@hoilab/ada-cli 0.84.22 → 0.85.1

package/CHANGELOG.md

@@ -1,13 +1,40 @@
 # Changelog
 
-## [Unreleased]
+## [0.85.0] - 2026-08-25
 
 ### Added
 
+- **Added PDF reading without a browser.** `read` on a PDF now extracts its **text layer** using only `node:zlib` — content streams travel Flate-compressed, so no new dependency and no headless browser are needed (the competing agent renders the document and screenshots it; that buys exact layout at the cost of a browser per read). Three states are told apart, never two: text extracted (truncated with the same limits as any other file); **scanned / image-only** — reported as such, instead of passing for an empty file; and **cannot read** (encrypted or malformed), with the reason. The `%PDF-` signature is checked against the file's first kilobyte, never against its extension.
+- **Added detection of empty model turns.** A provider answering a well-formed request with *nothing* — no text, no reasoning, no tool calls (`x-preview-f-free` did exactly that) used to look like success everywhere: `ada-cli -p` printed an empty stdout and exited 0, and the task bench counted the case as "the model chose not to edit". Both halves are fixed: print mode now writes `El modelo no ha contestado: …` to stderr and exits 1; the interactive session emits a warning notification; and the bench reports those cases separately (`vacío`) instead of counting them as ghosts. An unknown content block or a reasoning-only turn never triggers the notice — the detector stays silent about anything that might be something.
+
+- Added OTLP export of the session ledger to your own OpenTelemetry collector (`ada-cli telemetria`, `--cuerpo`, `--enviar`), following the standard `OTEL_EXPORTER_OTLP_*` contract. What leaves the machine comes from an **explicit allowlist of shape** — event type, tool, exit code, byte counts, hashes, destination domain, provider, model, token counts — and the number of attributes dropped is recorded so a silent truncation cannot pass for a complete export. A second belt discards any value containing a newline or longer than 200 characters even if its key is allowed. There is deliberately no environment variable, option or parameter that enables content export, and a test walks the module's own source to keep it that way; `--cuerpo` prints the exact JSON that would be sent so you can verify it rather than take our word for it.
+- Added a software bill of materials and a licence gate: `npm run sbom` writes CycloneDX 1.5 (reproducible byte for byte), and `npm run check:licencias` fails on a denied **or unknown** licence. A dependency that declares no licence is *unknown*, and unknown does not pass; an empty dependency tree also fails, because a gate that passes because it inspected nothing is worse than no gate. Compound SPDX expressions (`OR`, `AND`, parentheses) are understood, and anything unparseable lands in *unknown*, never in *allowed*.
+- Added detection and masking of GDPR art. 9 special categories and art. 10 convictions before anything reaches disk, on both the audit ledger and the edit diary. National identifiers are validated rather than pattern-matched (Spanish DNI mod-23, IBAN mod-97), and vocabulary categories require a nearby person marker so that "diagnostic" in compiler output and "union" in SQL do not trigger. Measured over 469 real source files of this repository the detector produces 3 findings, down from 116 in the first implementation. Text that cannot be analysed is masked whole rather than passed through.
+- Added `ada-cli audit purge --dias N --politica "..."` (also `--antes-de AAAA-MM-DD`, with `--dry-run`), which writes a chained tombstone into the session ledger before deleting anything. A lawful retention purge under GDPR art. 5.1.e used to either trip the tamper alarm (deleting `sesion/`) or vanish without trace while the ledger still reported "intact" (deleting both directories). `audit verify` now reports purges as *explained* gaps, naming the policy they were carried out under, and reports them even when no gap remains — which is the normal case, since a purge removes the file and its index anchor.
+- Added a machine-wide policy scope that the user cannot edit, at `/Library/Application Support/Ada/politica.json`, `/etc/ada/politica.json` and `%ProgramData%\Ada\politica.json`. It can only ever *restrict*: a `modoMaximo` ceiling lowers the requested permission mode and never raises it, and `denegadas` disables tools for the whole fleet in a way `yolo` cannot lift. Until now both configuration scopes were files the user owned, so the line a CISO added to forbid `yolo` could be deleted by the very person it applied to. Inspect it with `ada-cli politica`.
 - Added transcript usage notices for compaction and branch summaries when cache miss notices are enabled.
 
-### Fixed
+### Changed
 
+- **Removed the install ping to `pi.dev`.** `reportInstallTelemetry` sent the version and user agent of every installation to `https://pi.dev/api/report-install`, enabled by default. It is gone, and is not replaced by an endpoint of our own.
+- **Removed the default provider attribution headers** (`HTTP-Referer: https://ada.dev` and `X-OpenRouter-Title` on OpenRouter, `X-BILLING-INVOKE-ORIGIN` on NVIDIA NIM, `User-Agent: ada-cli` on Cloudflare). None of them were needed for a request to work; they told the provider which tool the client uses. Attribution is still possible for anyone who wants it, by configuring the headers on the model. The functional `x-opencode-session` header is unaffected. As a result `enableInstallTelemetry` no longer governs anything and is documented as inert.
+- Changed session sharing to render clickable terminal links and Radius shares to display only the artifact's canonical URL.
+
+### Fixed
+
+- **Fixed aborting a turn leaving the whole conversation unresumable.** When a message arrived with stop reason `aborted` or `error`, the agent loop returned without closing the tool calls that same message already carried. A `tool_use` without its `tool_result` is rejected by providers, so pressing Ctrl-C at the wrong moment did not leave the turn half-done — it left the conversation unable to resume. The test that was meant to guard this had a mock that reported `aborted` while returning a message whose stop reason said `toolUse`, which sent the loop into an infinite retry at 99% CPU: it did not fail, it hung, and with it the whole suite for 71 measured minutes. That is why the defect went unseen.
+- **Fixed `ada-cli session <id> <op>` failing with an opaque error on installed copies.** The protocol extension point it needs is added by this fork to upstream's client/protocol/server packages, which the published package resolves from the registry — so an installed copy does not carry it. It now explains that and points at a source build, instead of crashing with `client.extension is not a function`.
+- **Fixed the published package being uninstallable, and then broken at runtime.** Both found by packing the tarball and installing it the way a user would, before publishing. First, `npm version --workspaces` had rewritten the dependency *ranges* too, so the package asked for `@earendil-works/pi-agent-core@^0.85.0` — a version upstream never published — and every `npm install` failed with `notarget`. Then, with that fixed, the installed copy died with `Cannot find package 'typescript'`: six files under `src/core/` import TypeScript at module load and it was only a devDependency, so structural editing and post-edit type checking were broken for every client. Two gates now catch both classes: `check-dependencias-resuelven.mjs` (every declared range has a published version that satisfies it) and `check-imports-de-runtime.mjs` (no production file imports a dev-only dependency).
+- **Fixed the argument coercion not being applied on the path the SDK actually uses.** It was wired into `createTool`/`createToolDefinition`, which looked like the funnels but are not: `createCodingTools` calls each factory directly and bypassed them. The tests passed while the installed copy still rejected the call. It now lives in `wrapToolDefinition`, which every tool does go through — verified by installing the tarball and running it against a real free model: **4 model calls and no validation rejections, matching the competing agent**.
+- **Fixed our own fixes not reaching anyone who installs from npm.** `@hoilab/ada-cli` declares `"@earendil-works/pi-ai": "^0.84.2"` and the shrinkwrap resolves it from the registry, so an installing user gets **upstream's** tarball, not our patched copy. Measured on the real artifact with `npm pack --dry-run`: 2,066 files, **zero** from `pi-ai`. Fourteen of our patches live in packages we do not publish, including the two most important ones of this release. The tolerant JSON parse now also lives in the package that *is* published and is used by `edit`'s argument preparation, verified by unpacking the tarball and running it outside the repository. A gate (`check-fork-llega-al-usuario.mjs`, wired into `prepublishOnly`) now blocks publishing while any patch sits in an unpublished package, so this cannot pass unnoticed again.
+- **Fixed a tool argument arriving as a JSON string with raw tabs costing a whole turn.** The root cause was not that the argument was a string — `edit` had handled that since before — but that the string contained **raw control characters**. Measured on a real payload: 309 characters with 18 raw tab characters inside JSON string literals, which JSON forbids, so `JSON.parse` answered *Invalid control character* and a silent `catch {}` swallowed it. That is what every model produces when it writes tab-indented code inside an argument. Argument coercion now parses tolerantly — escaping raw control characters only inside string literals, leaving valid JSON byte-identical and still rejecting genuinely malformed JSON — and it runs before TypeBox's `Value.Convert`, which otherwise wraps the string in a one-element array and destroys the evidence. Measured against `nvidia/nemotron-3-ultra-550b-a55b:free` on the same task as a competing agent: **6 model calls and one validation rejection before, 4 calls and none after — the same round-trip count as the competitor**, with equivalent output.
+- **Fixed a tool argument arriving as a JSON string costing a whole turn.** Small models routinely send nested JSON as a string, and the argument coercion covered number, integer, boolean, string and null but not array or object. Measured against `nvidia/nemotron-3-ultra-550b-a55b:free` on the same task as a competing agent: 6 model calls and 42,717 input tokens versus their 4 and 29,393, with identical final code. Two of those six round trips were a stringified `edits` array, its rejection, and the recovery. Coercion is applied only when the schema asks for an array or object and the text parses to exactly that type, so a bash command beginning with `[` remains a string and a malformed JSON still produces the validation error that tells the model what shape was expected.
+- **Fixed tool calls rejected before execution leaving no trace in the audit ledger.** Argument validation runs before the audit hook, so a call that failed validation — or named a tool that does not exist — reached neither of the recording points. A real run had two `edit` calls in the transcript and one in the ledger. They are now reconciled on the next model message and recorded as `no-ejecutada`.
+- **Fixed the machine-wide update check being able to install a package outside our own scope.** A remote-announced package name is now accepted only within our npm scope, so a legitimate rename is still followed while a jump to someone else's scope is refused out loud.
+- **Fixed `ada-cli update` being one upstream release away from installing a different product.** The version check queried `https://pi.dev/api/latest-version`, which answers `{"version":"0.84.3","packageName":"@earendil-works/pi-coding-agent"}`, and the self-update plan built its `npm install -g` spec from *that* package name. It did not fire only because 0.84.3 is not greater than our 0.84.22 — arithmetic, not design. The check now queries the npm registry for our own package, and the install spec always uses our own package name regardless of what any server replies.
+- **Fixed `audit verify` accusing an intact installation of tampering.** A single condition answered two different questions and always blamed the first, so a file written by two desktop processes — each starting its own chain — was reported as "the hash of an entry does not match its content" when it matched perfectly, and verification stopped there. Three causes are now told apart: an edited entry, a broken link, and a chain restart. A restart is neither an accusation nor an absolution: it is reported with its file and timestamp, and counting continues.
+- **Fixed the DPO report hiding its own scope caveat whenever there was data.** The sentence naming which network paths the ledger observes travelled inside the "nothing happened" text, which is only printed when the table is empty. The caveat matters more with rows than without: an empty table asserts an absence, a populated one implies an exhaustive list. It is now always rendered, and the list of uncovered paths — which was wrong — was rebuilt by walking every `fetch(` in the source and is now guarded by a test.
+- Fixed writes to `auth.json` and `models-store.json` overriding administrator-managed file permissions and ACLs ([#7779](https://github.com/earendil-works/pi/issues/7779)).
 - Fixed UTF-8 BOM markers preventing frontmatter and user configuration files from loading ([#8337](https://github.com/earendil-works/pi/issues/8337)).
 - Fixed invalid settings files being easy to miss during interactive startup by rendering warnings with the file path inside the TUI ([#7829](https://github.com/earendil-works/pi/issues/7829)).
 - Fixed the subagent example repeatedly prompting before running project-local agents in trusted repositories ([#8261](https://github.com/earendil-works/pi/issues/8261)).

