@hearsay-tools/squawk 0.0.0-stage → 0.17.0-dev.5682

package/dist/server/static-ui.d.ts

@@ -0,0 +1,49 @@
+/** Which browser UI a request for `/` gets.
+ *
+ *  The React cockpit built to `web/dist` is the only web UI — the legacy
+ *  vanilla page (`web/app.js` + friends) was deleted in phase R7 of the spec
+ *  `.ai/specs/2026-07-14-cockpit-ui-redesign.md`. A checkout without a build
+ *  gets a small built-in hint page (`build-hint`), never a 404.
+ */
+export type IndexTarget = 'dist' | 'build-hint';
+/** Pick the response for `/`, given whether the build exists.
+ *
+ *  The published tarball always ships `web/dist`, so `build-hint` is a dev-only
+ *  state (a fresh checkout that never ran `npm run build:web`) — the spec's
+ *  degradation matrix answers it with a plain "run the build" page.
+ */
+export declare function resolveIndexHtml(opts: {
+    distExists: boolean;
+}): IndexTarget;
+/** `passthrough` = not the SPA's to answer: `/api/*` keeps its JSON/SSE behavior
+ *  and its own 404s, and the files with dedicated static routes keep being
+ *  served by them. */
+export type GetTarget = IndexTarget | 'passthrough';
+/** Decide what any GET gets, so every route in the spec's map (`/tasks/:id/changes`,
+ *  `/settings/skills`, …) cold-loads and survives a refresh — that is what makes a
+ *  cockpit URL pasteable.
+ *
+ *  Unknown paths deliberately resolve to the shell, not a 404: react-router owns
+ *  the 404 (it is the only side that knows the route map). Everything the server
+ *  itself owns — `/api/*` and the static files above — passes through untouched.
+ */
+export declare function resolveGetRequest(opts: {
+    path: string;
+    distExists: boolean;
+}): GetTarget;
+/** The dev fallback page served for every shell route when `web/dist` is
+ *  missing (spec degradation matrix: "run `npm run dev:web` or
+ *  `npm run build:web`"). Built into the server so it needs no files on disk. */
+export declare const BUILD_HINT_HTML: string;
+/** True only for a plain filename the `/assets/:file` route may serve.
+ *
+ *  `basename` alone is not a guard here: `basename('..')` is `'..'`, which
+ *  joins back to the assets dir itself and turns the route's `readFileSync`
+ *  into an EISDIR crash (a 500) instead of a 404. Dot-segments, separators,
+ *  and NUL all mean "not a file we ship" — the caller answers 404. */
+export declare function isSafeAssetFilename(file: string): boolean;
+/** Content type for a hashed file under `web/dist/assets/`. */
+export declare function assetContentType(file: string): string;
+/** Vite fingerprints every filename under `assets/`, so the bytes behind a URL
+ *  can never change — cache them for a year. */
+export declare const ASSET_CACHE_CONTROL = "public, max-age=31536000, immutable";

