@jini-ai/cms 0.1.0

package/dist/media/types.d.ts

@@ -0,0 +1,150 @@
+/**
+ * @file Domain types + typed errors for the `media` library.
+ *
+ * Purpose:
+ * `MediaRecord` is the editorial half of a media asset; `AssetBlobRecord` and
+ * `AssetRenditionRecord` are the two core-owned operational sidecars the
+ * original design specifies.
+ *
+ * SCOPE NOTE (disclosed, not a silent deviation): the original design describes media as a
+ * seeded `entries` content-type entry — editorial fields live under
+ * `bodyJson.$.source`/`fields.ext.media.*` on a generic entry row, with
+ * revisions/taxonomy/`entry_refs` for free. That generic `entries` model does
+ * not exist as running code in the host that first built this yet (it is
+ * accepted design only; `post` itself is still a bespoke first-class table,
+ * not a generic entry). `MediaRecord` below is therefore built the same way a
+ * bespoke `post`-style record is built: a bespoke record with its editorial
+ * fields inlined directly. When a generic entries system ships, `media`
+ * should migrate onto it the same way `post` eventually will — this file is
+ * not a competing permanent design, it is that pattern applied to media.
+ *
+ * The two sidecars (`AssetBlobRecord`, `AssetRenditionRecord`) ARE built as
+ * the original design describes — they were always meant to be core-owned tables
+ * independent of the entries model, so no scope adjustment was needed there.
+ */
+import type { ISODateTime, UUID } from "../core/ports.js";
+/** Deletion ladder status (mirrored from `navigation`'s menu ladder). */
+export type MediaStatus = "active" | "trashed";
+/**
+ * Write-once source binding — the edge from a media record to its bytes.
+ * "Settable-once-from-absent" (absent -> set exactly once, then
+ * immutable). In this bespoke-table build every `MediaRecord` gets its
+ * `source` set at creation time by `uploadMedia` (never a row without bytes),
+ * so in practice the absent state is transient/internal
+ * to `uploadMedia`, not something the write-once guard needs to police at the
+ * repo/API boundary. The guard exists anyway (`assertSourceUnchanged` in
+ * `media-service.ts`) as the enforced invariant for any future write path.
+ */
+export interface MediaSource {
+    sha256: string;
+}
+export interface MediaRecord {
+    id: UUID;
+    workspaceId: UUID;
+    title: string;
+    alt: string;
+    caption: string;
+    credit: string;
+    /** Write-once (see {@link MediaSource} doc). Always set by the time a row exists. */
+    source: MediaSource;
+    status: MediaStatus;
+    createdAt: ISODateTime;
+    updatedAt: ISODateTime;
+    version: number;
+    /**
+     * Quick-and-dirty public-render sizing fields (owner-directed skip-the-ADR fix — "should we have
+     * more lines on the upload/edit media page for css tags and height and width?"). An operator-set
+     * per-asset override the public site's renderer threads onto the `<img>` tag so an inserted image
+     * stops rendering at full native pixel width with nothing constraining it. `null` means "not set"
+     * — a host renderer must omit the corresponding attribute entirely rather than emit `width="null"`
+     * or coerce to `0`. Always present (never `undefined`) so every existing `MediaRecord` construction
+     * site is forced to make an explicit choice; `uploadMedia` defaults all three to `null`.
+     */
+    width: number | null;
+    height: number | null;
+    cssClass: string | null;
+}
+/**
+ * Blob-GC lifecycle status (INV-1's two-phase journaled protocol,
+ * implemented in `blob-gc.ts`). `active` — has at least one live reference as
+ * of the last check (or has never been checked). `tombstoned` — the
+ * tombstone-pass found it unreferenced and is waiting out `gc_grace` before
+ * the delete-pass may remove the row; a dedup upload observing `tombstoned`
+ * resurrects it back to `active` in the same locked section instead of
+ * writing a duplicate blob.
+ */
+export type AssetBlobStatus = "active" | "tombstoned";
+/**
+ * `asset_blobs` sidecar: physical bytes metadata. Identity is
+ * `(workspaceId, sha256)` — dedup is per-workspace, no cross-tenant byte
+ * sharing.