package/README.es.md

@@ -72,6 +72,13 @@ pi.dev es deliberadamente mínimo — su propia filosofía es saltarse sub-agent
 | ✨ **Prompt Optimizer** | Antes de procesar una petición, decide si hace falta preguntar hasta 3 huecos críticos (`clarify`) o reescribirla como prompt estructurado (`enhance`). |
 | 🔐 **Vault** (`/vault`) | Almacén local de secretos cifrado con passphrase, compartido entre el CLI, la app de escritorio y los subagentes de una sesión desbloqueada. |
 | 🖥️ **App de escritorio** | Tauri 2 + Next.js, sobre el mismo SDK y `settings.json` que el CLI. pi.dev es solo terminal. |
+| ⏰ **Scheduler** (`ada-cli schedule`) | Trabajo recurrente que corre dentro de `ada-cli serve`. `maxRuns` y `expiresAt` son **obligatorios**: un trabajo recurrente sin techo es gasto indefinido, y nadie se acuerda de apagarlo. Cada job usa su propia sesión para que dos programaciones no se contaminen el contexto. |
+| 🔁 **Continual Harness** (`ada-cli refine`) | Convierte lo aprendido en una sesión terminada en notas durables que se inyectan en prompts futuros. Cada propuesta **exige evidencia citada** (`fichero:línea`, un comando y su salida, un mensaje tuyo); las que no la traen se rechazan y te lo dice. El prompt de sistema base no se toca nunca. |
+| 🌐 **Tools web** (`web_search`, `web_fetch`) | TypeScript nativo, clave desde el vault cifrado y guardas SSRF: los rangos privados y el endpoint de metadatos del cloud se bloquean antes de hacer la petición. Opt-in por subagente: el acceso a red nunca se hereda de `readOnly`. |
+| 🔌 **MCP** (`mcp_list_tools`, `mcp_call_tool`) | Cliente MCP de TypeScript real, con los tokens en el vault. Exactamente **dos** tools, nunca una por herramienta remota: un servidor con 40 inundaría el system prompt y desplazaría el prefijo cacheable. |
+| 💾 **Optimizador de caché de prompt** | Reordena el system prompt para que lo estable vaya delante, mide el hit rate real por proveedor y repara las rarezas de cada uno. Con caché por prefijo el coste de un cambio depende de su **posición**, no de su tamaño — en DeepSeek un fallo cuesta 31 veces un acierto. |
+| 🖧 **Sesiones residentes** (`ada-cli serve` / `attach` / `session`) | El trabajo sobrevive al cierre del terminal. Puedes reengancharte para mirar o dirigir, y hacer `compact`, `rename`, `fork` o `kill` por el socket. |
+| 🧩 **Integración con editores** (`ada-cli acp`) | Habla Agent Client Protocol por stdio, así que Zed y cualquier cliente ACP pueden conducir Ada en vez del TUI. |
 
 <details>
 <summary><b>Comparativa fila a fila vs. pi.dev upstream</b> (verificado contra ambos códigos fuente)</summary>
@@ -94,21 +101,25 @@ pi.dev es deliberadamente mínimo — su propia filosofía es saltarse sub-agent
 <details>
 <summary><b>Ada CLI vs. Prime Agent</b> (otro fork de pi.dev, 17k+ ⭐)</summary>
 
-[PrimeIntellect-ai/prime-agent](https://github.com/PrimeIntellect-ai/prime-agent) también está construido sobre `earendil-works/pi`, con un modelo de ejecución basado en un kernel Python persistente y un "Continual Harness" auto-mejorable. Desglose completo con fuentes: [docs/AUDIT.md §7.5](../../docs/AUDIT.md).
+[PrimeIntellect-ai/prime-agent](https://github.com/PrimeIntellect-ai/prime-agent) también está construido sobre `earendil-works/pi`, con un modelo de ejecución basado en un kernel Python persistente y un "Continual Harness" auto-mejorable. Desglose completo con fuentes: [docs/AUDIT.md §8](../../docs/AUDIT.md).
 
 | Capacidad | Ada CLI | Prime Agent | Ventaja |
 |---|---|---|---|
-| Sesiones en background que sobreviven al cierre de terminal | No | Basado en daemon, `attach`/`detach` | Prime Agent |
+| Sesiones en background que sobreviven al cierre de terminal | `ada serve` / `ada attach` / `ada session` | Basado en daemon, `attach`/`detach` | Empate |
+| Integración con editores (Agent Client Protocol) | `ada acp` | Modo `acp` | Empate |
+| Trabajo recurrente / scheduling | `ada-cli schedule`, con `maxRuns`/`expiresAt` obligatorios | `/heartbeat`, cron schedules | Empate |
+| Auto-mejora de instrucciones | `ada-cli refine`, cada propuesta exige evidencia citada | `/refine` con snapshots de rollback | Empate |
 | Mensajería agente-a-agente | Bloqueada a propósito (anti-recursión por diseño) | Incluida | Trade-off de diseño, no un gap |
-| Scheduling / heartbeats | No | `/heartbeat`, cron schedules | Prime Agent |
-| Auto-mejora de instrucciones | La memoria guarda, no se auto-edita | `/refine` con snapshots de rollback | Prime Agent |
-| Skills ejecutables / con Python | Solo markdown | Paquetes Python + skill-creator | Prime Agent |
+| Skills ejecutables / con Python | Solo markdown, por decisión | Paquetes Python + skill-creator | Prime Agent |
+| Integración MCP | Cliente TypeScript nativo, tokens desde el vault | El protocolo vive dentro del kernel de Python | **Ada CLI** |
+| Búsqueda web | `web_search`/`web_fetch`, clave en el vault, con guardas SSRF | Skill de Python, clave en `auth.json` en claro | **Ada CLI** |
+| Optimización de caché de prompt | Estabilización de prefijo + medición de hit rate por proveedor | No tiene | **Ada CLI** |
 | Grafo de trazabilidad del trabajo | Sí, con gates de evidencia | No tiene | **Ada CLI** |
 | App de escritorio nativa | Sí | Solo TUI | **Ada CLI** |
 | Vault de secretos cifrado dedicado | Sí | `auth.json` plano | **Ada CLI** |
 | Juez obligatorio con evidencia | Sí, por defecto | Gates configurables por el usuario, no forzados | **Ada CLI** |
 
-Ver [docs/AUDIT.md](../../docs/AUDIT.md) para la auditoría técnica completa, la mecánica exacta de fork/sync, y las mejoras propuestas (daemon en background, scheduling, memoria auto-mejorable) mapeadas a cómo encajarían en el motor ya existente.
+Ver [docs/AUDIT.md](../../docs/AUDIT.md) para la auditoría técnica completa, la mecánica exacta de fork/sync, y el desglose de paridad capacidad por capacidad — incluido lo que decidimos deliberadamente NO copiar, y por qué.
 
 </details>
 

package/README.md

@@ -30,7 +30,7 @@ Where most coding agents ask you to trust a single long-running chat, Ada is bui
 - **Autonomy requires a signed-off contract.** The [Goal Engine](#ada-intelligence-engine) won't touch a codebase until you `/goal approve` its plan, runs fixed TDD phases, and never marks work `done` without a judge citing evidence for it.
 - **Nothing is "done" on the model's word alone.** The [Work Graph](#ada-intelligence-engine) gates completion on observed evidence — a passing test, a real diff, a verified command — not a claim in the transcript.
 - **Memory is compliance-ready by default.** The [Memory Engine](#ada-intelligence-engine) blocks PII before it's ever written to disk and keeps a hash-chained audit log of every write and rejection.
-- **Secrets never touch the model's context.** The built-in [Vault](#ada-intelligence-engine) is a local encrypted store shared across the CLI, desktop app, and subagents of an unlocked session.
+- **Secrets stay off disk, and out of reach of the agent.** The built-in [Vault](#ada-intelligence-engine) is a local encrypted store shared across the CLI, desktop app, and subagents of an unlocked session. Provider credentials and MCP tokens never enter the model's context. An explicit `@vault:NAME` reference *does* expand into the prompt — that is its purpose, so the model can use the secret in a command — but the expansion is redacted in everything persisted and displayed. The agent cannot read the vault: `core/aprobacion/politica.ts` denies it permanently, and that denial survives `yolo`.
 - **Teams get a GUI, not just a terminal.** The [Ada Desktop](../../desktop/) app (Tauri + Next.js) reads the exact same SDK and config as the CLI — no parallel product to maintain.
 - **Extensible instead of opinionated.** No baked-in MCP, sub-agent framework, or permission popups — build exactly the workflow you need with [extensions](docs/extensions.md), [skills](docs/skills.md), or third-party [Ada packages](docs/packages.md). See [Philosophy](#philosophy).
 