package/dist/server/static-ui.js

@@ -0,0 +1,99 @@
+import { productName } from '../home/display.js';
+/** Pick the response for `/`, given whether the build exists.
+ *
+ *  The published tarball always ships `web/dist`, so `build-hint` is a dev-only
+ *  state (a fresh checkout that never ran `npm run build:web`) — the spec's
+ *  degradation matrix answers it with a plain "run the build" page.
+ */
+export function resolveIndexHtml(opts) {
+    return opts.distExists ? 'dist' : 'build-hint';
+}
+/** Paths owned by routes registered before the catch-all: the built app's hashed bundles and
+ *  the themed brand SVGs (#143) — the sidebar lockup pair and the favicon pair. */
+const BRAND_SVG_PATHS = new Set([
+    '/cezarion-lockup-light.svg',
+    '/cezarion-lockup-dark.svg',
+    '/cezarion-mark-light.svg',
+    '/cezarion-mark-dark.svg',
+]);
+function isStaticAsset(path) {
+    return path.startsWith('/assets/') || BRAND_SVG_PATHS.has(path);
+}
+/** Decide what any GET gets, so every route in the spec's map (`/tasks/:id/changes`,
+ *  `/settings/skills`, …) cold-loads and survives a refresh — that is what makes a
+ *  cockpit URL pasteable.
+ *
+ *  Unknown paths deliberately resolve to the shell, not a 404: react-router owns
+ *  the 404 (it is the only side that knows the route map). Everything the server
+ *  itself owns — `/api/*` and the static files above — passes through untouched.
+ */
+export function resolveGetRequest(opts) {
+    const { path, distExists } = opts;
+    if (path === '/api' || path.startsWith('/api/') || isStaticAsset(path)) {
+        return 'passthrough';
+    }
+    return resolveIndexHtml({ distExists });
+}
+/** The dev fallback page served for every shell route when `web/dist` is
+ *  missing (spec degradation matrix: "run `npm run dev:web` or
+ *  `npm run build:web`"). Built into the server so it needs no files on disk. */
+export const BUILD_HINT_HTML = `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>${productName('cezar')} — build the cockpit</title>
+<style>
+  body { margin: 0; display: grid; place-items: center; min-height: 100dvh;
+         font: 15px/1.6 system-ui, sans-serif; background: #101014; color: #e8e8ea; }
+  main { max-width: 34rem; padding: 2rem; }
+  code { font-family: ui-monospace, monospace; background: #1c1c22; border-radius: 6px; padding: 2px 6px; }
+  p { color: #a0a0aa; }
+</style>
+</head>
+<body>
+<main>
+  <h1>The cockpit isn&rsquo;t built yet</h1>
+  <p>This checkout has no <code>web/dist</code>. Run <code>npm run build:web</code>
+  and reload — or use <code>npm run dev:web</code> for the live dev server.</p>
+</main>
+</body>
+</html>
+`;
+const ASSET_TYPES = {
+    js: 'text/javascript; charset=utf-8',
+    css: 'text/css; charset=utf-8',
+    svg: 'image/svg+xml',
+    woff2: 'font/woff2',
+    woff: 'font/woff',
+    png: 'image/png',
+    jpg: 'image/jpeg',
+    jpeg: 'image/jpeg',
+    gif: 'image/gif',
+    webp: 'image/webp',
+    ico: 'image/x-icon',
+    json: 'application/json; charset=utf-8',
+    map: 'application/json; charset=utf-8',
+};
+/** True only for a plain filename the `/assets/:file` route may serve.
+ *
+ *  `basename` alone is not a guard here: `basename('..')` is `'..'`, which
+ *  joins back to the assets dir itself and turns the route's `readFileSync`
+ *  into an EISDIR crash (a 500) instead of a 404. Dot-segments, separators,
+ *  and NUL all mean "not a file we ship" — the caller answers 404. */
+export function isSafeAssetFilename(file) {
+    return (file.length > 0 &&
+        file !== '.' &&
+        file !== '..' &&
+        !file.includes('/') &&
+        !file.includes('\\') &&
+        !file.includes('\0'));
+}
+/** Content type for a hashed file under `web/dist/assets/`. */
+export function assetContentType(file) {
+    return ASSET_TYPES[file.split('.').pop()?.toLowerCase() ?? ''] ?? 'application/octet-stream';
+}
+/** Vite fingerprints every filename under `assets/`, so the bytes behind a URL
+ *  can never change — cache them for a year. */
+export const ASSET_CACHE_CONTROL = 'public, max-age=31536000, immutable';
+//# sourceMappingURL=static-ui.js.map

package/dist/server/static-ui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-ui.js","sourceRoot":"","sources":["../../src/server/static-ui.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAUjD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA6B;IAC5D,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;AACjD,CAAC;AAOD;mFACmF;AACnF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,4BAA4B;IAC5B,2BAA2B;IAC3B,0BAA0B;IAC1B,yBAAyB;CAC1B,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA2C;IAC3E,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAClC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACvE,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,gBAAgB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;;iFAEiF;AACjF,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;SAKtB,WAAW,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;CAiB5B,CAAC;AAEF,MAAM,WAAW,GAA2B;IAC1C,EAAE,EAAE,gCAAgC;IACpC,GAAG,EAAE,yBAAyB;IAC9B,GAAG,EAAE,eAAe;IACpB,KAAK,EAAE,YAAY;IACnB,IAAI,EAAE,WAAW;IACjB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,cAAc;IACnB,IAAI,EAAE,iCAAiC;IACvC,GAAG,EAAE,iCAAiC;CACvC,CAAC;AAEF;;;;;sEAKsE;AACtE,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,CACL,IAAI,CAAC,MAAM,GAAG,CAAC;QACf,IAAI,KAAK,GAAG;QACZ,IAAI,KAAK,IAAI;QACb,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CACrB,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,IAAI,0BAA0B,CAAC;AAC/F,CAAC;AAED;gDACgD;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAAG,qCAAqC,CAAC"}