+ */
+export interface AssetBlobRecord {
+    id: UUID;
+    workspaceId: UUID;
+    sha256: string;
+    storageKey: string;
+    /** Required attribution (machine writes still stamp a principal). */
+    createdByPrincipal: string;
+    createdAt: ISODateTime;
+    /** See {@link AssetBlobStatus}. Always `"active"` for a freshly written blob. */
+    status: AssetBlobStatus;
+    /** Set only while `status === "tombstoned"`; cleared (undefined) on resurrect. */
+    tombstonedAt?: ISODateTime | undefined;
+}
+/**
+ * `blob_gc_journal` sidecar (INV-1's two-phase protocol,
+ * `blob-gc.ts`): written by the delete-pass in the same locked step as the
+ * `asset_blobs` row deletion, drained by the unlink-pass. This is what makes
+ * the unlink crash-safe/retriable instead of "delete row, hope the unlink
+ * happens" — a journal entry surviving between the two passes is the seam a
+ * crash-recovery sweep would resume from. (This build's journal is an
+ * in-memory table like every other `media` repo in this pass — it does not
+ * survive a process restart; see `repo.memory.ts` file header for the
+ * standing disclosed precedent.)
+ */
+export interface BlobGcJournalEntry {
+    id: UUID;
+    workspaceId: UUID;
+    sha256: string;
+    storageKey: string;
+    journaledAt: ISODateTime;
+}
+/**
+ * `asset_renditions` sidecar: derived variants. This build has no
+ * real transform pipeline (deferred — see `media-service.ts` file header); the
+ * only rendition ever created is the trivial "original" passthrough written by
+ * `uploadMedia`.
+ */
+export interface AssetRenditionRecord {
+    id: UUID;
+    workspaceId: UUID;
+    assetId: UUID;
+    transformName: string;
+    version: number;
+    storageKey: string;
+    createdAt: ISODateTime;
+}
+export declare class MediaNotFoundError extends Error {
+}
+export declare class MediaValidationError extends Error {
+}
+export declare class MediaConflictError extends Error {
+}
+/**
+ * The write-once source guard rejected an attempt to change an
+ * already-set `source.sha256` ("settable-once-from-absent").
+ */
+export declare class MediaSourceImmutableError extends MediaValidationError {
+}
+/**
+ * The 409-style purge rejection (deletion ladder, mirrors
+ * `MenuLocationBoundError`). `referencing` is a human-readable stand-in list —
+ * see `media-service.ts` file header for the disclosed simplification (no real
+ * `entry_refs` where-used index exists yet).
+ */
+export declare class MediaStillReferencedError extends MediaConflictError {
+    readonly referencing: readonly string[];
+    constructor(message: string, referencing: readonly string[]);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/media/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/media/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE1D,yEAAyE;AACzE,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE/C;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,IAAI,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,qFAAqF;IACrF,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;;OAQG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,YAAY,CAAC;AAEtD;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,IAAI,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,WAAW,CAAC;IACvB,iFAAiF;IACjF,MAAM,EAAE,eAAe,CAAC;IACxB,kFAAkF;IAClF,YAAY,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACxC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,IAAI,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,IAAI,CAAC;IAClB,OAAO,EAAE,IAAI,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,WAAW,CAAC;CACxB;AAED,qBAAa,kBAAmB,SAAQ,KAAK;CAAG;AAChD,qBAAa,oBAAqB,SAAQ,KAAK;CAAG;AAClD,qBAAa,kBAAmB,SAAQ,KAAK;CAAG;AAEhD;;;GAGG;AACH,qBAAa,yBAA0B,SAAQ,oBAAoB;CAAG;AAEtE;;;;;GAKG;AACH,qBAAa,yBAA0B,SAAQ,kBAAkB;IAC/D,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;gBAE5B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,MAAM,EAAE;CAI5D"}

package/dist/media/types.js

@@ -0,0 +1,26 @@
+export class MediaNotFoundError extends Error {
+}
+export class MediaValidationError extends Error {
+}
+export class MediaConflictError extends Error {
+}
+/**
+ * The write-once source guard rejected an attempt to change an
+ * already-set `source.sha256` ("settable-once-from-absent").
+ */
+export class MediaSourceImmutableError extends MediaValidationError {
+}
+/**
+ * The 409-style purge rejection (deletion ladder, mirrors
+ * `MenuLocationBoundError`). `referencing` is a human-readable stand-in list —
+ * see `media-service.ts` file header for the disclosed simplification (no real
+ * `entry_refs` where-used index exists yet).
