AAC9E,eAAO,MAAM,uBAAuB,qDAAsD,CAAC;AAC3F,eAAO,MAAM,qBAAqB,+EAMxB,CAAC;AACX,eAAO,MAAM,4BAA4B,iIAQ/B,CAAC;AACX,eAAO,MAAM,qBAAqB,uCAAwC,CAAC;AAC3E,eAAO,MAAM,2BAA2B,0FAQ9B,CAAC;AACX,eAAO,MAAM,2BAA2B;;;;;;;;;;CAU9B,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC9D,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACrE,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3E,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AACtE,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AACpF,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AACvE,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAElF,MAAM,MAAM,gBAAgB,GACxB,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,gBAAgB,EAAE,GAClB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAAA;CAAE,CAAC;AACxC,MAAM,MAAM,iBAAiB,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAAA;CAAE,CAAC;AAEpE,eAAO,MAAM,iBAAiB;qBACV,aAAa;;;yBAGJ,gBAAgB;CACnC,CAAC;AAEX,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;CAuBlB,CAAC;AAEX,eAAO,MAAM,mBAAmB;;;;;;;;;CAStB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AAE7F,eAAO,MAAM,iBAAiB;;;;;;;;;;;yBA5CV,aAAa;;;6BAGJ,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsDnC,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,OAAO,iBAAiB,CAAC;AAEvD,MAAM,MAAM,gBAAgB,GACxB,eAAe,GACf,uBAAuB,GACvB,qBAAqB,GACrB,sBAAsB,GACtB,wBAAwB,GACxB,aAAa,GACb,gBAAgB,GAChB,SAAS,GACT,aAAa,GACb,gBAAgB,GAChB,YAAY,GACZ,cAAc,GACd,gBAAgB,CAAC;AAErB,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,iCAAiC;IAChD,GAAG,CAAC,EAAE,uBAAuB,CAAC;IAC9B,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,aAAa,EAAE,mBAAmB,CAAC;IACnC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,aAAa,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACxC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,CAAC;IACF,SAAS,EAAE;QACT,UAAU,EAAE,gBAAgB,CAAC;QAC7B,aAAa,EAAE,mBAAmB,CAAC;QACnC,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;IACF,MAAM,EAAE;QACN,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,iBAAiB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC1C,gBAAgB,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAChD,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,uBAAuB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IACE,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,mBAAmB,CAAC;CAC5B,GACD;IACE,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,gBAAgB,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC/F;AAED,MAAM,WAAW,kCAAkC;IACjD,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,iBAAiB,CAAC;IAC/B,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,OAAO,CACL,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,kCAAkC,GAC1C,gBAAgB,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,iBAAiB,CAAC;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,yBAAyB,CAAC;CACpC;AAED,MAAM,MAAM,wBAAwB,GAAG,CACrC,OAAO,EAAE,+BAA+B,KACrC,SAAS,kBAAkB,EAAE,GAAG,WAAW,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;AAEhF,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,cAAc,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,OAAO,iCAAiC,CAAC;IAC3D,WAAW,CAAC,EAAE,wBAAwB,CAAC;CACxC;AAED,MAAM,WAAW,oBAAoB;IACnC,iCAAiC,EAAE,OAAO,iCAAiC,CAAC;IAC5E,oBAAoB,CAAC,OAAO,EAAE,yBAAyB,GAAG,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACpG;AAED,MAAM,MAAM,sBAAsB,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAE7E,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,IAAI,EAAE,gBAAgB;IAE/B,QAAQ,CAAC,QAAQ,EAAE,eAAe;gBAFzB,IAAI,EAAE,gBAAgB,EAC/B,OAAO,EAAE,MAAM,EACN,QAAQ,GAAE,eAA2C,EAC9D,OAAO,CAAC,EAAE,YAAY;CAKzB;AAED,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;gBAEhC,YAAY,EAAE,mBAAmB;CAc9C;AAED,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;gBAEtC,eAAe,EAAE,sBAAsB;CAiBpD;AA0HD,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,iCAAiC,GACvC,6BAA6B,CAyG/B;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAS5D;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAqB/E;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,CAMzE;AAID,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAoCvF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,iBAAiB,CA+E5B;AAsHD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CA4C5E;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CASvE;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAWlF;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAW/E;AAeD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,yBAAyB,EAClC,QAAQ,GAAE,sBAAsD,GAC/D,OAAO,CAAC,cAAc,CAAC,CAczB;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,MAAM,EACf,SAAS,UAAQ,EACjB,OAAO,GAAE,iBAAiB,GAAG,IAAW,GACvC,gBAAgB,CAalB;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAa9F;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,MAAM,EACb,eAAe,EAAE,sBAAsB,GACtC,gBAAgB,CAclB;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,GAAG,eAAe,CAkBlF"}
