@inhuman.tools/harness 0.0.0-stage → 0.1.0

package/dist/daemon/session/approval/judge.js

@@ -0,0 +1,86 @@
+import { when } from "mobx";
+import { CompletionExpectation } from "../../../models/session/expectations/CompletionExpectation.js";
+import { decisionOnJudgeCrash, evaluateJudge } from "./evaluate.js";
+import { parseJudgeVote } from "./votes.js";
+/** Host-built user text. The judge cannot tool-call; reply is one vote string. */
+export function hostJudgePrompt(tool) {
+    return [
+        `Tool: ${tool.name}`,
+        `Arguments: ${JSON.stringify(tool.arguments)}`,
+        "Classify composed to need-judge.",
+        "Reply with exactly one of: approve, hard-block, soft-block.",
+    ].join("\n");
+}
+/**
+ * Fail open judges that are not this pickup's id. Does not touch `judges[id]`
+ * (reuse) and does not delete keys (a flip is a new slot, not a clear).
+ */
+export function failOpenJudgesExcept(work, id) {
+    for (const [policyId, child] of Object.entries(work.judges)) {
+        if (policyId === id || child.isDone)
+            continue;
+        child.fail("cancel", "terminate", "null");
+    }
+}
+function writeJudgeVote(work, id, vote) {
+    switch (vote) {
+        case "approve":
+            work.writePolicyResult(id, true);
+            return;
+        case "hard-block":
+            work.writePolicyResult(id, false);
+            return;
+        case "soft-block":
+            work.writePolicyAsk(id);
+            return;
+    }
+}
+async function writeJudgeCrash(work, id, program) {
+    if ((await decisionOnJudgeCrash(program)) === "deny")
+        work.writePolicyResult(id, false);
+    else
+        work.writePolicyAsk(id);
+}
+/**
+ * Read a sealed child. Failed / empty / illegal / `no-verdict` follow
+ * `decision-on-judge-crash` (`'ask` when missing).
+ */
+export async function applyJudgeSettlement(work, id, child, program) {
+    if (!(child instanceof CompletionExpectation) || child.outcome !== "successful") {
+        await writeJudgeCrash(work, id, program);
+        return;
+    }
+    const vote = parseJudgeVote(child.responseText.trim());
+    if (vote === undefined) {
+        await writeJudgeCrash(work, id, program);
+        return;
+    }
+    writeJudgeVote(work, id, vote);
+}
+export async function runNeedJudge(work, id, program, tool, connectionId, model = "") {
+    const existing = work.judges[id];
+    if (existing !== undefined) {
+        if (!existing.isDone)
+            await when(() => existing.isDone);
+        await applyJudgeSettlement(work, id, existing, program);
+        return;
+    }
+    const connection = connectionId.trim();
+    if (connection !== "") {
+        const child = new CompletionExpectation({
+            connectionId: connection,
+            model: model.trim(),
+            promptText: hostJudgePrompt(tool),
+        });
+        work.judges[id] = child;
+        await when(() => child.isDone);
+        await applyJudgeSettlement(work, id, child, program);
+        return;
+    }
+    const judged = await evaluateJudge(program, tool);
+    if (judged.ok)
+        writeJudgeVote(work, id, judged.value);
+    else
+        await writeJudgeCrash(work, id, program);
+}
+//# sourceMappingURL=judge.js.map