+ */
+export class MediaStillReferencedError extends MediaConflictError {
+    referencing;
+    constructor(message, referencing) {
+        super(message);
+        this.referencing = referencing;
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/media/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/media/types.ts"],"names":[],"mappings":"AAuIA,MAAM,OAAO,kBAAmB,SAAQ,KAAK;CAAG;AAChD,MAAM,OAAO,oBAAqB,SAAQ,KAAK;CAAG;AAClD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;CAAG;AAEhD;;;GAGG;AACH,MAAM,OAAO,yBAA0B,SAAQ,oBAAoB;CAAG;AAEtE;;;;;GAKG;AACH,MAAM,OAAO,yBAA0B,SAAQ,kBAAkB;IACtD,WAAW,CAAoB;IAExC,YAAY,OAAe,EAAE,WAA8B;QACzD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF"}

package/dist/navigation/agent-tools.d.ts

@@ -0,0 +1,90 @@
+/**
+ * @file The Navigation (Menus) agent-tool catalog — this domain's instance of the
+ * per-domain `agent-tools.ts` convention `forms/agent-tools.ts` and `identity/agent-tools.ts`
+ * already use.
+ *
+ * Purpose:
+ * A static, in-process catalog describing every agent-callable tool this domain exposes and the
+ * permission each carries. Every entry maps 1:1 onto a real exported function of
+ * `navigation/menu-service.ts` (plus two pure reads over `MenuRepoPort`) — this catalog never names
+ * an operation the domain cannot perform.
+ *
+ * Precedent already in this library: `navigation/contracts.ts` declares `NAVIGATION_AI_TOOLS` — a
+ * design-note list of an intended future AI tool surface (`navigation.search`/`.get`/`.where_used`/
+ * `.update`/`.assign`) for a DIFFERENT, not-yet-built delivery mechanism (a "change-set review
+ * layer" HITL gateway; the list itself is unused anywhere in this build today). Two of its five
+ * names do not correspond to any real, callable capability in this build: `navigation.search` has
+ * no implementation beyond `MenuRepoPort.list` (folded into `menus_list_menus` below — there is no
+ * separate text-search capability, matching how `identity_user_list`/`identity_role_list` are
+ * likewise this library's "search" for their own domains), and `navigation.where_used` has no
+ * implementation anywhere (`NavWhereUsedResult` is declared in `contracts.ts` but no function in
+ * `navigation/` computes it — `entry_refs`-backed where-used, unlike `widgets`/`media`, was never
+ * built for menus). Wrapping either literally would invent backend capability this catalog's own
+ * discipline forbids; `menus_list_menus` + `menus_get_menu` are this build's honest equivalents of
+ * "search"/"get".
+ *
+ * Deliberate absence (the point of a catalog, not an oversight):
+ * - There is NO `menus_delete_menu` (nor a separate trash-only tool). `deleteMenu` is ONE function
+ *   that performs BOTH steps of the deletion ladder, keyed off the menu's CURRENT status:
+ *   a first call trashes (safe, unconditional), but a second call against an already-trashed menu
+ *   PURGES it — a hard, irreversible delete, blocked only by a still-bound-location guard that
+ *   itself can be bypassed with `force` (gated behind the separate `admin.menus.delete.force`
+ *   permission). Unlike `widgets`/`media` (which expose trash and purge as two SEPARATE domain
+ *   functions, letting a catalog safely wire trash alone), navigation has no decomposed trash-only
+ *   entrypoint to call — the very same tool call, made twice, silently escalates from a reversible
+ *   soft-delete into a permanent one. That is exactly the shape of risk `identity/agent-tools.ts`
+ *   excludes `resetUserPassword` for: a single lever whose second pull does something categorically
+ *   more dangerous than its first, reachable by an agent re-invoking a tool it already called once
+ *   (e.g. after losing track of a prior call, or via prompt injection through ordinary operator
+ *   content). Left human-UI-only.
+ *
+ * How it relates to the project:
+ * A host's own tool-registration layer maps these entries into `ToolRegistration`s (see
+ * `tool-registrations.ts`). Unlike Forms/Identity/Widgets, `menu-service.ts`'s functions perform NO
+ * internal `authorize()` call of their own (confirmed: `CreateMenuDeps`/`UpdateMenuTreeDeps`/
+ * `AssignLocationDeps` carry no `authorize` field) — every admin HTTP route a host builds is expected
+ * to check `deps.authorize(...)` inline, before calling the service function (mirrors `media`'s
+ * identical gap, see `media/agent-tools.ts`'s header). `tool-registrations.ts` therefore performs
+ * that SAME inline `authorize()` call itself (the identical permission string and `entityType:
+ * "menu"` the HTTP route uses) rather than relying on a domain-layer gate that does not exist for
+ * this library.