@@ -47,14 +47,101 @@ ada-cli
 
 Or authenticate with an existing subscription: run `ada-cli`, then `/login`. First run in a new project asks you to trust the folder — see [Project Trust](docs/security.md).
 
+Compliance controls in detail — ledger, retention purge, machine policy,
+art. 9 detection, OTLP and SBOM — with what each one proves and what it does
+not: [Compliance](docs/compliance.md).
+
 Full walkthrough: [Quickstart](docs/quickstart.md) · [Providers & models](docs/providers.md) · [Windows](docs/windows.md) · [Termux](docs/termux.md) · [tmux](docs/tmux.md)
 
+### One limitation of the published package
+
+`ada-cli session <id> <op>` (compact, rename, fork, kill, ops) needs a protocol
+extension point that this fork adds to `@earendil-works/pi-{client,protocol,server}`.
+Those are upstream packages: the published `@hoilab/ada-cli` resolves them from
+the npm registry, so an installed copy does not carry it. The command says so
+instead of failing with an opaque error. Everything else — including `serve`,
+`attach` and the whole agent — works from the published package.
+
+A source build has no such limitation.
+
+### Building from source
+
+Organisations that will not install from a public registry can build the same
+artifact locally. `dist/` is what the published package and the desktop app
+consume, so it has to be built — running from `src/` is not the same thing.
+
+```bash
+git clone https://github.com/HOILAB/ada-cli.git
+cd ada-cli
+npm ci                                   # exact versions from npm-shrinkwrap.json
+npm run build --prefix packages/coding-agent
+npm link --prefix packages/coding-agent  # puts `ada-cli` on PATH
+```
+
+To verify the build before trusting it:
+
+```bash
+npm run check          # types, lint, pinned deps, shrinkwrap, startup budget, fork budget
+npx vitest run         # the full suite (from packages/coding-agent)
+ada-cli --version
+```
+
+`ada-cli update` only runs when you ask for it and it queries the npm registry
+for this package, so a source build stays put until you rebuild it. Nothing
+phones home — see [Telemetry and update checks](docs/settings.md#telemetry-and-update-checks).
+
+## Measured against the alternatives
+
+Four coding tasks, the **installed package** (not the source tree), the same
+free OpenRouter model as the competing agent, comparing each one's own session
+logs:
+
+| task | Ada | oh-my-pi |
+|---|---:|---:|
+| queue: fix a bug and add a method | 4 calls | 4 |
+| parser: honour quotes in CSV splitting | **4** | 10 |
+| retry: two bugs at once | 5 | 4 |
+| stack: add a method, throw on empty | 4 | 4 |
+| **total round trips** | **17** | **22** |
+
+Both produced correct code on all four — verified by *running* the result, not
+reading it. Ada uses somewhat more context per turn (its system prompt carries
+the compliance doctrine, and it re-reads a file after editing to verify), and
+fewer round trips, which is what costs time and money per call.
+
+**Re-run on the release candidate (0.85.0)** with a different free model
+(`x-preview-f-free` via the same gateway for both agents) and freshly written
+task fixtures, same method — installed package, executed results, each one's
+own session logs:
+
+| task | Ada | oh-my-pi |
+|---|---:|---:|
+| queue: fix a bug and add a method | 8 calls | 8 |
+| parser: honour quotes in CSV splitting | **13** | 15 |
+| retry: two bugs at once | 7 | **4** |
+| stack: add a method, throw on empty | **7** | 10 |
+| **total round trips** | **35** | **37** |
+
+Again 8/8 correct across both agents. On this model the aggregate favours Ada,
+with per-task wins split both ways — the honest reading is functional parity
+with fewer round trips, not dominance.
+
+The one feature where the competing agent still led — reading PDFs, which it
+does by rendering the document in a headless browser and screenshotting it — is
+closed as of this release: `read` now extracts a PDF's text layer with
+`node:zlib` alone. It reports the three states that matter (text extracted /
+scanned, no text layer / unreadable) instead of letting a scanned document pass
+for an empty file; what it deliberately does not do is reproduce exact layout,
+which would need the browser back.
+
 ## Built for Enterprise
 
-- **Governed autonomy.** Permission modes (`ask` / `auto` / `plan` / `full`) and the Goal Engine's `askBefore` brakes gate irreversible actions (publish, delete, spend) behind explicit approval, in both the CLI and the desktop app.
+- **Governed autonomy.** Permission modes (`plan` / `manual` / `auto` / `yolo`) and the Goal Engine's `askBefore` brakes gate irreversible actions (publish, delete, spend) behind explicit approval, in both the CLI and the desktop app. `manual` asks before every write; `auto` is the default; `plan` makes the tree read-only.
 - **Evidence over assertions.** The Goal Engine's judge and the Work Graph's gates both require cited, observed evidence before anything counts as complete — no autonomous run can silently mark itself done.
+- **Retention you can defend.** `ada-cli audit purge --dias N --politica "..."` deletes old ledger files by writing a **chained tombstone** first — which period, how many entries, under what policy, and the closing hash. `audit verify` then reports the gap as *explained* rather than as tampering, so complying with GDPR art. 5.1.e stops looking like covering your tracks. `--dry-run` shows exactly what would go, down the same code path that removes it.
+- **A policy the user cannot switch off.** A third configuration scope lives where the operating system requires administrator rights to write (`/Library/Application Support/Ada/`, `/etc/ada/`, `%ProgramData%\Ada\`). It can only ever *restrict*: a `modoMaximo` ceiling lowers the requested permission mode and never raises it, and tools listed in `denegadas` stay denied even in `yolo`. There is deliberately no environment variable pointing at another file — that would be the back door that voids the policy with one `export`. `ada-cli politica` shows whether it is in force, and whether the file is one this account could edit. Every decision records which rule decided it.
 - **Privacy and audit built in.** `memoryPrivacyLevel: "strict"` (default) blocks PII before it's persisted; every memory write, rejection, and search is hash-chained in an audit log via `/memory-audit` — designed to support GDPR/AI Act obligations without extra tooling.
-- **Secrets isolation.** Vault-backed credentials never enter the model's prompt context and never touch disk unencrypted.
+- **Secrets isolation.** Provider credentials and MCP tokens never enter the model's prompt context, and nothing in the vault touches disk unencrypted. `auth.json` is encrypted at rest with AES-256-GCM under a key held in the system keychain.
 - **Budgeted, bounded runs.** Every autonomous surface (Goal Engine, Workflows) enforces turn limits, repeat-loop detection, a stop-file kill switch, and token/cost budgets — no open-ended spend.
 - **Deployable as CLI or desktop.** Same SDK, same `settings.json`, same audit trail whether your team works in a terminal or a GUI.
 - **Stays current automatically.** A deterministic daily sync (`scripts/sync-ada.sh` + GitHub Action) re-bases onto upstream pi.dev, so security fixes and new provider support land without manual patch-tracking.
@@ -72,6 +159,13 @@ pi.dev is deliberately minimal — its own philosophy is to skip sub-agents and
 | ✨ **Prompt Optimizer** | Before processing a request, decides whether to ask up to 3 clarifying questions (`clarify`) or rewrite it as a structured prompt (`enhance`). |
 | 🔐 **Vault** (`/vault`) | Passphrase-encrypted local secret store, shared across the CLI, the desktop app, and subagents of an unlocked session. |
 | 🖥️ **Desktop app** | Tauri 2 + Next.js, running on the exact same SDK and `settings.json` as the CLI. pi.dev is terminal-only. |
+| ⏰ **Scheduler** (`ada-cli schedule`) | Recurring work that runs inside `ada-cli serve`. `maxRuns` and `expiresAt` are **mandatory** — an open-ended recurring job is open-ended spend, and nobody remembers to turn it off. Each job gets its own session so two schedules never contaminate each other's context. |
+| 🔁 **Continual Harness** (`ada-cli refine`) | Turns what a finished session learned into durable notes injected into future prompts. Every proposal **requires cited evidence** (`file:line`, a command and its output, a message from you); the ones without it are rejected and shown to you. The base system prompt is never touched. |
+| 🌐 **Web tools** (`web_search`, `web_fetch`) | Native TypeScript, key from the encrypted vault, SSRF-guarded — private ranges and the cloud metadata endpoint are blocked before the request is made. Opt-in per subagent: network access is never inherited from `readOnly`. |
+| 🔌 **MCP** (`mcp_list_tools`, `mcp_call_tool`) | A real TypeScript MCP client with tokens from the vault. Exactly **two** tools, never one per remote tool: a 40-tool server would flood the system prompt and displace the cacheable prefix. |
+| 💾 **Prompt cache optimizer** | Reorders the system prompt so stable content comes first, meters the real hit rate per provider, and repairs provider-specific quirks. With prefix caching the cost of a change depends on its **position**, not its size — on DeepSeek a miss costs 31x a hit. |
+| 🖧 **Resident sessions** (`ada-cli serve` / `attach` / `session`) | Work survives closing the terminal. Reattach to watch or steer, and run `compact`, `rename`, `fork` or `kill` over the socket. |
+| 🧩 **Editor integration** (`ada-cli acp`) | Speaks Agent Client Protocol over stdio, so Zed and any ACP client can drive Ada instead of the TUI. |
 
 <details>
 <summary><b>Row-by-row comparison vs. upstream pi.dev</b> (verified against both codebases)</summary>
@@ -94,21 +188,25 @@ pi.dev is deliberately minimal — its own philosophy is to skip sub-agents and
 <details>
 <summary><b>Ada CLI vs. Prime Agent</b> (another pi.dev fork, 17k+ ⭐)</summary>
 
-[PrimeIntellect-ai/prime-agent](https://github.com/PrimeIntellect-ai/prime-agent) is also built on `earendil-works/pi`, with a persistent-Python-kernel execution model and a self-improving "Continual Harness". Full breakdown with sources: [docs/AUDIT.md §7.5](../../docs/AUDIT.md).
+[PrimeIntellect-ai/prime-agent](https://github.com/PrimeIntellect-ai/prime-agent) is also built on `earendil-works/pi`, with a persistent-Python-kernel execution model and a self-improving "Continual Harness". Full breakdown with sources: [docs/AUDIT.md §8](../../docs/AUDIT.md).
 