package/dist/daemon/session/approval/judge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"judge.js","sourceRoot":"","sources":["../../../../src/daemon/session/approval/judge.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,+DAA+D,CAAC;AACtG,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAmB,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,cAAc,EAAkB,MAAM,YAAY,CAAC;AAE5D,kFAAkF;AAClF,MAAM,UAAU,eAAe,CAAC,IAAgB;IAC9C,OAAO;QACL,SAAS,IAAI,CAAC,IAAI,EAAE;QACpB,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;QAC9C,kCAAkC;QAClC,6DAA6D;KAC9D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA2B,EAAE,EAAU;IAC1E,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5D,IAAI,QAAQ,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM;YAAE,SAAS;QAC9C,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAA2B,EAAE,EAAU,EAAE,IAAe;IAC9E,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACjC,OAAO;QACT,KAAK,YAAY;YACf,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAClC,OAAO;QACT,KAAK,YAAY;YACf,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YACxB,OAAO;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAA2B,EAC3B,EAAU,EACV,OAAe;IAEf,IAAI,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM;QAAE,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;;QACnF,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAA2B,EAC3B,EAAU,EACV,KAAsB,EACtB,OAAe;IAEf,IAAI,CAAC,CAAC,KAAK,YAAY,qBAAqB,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;QAChF,MAAM,eAAe,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,eAAe,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IACD,cAAc,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAA2B,EAC3B,EAAU,EACV,OAAe,EACf,IAAgB,EAChB,YAAoB,EACpB,KAAK,GAAG,EAAE;IAEV,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,oBAAoB,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC;YACtC,YAAY,EAAE,UAAU;YACxB,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;YACnB,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;QACxB,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,oBAAoB,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,EAAE;QAAE,cAAc,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;QACjD,MAAM,eAAe,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC"}

package/dist/daemon/session/approval/session.d.ts

@@ -0,0 +1,50 @@
+import type { ApprovableExpectation } from "@inhuman.tools/plexus-expectations";
+import { type PolicyEvalResult } from "./evaluate.js";
+import type { ClassifyVote } from "./votes.js";
+export type ToolClass = "read" | "write" | "effect";
+export type LoadPolicyProgram = () => string | undefined | Promise<string | undefined>;
+export type SessionApproveOpts = {
+    readonly id: string;
+    readonly mode: string;
+    readonly catalogClass: string | undefined;
+    readonly loadProgram: LoadPolicyProgram;
+    /**
+     * Session completion connection (`SessionRoot.kvs.connection`). Empty /
+     * missing → Scheme `evaluateJudge`, no mint. Not the parent tool-call's
+     * toolkit/MCP `connectionId`.
+     */
+    readonly connectionId?: string;
+    /** Session active model (`SessionRoot.kvs.model`). Rides the judge child. */
+    readonly model?: string;
+};
+/**
+ * Activate `SessionRoot.currentPolicy` only when it is `manual` (host-reserved,
+ * legal without appearing in `KernelRoot.policies`) or an enabled id.
+ * Unknown, declared-but-not-enabled, and the mode names `plan` / `act` are
+ * `manual`. `yolo` / `auto` must be in `enabled` to activate.
+ */
+export declare function resolvePolicyId(currentPolicy: string, enabled: readonly string[]): string;
+/** Catalog class. Missing / unknown (including live `mutator` / `net` / `shell`) → `effect`. */
+export declare function toolClassOf(raw: string | undefined): ToolClass;
+/**
+ * Vote → durable slot. `need-judge` writes nothing — caller runs
+ * `runNeedJudge`. `{ ok: false }` (illegal vote, throw, unloadable) is ask.
+ */
+export declare function applyClassifySlot(work: ApprovableExpectation, id: string, outcome: PolicyEvalResult<ClassifyVote>): void;
+/**
+ * Disabled `config.json` plugin names, projected onto `KernelRoot.plugins`.
+ * Same set the reflector passes to `readPluginInventory`.
+ */
+export declare function disabledPluginNames(plugins: Iterable<{
+    readonly pluginName: string;
+    readonly enabled: boolean;
+}>): Set<string>;
+/**
+ * Body of an enabled program. `auto` is host-shipped (`auto.scm`). Other
+ * ids resolve through `readPluginInventory` — plugin `policies[]` and
+ * `policyPaths` next to `config.json`, parent traversal dropped. Missing
+ * or unloadable → `undefined` (caller writes ask). Never throws.
+ */
+export declare function loadEnabledPolicySource(id: string, kernelFsRoot: string, disabled?: ReadonlySet<string>): string | undefined;
+export declare function applySessionApprove(work: ApprovableExpectation, opts: SessionApproveOpts): Promise<void>;
+//# sourceMappingURL=session.d.ts.map