+ *
+ * Architectural role:
+ * `navigation` domain declaration. Imports only `VALID_TARGET_KINDS`-equivalent constants are not
+ * exported from `menu-service.ts` as public data (the target-kind allowlist is enforced, not
+ * published, there), so the target schema below is hand-authored against `types.ts`'s `NavTarget`
+ * union and cross-checked by this catalog's own contract test rather than imported.
+ */
+export type AgentToolSideEffect = "none" | "mutates-durable-state" | "mints-token";
+export type AgentToolActorClassRule = "confirmer-must-equal-own-delegatedBy" | "user-only" | "none";
+export interface AgentToolDefinition {
+    name: string;
+    description: string;
+    sideEffects: AgentToolSideEffect;
+    authorization: {
+        permission: string;
+    };
+    actorClassRule?: AgentToolActorClassRule;
+    /**
+     * JSON Schema for this tool's `input`, published to the model via `ToolDescriptor.inputSchema`
+     * (a host's own tool-registration layer, which refuses to wire any tool lacking one).
+     *
+     * Deliberately not widened to `| undefined` (unlike most optional fields in this port) — this
+     * type flows into `core/tools/registration-kit.ts`'s `WirableToolDefinition`, which declares both
+     * this field and `actorClassRule` below without `| undefined`. Widening only this catalog's copy
+     * would make it structurally incompatible with that shared interface under
+     * `exactOptionalPropertyTypes`, which is exactly what identity's own `agent-tools.ts` avoids for
+     * the same reason.
+     */
+    inputSchema?: Readonly<Record<string, unknown>>;
+}
+/**
+ * The Navigation domain's fixed agent-tool catalog — the 5 operations a host's admin HTTP surface
+ * (`server/routes/admin/menus/*.ts`) exposes that are safe to wrap, out of its 6 total (see file
+ * header for why `delete` is the one exclusion).
+ *
+ * Ordered read-first, matching `identity/agent-tools.ts`'s convention: a model needs a `menuId`
+ * before it can update or assign one, and `menus_list_menus` is how it learns one for an existing menu.
+ */
+export declare const menusAgentToolCatalog: AgentToolDefinition[];
+//# sourceMappingURL=agent-tools.d.ts.map

package/dist/navigation/agent-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tools.d.ts","sourceRoot":"","sources":["../../src/navigation/agent-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AAEH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,uBAAuB,GAAG,aAAa,CAAC;AAEnF,MAAM,MAAM,uBAAuB,GAAG,sCAAsC,GAAG,WAAW,GAAG,MAAM,CAAC;AAEpG,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,mBAAmB,CAAC;IACjC,aAAa,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,cAAc,CAAC,EAAE,uBAAuB,CAAC;IACzC;;;;;;;;;;OAUG;IACH,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACjD;AAqFD;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAE,mBAAmB,EAkFtD,CAAC"}

package/dist/navigation/agent-tools.js

@@ -0,0 +1,225 @@
+/**
+ * @file The Navigation (Menus) agent-tool catalog — this domain's instance of the
+ * per-domain `agent-tools.ts` convention `forms/agent-tools.ts` and `identity/agent-tools.ts`
+ * already use.
+ *
+ * Purpose:
+ * A static, in-process catalog describing every agent-callable tool this domain exposes and the
+ * permission each carries. Every entry maps 1:1 onto a real exported function of
+ * `navigation/menu-service.ts` (plus two pure reads over `MenuRepoPort`) — this catalog never names
+ * an operation the domain cannot perform.
+ *
+ * Precedent already in this library: `navigation/contracts.ts` declares `NAVIGATION_AI_TOOLS` — a
+ * design-note list of an intended future AI tool surface (`navigation.search`/`.get`/`.where_used`/
+ * `.update`/`.assign`) for a DIFFERENT, not-yet-built delivery mechanism (a "change-set review
+ * layer" HITL gateway; the list itself is unused anywhere in this build today). Two of its five
+ * names do not correspond to any real, callable capability in this build: `navigation.search` has
+ * no implementation beyond `MenuRepoPort.list` (folded into `menus_list_menus` below — there is no
+ * separate text-search capability, matching how `identity_user_list`/`identity_role_list` are
+ * likewise this library's "search" for their own domains), and `navigation.where_used` has no
+ * implementation anywhere (`NavWhereUsedResult` is declared in `contracts.ts` but no function in
+ * `navigation/` computes it — `entry_refs`-backed where-used, unlike `widgets`/`media`, was never
+ * built for menus). Wrapping either literally would invent backend capability this catalog's own
+ * discipline forbids; `menus_list_menus` + `menus_get_menu` are this build's honest equivalents of
+ * "search"/"get".