package/dist/server/upgrade-router.d.ts

@@ -0,0 +1,23 @@
+import type { IncomingMessage } from 'node:http';
+import type { Duplex } from 'node:stream';
+/**
+ * The HTTP server's one `upgrade` listener (#781, spec 2026-10-02-live-preview-v1 "WebSocket").
+ * Each WebSocket endpoint is a route; the first whose `match` returns params handles the upgrade,
+ * and an unmatched path is destroyed. Upgrade-only endpoints never reach Hono, so each one is
+ * covered by their own endpoint tests.
+ */
+export interface UpgradeRoute {
+    /** Path params when `pathname` is this route's, else undefined. */
+    match(pathname: string): Record<string, string> | undefined;
+    handle(req: IncomingMessage, socket: Duplex, head: Buffer, params: Record<string, string>): void;
+}
+/** The server surface the router needs: the `http.Server` that `serve()` returns has it. */
+export interface UpgradeCapableServer {
+    on(event: 'upgrade', listener: (req: IncomingMessage, socket: Duplex, head: Buffer) => void): unknown;
+}
+export declare function attachUpgradeRouter(server: UpgradeCapableServer, routes: readonly UpgradeRoute[]): void;
+/**
+ * A `match` for one or more `/a/:param/b` patterns. A param is one non-empty segment, decoded;
+ * one that does not decode is no match.
+ */
+export declare function matchPath(patterns: readonly string[]): UpgradeRoute['match'];

package/dist/server/upgrade-router.js

@@ -0,0 +1,53 @@
+export function attachUpgradeRouter(server, routes) {
+    server.on('upgrade', (req, socket, head) => {
+        let pathname;
+        try {
+            // `req.url` on an upgrade is the path (+query); the base only satisfies URL parsing.
+            pathname = new URL(req.url ?? '', 'http://localhost').pathname;
+        }
+        catch {
+            socket.destroy();
+            return;
+        }
+        for (const route of routes) {
+            const params = route.match(pathname);
+            if (params)
+                return route.handle(req, socket, head, params);
+        }
+        // With an `upgrade` listener installed, Node no longer destroys unhandled upgrades.
+        socket.destroy();
+    });
+}
+/**
+ * A `match` for one or more `/a/:param/b` patterns. A param is one non-empty segment, decoded;
+ * one that does not decode is no match.
+ */
+export function matchPath(patterns) {
+    const compiled = patterns.map(pattern => pattern.split('/'));
+    return pathname => {
+        const parts = pathname.split('/');
+        for (const segments of compiled) {
+            if (segments.length !== parts.length)
+                continue;
+            const params = {};
+            const matched = segments.every((segment, i) => {
+                const part = parts[i];
+                if (!segment.startsWith(':'))
+                    return segment === part;
+                if (!part)
+                    return false;
+                try {
+                    params[segment.slice(1)] = decodeURIComponent(part);
+                    return true;
+                }
+                catch {
+                    return false;
+                }
+            });
+            if (matched)
+                return params;
+        }
+        return undefined;
+    };
+}
+//# sourceMappingURL=upgrade-router.js.map

package/dist/server/upgrade-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-router.js","sourceRoot":"","sources":["../../src/server/upgrade-router.ts"],"names":[],"mappings":"AAqBA,MAAM,UAAU,mBAAmB,CAAC,MAA4B,EAAE,MAA+B;IAC/F,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QACzC,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,qFAAqF;YACrF,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,MAAM;gBAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7D,CAAC;QACD,oFAAoF;QACpF,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,QAA2B;IACnD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,OAAO,QAAQ,CAAC,EAAE;QAChB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;YAChC,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAAE,SAAS;YAC/C,MAAM,MAAM,GAA2B,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;gBAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;gBACvB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,OAAO,KAAK,IAAI,CAAC;gBACtD,IAAI,CAAC,IAAI;oBAAE,OAAO,KAAK,CAAC;gBACxB,IAAI,CAAC;oBACH,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;oBACpD,OAAO,IAAI,CAAC;gBACd,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC,CAAC,CAAC;YACH,IAAI,OAAO;gBAAE,OAAO,MAAM,CAAC;QAC7B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/validators.d.ts