+{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../src/ai.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,uBAAuB,EAAG,CAAU,CAAC;AAClD,eAAO,MAAM,iCAAiC,EAAG,CAAU,CAAC;AAC5D,eAAO,MAAM,0BAA0B,EAAG,yBAAkC,CAAC;AAC7E,eAAO,MAAM,kCAAkC,EAAG,yBAAkC,CAAC;AAErF,eAAO,MAAM,gBAAgB,0CAA2C,CAAC;AACzE,eAAO,MAAM,oBAAoB,2CAA4C,CAAC;AAC9E,eAAO,MAAM,uBAAuB,qDAAsD,CAAC;AAC3F,eAAO,MAAM,qBAAqB,+EAMxB,CAAC;AACX,eAAO,MAAM,4BAA4B,iIAQ/B,CAAC;AACX,eAAO,MAAM,qBAAqB,uCAAwC,CAAC;AAC3E,eAAO,MAAM,2BAA2B,0FAQ9B,CAAC;AACX,eAAO,MAAM,2BAA2B;;;;;;;;;;CAU9B,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC9D,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACrE,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3E,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AACtE,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AACpF,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AACvE,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAElF,MAAM,MAAM,gBAAgB,GACxB,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,gBAAgB,EAAE,GAClB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAAA;CAAE,CAAC;AACxC,MAAM,MAAM,iBAAiB,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAAA;CAAE,CAAC;AAEpE,eAAO,MAAM,iBAAiB;qBACV,aAAa;;;yBAGJ,gBAAgB;CACnC,CAAC;AAEX,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;CAuBlB,CAAC;AAEX,eAAO,MAAM,mBAAmB;;;;;;;;;CAStB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AAE7F,eAAO,MAAM,iBAAiB;;;;;;;;;;;yBA5CV,aAAa;;;6BAGJ,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsDnC,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,OAAO,iBAAiB,CAAC;AAEvD,MAAM,MAAM,gBAAgB,GACxB,eAAe,GACf,uBAAuB,GACvB,qBAAqB,GACrB,sBAAsB,GACtB,wBAAwB,GACxB,aAAa,GACb,gBAAgB,GAChB,SAAS,GACT,aAAa,GACb,gBAAgB,GAChB,YAAY,GACZ,cAAc,GACd,gBAAgB,CAAC;AAErB,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,iCAAiC;IAChD,GAAG,CAAC,EAAE,uBAAuB,CAAC;IAC9B,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,aAAa,EAAE,mBAAmB,CAAC;IACnC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,aAAa,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACxC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,CAAC;IACF,SAAS,EAAE;QACT,UAAU,EAAE,gBAAgB,CAAC;QAC7B,aAAa,EAAE,mBAAmB,CAAC;QACnC,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;IACF,MAAM,EAAE;QACN,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,iBAAiB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC1C,gBAAgB,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAChD,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,uBAAuB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IACE,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,mBAAmB,CAAC;CAC5B,GACD;IACE,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,gBAAgB,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC/F;AAED,MAAM,WAAW,kCAAkC;IACjD,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,iBAAiB,CAAC;IAC/B,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,OAAO,CACL,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,kCAAkC,GAC1C,gBAAgB,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,iBAAiB,CAAC;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,yBAAyB,CAAC;CACpC;AAED,MAAM,MAAM,wBAAwB,GAAG,CACrC,OAAO,EAAE,+BAA+B,KACrC,SAAS,kBAAkB,EAAE,GAAG,WAAW,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;AAEhF,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,cAAc,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,OAAO,iCAAiC,CAAC;IAC3D,WAAW,CAAC,EAAE,wBAAwB,CAAC;CACxC;AAED,MAAM,WAAW,oBAAoB;IACnC,iCAAiC,EAAE,OAAO,iCAAiC,CAAC;IAC5E,oBAAoB,CAAC,OAAO,EAAE,yBAAyB,GAAG,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACpG;AAED,MAAM,MAAM,sBAAsB,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAE7E,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,IAAI,EAAE,gBAAgB;IAE/B,QAAQ,CAAC,QAAQ,EAAE,eAAe;gBAFzB,IAAI,EAAE,gBAAgB,EAC/B,OAAO,EAAE,MAAM,EACN,QAAQ,GAAE,eAA2C,EAC9D,OAAO,CAAC,EAAE,YAAY;CAKzB;AAED,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;gBAEhC,YAAY,EAAE,mBAAmB;CAc9C;AAED,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;gBAEtC,eAAe,EAAE,sBAAsB;CAiBpD;AA0HD,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,iCAAiC,GACvC,6BAA6B,CA2G/B;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAS5D;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAqB/E;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,CAMzE;AAID,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAoCvF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,iBAAiB,CA+E5B;AAsHD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CA4C5E;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CASvE;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAWlF;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAW/E;AAeD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,yBAAyB,EAClC,QAAQ,GAAE,sBAAsD,GAC/D,OAAO,CAAC,cAAc,CAAC,CAczB;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,MAAM,EACf,SAAS,UAAQ,EACjB,OAAO,GAAE,iBAAiB,GAAG,IAAW,GACvC,gBAAgB,CAalB;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAa9F;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,MAAM,EACb,eAAe,EAAE,sBAAsB,GACtC,gBAAgB,CAclB;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,GAAG,eAAe,CAkBlF"}