+ *
+ * Deliberate absence (the point of a catalog, not an oversight):
+ * - There is NO `menus_delete_menu` (nor a separate trash-only tool). `deleteMenu` is ONE function
+ *   that performs BOTH steps of the deletion ladder, keyed off the menu's CURRENT status:
+ *   a first call trashes (safe, unconditional), but a second call against an already-trashed menu
+ *   PURGES it — a hard, irreversible delete, blocked only by a still-bound-location guard that
+ *   itself can be bypassed with `force` (gated behind the separate `admin.menus.delete.force`
+ *   permission). Unlike `widgets`/`media` (which expose trash and purge as two SEPARATE domain
+ *   functions, letting a catalog safely wire trash alone), navigation has no decomposed trash-only
+ *   entrypoint to call — the very same tool call, made twice, silently escalates from a reversible
+ *   soft-delete into a permanent one. That is exactly the shape of risk `identity/agent-tools.ts`
+ *   excludes `resetUserPassword` for: a single lever whose second pull does something categorically
+ *   more dangerous than its first, reachable by an agent re-invoking a tool it already called once
+ *   (e.g. after losing track of a prior call, or via prompt injection through ordinary operator
+ *   content). Left human-UI-only.
+ *
+ * How it relates to the project:
+ * A host's own tool-registration layer maps these entries into `ToolRegistration`s (see
+ * `tool-registrations.ts`). Unlike Forms/Identity/Widgets, `menu-service.ts`'s functions perform NO
+ * internal `authorize()` call of their own (confirmed: `CreateMenuDeps`/`UpdateMenuTreeDeps`/
+ * `AssignLocationDeps` carry no `authorize` field) — every admin HTTP route a host builds is expected
+ * to check `deps.authorize(...)` inline, before calling the service function (mirrors `media`'s
+ * identical gap, see `media/agent-tools.ts`'s header). `tool-registrations.ts` therefore performs
+ * that SAME inline `authorize()` call itself (the identical permission string and `entityType:
+ * "menu"` the HTTP route uses) rather than relying on a domain-layer gate that does not exist for
+ * this library.
+ *
+ * Architectural role:
+ * `navigation` domain declaration. Imports only `VALID_TARGET_KINDS`-equivalent constants are not
+ * exported from `menu-service.ts` as public data (the target-kind allowlist is enforced, not
+ * published, there), so the target schema below is hand-authored against `types.ts`'s `NavTarget`
+ * union and cross-checked by this catalog's own contract test rather than imported.
+ */
+const MENU_ID_SCHEMA = {
+    type: "string",
+    description: "The menu's id, as returned by menus_list_menus, menus_get_menu, or menus_create_menu.",
+};
+/**
+ * A link target, published as a `oneOf` over the 4 v1 kinds `menu-service.ts`'s `validateTarget`
+ * accepts (`entryRef`/`termRef`/`url`/`route`) — `dynamicQuery`/`content` are named-but-rejected
+ * reserved seams and are deliberately absent from this enum so the model is never
+ * invited to try them.
+ */
+const NAV_TARGET_SCHEMA = {
+    description: "The item's link target — exactly one of the 4 supported kinds below.",
+    oneOf: [
+        {
+            type: "object",
+            additionalProperties: false,
+            required: ["kind", "entryId"],
+            properties: { kind: { const: "entryRef" }, entryId: { type: "string", description: "Target entry id (e.g. a page or post)." } },
+        },
+        {
+            type: "object",
+            additionalProperties: false,
+            required: ["kind", "termId", "taxonomy"],
+            properties: {
+                kind: { const: "termRef" },
+                termId: { type: "string", description: "Target taxonomy term id." },
+                taxonomy: { type: "string", description: "The taxonomy the term belongs to." },
+            },
+        },
+        {
+            type: "object",
+            additionalProperties: false,
+            required: ["kind", "href"],
+            properties: {
+                kind: { const: "url" },
+                href: { type: "string", description: "An absolute or site-relative URL. 'javascript:', 'data:', and 'vbscript:' schemes are rejected." },
+            },
+        },
+        {
+            type: "object",
+            additionalProperties: false,
+            required: ["kind", "route"],
+            properties: {
+                kind: { const: "route" },
+                route: { type: "string", description: "A named core route (e.g. 'home', 'search')." },
+                params: { type: "object", description: "Optional static params passed to the route resolver." },
+            },
+        },
+    ],
+};
+/**
+ * One node of a menu's item tree, published as a `$ref`-recursive JSON Schema (`$defs.navItem`) —
+ * the tree nests via `children`, so this is the one catalog schema in this task that is genuinely
+ * recursive. Enforcement of depth/count/id-uniqueness bounds happens server-side in
+ * `validateAndCloneTree`, not by this published schema; the schema documents the accepted shape,
+ * the domain function is still the authority.