@@ -0,0 +1,80 @@
+import type { Context, Env, MiddlewareHandler } from 'hono';
+import type { z } from 'zod';
+/**
+ * Route-middleware validators for JSON, params and queries. Preserve typed input/output and the
+ * API’s JSON error boundary, including absent and malformed body policy.
+ */
+type ErrorOptions = {
+    /** Fixed 400 text, for routes that answer one instead of the zod issues. */
+    message?: string;
+    /** Stable typed code for the dedicated delegation API. */
+    code?: 'invalid_input';
+};
+type JsonOptions = ErrorOptions & {
+    /**
+     * What a request with NO body parses as — the old `.catch(() => …)` fallback. Hono hands a
+     * bodyless request `{}`, which is not the same as a request that really sent `{}`: routes that
+     * tolerate no body at all pass `{}` here, and the rest keep rejecting it exactly as they did.
+     */
+    absent?: unknown;
+    /**
+     * What a body that is PRESENT but not parseable as JSON becomes. Defaults to `absent`, which is
+     * what every route wants when both cases are rejected anyway.
+     *
+     * Use distinct values when an optional body accepts absence but must reject malformed JSON.
+     */
+    malformed?: unknown;
+    /**
+     * Builds the rejection itself, from the issues and the parsed input. The private preview tool
+     * route (#781) answers its agent a typed 200 result naming the field, not this API's 400.
+     */
+    invalid?: (c: Context, error: z.ZodError, input: unknown) => Response;
+};
+/**
+ * The request/response split, spelled out rather than inferred.
+ *
+ * Hono derives a validator's request type from its validation function's first parameter, but
+ * declares that parameter as a CONDITIONAL type — which is not an inference site, so annotating
+ * it achieves nothing and the request silently falls back to the schema's OUTPUT. That makes any
+ * `.optional().transform(…)` or `.default(…)` field REQUIRED on the wire: `POST /runs` demanded a
+ * `systemPrompt` no caller should send, and `POST …/merge` demanded `overrideRules`. Naming both
+ * sides here is the same thing `@hono/zod-validator` does, and for the same reason.
+ */
+type JsonValidator<S extends z.ZodType, E extends Env, P extends string> = MiddlewareHandler<E, P, {
+    in: {
+        json: z.input<S>;
+    };
+    out: {
+        json: z.output<S>;
+    };
+}>;
+export declare function jsonZodValidator<S extends z.ZodType, E extends Env = Env, P extends string = string>(schema: S | (() => S), options?: JsonOptions): JsonValidator<S, E, P>;
+/**
+ * Path params. No guard needed: these come off the matched URL, so there is no body to parse, no
+ * content-type to gate on and no malformed-input path — Hono's own behaviour is already right.
+ * The schema receives the whole param object (`{ provider: 'codex' }`), not a single value.
+ */
+export declare function paramZodValidator<S extends z.ZodType>(schema: S, { message, code }?: ErrorOptions): MiddlewareHandler<any, string, {
+    in: {
+        param: import("hono/validator").InferInput<z.TypeOf<S> extends infer T ? T extends z.TypeOf<S> ? T extends Promise<infer PR> ? PR extends Response | import("hono").TypedResponse<any, any, any> ? never : PR : T extends Response | import("hono").TypedResponse<any, any, any> ? never : T : never : never, "param", import("hono/types").FormValue>;
+    };
+    out: {
+        param: z.TypeOf<S> extends infer T ? T extends z.TypeOf<S> ? T extends Promise<infer PR> ? PR extends Response | import("hono").TypedResponse<any, any, any> ? never : PR : T extends Response | import("hono").TypedResponse<any, any, any> ? never : T : never : never;
+    };
+}, import("hono").TypedResponse<{
+    error: string;
+    code?: "invalid_input" | undefined;
+}, 400, "json"> | (z.TypeOf<S> extends infer T_1 ? T_1 extends z.TypeOf<S> ? T_1 extends Promise<infer PR_1> ? PR_1 extends import("hono").TypedResponse<infer T_2, infer S_1 extends import("hono/utils/http-status").StatusCode, infer F extends string> ? import("hono").TypedResponse<T_2, S_1, F> : PR_1 extends Response ? PR_1 : PR_1 extends undefined ? never : never : T_1 extends import("hono").TypedResponse<infer T_3, infer S_2 extends import("hono/utils/http-status").StatusCode, infer F_1 extends string> ? import("hono").TypedResponse<T_3, S_2, F_1> : T_1 extends Response ? T_1 : T_1 extends undefined ? never : never : never : never)>;
+/** Query string, on the same terms as {@link paramZodValidator}. */
+export declare function queryZodValidator<S extends z.ZodType>(schema: S, { message, code }?: ErrorOptions): MiddlewareHandler<any, string, {
+    in: {
+        query: import("hono/validator").InferInput<z.TypeOf<S> extends infer T ? T extends z.TypeOf<S> ? T extends Promise<infer PR> ? PR extends Response | import("hono").TypedResponse<any, any, any> ? never : PR : T extends Response | import("hono").TypedResponse<any, any, any> ? never : T : never : never, "query", import("hono/types").FormValue>;
+    };
+    out: {
+        query: z.TypeOf<S> extends infer T ? T extends z.TypeOf<S> ? T extends Promise<infer PR> ? PR extends Response | import("hono").TypedResponse<any, any, any> ? never : PR : T extends Response | import("hono").TypedResponse<any, any, any> ? never : T : never : never;
+    };
+}, import("hono").TypedResponse<{
+    error: string;
+    code?: "invalid_input" | undefined;
+}, 400, "json"> | (z.TypeOf<S> extends infer T_1 ? T_1 extends z.TypeOf<S> ? T_1 extends Promise<infer PR_1> ? PR_1 extends import("hono").TypedResponse<infer T_2, infer S_1 extends import("hono/utils/http-status").StatusCode, infer F extends string> ? import("hono").TypedResponse<T_2, S_1, F> : PR_1 extends Response ? PR_1 : PR_1 extends undefined ? never : never : T_1 extends import("hono").TypedResponse<infer T_3, infer S_2 extends import("hono/utils/http-status").StatusCode, infer F_1 extends string> ? import("hono").TypedResponse<T_3, S_2, F_1> : T_1 extends Response ? T_1 : T_1 extends undefined ? never : never : never : never)>;
+export {};