 | Capability | Ada CLI | Prime Agent | Edge |
 |---|---|---|---|
-| Background sessions surviving terminal close | No | Daemon-backed, `attach`/`detach` | Prime Agent |
+| Background sessions surviving terminal close | `ada serve` / `ada attach` / `ada session` | Daemon-backed `attach`/`detach` | Even |
+| Editor integration (Agent Client Protocol) | `ada acp` | `acp` mode | Even |
+| Scheduling / recurring work | `ada-cli schedule`, with mandatory `maxRuns`/`expiresAt` | `/heartbeat`, cron schedules | Even |
+| Self-improving instructions | `ada-cli refine`, every proposal requires cited evidence | `/refine` with rollback snapshots | Even |
 | Agent-to-agent messaging | Deliberately blocked (anti-recursion by design) | Built in | Design trade-off, not a gap |
-| Scheduling / heartbeats | No | `/heartbeat`, cron schedules | Prime Agent |
-| Self-improving instructions | Memory stores, doesn't self-edit | `/refine` with rollback snapshots | Prime Agent |
-| Executable / Python-backed skills | Markdown only | Python packages + skill-creator | Prime Agent |
+| Executable / Python-backed skills | Markdown only, by choice | Python packages + skill-creator | Prime Agent |
+| MCP integration | Native TypeScript client, tokens from the vault | Protocol lives inside the Python kernel | **Ada CLI** |
+| Web search | `web_search`/`web_fetch`, key in the vault, SSRF-guarded | Python skill, key in plaintext `auth.json` | **Ada CLI** |
+| Prompt-cache optimisation | Prefix stabilisation + per-provider hit-rate metering | None | **Ada CLI** |
 | Work traceability graph | Yes, evidence-gated | None | **Ada CLI** |
 | Native desktop app | Yes | TUI-only | **Ada CLI** |
 | Dedicated encrypted secrets vault | Yes | Plain `auth.json` | **Ada CLI** |
 | Mandatory evidence-backed judge | Yes, by default | User-configurable gates, not forced | **Ada CLI** |
 
-See [docs/AUDIT.md](../../docs/AUDIT.md) for the full technical audit, the exact fork/sync mechanics, and proposed improvements (background daemon, scheduling, self-refining memory) mapped to how they'd plug into the existing engine.
+See [docs/AUDIT.md](../../docs/AUDIT.md) for the full technical audit, the exact fork/sync mechanics, and the capability-by-capability parity breakdown — including what we deliberately chose *not* to copy, and why.
 
 </details>
 
@@ -118,11 +216,11 @@ These are enforced in code, not by policy. Each line is checkable — open the f
 
 | Guarantee | Where it is enforced |
 |---|---|
-| **A goal cannot complete without a judge citing evidence.** The judge is independent, sees only the goal, its `doneCriteria`, the `verifyCommand` and the cited evidence, and runs cross-model. No verdict, no completion. | `workflows/goal-engine/engine.ts` (`runJudge`), `resource-loader.ts` |
+| **A goal cannot complete without a judge citing evidence.** The judge is independent, sees only the goal, its `doneCriteria`, the `verifyCommand` and the cited evidence, and runs on its own session — on a different model when the workers are configured on a cheaper tier. No verdict, no completion. | `workflows/goal-engine/engine.ts` (`runJudge`), `resource-loader.ts` |
 | **Subagents cannot orchestrate or write durable memory — structurally.** The tools are not registered in a subagent's registry at all; it is not a permission check that could be bypassed or relaxed. Asserted in `test/anti-recursion-tools.test.ts`. | `agent-session.ts` (`_isSubagentSession` gates) |
 | **Memory is written through a PII scanner and a hash-chained audit log.** Rejections are logged too, and `/memory-audit` verifies the chain. | `memory-engine/scanner.ts`, `memory-engine/audit.ts` |
 
-**What Ada does *not* claim.** The `node:vm` sandbox contains the *orchestrator script* — it has no `require`, `process` or `import` and cannot reach the host. The **leaf agents it spawns are ordinary sessions** with `read`/`bash`/`edit`/`write` and the same OS permissions as any coding agent, yours included. Ada is not an OS sandbox and does not pretend to be one; for untrusted work, run it in a container. What is genuinely contained is the orchestration layer, and credentials live in an encrypted vault rather than in plaintext environment variables.
+**What Ada does *not* claim.** The workflow interpreter rejects scripts that use `require`, `process` or `import`, but that check is a **text filter, not a security boundary**: `node:vm` is escapable through the constructor chain, and we verified it — a script reaching the host process, its 67 environment variables and its working directory. Node documents this itself: *«The node:vm module is not a security mechanism.»* The filter's real job is to turn naive host access into a readable error, and the guard for that limit lives in `test/workflows-sandbox-limite.test.ts`. The **leaf agents Ada spawns are ordinary sessions** with `read`/`bash`/`edit`/`write` and the same OS permissions as any coding agent, yours included. **Ada is not an OS sandbox**; for untrusted work, run it in a container. What Ada does contain is narrower and real: credentials live in an encrypted vault that is permanently out of the agent's reach, every tool call and command is recorded in a hash-chained ledger, and extensions go through the same approval policy as the agent.
 
 Engine command reference, `settings.json` schema, and model-routing rules: [docs/AUDIT.md §4](../../docs/AUDIT.md) covers the architecture; slash-command syntax for `/goal`, `/workflow`, `/graph`, `/memory-*`, and `/vault` is documented inline via `--help` and `/hotkeys` in the CLI itself.
 

package/dist/ada-publico.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Superficie pública de Ada.
+ *
+ * Todo lo que Ada añade a la API del paquete sale por aquí y entra en
+ * `index.ts` por UNA sola línea. No es cosmética: `index.ts` es de upstream y
+ * biome ordena sus exportaciones por ruta de módulo, así que cada bloque
+ * nuestro caía en un sitio distinto del fichero y costaba un hunk de
+ * presupuesto de sync (5 en total). Juntos cuestan 2, y los 3 recuperados son
+ * los que paga el registro denso de `core/compactar/`.
+ *
+ * ADA-CLI.md ya señalaba este camino como "el margen barato"; esto es cobrarlo.
+ */
+export { type EntradaDelLibro, LibroDeSesion, type SucesoDeSesion, type Veredicto, } from "./core/audit/libro.ts";
+export { type EstadoMotor, estadoDelMotor, instalarMotor, type PermisoMac, pedirPermisos, recomprobarPermisos, VERSION_MOTOR, } from "./core/computer/driver.ts";
+export { esAppProhibida, type Nivel, techoDeCategoria } from "./core/computer/politica.ts";
+export { leerCredencialGuardada as readStoredCredential } from "./core/credenciales/reposo.ts";
+export { configureHttpDispatcher, DEFAULT_HTTP_IDLE_TIMEOUT_MS, HTTP_IDLE_TIMEOUT_CHOICES, } from "./core/http-dispatcher.ts";
+export { type AuditEntry, AuditLog } from "./core/memory-engine/audit.ts";
+export { isCorrection, MEMORY_POLICY_PROMPT, MemoryEngine, parseOperations, projectHashOf, } from "./core/memory-engine/engine.ts";
+export { InvertedIndex, tokenize } from "./core/memory-engine/inverted-index.ts";
+export { isKeychainAvailable, keychainClearPassphrase, keychainHasPassphrase, keychainLoadPassphrase, keychainSavePassphrase, } from "./core/memory-engine/keychain.ts";
+export { ENTRY_DELIMITER, encodeEntry, listProjectHashes, loadStores, ObservationStore, parseEntry, stripMetadata, } from "./core/memory-engine/observation-store.ts";
+export { scanContent } from "./core/memory-engine/scanner.ts";
+export { classifySensitive, type PrivacyLevel, type SensitiveCategory, type SensitivityResult, } from "./core/memory-engine/security.ts";
+export { extractText, parseSessionFile, SessionIndexer } from "./core/memory-engine/session-indexer.ts";
+export { createMemoryEngineTools, type MemoryEngineToolSet } from "./core/memory-engine/tools.ts";
+export { DEFAULT_MEMORY_CONFIG, type MemoryEngineConfig, type MemoryMode, type MemoryMutationInput, type MemoryOperation, type MemoryResult, type MemorySearchHit, type MemorySearchQuery, type MemoryTarget, OBSERVATION_TYPES, type Observation, type ObservationType, type ObservationView, type SessionSearchHit, } from "./core/memory-engine/types.ts";
+export { expandVaultRefs, ProjectVault, SessionVault, VAULT_REF_PATTERN, type VaultExpansion, type VaultListEntry, VaultManager, type VaultSecret, } from "./core/memory-engine/vault.ts";
+export { getProjectMemoryDirName, getProjectMemoryPath, hasProjectMemory, loadProjectMemory, loadProjectMemorySync, type ProjectMemory, saveProjectMemory, } from "./core/project-memory.ts";
+export { esRutaTemporal, porCoste, type Resumen, resumir, type Totales, } from "./core/usage/aggregate.ts";
+export { generateCodebaseAuditScript, generateCodeReviewScript, generateDeepResearchScript, generateMultiPerspectiveScript, generateProductBuildScript, } from "./core/workflows/builtins.ts";
+export { AgentRunner, type AgentRunOptions, type AgentRunResult, type AgentUsage, agentIdentityHash, createLimiter, DEFAULT_WORKFLOW_LIMITS, extractJson, messageText, parseWorkflowScript, runWorkflow, SharedStore, type WorkflowApi, WorkflowError, type WorkflowErrorCode, type WorkflowMeta, type WorkflowPhase, type WorkflowRunResult, } from "./core/workflows/index.ts";
+export type { ResolveWorkflowResult } from "./core/workflows/resolve-script.ts";
+export { listUserWorkflowScripts, resolveBuiltinWorkflowScript, resolveWorkflowScriptByName, } from "./core/workflows/resolve-script.ts";
+//# sourceMappingURL=ada-publico.d.ts.map