package/dist/daemon/session/approval/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../../src/daemon/session/approval/session.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAMhF,OAAO,EAEL,KAAK,gBAAgB,EAEtB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEpD,MAAM,MAAM,iBAAiB,GAAG,MAAM,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAEvF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAKzF;AAED,gGAAgG;AAChG,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAG9D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,qBAAqB,EAC3B,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,gBAAgB,CAAC,YAAY,CAAC,GACtC,IAAI,CAmBN;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,QAAQ,CAAC;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,GAC5E,GAAG,CAAC,MAAM,CAAC,CAMb;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,EACpB,QAAQ,GAAE,WAAW,CAAC,MAAM,CAAa,GACxC,MAAM,GAAG,SAAS,CAYpB;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,qBAAqB,EAC3B,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CAuCf"}

package/dist/daemon/session/approval/session.js

@@ -0,0 +1,187 @@
+/**
+ * Session approval pipeline. Not a second evaluator — `evaluateClassify`
+ * is the only Scheme classify exec. Authors cannot skip these steps.
+ *
+ * HOST PIPELINE (`docs/design/approval.md` §4, §5, §6, §7), in order:
+ * 1. Flip. Open `judges[otherId]` are failed. Not parent-ending (orphans
+ *    are the work autorun).
+ * 2. Mode prefix. `plan` + (`write` | `effect`) writes `policyResult[id] =
+ *    false` and never classifies. Missing / unknown class is `effect`.
+ *    `read` passes. `act` is a no-op prefix. `readonly` is a policy, not a
+ *    mode.
+ * 3. Host intrinsic. `manual` asks; `yolo` approves. No Scheme, no judge.
+ * 4. Load the program. `auto` is `distAutoSource()`. Any other enabled id
+ *    is `readPluginInventory` + the declared path (same jail as the
+ *    reflector). Missing / unloadable / throw → ask.
+ * 5. `evaluateClassify`. Vote → slot. `need-judge` is not a slot — mint /
+ *    reuse / Scheme judge in `runNeedJudge`.
+ *
+ * NEED-JUDGE IS NOT ASK. Same-id skip is `policyResult[id]` present OR
+ * `policyAsk[id]`. Writing ask at classify-need-judge makes `approve()`
+ * never run again when the child settles; BODY stays unset. `#trackApprove`
+ * asks only when this pipeline wrote nothing (crash net).
+ *
+ * `id` is late-bound by the caller (`policyId()` at pickup). This module
+ * does not re-read `SessionRoot.currentPolicy`. In-flight does not rebind.
+ * `connectionId` is `session.kvs.connection` — not the tool-call's
+ * toolkit/MCP id. Empty → Scheme judge, no mint. Do not `ensure()`.
+ *
+ * FS JAIL. `loadEnabledPolicySource` takes the kernel *filesystem* root
+ * (`sessionDaemon.kernel.root`). `KernelRoot` (`this.kernel.root`) is the
+ * model — do not pass it as the path.
+ *
+ * Tool shape v1: `{ name, arguments }`. Parse fail writes ask (fail-closed).
+ * Every exit writes a durable slot so `#trackApprove` is not the sealer.
+ */
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { readPluginInventory } from "../../kernel/catalog.js";
+import { fileCatalogSchema } from "../../well-known/schemas.js";
+import { ToolCallExpectation } from "../../../models/session/expectations/ToolCallExpectation.js";
+import { distAutoSource, hostIntrinsicPolicy } from "./dist.js";
+import { evaluateClassify, } from "./evaluate.js";
+import { failOpenJudgesExcept, runNeedJudge } from "./judge.js";
+/**
+ * Activate `SessionRoot.currentPolicy` only when it is `manual` (host-reserved,
+ * legal without appearing in `KernelRoot.policies`) or an enabled id.
+ * Unknown, declared-but-not-enabled, and the mode names `plan` / `act` are
+ * `manual`. `yolo` / `auto` must be in `enabled` to activate.
+ */
+export function resolvePolicyId(currentPolicy, enabled) {
+    if (currentPolicy === "manual")
+        return "manual";
+    if (currentPolicy === "plan" || currentPolicy === "act")
+        return "manual";
+    if (enabled.includes(currentPolicy))
+        return currentPolicy;
+    return "manual";
+}