package/dist/server/validators.js

@@ -0,0 +1,85 @@
+import { validator } from 'hono/validator';
+/**
+ * `{ error }`, the one 400 shape this API answers (BACKWARD_COMPATIBILITY.md).
+ *
+ * Each issue is prefixed with the field path, because zod's own message never names the field:
+ * `"Invalid input: expected array, received undefined"` on its own does not tell the cockpit user
+ * WHICH field to fix. That is the same information `z.prettifyError` adds, minus its multi-line
+ * `✖ …\n  → at task` layout — this string is rendered verbatim in a toast, so it stays one line.
+ */
+function reject(c, error, override, code) {
+    const detail = error.issues
+        .map((issue) => (issue.path.length > 0 ? `${issue.path.join('.')}: ${issue.message}` : issue.message))
+        .join('; ');
+    return c.json({ error: override ?? detail, ...(code ? { code } : {}) }, 400);
+}
+export function jsonZodValidator(
+// A thunk is accepted because several schemas are declared next to the route family they
+// belong to, which is BELOW the route using them; resolving per request keeps those
+// declarations where they read best. Pass the schema directly whenever it is already in scope —
+// a GENERIC thunk is worse than either, since an unresolved schema type makes Hono drop the
+// route from the app type silently (see typed-bodies.test.ts).
+schema, options = {}) {
+    // Key presence, not a destructuring default: `undefined` IS a meaningful value for both of
+    // these; a `= null` default would silently overwrite an explicitly absent value.
+    const absent = 'absent' in options ? options.absent : null;
+    const malformed = 'malformed' in options ? options.malformed : absent;
+    const { message, code, invalid } = options;
+    const check = (input, c) => {
+        const resolved = typeof schema === 'function' ? schema() : schema;
+        const parsed = resolved.safeParse(input);
+        if (parsed.success)
+            return { ok: true, data: parsed.data };
+        return { ok: false, response: invalid ? invalid(c, parsed.error, input) : reject(c, parsed.error, message, code) };
+    };
+    const validate = validator('json', (value, c) => {
+        const result = check(value, c);
+        return result.ok ? result.data : result.response;
+    });
+    // Anything Hono would treat differently than the old inline parse is settled here and published
+    // straight to `c.req.valid('json')`; only well-formed JSON under a JSON content-type — what
+    // every real client sends — takes Hono's own path. See the header note.
+    const guard = async (c, next) => {
+        const text = await c.req.text().catch(() => '');
+        let body = absent;
+        let parseable = false;
+        if (text.trim() !== '') {
+            try {
+                body = JSON.parse(text);
+                parseable = true;
+            }
+            catch {
+                body = malformed;
+            }
+        }
+        const contentType = c.req.header('content-type');
+        if (parseable && contentType !== undefined && /^application\/([a-z\-.]+\+)?json/.test(contentType)) {
+            return validate(c, next);
+        }
+        const result = check(body, c);
+        if (!result.ok)
+            return result.response;
+        c.req.addValidatedData('json', result.data);
+        return next();
+    };
+    return guard;
+}
+/**
+ * Path params. No guard needed: these come off the matched URL, so there is no body to parse, no
+ * content-type to gate on and no malformed-input path — Hono's own behaviour is already right.
+ * The schema receives the whole param object (`{ provider: 'codex' }`), not a single value.
+ */
+export function paramZodValidator(schema, { message, code } = {}) {
+    return validator('param', (value, c) => {
+        const parsed = schema.safeParse(value);
+        return parsed.success ? parsed.data : reject(c, parsed.error, message, code);
+    });
+}
+/** Query string, on the same terms as {@link paramZodValidator}. */
+export function queryZodValidator(schema, { message, code } = {}) {
+    return validator('query', (value, c) => {
+        const parsed = schema.safeParse(value);
+        return parsed.success ? parsed.data : reject(c, parsed.error, message, code);
+    });
+}
+//# sourceMappingURL=validators.js.map

package/dist/server/validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.js","sourceRoot":"","sources":["../../src/server/validators.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAoC3C;;;;;;;GAOG;AACH,SAAS,MAAM,CAAC,CAAU,EAAE,KAAiB,EAAE,QAA4B,EAAE,IAAsB;IACjG,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM;SACxB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;SACrG,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,IAAI,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AAC/E,CAAC;AAkBD,MAAM,UAAU,gBAAgB;AAK9B,yFAAyF;AACzF,oFAAoF;AACpF,gGAAgG;AAChG,4FAA4F;AAC5F,+DAA+D;AAC/D,MAAqB,EACrB,OAAO,GAAgB,EAAE;IAEzB,2FAA2F;IAC3F,iFAAiF;IACjF,MAAM,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,MAAM,SAAS,GAAG,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IACtE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC3C,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,CAAU,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAClE,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAkB,EAAW,CAAC;QAClF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAW,CAAC;IAC9H,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,gGAAgG;IAChG,4FAA4F;IAC5F,wEAAwE;IACxE,MAAM,KAAK,GAAoB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,IAAI,GAAY,MAAM,CAAC;QAC3B,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxB,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACjD,IAAI,SAAS,IAAI,WAAW,KAAK,SAAS,IAAI,kCAAkC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACnG,OAAO,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;QACvC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,IAAa,CAAC,CAAC;QACrD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;IACF,OAAO,KAA0C,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAsB,MAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAiB,EAAE;IACpG,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,MAAM,CAAC,IAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,iBAAiB,CAAsB,MAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAiB,EAAE;IACpG,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,MAAM,CAAC,IAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/workflow-files.d.ts