package/dist/ada-publico.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ada-publico.d.ts","sourceRoot":"","sources":["../src/ada-publico.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EACN,KAAK,eAAe,EACpB,aAAa,EACb,KAAK,cAAc,EACnB,KAAK,SAAS,GACd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACN,KAAK,WAAW,EAChB,cAAc,EACd,aAAa,EACb,KAAK,UAAU,EACf,aAAa,EACb,mBAAmB,EACnB,aAAa,GACb,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,KAAK,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAM3F,OAAO,EAAE,sBAAsB,IAAI,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC/F,OAAO,EACN,uBAAuB,EACvB,4BAA4B,EAC5B,yBAAyB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,KAAK,UAAU,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EACN,YAAY,EACZ,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,aAAa,GACb,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EACN,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,GACtB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACN,eAAe,EACf,WAAW,EACX,iBAAiB,EACjB,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,aAAa,GACb,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EACN,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACtB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACxG,OAAO,EAAE,uBAAuB,EAAE,KAAK,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAClG,OAAO,EACN,qBAAqB,EACrB,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACrB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACN,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,YAAY,EACZ,KAAK,WAAW,GAChB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACN,uBAAuB,EACvB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,aAAa,EAClB,iBAAiB,GACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACN,cAAc,EACd,QAAQ,EACR,KAAK,OAAO,EACZ,OAAO,EACP,KAAK,OAAO,GACZ,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACN,2BAA2B,EAC3B,wBAAwB,EACxB,0BAA0B,EAC1B,8BAA8B,EAC9B,0BAA0B,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACN,WAAW,EACX,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,iBAAiB,EACjB,aAAa,EACb,uBAAuB,EACvB,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,WAAW,EACX,WAAW,EACX,KAAK,WAAW,EAChB,aAAa,EACb,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,iBAAiB,GACtB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EACN,uBAAuB,EACvB,4BAA4B,EAC5B,2BAA2B,GAC3B,MAAM,oCAAoC,CAAC"}

package/dist/ada-publico.js

@@ -0,0 +1,40 @@
+/**
+ * Superficie pública de Ada.
+ *
+ * Todo lo que Ada añade a la API del paquete sale por aquí y entra en
+ * `index.ts` por UNA sola línea. No es cosmética: `index.ts` es de upstream y
+ * biome ordena sus exportaciones por ruta de módulo, así que cada bloque
+ * nuestro caía en un sitio distinto del fichero y costaba un hunk de
+ * presupuesto de sync (5 en total). Juntos cuestan 2, y los 3 recuperados son
+ * los que paga el registro denso de `core/compactar/`.
+ *
+ * ADA-CLI.md ya señalaba este camino como "el margen barato"; esto es cobrarlo.
+ */
+// Libro de sesión: qué hizo el agente, en una cadena de hashes verificable.
+export { LibroDeSesion, } from "./core/audit/libro.js";
+export { estadoDelMotor, instalarMotor, pedirPermisos, recomprobarPermisos, VERSION_MOTOR, } from "./core/computer/driver.js";
+export { esAppProhibida, techoDeCategoria } from "./core/computer/politica.js";
+// Sustituye a la exportación upstream del mismo nombre: la de
+// auth-storage.ts lee auth.json con su propio readFileSync + JSON.parse, sin
+// pasar por el cifrado en reposo (credenciales/reposo.ts) — con auth.json ya
+// migrado a cifrado devolvía SIEMPRE undefined, en silencio, a cualquier
+// consumidor de esta función pública. Ver reposo.ts.
+export { leerCredencialGuardada as readStoredCredential } from "./core/credenciales/reposo.js";
+export { configureHttpDispatcher, DEFAULT_HTTP_IDLE_TIMEOUT_MS, HTTP_IDLE_TIMEOUT_CHOICES, } from "./core/http-dispatcher.js";
+export { AuditLog } from "./core/memory-engine/audit.js";
+export { isCorrection, MEMORY_POLICY_PROMPT, MemoryEngine, parseOperations, projectHashOf, } from "./core/memory-engine/engine.js";
+export { InvertedIndex, tokenize } from "./core/memory-engine/inverted-index.js";
+export { isKeychainAvailable, keychainClearPassphrase, keychainHasPassphrase, keychainLoadPassphrase, keychainSavePassphrase, } from "./core/memory-engine/keychain.js";
+export { ENTRY_DELIMITER, encodeEntry, listProjectHashes, loadStores, ObservationStore, parseEntry, stripMetadata, } from "./core/memory-engine/observation-store.js";
+export { scanContent } from "./core/memory-engine/scanner.js";
+export { classifySensitive, } from "./core/memory-engine/security.js";
+export { extractText, parseSessionFile, SessionIndexer } from "./core/memory-engine/session-indexer.js";
+export { createMemoryEngineTools } from "./core/memory-engine/tools.js";
+export { DEFAULT_MEMORY_CONFIG, OBSERVATION_TYPES, } from "./core/memory-engine/types.js";
+export { expandVaultRefs, ProjectVault, SessionVault, VAULT_REF_PATTERN, VaultManager, } from "./core/memory-engine/vault.js";
+export { getProjectMemoryDirName, getProjectMemoryPath, hasProjectMemory, loadProjectMemory, loadProjectMemorySync, saveProjectMemory, } from "./core/project-memory.js";
+export { esRutaTemporal, porCoste, resumir, } from "./core/usage/aggregate.js";
+export { generateCodebaseAuditScript, generateCodeReviewScript, generateDeepResearchScript, generateMultiPerspectiveScript, generateProductBuildScript, } from "./core/workflows/builtins.js";
+export { AgentRunner, agentIdentityHash, createLimiter, DEFAULT_WORKFLOW_LIMITS, extractJson, messageText, parseWorkflowScript, runWorkflow, SharedStore, WorkflowError, } from "./core/workflows/index.js";
+export { listUserWorkflowScripts, resolveBuiltinWorkflowScript, resolveWorkflowScriptByName, } from "./core/workflows/resolve-script.js";
+//# sourceMappingURL=ada-publico.js.map

package/dist/ada-publico.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ada-publico.js","sourceRoot":"","sources":["../src/ada-publico.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,4EAA4E;AAC5E,OAAO,EAEN,aAAa,GAGb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEN,cAAc,EACd,aAAa,EAEb,aAAa,EACb,mBAAmB,EACnB,aAAa,GACb,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAc,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC3F,8DAA8D;AAC9D,6EAA6E;AAC7E,6EAA6E;AAC7E,yEAAyE;AACzE,qDAAqD;AACrD,OAAO,EAAE,sBAAsB,IAAI,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC/F,OAAO,EACN,uBAAuB,EACvB,4BAA4B,EAC5B,yBAAyB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAmB,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EACN,YAAY,EACZ,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,aAAa,GACb,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EACN,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,GACtB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACN,eAAe,EACf,WAAW,EACX,iBAAiB,EACjB,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,aAAa,GACb,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EACN,iBAAiB,GAIjB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACxG,OAAO,EAAE,uBAAuB,EAA4B,MAAM,+BAA+B,CAAC;AAClG,OAAO,EACN,qBAAqB,EASrB,iBAAiB,GAKjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACN,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,iBAAiB,EAGjB,YAAY,GAEZ,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACN,uBAAuB,EACvB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EAErB,iBAAiB,GACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACN,cAAc,EACd,QAAQ,EAER,OAAO,GAEP,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACN,2BAA2B,EAC3B,wBAAwB,EACxB,0BAA0B,EAC1B,8BAA8B,EAC9B,0BAA0B,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACN,WAAW,EAIX,iBAAiB,EACjB,aAAa,EACb,uBAAuB,EACvB,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,WAAW,EACX,WAAW,EAEX,aAAa,GAKb,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACN,uBAAuB,EACvB,4BAA4B,EAC5B,2BAA2B,GAC3B,MAAM,oCAAoC,CAAC"}

package/dist/bun/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/bun/cli.ts"],"names":[],"mappings":"","sourcesContent":["#!/usr/bin/env node\nimport { registerBunOAuthFlows } from \"@earendil-works/pi-ai/bun-oauth\";\nimport { APP_NAME } from \"../config.ts\";\n\nprocess.title = APP_NAME;\nprocess.emitWarning = (() => {}) as typeof process.emitWarning;\n\nregisterBunOAuthFlows();\n\nimport { restoreSandboxEnv } from \"./restore-sandbox-env.ts\";\n\nrestoreSandboxEnv();\n\nawait import(\"./register-bedrock.ts\");\nawait import(\"../cli.ts\");\n"]}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/bun/cli.ts"],"names":[],"mappings":""}

package/dist/bun/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/bun/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;AACzB,OAAO,CAAC,WAAW,GAAG,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAA+B,CAAC;AAE/D,qBAAqB,EAAE,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,iBAAiB,EAAE,CAAC;AAEpB,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;AACtC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC","sourcesContent":["#!/usr/bin/env node\nimport { registerBunOAuthFlows } from \"@earendil-works/pi-ai/bun-oauth\";\nimport { APP_NAME } from \"../config.ts\";\n\nprocess.title = APP_NAME;\nprocess.emitWarning = (() => {}) as typeof process.emitWarning;\n\nregisterBunOAuthFlows();\n\nimport { restoreSandboxEnv } from \"./restore-sandbox-env.ts\";\n\nrestoreSandboxEnv();\n\nawait import(\"./register-bedrock.ts\");\nawait import(\"../cli.ts\");\n"]}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/bun/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;AACzB,OAAO,CAAC,WAAW,GAAG,CAAC,GAAG,EAAE,GAAE,CAAC,CAA+B,CAAC;AAE/D,qBAAqB,EAAE,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,iBAAiB,EAAE,CAAC;AAEpB,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;AACtC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC"}

package/dist/bun/register-bedrock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register-bedrock.d.ts","sourceRoot":"","sources":["../../src/bun/register-bedrock.ts"],"names":[],"mappings":"","sourcesContent":["import { bedrockProviderModule } from \"@earendil-works/pi-ai/bedrock-provider\";\nimport { setBedrockProviderModule } from \"@earendil-works/pi-ai/compat\";\n\nsetBedrockProviderModule(bedrockProviderModule);\n"]}
+{"version":3,"file":"register-bedrock.d.ts","sourceRoot":"","sources":["../../src/bun/register-bedrock.ts"],"names":[],"mappings":""}