+ */
+const NAV_ITEM_NODE_SCHEMA = {
+    type: "object",
+    additionalProperties: false,
+    required: ["id", "target"],
+    properties: {
+        id: { type: "string", minLength: 1, description: "Stable id, minted once and preserved across edits. Required and unique within the whole tree." },
+        label: { type: "string", description: "Display label. Omit to fall back to an empty string (target-title fallback is not implemented)." },
+        target: NAV_TARGET_SCHEMA,
+        attrs: {
+            type: "object",
+            description: "Optional presentational attributes: openInNewTab (boolean), rel (string), cssClass (string), description (string), icon (string).",
+        },
+        children: { type: "array", items: { $ref: "#/$defs/navItem" }, description: "Nested child items. Max nesting depth 5 (root = depth 1); max 500 total items across the whole tree." },
+    },
+};
+/** The `items` property shared by create and update — the complete tree, per node above. */
+const ITEMS_TREE_SCHEMA = {
+    type: "array",
+    items: { $ref: "#/$defs/navItem" },
+    description: "The COMPLETE item tree (whole-document replace — there is no per-item patch operation). Every node's id must be unique within the tree.",
+    $defs: { navItem: NAV_ITEM_NODE_SCHEMA },
+};
+/**
+ * The Navigation domain's fixed agent-tool catalog — the 5 operations a host's admin HTTP surface
+ * (`server/routes/admin/menus/*.ts`) exposes that are safe to wrap, out of its 6 total (see file
+ * header for why `delete` is the one exclusion).
+ *
+ * Ordered read-first, matching `identity/agent-tools.ts`'s convention: a model needs a `menuId`
+ * before it can update or assign one, and `menus_list_menus` is how it learns one for an existing menu.
+ */
+export const menusAgentToolCatalog = [
+    {
+        name: "menus_list_menus",
+        description: "Lists every menu in the workspace (id, slug, title, status, item tree, locations, version). Read-only.",
+        sideEffects: "none",
+        authorization: { permission: "admin.menus.read" },
+        inputSchema: {
+            type: "object",
+            additionalProperties: false,
+            required: [],
+            properties: {},
+        },
+    },
+    {
+        name: "menus_get_menu",
+        description: "Reads one menu by id, including its full item tree and current version.",
+        sideEffects: "none",
+        authorization: { permission: "admin.menus.read" },
+        inputSchema: {
+            type: "object",
+            additionalProperties: false,
+            required: ["menuId"],
+            properties: { menuId: MENU_ID_SCHEMA },
+        },
+    },
+    {
+        name: "menus_create_menu",
+        description: "Creates a new menu in 'draft' status with no location assigned yet — it has no effect on the live site until " +
+            "menus_assign_location binds it somewhere. Rejects a duplicate slug within the workspace.",
+        sideEffects: "mutates-durable-state",
+        authorization: { permission: "admin.menus.create" },
+        inputSchema: {
+            type: "object",
+            additionalProperties: false,
+            required: ["title", "slug"],
+            properties: {
+                title: { type: "string", minLength: 1, description: "Human-readable menu name." },
+                slug: { type: "string", pattern: "^[a-z0-9-]+$", description: "Stable machine handle. Lowercase letters, digits, and hyphens only." },
+                items: { ...ITEMS_TREE_SCHEMA, description: "Optional initial item tree. Defaults to an empty menu if omitted." },
+            },
+        },
+    },
+    {
+        name: "menus_update_menu_tree",
+        description: "Replaces an existing menu's whole item tree (and optionally its title/slug) in one version-guarded write. " +
+            "Always a whole-tree replace — there is no per-item patch operation, so the submitted tree must include every " +
+            "item the menu keeps.",
+        sideEffects: "mutates-durable-state",
+        authorization: { permission: "admin.menus.update" },
+        inputSchema: {
+            type: "object",
+            additionalProperties: false,
+            required: ["menuId", "expectedVersion", "items"],
+            properties: {
+                menuId: MENU_ID_SCHEMA,
+                expectedVersion: { type: "integer", description: "The menu's current 'version', as last returned by a read or write on it — the optimistic-concurrency guard. A stale value is rejected with a conflict naming the current version." },
+                title: { type: "string", description: "New title. Omit to leave unchanged." },
+                slug: { type: "string", pattern: "^[a-z0-9-]+$", description: "New slug. Omit to leave unchanged. Must not collide with another menu's slug." },
+                items: ITEMS_TREE_SCHEMA,
+            },
+        },
+    },
+    {
+        name: "menus_assign_location",