@@ -0,0 +1,9 @@
+type DeletedWorkflow = {
+    path: string;
+} | {
+    error: string;
+    status: 400 | 404 | 409 | 500;
+};
+/** Delete only file workflows under the write root; a fallback name would reappear without a tombstone. */
+export declare function deleteSavedWorkflow(repoRoot: string, name: string): Promise<DeletedWorkflow>;
+export {};

package/dist/server/workflow-files.js

@@ -0,0 +1,27 @@
+import { unlink } from 'node:fs/promises';
+import { resolve, sep } from 'node:path';
+import { projectPaths } from '../project-paths.js';
+import { fallbackWorkflowPath, loadWorkflows } from '../workflows/load.js';
+/** Delete only file workflows under the write root; a fallback name would reappear without a tombstone. */
+export async function deleteSavedWorkflow(repoRoot, name) {
+    const fallback = await fallbackWorkflowPath(repoRoot, name);
+    if (fallback)
+        return { error: `Cannot delete read-only project data in ${fallback}. Use the binary that migrated the project.`, status: 409 };
+    const { workflows } = await loadWorkflows(repoRoot);
+    const workflow = workflows.find(item => item.name === name);
+    if (!workflow)
+        return { error: `unknown workflow: ${name}`, status: 404 };
+    if (workflow.source !== 'file' || !workflow.path)
+        return { error: 'built-in workflows cannot be deleted', status: 400 };
+    const target = resolve(workflow.path);
+    if (!target.startsWith(resolve(projectPaths(repoRoot).write, 'workflows') + sep))
+        return { error: 'refusing to delete a file outside the workflows dir', status: 400 };
+    try {
+        await unlink(target);
+    }
+    catch (error) {
+        return { error: error instanceof Error ? error.message : String(error), status: 500 };
+    }
+    return { path: target };
+}
+//# sourceMappingURL=workflow-files.js.map

package/dist/server/workflow-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-files.js","sourceRoot":"","sources":["../../src/server/workflow-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG3E,2GAA2G;AAC3G,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB,EAAE,IAAY;IACtE,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5D,IAAI,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,2CAA2C,QAAQ,6CAA6C,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC9I,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,qBAAqB,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC1E,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,sCAAsC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACxH,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,qDAAqD,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACvK,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAC7B,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAAC,CAAC;IACxG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC"}

package/dist/server/workspace-config-patch.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The field merge behind `PUT /workspace/config` (hearsay-tools/cezarion#2849).
+ *
+ * The PUT handler owns the writable-root probe and the family chain. This
+ * module mutates the in-memory config the write lock already loaded. Roots stay
+ * as written (`~` kept); only the probe expands them.
+ */
+import type { SetWorkspaceConfigInput } from '../contract/index.js';
+import type { WorkspaceConfig } from '../workspace/config.ts';
+/** Apply a partial `PUT /workspace/config` body onto the loaded config, in place. */