package/dist/bun/register-bedrock.js.map

@@ -1 +1 @@
-{"version":3,"file":"register-bedrock.js","sourceRoot":"","sources":["../../src/bun/register-bedrock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAExE,wBAAwB,CAAC,qBAAqB,CAAC,CAAC","sourcesContent":["import { bedrockProviderModule } from \"@earendil-works/pi-ai/bedrock-provider\";\nimport { setBedrockProviderModule } from \"@earendil-works/pi-ai/compat\";\n\nsetBedrockProviderModule(bedrockProviderModule);\n"]}
+{"version":3,"file":"register-bedrock.js","sourceRoot":"","sources":["../../src/bun/register-bedrock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAExE,wBAAwB,CAAC,qBAAqB,CAAC,CAAC"}

package/dist/bun/restore-sandbox-env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"restore-sandbox-env.d.ts","sourceRoot":"","sources":["../../src/bun/restore-sandbox-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAiBxC","sourcesContent":["/**\n * Workaround for https://github.com/oven-sh/bun/issues/27802\n *\n * Bun compiled binaries have an empty `process.env` when running inside\n * sandbox environments (e.g. nono on Linux/macOS). On Linux we can recover\n * the environment from `/proc/self/environ`.\n *\n * Keep this in sync with getBunSandboxEnvValue() in\n * packages/ai/src/utils/provider-env.ts. The ai package duplicates the lookup\n * for direct consumers that do not go through this coding-agent entrypoint.\n */\n\nimport { readFileSync } from \"node:fs\";\n\n/**\n * Restore environment variables from `/proc/self/environ` when running\n * inside a sandbox where Bun's `process.env` is empty.\n */\nexport function restoreSandboxEnv(): void {\n\tif (!process.versions?.bun) return;\n\n\t// If process.env already has entries, nothing to fix.\n\tif (Object.keys(process.env).length > 0) return;\n\n\ttry {\n\t\tconst data = readFileSync(\"/proc/self/environ\", \"utf-8\");\n\t\tfor (const entry of data.split(\"\\0\")) {\n\t\t\tconst idx = entry.indexOf(\"=\");\n\t\t\tif (idx > 0) {\n\t\t\t\tprocess.env[entry.slice(0, idx)] = entry.slice(idx + 1);\n\t\t\t}\n\t\t}\n\t} catch {\n\t\t// /proc/self/environ may not be readable; ignore.\n\t}\n}\n"]}
+{"version":3,"file":"restore-sandbox-env.d.ts","sourceRoot":"","sources":["../../src/bun/restore-sandbox-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAiBxC"}

package/dist/bun/restore-sandbox-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"restore-sandbox-env.js","sourceRoot":"","sources":["../../src/bun/restore-sandbox-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC;;;GAGG;AACH,MAAM,UAAU,iBAAiB,GAAS;IACzC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG;QAAE,OAAO;IAEnC,sDAAsD;IACtD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO;IAEhD,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,YAAY,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;QACzD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YACzD,CAAC;QACF,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,kDAAkD;IACnD,CAAC;AAAA,CACD","sourcesContent":["/**\n * Workaround for https://github.com/oven-sh/bun/issues/27802\n *\n * Bun compiled binaries have an empty `process.env` when running inside\n * sandbox environments (e.g. nono on Linux/macOS). On Linux we can recover\n * the environment from `/proc/self/environ`.\n *\n * Keep this in sync with getBunSandboxEnvValue() in\n * packages/ai/src/utils/provider-env.ts. The ai package duplicates the lookup\n * for direct consumers that do not go through this coding-agent entrypoint.\n */\n\nimport { readFileSync } from \"node:fs\";\n\n/**\n * Restore environment variables from `/proc/self/environ` when running\n * inside a sandbox where Bun's `process.env` is empty.\n */\nexport function restoreSandboxEnv(): void {\n\tif (!process.versions?.bun) return;\n\n\t// If process.env already has entries, nothing to fix.\n\tif (Object.keys(process.env).length > 0) return;\n\n\ttry {\n\t\tconst data = readFileSync(\"/proc/self/environ\", \"utf-8\");\n\t\tfor (const entry of data.split(\"\\0\")) {\n\t\t\tconst idx = entry.indexOf(\"=\");\n\t\t\tif (idx > 0) {\n\t\t\t\tprocess.env[entry.slice(0, idx)] = entry.slice(idx + 1);\n\t\t\t}\n\t\t}\n\t} catch {\n\t\t// /proc/self/environ may not be readable; ignore.\n\t}\n}\n"]}
+{"version":3,"file":"restore-sandbox-env.js","sourceRoot":"","sources":["../../src/bun/restore-sandbox-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAChC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG;QAAE,OAAO;IAEnC,sDAAsD;IACtD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO;IAEhD,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,YAAY,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;QACzD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YACzD,CAAC;QACF,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,kDAAkD;IACnD,CAAC;AACF,CAAC"}