+/** Catalog class. Missing / unknown (including live `mutator` / `net` / `shell`) → `effect`. */
+export function toolClassOf(raw) {
+    if (raw === "read" || raw === "write")
+        return raw;
+    return "effect";
+}
+/**
+ * Vote → durable slot. `need-judge` writes nothing — caller runs
+ * `runNeedJudge`. `{ ok: false }` (illegal vote, throw, unloadable) is ask.
+ */
+export function applyClassifySlot(work, id, outcome) {
+    if (!outcome.ok) {
+        work.writePolicyAsk(id);
+        return;
+    }
+    switch (outcome.value) {
+        case "approve":
+            work.writePolicyResult(id, true);
+            return;
+        case "hard-block":
+            work.writePolicyResult(id, false);
+            return;
+        case "soft-block":
+        case "ask":
+            work.writePolicyAsk(id);
+            return;
+        case "need-judge":
+            return;
+    }
+}
+/**
+ * Disabled `config.json` plugin names, projected onto `KernelRoot.plugins`.
+ * Same set the reflector passes to `readPluginInventory`.
+ */
+export function disabledPluginNames(plugins) {
+    const names = new Set();
+    for (const plugin of plugins) {
+        if (plugin.enabled === false)
+            names.add(plugin.pluginName);
+    }
+    return names;
+}
+/**
+ * Body of an enabled program. `auto` is host-shipped (`auto.scm`). Other
+ * ids resolve through `readPluginInventory` — plugin `policies[]` and
+ * `policyPaths` next to `config.json`, parent traversal dropped. Missing
+ * or unloadable → `undefined` (caller writes ask). Never throws.
+ */
+export function loadEnabledPolicySource(id, kernelFsRoot, disabled = new Set()) {
+    try {
+        if (id === "auto")
+            return distAutoSource();
+        const policyPaths = configPolicyPaths(kernelFsRoot);
+        const declared = readPluginInventory(kernelFsRoot, disabled, policyPaths).policies.find((row) => row.id === id);
+        if (declared === undefined)
+            return undefined;
+        return readFileSync(declared.path, "utf8");
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function applySessionApprove(work, opts) {
+    const { id } = opts;
+    try {
+        failOpenJudgesExcept(work, id);
+        if (opts.mode === "plan" && toolClassOf(opts.catalogClass) !== "read") {
+            work.writePolicyResult(id, false);
+            return;
+        }
+        const intrinsic = hostIntrinsicPolicy(id);
+        if (intrinsic !== undefined) {
+            if (intrinsic.vote === "approve")
+                work.writePolicyResult(id, true);
+            else
+                work.writePolicyAsk(id);
+            return;
+        }
+        let program;
+        try {
+            program = await opts.loadProgram();
+        }
+        catch {
+            work.writePolicyAsk(id);
+            return;
+        }
+        if (program === undefined || program.trim() === "") {
+            work.writePolicyAsk(id);
+            return;
+        }
+        const tool = policyToolOf(work);
+        if (tool === undefined) {
+            work.writePolicyAsk(id);
+            return;
+        }
+        const outcome = await evaluateClassify(program, tool);
+        if (outcome.ok && outcome.value === "need-judge") {
+            await runNeedJudge(work, id, program, tool, opts.connectionId ?? "", opts.model ?? "");
+            return;
+        }
+        applyClassifySlot(work, id, outcome);
+    }
+    catch {
+        work.writePolicyAsk(id);
+    }
+}
+function configPolicyPaths(kernelFsRoot) {
+    try {
+        const raw = JSON.parse(readFileSync(join(kernelFsRoot, "config.json"), "utf8"));
+        return fileCatalogSchema.parse(raw).policyPaths;
+    }
+    catch {
+        return [];
+    }
+}
+function policyToolOf(work) {
+    if (!(work instanceof ToolCallExpectation))
+        return undefined;
+    try {
+        const parsed = JSON.parse(work.argsJson === "" ? "{}" : work.argsJson);
+        if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed))
+            return undefined;
+        return { name: work.name, arguments: parsed };
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=session.js.map