+export declare function applyWorkspaceConfigPatch(config: WorkspaceConfig, body: SetWorkspaceConfigInput): void;

package/dist/server/workspace-config-patch.js

@@ -0,0 +1,75 @@
+import { PROVIDER_IDS } from '../core/provider-auth.js';
+function applyComposerDefaults(config, composerDefaults) {
+    if (!composerDefaults)
+        return;
+    if (composerDefaults.autonomous === null)
+        delete config.composerDefaults.autonomous;
+    else if (composerDefaults.autonomous !== undefined) {
+        config.composerDefaults.autonomous = composerDefaults.autonomous;
+    }
+    if (composerDefaults.worktree === null)
+        delete config.composerDefaults.worktree;
+    else if (composerDefaults.worktree !== undefined) {
+        config.composerDefaults.worktree = composerDefaults.worktree;
+    }
+}
+function applyWorkspaceResources(config, resources) {
+    if (!resources)
+        return;
+    if (resources.maxParallel !== undefined)
+        config.resources.maxParallel = resources.maxParallel;
+    if (resources.maxMonitoringSessions !== undefined) {
+        config.resources.maxMonitoringSessions = resources.maxMonitoringSessions;
+    }
+    if (resources.monitoringWakeIntervalMinutes !== undefined) {
+        config.resources.monitoringWakeIntervalMinutes = resources.monitoringWakeIntervalMinutes;
+    }
+    if (resources.autoResumeOnUsageLimit !== undefined) {
+        config.resources.autoResumeOnUsageLimit = resources.autoResumeOnUsageLimit;
+    }
+    if (resources.memoryLimitMb !== undefined)
+        config.resources.memoryLimitMb = resources.memoryLimitMb;
+    if (resources.worktreeRetentionDefault !== undefined) {
+        config.resources.worktreeRetentionDefault = resources.worktreeRetentionDefault;
+    }
+}
+function applyAgentDefaults(config, agentDefaults) {
+    if (!agentDefaults)
+        return;
+    // `null` CLEARS back to "no opinion" — a partial patch cannot say that by omission,
+    // and leaving a stale runner behind would keep overriding repos that never chose.
+    if (agentDefaults.runner === null)
+        delete config.agentDefaults.runner;
+    else if (agentDefaults.runner !== undefined)
+        config.agentDefaults.runner = agentDefaults.runner;
+    for (const runner of PROVIDER_IDS) {
+        const model = agentDefaults.models?.[runner];
+        if (model === undefined)
+            continue;
+        const models = config.agentDefaults.models ?? {};
+        if (model === null)
+            delete models[runner];
+        else
+            models[runner] = model;
+        // An empty object would persist a key that says nothing; absence is the same answer.
+        if (Object.keys(models).length === 0)
+            delete config.agentDefaults.models;
+        else
+            config.agentDefaults.models = models;
+    }
+}
+/** Apply a partial `PUT /workspace/config` body onto the loaded config, in place. */
+export function applyWorkspaceConfigPatch(config, body) {
+    if (body.browseRoot !== undefined)
+        config.browseRoot = body.browseRoot;
+    if (body.projectsDir !== undefined)
+        config.projectsDir = body.projectsDir;
+    if (body.archiveOnMerge === null)
+        delete config.archiveOnMerge;
+    else if (body.archiveOnMerge !== undefined)
+        config.archiveOnMerge = body.archiveOnMerge;
+    applyComposerDefaults(config, body.composerDefaults);
+    applyWorkspaceResources(config, body.resources);
+    applyAgentDefaults(config, body.agentDefaults);
+}
+//# sourceMappingURL=workspace-config-patch.js.map