package/dist/cli/args.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAGnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAE3D,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;AAE3C,MAAM,WAAW,IAAI;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oEAAmE;IACnE,eAAe,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IAC7C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,8EAA8E;IAC9E,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,CAAC;IAC5C,WAAW,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnE;AAID,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,aAAa,CAE1E;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGtE;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA8K9C;AAED,wBAAgB,SAAS,CAAC,cAAc,CAAC,EAAE,aAAa,EAAE,GAAG,IAAI,CAgMhE","sourcesContent":["/**\n * CLI argument parsing and help display\n */\n\nimport type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport chalk from \"chalk\";\nimport { APP_NAME, CONFIG_DIR_NAME, ENV_AGENT_DIR, ENV_SESSION_DIR } from \"../config.ts\";\nimport type { ExtensionFlag } from \"../core/extensions/types.ts\";\nimport type { TuiMode } from \"../core/settings-manager.ts\";\n\nexport type Mode = \"text\" | \"json\" | \"rpc\";\n\nexport interface Args {\n\tprovider?: string;\n\tmodel?: string;\n\tapiKey?: string;\n\tsystemPrompt?: string;\n\tappendSystemPrompt?: string[];\n\tthinking?: ThinkingLevel;\n\tcontinue?: boolean;\n\tresume?: boolean;\n\thelp?: boolean;\n\tversion?: boolean;\n\tmode?: Mode;\n\tname?: string;\n\tnoSession?: boolean;\n\tsession?: string;\n\tsessionId?: string;\n\tfork?: string;\n\tsessionDir?: string;\n\tmodels?: string[];\n\ttools?: string[];\n\texcludeTools?: string[];\n\tnoTools?: boolean;\n\tnoBuiltinTools?: boolean;\n\t/** Optimizador autónomo de prompts: \"off\" | \"auto\" | \"clarify\". */\n\tpromptOptimizer?: \"off\" | \"auto\" | \"clarify\";\n\textensions?: string[];\n\tnoExtensions?: boolean;\n\tprint?: boolean;\n\texport?: string;\n\tnoSkills?: boolean;\n\tskills?: string[];\n\tpromptTemplates?: string[];\n\tnoPromptTemplates?: boolean;\n\tthemes?: string[];\n\tuseTheme?: string;\n\tnoThemes?: boolean;\n\tnoContextFiles?: boolean;\n\tlistModels?: string | true;\n\toffline?: boolean;\n\ttuiMode?: TuiMode;\n\tverbose?: boolean;\n\tprojectTrustOverride?: boolean;\n\tmessages: string[];\n\tfileArgs: string[];\n\t/** Unknown flags (potentially extension flags) - map of flag name to value */\n\tunknownFlags: Map<string, boolean | string>;\n\tdiagnostics: Array<{ type: \"warning\" | \"error\"; message: string }>;\n}\n\nconst VALID_THINKING_LEVELS = [\"off\", \"minimal\", \"low\", \"medium\", \"high\", \"xhigh\", \"max\"] as const;\n\nexport function isValidThinkingLevel(level: string): level is ThinkingLevel {\n\treturn VALID_THINKING_LEVELS.includes(level as ThinkingLevel);\n}\n\nexport function normalizeSessionName(value: string): string | undefined {\n\tconst name = value.trim();\n\treturn name.length > 0 ? name : undefined;\n}\n\nexport function parseArgs(args: string[]): Args {\n\tconst result: Args = {\n\t\tmessages: [],\n\t\tfileArgs: [],\n\t\tunknownFlags: new Map(),\n\t\tdiagnostics: [],\n\t};\n\n\tfor (let i = 0; i < args.length; i++) {\n\t\tconst arg = args[i];\n\n\t\tif (arg === \"--help\" || arg === \"-h\") {\n\t\t\tresult.help = true;\n\t\t} else if (arg === \"--version\" || arg === \"-v\") {\n\t\t\tresult.version = true;\n\t\t} else if (arg === \"--mode\" && i + 1 < args.length) {\n\t\t\tconst mode = args[++i];\n\t\t\tif (mode === \"text\" || mode === \"json\" || mode === \"rpc\") {\n\t\t\t\tresult.mode = mode;\n\t\t\t}\n\t\t} else if (arg === \"--continue\" || arg === \"-c\") {\n\t\t\tresult.continue = true;\n\t\t} else if (arg === \"--resume\" || arg === \"-r\") {\n\t\t\tresult.resume = true;\n\t\t} else if (arg === \"--provider\" && i + 1 < args.length) {\n\t\t\tresult.provider = args[++i];\n\t\t} else if (arg === \"--model\" && i + 1 < args.length) {\n\t\t\tresult.model = args[++i];\n\t\t} else if (arg === \"--api-key\" && i + 1 < args.length) {\n\t\t\tresult.apiKey = args[++i];\n\t\t} else if (arg === \"--system-prompt\" && i + 1 < args.length) {\n\t\t\tresult.systemPrompt = args[++i];\n\t\t} else if (arg === \"--append-system-prompt\" && i + 1 < args.length) {\n\t\t\tresult.appendSystemPrompt = result.appendSystemPrompt ?? [];\n\t\t\tresult.appendSystemPrompt.push(args[++i]);\n\t\t} else if (arg === \"--name\" || arg === \"-n\") {\n\t\t\tif (i + 1 < args.length) {\n\t\t\t\tresult.name = args[++i];\n\t\t\t} else {\n\t\t\t\tresult.diagnostics.push({ type: \"error\", message: \"--name requires a value\" });\n\t\t\t}\n\t\t} else if (arg === \"--no-session\") {\n\t\t\tresult.noSession = true;\n\t\t} else if (arg === \"--session\" && i + 1 < args.length) {\n\t\t\tresult.session = args[++i];\n\t\t} else if (arg === \"--session-id\" && i + 1 < args.length) {\n\t\t\tresult.sessionId = args[++i];\n\t\t} else if (arg === \"--fork\" && i + 1 < args.length) {\n\t\t\tresult.fork = args[++i];\n\t\t} else if (arg === \"--session-dir\" && i + 1 < args.length) {\n\t\t\tresult.sessionDir = args[++i];\n\t\t} else if (arg === \"--models\" && i + 1 < args.length) {\n\t\t\tresult.models = args[++i].split(\",\").map((s) => s.trim());\n\t\t} else if (arg === \"--no-tools\" || arg === \"-nt\") {\n\t\t\tresult.noTools = true;\n\t\t} else if (arg === \"--no-builtin-tools\" || arg === \"-nbt\") {\n\t\t\tresult.noBuiltinTools = true;\n\t\t} else if (arg === \"--prompt-optimizer\" && i + 1 < args.length) {\n\t\t\tconst mode = args[++i];\n\t\t\tif (mode === \"off\" || mode === \"auto\" || mode === \"clarify\") {\n\t\t\t\tresult.promptOptimizer = mode;\n\t\t\t}\n\t\t} else if ((arg === \"--tools\" || arg === \"-t\") && i + 1 < args.length) {\n\t\t\tresult.tools = args[++i]\n\t\t\t\t.split(\",\")\n\t\t\t\t.map((s) => s.trim())\n\t\t\t\t.filter((name) => name.length > 0);\n\t\t} else if ((arg === \"--exclude-tools\" || arg === \"-xt\") && i + 1 < args.length) {\n\t\t\tresult.excludeTools = args[++i]\n\t\t\t\t.split(\",\")\n\t\t\t\t.map((s) => s.trim())\n\t\t\t\t.filter((name) => name.length > 0);\n\t\t} else if (arg === \"--thinking\" && i + 1 < args.length) {\n\t\t\tconst level = args[++i];\n\t\t\tif (isValidThinkingLevel(level)) {\n\t\t\t\tresult.thinking = level;\n\t\t\t} else {\n\t\t\t\tresult.diagnostics.push({\n\t\t\t\t\ttype: \"warning\",\n\t\t\t\t\tmessage: `Invalid thinking level \"${level}\". Valid values: ${VALID_THINKING_LEVELS.join(\", \")}`,\n\t\t\t\t});\n\t\t\t}\n\t\t} else if (arg === \"--print\" || arg === \"-p\") {\n\t\t\tresult.print = true;\n\t\t\tconst next = args[i + 1];\n\t\t\tif (next !== undefined && !next.startsWith(\"@\") && (!next.startsWith(\"-\") || next.startsWith(\"---\"))) {\n\t\t\t\tresult.messages.push(next);\n\t\t\t\ti++;\n\t\t\t}\n\t\t} else if (arg === \"--export\" && i + 1 < args.length) {\n\t\t\tresult.export = args[++i];\n\t\t} else if ((arg === \"--extension\" || arg === \"-e\") && i + 1 < args.length) {\n\t\t\tresult.extensions = result.extensions ?? [];\n\t\t\tresult.extensions.push(args[++i]);\n\t\t} else if (arg === \"--no-extensions\" || arg === \"-ne\") {\n\t\t\tresult.noExtensions = true;\n\t\t} else if (arg === \"--skill\" && i + 1 < args.length) {\n\t\t\tresult.skills = result.skills ?? [];\n\t\t\tresult.skills.push(args[++i]);\n\t\t} else if (arg === \"--prompt-template\" && i + 1 < args.length) {\n\t\t\tresult.promptTemplates = result.promptTemplates ?? [];\n\t\t\tresult.promptTemplates.push(args[++i]);\n\t\t} else if (arg === \"--theme\" && i + 1 < args.length) {\n\t\t\tresult.themes = result.themes ?? [];\n\t\t\tresult.themes.push(args[++i]);\n\t\t} else if (arg === \"--use-theme\") {\n\t\t\tconst themeName = args[i + 1];\n\t\t\tif (themeName === undefined || themeName.startsWith(\"-\")) {\n\t\t\t\tresult.diagnostics.push({ type: \"error\", message: \"--use-theme requires a theme name\" });\n\t\t\t} else {\n\t\t\t\tresult.useTheme = themeName;\n\t\t\t\ti++;\n\t\t\t}\n\t\t} else if (arg === \"--no-skills\" || arg === \"-ns\") {\n\t\t\tresult.noSkills = true;\n\t\t} else if (arg === \"--no-prompt-templates\" || arg === \"-np\") {\n\t\t\tresult.noPromptTemplates = true;\n\t\t} else if (arg === \"--no-themes\") {\n\t\t\tresult.noThemes = true;\n\t\t} else if (arg === \"--no-context-files\" || arg === \"-nc\") {\n\t\t\tresult.noContextFiles = true;\n\t\t} else if (arg === \"--list-models\") {\n\t\t\t// Check if next arg is a search pattern (not a flag or file arg)\n\t\t\tif (i + 1 < args.length && !args[i + 1].startsWith(\"-\") && !args[i + 1].startsWith(\"@\")) {\n\t\t\t\tresult.listModels = args[++i];\n\t\t\t} else {\n\t\t\t\tresult.listModels = true;\n\t\t\t}\n\t\t} else if (arg === \"--tui-mode\") {\n\t\t\tconst mode = args[i + 1];\n\t\t\tif (mode === \"regular\" || mode === \"fullscreen\") {\n\t\t\t\tresult.tuiMode = mode;\n\t\t\t\ti++;\n\t\t\t} else if (mode === undefined || mode.startsWith(\"-\")) {\n\t\t\t\tresult.diagnostics.push({ type: \"error\", message: \"--tui-mode requires regular or fullscreen\" });\n\t\t\t} else {\n\t\t\t\ti++;\n\t\t\t\tresult.diagnostics.push({\n\t\t\t\t\ttype: \"error\",\n\t\t\t\t\tmessage: `Invalid TUI mode \"${mode}\". Valid values: regular, fullscreen`,\n\t\t\t\t});\n\t\t\t}\n\t\t} else if (arg === \"--verbose\") {\n\t\t\tresult.verbose = true;\n\t\t} else if (arg === \"--approve\" || arg === \"-a\") {\n\t\t\tresult.projectTrustOverride = true;\n\t\t} else if (arg === \"--no-approve\" || arg === \"-na\") {\n\t\t\tresult.projectTrustOverride = false;\n\t\t} else if (arg === \"--offline\") {\n\t\t\tresult.offline = true;\n\t\t} else if (arg.startsWith(\"@\")) {\n\t\t\tresult.fileArgs.push(arg.slice(1)); // Remove @ prefix\n\t\t} else if (arg.startsWith(\"--\")) {\n\t\t\tconst eqIndex = arg.indexOf(\"=\");\n\t\t\tif (eqIndex !== -1) {\n\t\t\t\tresult.unknownFlags.set(arg.slice(2, eqIndex), arg.slice(eqIndex + 1));\n\t\t\t} else {\n\t\t\t\tconst flagName = arg.slice(2);\n\t\t\t\tconst next = args[i + 1];\n\t\t\t\tif (next !== undefined && !next.startsWith(\"-\") && !next.startsWith(\"@\")) {\n\t\t\t\t\tresult.unknownFlags.set(flagName, next);\n\t\t\t\t\ti++;\n\t\t\t\t} else {\n\t\t\t\t\tresult.unknownFlags.set(flagName, true);\n\t\t\t\t}\n\t\t\t}\n\t\t} else if (arg.startsWith(\"-\") && !arg.startsWith(\"--\")) {\n\t\t\tresult.diagnostics.push({ type: \"error\", message: `Unknown option: ${arg}` });\n\t\t} else if (!arg.startsWith(\"-\")) {\n\t\t\tresult.messages.push(arg);\n\t\t}\n\t}\n\n\treturn result;\n}\n\nexport function printHelp(extensionFlags?: ExtensionFlag[]): void {\n\tconst extensionFlagsText =\n\t\textensionFlags && extensionFlags.length > 0\n\t\t\t? `\\n${chalk.bold(\"Extension CLI Flags:\")}\\n${extensionFlags\n\t\t\t\t\t.map((flag) => {\n\t\t\t\t\t\tconst value = flag.type === \"string\" ? \" <value>\" : \"\";\n\t\t\t\t\t\tconst description = flag.description ?? `Registered by ${flag.extensionPath}`;\n\t\t\t\t\t\treturn `  --${flag.name}${value}`.padEnd(30) + description;\n\t\t\t\t\t})\n\t\t\t\t\t.join(\"\\n\")}\\n`\n\t\t\t: \"\";\n\tconsole.log(`${chalk.bold(APP_NAME)} - AI coding assistant with read, bash, edit, write tools\n\n${chalk.bold(\"Usage:\")}\n  ${APP_NAME} [options] [@files...] [messages...]