package/dist/daemon/session/approval/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../../src/daemon/session/approval/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6DAA6D,CAAC;AAClG,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EACL,gBAAgB,GAGjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAsBhE;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,aAAqB,EAAE,OAA0B;IAC/E,IAAI,aAAa,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC;IACzE,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,aAAa,CAAC;IAC1D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,WAAW,CAAC,GAAuB;IACjD,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC;IAClD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAA2B,EAC3B,EAAU,EACV,OAAuC;IAEvC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IACD,QAAQ,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,KAAK,SAAS;YACZ,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACjC,OAAO;QACT,KAAK,YAAY;YACf,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAClC,OAAO;QACT,KAAK,YAAY,CAAC;QAClB,KAAK,KAAK;YACR,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YACxB,OAAO;QACT,KAAK,YAAY;YACf,OAAO;IACX,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA6E;IAE7E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,EAAU,EACV,YAAoB,EACpB,QAAQ,GAAwB,IAAI,GAAG,EAAE;IAEzC,IAAI,CAAC;QACH,IAAI,EAAE,KAAK,MAAM;YAAE,OAAO,cAAc,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CACrF,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CACvB,CAAC;QACF,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC7C,OAAO,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAA2B,EAC3B,IAAwB;IAExB,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACpB,IAAI,CAAC;QACH,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,MAAM,EAAE,CAAC;YACtE,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS;gBAAE,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;;gBAC9D,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,IAAI,OAA2B,CAAC;QAChC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QACD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACnD,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YACjD,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QACD,iBAAiB,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,YAAoB;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACzF,OAAO,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAA2B;IAC/C,IAAI,CAAC,CAAC,IAAI,YAAY,mBAAmB,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChF,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7F,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAiC,EAAE,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/daemon/session/approval/votes.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Host vote lattice for approval policy programs. Authors emit votes;
+ * this module composes. Not authorable — a sequential `cond` in the Scheme
+ * file cannot replace it (mixed `approve` + `soft-block` is `soft-block`
+ * even if `approve` is listed first).
+ *
+ * TWO DEFINES, HOST LATTICE (`docs/design/approval.md` §6):
+ * 1. Drop `no-verdict`.
+ * 2. Any `hard-block` → `hard-block`.
+ * 3. Else any `soft-block` → `soft-block`.
+ * 4. Else any `approve` → `approve`.
+ * 5. Else (unanimous `no-verdict`, or no votes) → `need-judge` if judge
+ *    is present, else `ask`.
+ *
+ * `judge` must not emit `no-verdict`. Missing `decision-on-judge-crash` is `'ask`.
+ */
+export declare const AUTHORABLE_VOTES: readonly ["approve", "hard-block", "soft-block", "no-verdict"];
+export type AuthorableVote = (typeof AUTHORABLE_VOTES)[number];
+export declare const JUDGE_VOTES: readonly ["approve", "hard-block", "soft-block"];
+export type JudgeVote = (typeof JUDGE_VOTES)[number];
+export type ClassifyVote = JudgeVote | "need-judge" | "ask";
+export type JudgeCrashDecision = "ask" | "deny";
+export declare function isAuthorableVote(value: string): value is AuthorableVote;
+export declare function isJudgeVote(value: string): value is JudgeVote;
+/** Fold a leading `:` so `'ask` and `:ask` are one decision. */
+export declare function foldSymbolName(value: string): string;
+export declare function parseAuthorableVote(value: unknown): AuthorableVote | undefined;
+export declare function parseJudgeVote(value: unknown): JudgeVote | undefined;
+export declare function parseJudgeCrashDecision(value: unknown): JudgeCrashDecision | undefined;
+export type ComposeVotesOpts = {
+    readonly hasJudge: boolean;
+};
+/**
+ * Compose classify votes. Illegal members are the caller's problem — this
+ * function assumes every entry is already in the authorable union.
+ */
+export declare function composeVotes(votes: readonly AuthorableVote[], opts: ComposeVotesOpts): ClassifyVote;
+//# sourceMappingURL=votes.d.ts.map