package/dist/server/workspace-config-patch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-config-patch.js","sourceRoot":"","sources":["../../src/server/workspace-config-patch.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGxD,SAAS,qBAAqB,CAC5B,MAAuB,EACvB,gBAA6D;IAE7D,IAAI,CAAC,gBAAgB;QAAE,OAAO;IAC9B,IAAI,gBAAgB,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC;SAC/E,IAAI,gBAAgB,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnD,MAAM,CAAC,gBAAgB,CAAC,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC;IACnE,CAAC;IACD,IAAI,gBAAgB,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC;SAC3E,IAAI,gBAAgB,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjD,MAAM,CAAC,gBAAgB,CAAC,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,MAAuB,EACvB,SAA+C;IAE/C,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,IAAI,SAAS,CAAC,WAAW,KAAK,SAAS;QAAE,MAAM,CAAC,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;IAC9F,IAAI,SAAS,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,CAAC,SAAS,CAAC,qBAAqB,GAAG,SAAS,CAAC,qBAAqB,CAAC;IAC3E,CAAC;IACD,IAAI,SAAS,CAAC,6BAA6B,KAAK,SAAS,EAAE,CAAC;QAC1D,MAAM,CAAC,SAAS,CAAC,6BAA6B,GAAG,SAAS,CAAC,6BAA6B,CAAC;IAC3F,CAAC;IACD,IAAI,SAAS,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;QACnD,MAAM,CAAC,SAAS,CAAC,sBAAsB,GAAG,SAAS,CAAC,sBAAsB,CAAC;IAC7E,CAAC;IACD,IAAI,SAAS,CAAC,aAAa,KAAK,SAAS;QAAE,MAAM,CAAC,SAAS,CAAC,aAAa,GAAG,SAAS,CAAC,aAAa,CAAC;IACpG,IAAI,SAAS,CAAC,wBAAwB,KAAK,SAAS,EAAE,CAAC;QACrD,MAAM,CAAC,SAAS,CAAC,wBAAwB,GAAG,SAAS,CAAC,wBAAwB,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAuB,EACvB,aAAuD;IAEvD,IAAI,CAAC,aAAa;QAAE,OAAO;IAC3B,oFAAoF;IACpF,kFAAkF;IAClF,IAAI,aAAa,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;SACjE,IAAI,aAAa,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;IAChG,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,IAAI,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;;YACrC,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QAC5B,qFAAqF;QACrF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;;YACpE,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,yBAAyB,CAAC,MAAuB,EAAE,IAA6B;IAC9F,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACvE,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAC1E,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,cAAc,CAAC;SAC1D,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS;QAAE,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;IACxF,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACrD,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAChD,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;AACjD,CAAC"}