+        description: "Assigns a menu to a theme location, making it appear on the live site at that location. If the location was " +
+            "already bound to a DIFFERENT menu, that menu is displaced (last-writer-wins) — its own 'locations' field loses " +
+            "the key, returned as displacedMenu so the caller can see what changed.",
+        sideEffects: "mutates-durable-state",
+        authorization: { permission: "admin.menus.assign" },
+        inputSchema: {
+            type: "object",
+            additionalProperties: false,
+            required: ["menuId", "locationKey"],
+            properties: {
+                menuId: MENU_ID_SCHEMA,
+                locationKey: { type: "string", minLength: 1, description: "A theme-registered location key (e.g. 'primary', 'footer', 'social'). An unregistered key is still accepted (assignments survive a theme switch)." },
+            },
+        },
+    },
+];
+//# sourceMappingURL=agent-tools.js.map

package/dist/navigation/agent-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tools.js","sourceRoot":"","sources":["../../src/navigation/agent-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AA0BH,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,uFAAuF;CAC5F,CAAC;AAEX;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG;IACxB,WAAW,EAAE,sEAAsE;IACnF,KAAK,EAAE;QACL;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;YAC7B,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wCAAwC,EAAE,EAAE;SAChI;QACD;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC;YACxC,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;gBAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE;gBACnE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mCAAmC,EAAE;aAC/E;SACF;QACD;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;YAC1B,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;gBACtB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iGAAiG,EAAE;aACzI;SACF;QACD;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;YAC3B,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;gBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6CAA6C,EAAE;gBACrF,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sDAAsD,EAAE;aAChG;SACF;KACF;CACO,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,oBAAoB,GAAG;IAC3B,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC;IAC1B,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,+FAA+F,EAAE;QAClJ,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iGAAiG,EAAE;QACzI,MAAM,EAAE,iBAAiB;QACzB,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,mIAAmI;SACjJ;QACD,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,WAAW,EAAE,sGAAsG,EAAE;KACrL;CACO,CAAC;AAEX,4FAA4F;AAC5F,MAAM,iBAAiB,GAAG;IACxB,IAAI,EAAE,OAAO;IACb,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAClC,WAAW,EAAE,yIAAyI;IACtJ,KAAK,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE;CAChC,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA0B;IAC1D;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,wGAAwG;QACrH,WAAW,EAAE,MAAM;QACnB,aAAa,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;QACjD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,EAAE;SACf;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,yEAAyE;QACtF,WAAW,EAAE,MAAM;QACnB,aAAa,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;QACjD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,QAAQ,CAAC;YACpB,UAAU,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE;SACvC;KACF;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,+GAA+G;YAC/G,0FAA0F;QAC5F,WAAW,EAAE,uBAAuB;QACpC,aAAa,EAAE,EAAE,UAAU,EAAE,oBAAoB,EAAE;QACnD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;YAC3B,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE;gBACjF,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,qEAAqE,EAAE;gBACrI,KAAK,EAAE,EAAE,GAAG,iBAAiB,EAAE,WAAW,EAAE,mEAAmE,EAAE;aAClH;SACF;KACF;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,4GAA4G;YAC5G,+GAA+G;YAC/G,sBAAsB;QACxB,WAAW,EAAE,uBAAuB;QACpC,aAAa,EAAE,EAAE,UAAU,EAAE,oBAAoB,EAAE;QACnD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,OAAO,CAAC;YAChD,UAAU,EAAE;gBACV,MAAM,EAAE,cAAc;gBACtB,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mLAAmL,EAAE;gBACtO,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;gBAC7E,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,+EAA+E,EAAE;gBAC/I,KAAK,EAAE,iBAAiB;aACzB;SACF;KACF;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EACT,8GAA8G;YAC9G,iHAAiH;YACjH,wEAAwE;QAC1E,WAAW,EAAE,uBAAuB;QACpC,aAAa,EAAE,EAAE,UAAU,EAAE,oBAAoB,EAAE;QACnD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC;YACnC,UAAU,EAAE;gBACV,MAAM,EAAE,cAAc;gBACtB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,mJAAmJ,EAAE;aAChN;SACF;KACF;CACF,CAAC"}

package/dist/navigation/contracts.d.ts

@@ -0,0 +1,98 @@
+/**
+ * @file Command inputs, permission catalog, events, and hook points for the
+ * `navigation` library.