\n\n${chalk.bold(\"Commands:\")}\n  ${APP_NAME} install <source> [-l]     Install extension source and add to settings\n  ${APP_NAME} remove <source> [-l]      Remove extension source from settings\n  ${APP_NAME} uninstall <source> [-l]   Alias for remove\n  ${APP_NAME} update [source|self|ada-cli]   Update ada-cli, extensions, or model catalogs\n  ${APP_NAME} list                      List installed extensions from settings\n  ${APP_NAME} config [-l]               Open TUI to enable/disable package resources (Tab switches scope)\n  ${APP_NAME} auth <command>            Print credentials or check provider readiness\n  ${APP_NAME} <command> --help          Show help for install/remove/uninstall/update/list/config/auth\n\n${chalk.bold(\"Options:\")}\n  --provider <name>              Provider name (default: google)\n  --model <pattern>              Model pattern or ID (supports \"provider/id\" and optional \":<thinking>\")\n  --api-key <key>                API key (defaults to env vars)\n  --system-prompt <text>         System prompt (default: coding assistant prompt)\n  --append-system-prompt <text>  Append text or file contents to the system prompt (can be used multiple times)\n  --mode <mode>                  Output mode: text (default), json, or rpc\n  --print, -p                    Non-interactive mode: process prompt and exit\n  --continue, -c                 Continue previous session\n  --resume, -r                   Select a session to resume\n  --session <path|id>            Use specific session file or partial UUID\n  --session-id <id>              Use exact project session ID, creating it if missing\n  --fork <path|id>               Fork specific session file or partial UUID into a new session\n  --session-dir <dir>            Directory for session storage and lookup\n  --no-session                   Don't save session (ephemeral)\n  --name, -n <name>              Set session display name\n  --models <patterns>            Comma-separated model patterns for Ctrl+P cycling\n                                 Supports globs (anthropic/*, *sonnet*) and fuzzy matching\n  --no-tools, -nt                Disable all tools by default (built-in and extension)\n  --no-builtin-tools, -nbt       Disable built-in tools by default but keep extension/custom tools enabled\n  --tools, -t <tools>            Comma-separated allowlist of tool names to enable\n                                 Applies to built-in, extension, and custom tools\n  --exclude-tools, -xt <tools>   Comma-separated denylist of tool names to disable\n                                 Applies to built-in, extension, and custom tools\n  --thinking <level>             Set thinking level: off, minimal, low, medium, high, xhigh, max\n  --prompt-optimizer <mode>     Autonomous prompt optimizer: auto (default), clarify, off\n  --extension, -e <path>         Load an extension file (can be used multiple times)\n  --no-extensions, -ne           Disable extension discovery (explicit -e paths still work)\n  --skill <path>                 Load a skill file or directory (can be used multiple times)\n  --no-skills, -ns               Disable skills discovery and loading\n  --prompt-template <path>       Load a prompt template file or directory (can be used multiple times)\n  --no-prompt-templates, -np     Disable prompt template discovery and loading\n  --theme <path>                 Load a theme file or directory (can be used multiple times)\n  --use-theme <name[/name]>      Set the initial interactive theme for this run\n  --no-themes                    Disable theme discovery and loading\n  --no-context-files, -nc        Disable AGENTS.md and CLAUDE.md discovery and loading\n  --export <file>                Export session file to HTML and exit\n  --list-models [search]         List available models (with optional fuzzy search)\n  --verbose                      Force verbose startup (overrides quietStartup setting)\n  --tui-mode <mode>              TUI mode: regular (default) or fullscreen\n  --approve, -a                  Trust project-local files for this run\n  --no-approve, -na              Ignore project-local files for this run\n  --offline                      Disable startup network operations (same as PI_OFFLINE=1)\n  --help, -h                     Show this help\n  --version, -v                  Show version number\n\nExtensions can register additional flags (e.g., --plan from plan-mode extension).${extensionFlagsText}\n\n${chalk.bold(\"Examples:\")}\n  # Print a provider API key for an external client\n  ${APP_NAME} auth print-api-key --provider openai\n\n  # Print an OAuth bearer token for an external client (refreshes if expired)\n  ${APP_NAME} auth print-bearer-token --provider openai-codex\n\n  # Interactive mode\n  ${APP_NAME}\n\n  # Interactive mode with initial prompt\n  ${APP_NAME} \"List all .ts files in src/\"\n\n  # Include files in initial message\n  ${APP_NAME} @prompt.md @image.png \"What color is the sky?\"\n\n  # Non-interactive mode (process and exit)\n  ${APP_NAME} -p \"List all .ts files in src/\"\n\n  # Multiple messages (interactive)\n  ${APP_NAME} \"Read package.json\" \"What dependencies do we have?\"\n\n  # Continue previous session\n  ${APP_NAME} --continue \"What did we discuss?\"\n\n  # Start a named session\n  ${APP_NAME} --name \"Refactor auth module\"\n\n  # Use different model\n  ${APP_NAME} --provider openai --model gpt-4o-mini \"Help me refactor this code\"\n\n  # Use model with provider prefix (no --provider needed)\n  ${APP_NAME} --model openai/gpt-4o \"Help me refactor this code\"\n\n  # Use model with thinking level shorthand\n  ${APP_NAME} --model sonnet:high \"Solve this complex problem\"\n\n  # Limit model cycling to specific models\n  ${APP_NAME} --models claude-sonnet,claude-haiku,gpt-4o\n\n  # Limit to a specific provider with glob pattern\n  ${APP_NAME} --models \"github-copilot/*\"\n\n  # Cycle models with fixed thinking levels\n  ${APP_NAME} --models sonnet:high,haiku:low\n\n  # Start with a specific thinking level\n  ${APP_NAME} --thinking high \"Solve this complex problem\"\n\n  # Read-only mode (no file modifications possible)\n  ${APP_NAME} --tools read,grep,find,ls -p \"Review the code in src/\"\n\n  # Disable one tool while keeping the rest available\n  ${APP_NAME} --exclude-tools ask_question\n\n  # Export a session file to HTML\n  ${APP_NAME} --export ~/${CONFIG_DIR_NAME}/agent/sessions/--path--/session.jsonl\n  ${APP_NAME} --export session.jsonl output.html\n\n${chalk.bold(\"Environment Variables:\")}\n  ANTHROPIC_AUTH_TOKEN             - Anthropic bearer auth token\n  ANTHROPIC_API_KEY                - Anthropic Claude API key\n  ANTHROPIC_OAUTH_TOKEN            - Anthropic OAuth token (alternative to API key)\n  ANT_LING_API_KEY                 - Ant Ling API key\n  OPENAI_API_KEY                   - OpenAI GPT API key\n  AZURE_OPENAI_API_KEY             - Azure OpenAI API key\n  AZURE_OPENAI_BASE_URL            - Azure OpenAI/Cognitive Services base URL (e.g. https://{resource}.openai.azure.com)\n  AZURE_OPENAI_RESOURCE_NAME       - Azure OpenAI resource name (alternative to base URL)\n  AZURE_OPENAI_API_VERSION         - Azure OpenAI API version (default: v1)\n  AZURE_OPENAI_DEPLOYMENT_NAME_MAP - Azure OpenAI model=deployment map (comma-separated)\n  DEEPSEEK_API_KEY                 - DeepSeek API key\n  NVIDIA_API_KEY                   - NVIDIA NIM API key\n  GEMINI_API_KEY                   - Google Gemini API key\n  GROQ_API_KEY                     - Groq API key\n  CEREBRAS_API_KEY                 - Cerebras API key\n  XAI_API_KEY                      - xAI Grok API key\n  FIREWORKS_API_KEY                - Fireworks API key\n  TOGETHER_API_KEY                 - Together AI API key\n  BASETEN_API_KEY                  - Baseten API key\n  OPENROUTER_API_KEY               - OpenRouter API key\n  AI_GATEWAY_API_KEY               - Vercel AI Gateway API key\n  ZAI_API_KEY                      - ZAI Coding Plan API key (Global)\n  ZAI_CODING_CN_API_KEY            - ZAI Coding Plan API key (China)\n  MISTRAL_API_KEY                  - Mistral API key\n  MINIMAX_API_KEY                  - MiniMax API key\n  MOONSHOT_API_KEY                 - Moonshot AI API key\n  OPENCODE_API_KEY                 - OpenCode Zen/OpenCode Go API key\n  KIMI_API_KEY                     - Kimi For Coding API key\n  CLOUDFLARE_API_KEY               - Cloudflare API token (Workers AI and AI Gateway)\n  CLOUDFLARE_ACCOUNT_ID            - Cloudflare account id (required for both)\n  CLOUDFLARE_GATEWAY_ID            - Cloudflare AI Gateway slug (required for AI Gateway)\n  QWEN_TOKEN_PLAN_API_KEY          - Qwen Token Plan API key (international region)\n  QWEN_TOKEN_PLAN_CN_API_KEY       - Qwen Token Plan API key (China region)\n  XIAOMI_API_KEY                   - Xiaomi MiMo API key (api.xiaomimimo.com billing)\n  XIAOMI_TOKEN_PLAN_CN_API_KEY     - Xiaomi MiMo Token Plan API key (China region)\n  XIAOMI_TOKEN_PLAN_AMS_API_KEY    - Xiaomi MiMo Token Plan API key (Amsterdam region)\n  XIAOMI_TOKEN_PLAN_SGP_API_KEY    - Xiaomi MiMo Token Plan API key (Singapore region)\n  AWS_PROFILE                      - AWS profile for Amazon Bedrock\n  AWS_ACCESS_KEY_ID                - AWS access key for Amazon Bedrock\n  AWS_SECRET_ACCESS_KEY            - AWS secret key for Amazon Bedrock\n  AWS_BEARER_TOKEN_BEDROCK         - Bedrock API key (bearer token)\n  AWS_REGION                       - AWS region for Amazon Bedrock (e.g., us-east-1)\n  ${ENV_AGENT_DIR.padEnd(32)} - Config directory (default: ~/${CONFIG_DIR_NAME}/agent)\n  ${ENV_SESSION_DIR.padEnd(32)} - Session storage directory (overridden by --session-dir)\n  PI_PACKAGE_DIR                   - Override package directory (for Nix/Guix store paths)\n  PI_OFFLINE                       - Disable startup network operations when set to 1/true/yes\n  PI_TELEMETRY                     - Override install telemetry when set to 1/true/yes or 0/false/no\n  ADA_SHARE_VIEWER_URL              - Base URL for /share command (default: https://pi.dev/session/)\n\n${chalk.bold(\"Built-in Tool Names:\")}\n  read   - Read file contents\n  bash   - Execute bash commands\n  edit   - Edit files with find/replace\n  write  - Write files (creates/overwrites)\n  grep   - Search file contents (read-only, off by default)\n  find   - Find files by glob pattern (read-only, off by default)\n  ls     - List directory contents (read-only, off by default)\n`);\n}\n"]}
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAGnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAE3D,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;AAE3C,MAAM,WAAW,IAAI;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,mEAAmE;IACnE,eAAe,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IAC7C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,8EAA8E;IAC9E,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,CAAC;IAC5C,WAAW,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnE;AAID,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,aAAa,CAE1E;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGtE;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA8K9C;AAED,wBAAgB,SAAS,CAAC,cAAc,CAAC,EAAE,aAAa,EAAE,GAAG,IAAI,CAgMhE"}