package/dist/daemon/session/approval/votes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"votes.d.ts","sourceRoot":"","sources":["../../../../src/daemon/session/approval/votes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,gBAAgB,YAAI,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAC/F,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,eAAO,MAAM,WAAW,YAAI,SAAS,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAC5E,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,YAAY,GAAG,KAAK,CAAC;AAC5D,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,MAAM,CAAC;AAMhD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc,CAEvE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,SAAS,CAE7D;AAED,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,GAAG,SAAS,CAI9E;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAIpE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,GAAG,SAAS,CAItF;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,EAAE,IAAI,EAAE,gBAAgB,GAAG,YAAY,CAMnG"}

package/dist/daemon/session/approval/votes.js

@@ -0,0 +1,64 @@
+/**
+ * Host vote lattice for approval policy programs. Authors emit votes;
+ * this module composes. Not authorable — a sequential `cond` in the Scheme
+ * file cannot replace it (mixed `approve` + `soft-block` is `soft-block`
+ * even if `approve` is listed first).
+ *
+ * TWO DEFINES, HOST LATTICE (`docs/design/approval.md` §6):
+ * 1. Drop `no-verdict`.
+ * 2. Any `hard-block` → `hard-block`.
+ * 3. Else any `soft-block` → `soft-block`.
+ * 4. Else any `approve` → `approve`.
+ * 5. Else (unanimous `no-verdict`, or no votes) → `need-judge` if judge
+ *    is present, else `ask`.
+ *
+ * `judge` must not emit `no-verdict`. Missing `decision-on-judge-crash` is `'ask`.
+ */
+export const AUTHORABLE_VOTES = ["approve", "hard-block", "soft-block", "no-verdict"];
+export const JUDGE_VOTES = ["approve", "hard-block", "soft-block"];
+const AUTHORABLE = new Set(AUTHORABLE_VOTES);
+const JUDGE = new Set(JUDGE_VOTES);
+const CRASH = new Set(["ask", "deny"]);
+export function isAuthorableVote(value) {
+    return AUTHORABLE.has(value);
+}
+export function isJudgeVote(value) {
+    return JUDGE.has(value);
+}
+/** Fold a leading `:` so `'ask` and `:ask` are one decision. */
+export function foldSymbolName(value) {
+    return value.startsWith(":") ? value.slice(1) : value;
+}
+export function parseAuthorableVote(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const folded = foldSymbolName(value);
+    return isAuthorableVote(folded) ? folded : undefined;
+}
+export function parseJudgeVote(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const folded = foldSymbolName(value);
+    return isJudgeVote(folded) ? folded : undefined;
+}
+export function parseJudgeCrashDecision(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const folded = foldSymbolName(value);
+    return CRASH.has(folded) ? folded : undefined;
+}
+/**
+ * Compose classify votes. Illegal members are the caller's problem — this
+ * function assumes every entry is already in the authorable union.
+ */
+export function composeVotes(votes, opts) {
+    const counted = votes.filter((vote) => vote !== "no-verdict");
+    if (counted.includes("hard-block"))
+        return "hard-block";
+    if (counted.includes("soft-block"))
+        return "soft-block";
+    if (counted.includes("approve"))
+        return "approve";
+    return opts.hasJudge ? "need-judge" : "ask";
+}
+//# sourceMappingURL=votes.js.map

package/dist/daemon/session/approval/votes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"votes.js","sourceRoot":"","sources":["../../../../src/daemon/session/approval/votes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAG/F,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAM5E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,gBAAgB,CAAC,CAAC;AACrD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,WAAW,CAAC,CAAC;AAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAE/C,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAMD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAgC,EAAE,IAAsB;IACnF,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,YAAY,CAAC;IACxD,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,YAAY,CAAC;IACxD,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9C,CAAC"}

package/dist/daemon/session/compact-env.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Compact env is an EnvCapability, not a bag of names.
+ *
+ * Five keys (`writing-capabilities.md`, `environments.md` §CAPABILITY):
+ * configuration, resources, prelude, symbols, deps. Symbols are the membrane
+ * crossing (honest codecs). Prelude is Scheme bootstrap that PERSISTS into the
+ * strategy eval — derived names are `(define …)` over primitives, not a second
+ * JS verb. User code may call prelude defines; it may not name a `preludeOnly`
+ * symbol (those exist only while the prelude runs).
+ *
+ * Compact is not a classify walk. `applyCompact` loads the strategy with
+ * `execState` and calls `compact` / `forced-compact` as host functions,
+ * passing `Transcript` instances as arguments. Occupancy primitives are
+ * `tokens/used` and `tokens/total`; remaining and relative live in the prelude.
+ * `user-rounds/count` is a primitive (prompt nonempty). `message/ack` is a
+ * primitive so the cell is marked synthetic. `tasks/active` is a filter of
+ * `tasks/all`.
+ *
+ * Membrane: `Transcript` is `@arrival.private` — opaque `z.instance(Transcript)`.
+ * Eat cells are a union of host classes, so they cross as `z.box` (non-opaque)
+ * — `z.instance` unions throw on the first arm instead of falling through.
+ *
+ * Provenance: config-readers (`chunks`, `reason`, `kv/get`, …) are `source` —
+ * external data crossing in. Meters and slicers over a transcript ARGUMENT
+ * are `pipe` — pure transforms that mint nothing. `transcript/warm?` is the
+ * one argument-reader that stays `source`: `isWarm` reads the live clock.
+ */
+import { EnvCapability } from "@inhuman.tools/arrival";
+import { WorkDemand } from "../../models/session/index.js";
+import { Transcript, type EatCell } from "./transcript.js";
+export type CompactStrategyOpts = {
+    readonly reason?: string;
+    readonly focus?: string;
+    readonly kv?: Readonly<Record<string, string>>;
+    readonly memory?: string | null;
+    readonly tape?: readonly WorkDemand[];
+    readonly tasks?: ReadonlyArray<readonly [string, string]>;
+    readonly plan?: string | null;
+    readonly forced?: boolean;
+};
+export type CompactFailure = {
+    readonly ok: false;
+    readonly reason: "empty-card" | "did-not-shrink";
+};
+export type CompactSuccess = {
+    readonly ok: true;
+    readonly card: EatCell[];
+};
+export type CompactApplyResult = CompactSuccess | CompactFailure;
+export declare const compactReducerCapability: EnvCapability<{
+    [x: string]: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
+}, Record<string, never>>;
+/**
+ * Load the strategy with `execState`, then call `compact` / `forced-compact`
+ * as host functions with the fold transcripts as arguments. Empty or
+ * non-shrinking cards are typed failures — the kernel's "failed to compact"
+ * path is the caller's.
+ */
+export declare function applyCompact(program: string, compactTranscript: Transcript, fullTranscript: Transcript, opts?: CompactStrategyOpts): Promise<CompactApplyResult>;
+//# sourceMappingURL=compact-env.d.ts.map

package/dist/daemon/session/compact-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compact-env.d.ts","sourceRoot":"","sources":["../../../src/daemon/session/compact-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EACL,aAAa,EAOd,MAAM,wBAAwB,CAAC;AAIhC,OAAO,EACL,UAAU,EAKX,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAOL,UAAU,EAEV,KAAK,OAAO,EACb,MAAM,iBAAiB,CAAC;AAWzB,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,gBAAgB,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAAG,cAAc,CAAC;AAajE,eAAO,MAAM,wBAAwB;;yBAsPnC,CAAC;AAEH;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,UAAU,EAC7B,cAAc,EAAE,UAAU,EAC1B,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAwB7B"}