+ *
+ * All mutation runs through the command gateway (`core/commands`) so
+ * menus inherit the single write chokepoint, same-transaction revisions,
+ * `pluginId`/actor attribution, and revert — no bespoke write path. These are
+ * the typed shapes those commands take; the handler bodies live in
+ * `navigation/menu-service.ts` (not in this interface-only slice).
+ *
+ * INTERFACES + DATA CATALOGS ONLY. No feature logic.
+ */
+import type { UUID } from "../core/ports.js";
+import type { NavItemNode, NavLocationKey, NavMenuEntry } from "./types.js";
+/**
+ * The `admin.menus.*` permission strings (renamed
+ * from the flat `navigation.manage` to the frozen `admin.<section>.<action>`
+ * convention, and split by action so force-purge no longer shares a
+ * permission with ordinary edits). `assign` is split from `update` because
+ * changing where a menu appears on the live site is higher-trust than
+ * editing an item label (mirrors the media library's `media.delete.force` /
+ * `media.upload_svg` splits); `delete.force` is split from `delete` for the
+ * same reason. The legacy `navigation.manage` string
+ * stays registered (deprecated, not deleted) in the host's identity permission
+ * registry until the Point of No Return — it
+ * is not part of this catalog. See `docs/decisions/permission-catalog-migration.md`
+ * for the migration's completion criteria.
+ */
+export declare const NAVIGATION_PERMISSIONS: readonly ["admin.menus.read", "admin.menus.create", "admin.menus.update", "admin.menus.delete", "admin.menus.delete.force", "admin.menus.assign", "admin.menus.manage"];
+export type NavigationPermission = (typeof NAVIGATION_PERMISSIONS)[number];
+export interface CreateMenuInput {
+    readonly workspaceId: UUID;
+    readonly title: string;
+    readonly slug: string;
+    /** Optional initial tree; defaults to an empty menu. */
+    readonly items?: readonly NavItemNode[] | undefined;
+}
+export interface UpdateMenuInput {
+    readonly workspaceId: UUID;
+    readonly id: UUID;
+    readonly title: string;
+    readonly slug: string;
+    /**
+     * The full replacement tree. Menus are edited whole → whole-menu revisions +
+     * clean optimistic-concurrency on the entry `version` (a point in favor of the
+     * entry-native model). Item ids must be preserved for
+     * items that survive the edit (id-stability validation).
+     */
+    readonly items: readonly NavItemNode[];
+}
+export interface AssignLocationInput {
+    readonly workspaceId: UUID;
+    readonly menuId: UUID;
+    readonly locationKey: NavLocationKey;
+}
+export interface UnassignLocationInput {
+    readonly workspaceId: UUID;
+    readonly locationKey: NavLocationKey;
+}
+export interface DeleteMenuInput {
+    readonly workspaceId: UUID;
+    readonly id: UUID;
+    /** Force-purge past the 409 dangling-reference guard (needs `delete.force`). */
+    readonly force?: boolean | undefined;
+}
+/** Stable event names emitted on the outbox for async consumers. */
+export declare const NAVIGATION_EVENTS: readonly ["navigation.menu.created", "navigation.menu.updated", "navigation.menu.deleted", "navigation.location.assigned", "navigation.location.unassigned"];
+export type NavigationEventName = (typeof NAVIGATION_EVENTS)[number];
+export interface NavMenuChangedPayload {
+    readonly menuId: UUID;
+    readonly slug: string;
+}
+export interface NavLocationChangedPayload {
+    readonly locationKey: NavLocationKey;
+    /** Menu now bound (assigned) / previously bound (unassigned). */
+    readonly menuId: UUID;
+}
+/**
+ * Typed navigation hook points. Filters transform a value in-line (events
+ * cannot); the action lets extensions register locations. Declared here so the
+ * SDK/type system can enforce "declared points only" (the anti-hook-rot rule,
+ * the platform's v2 design doc §7).
+ */
+export declare const NAVIGATION_HOOKS: readonly ["navigation.item.resolve", "navigation.tree.filter", "navigation.locations.register"];
+export type NavigationHookName = (typeof NAVIGATION_HOOKS)[number];
+/**
+ * AI tools are thin clients of the same command/read handlers admins use (no
+ * back door). Agents are delegated principals (`grant ∩ delegator`);
+ * `update`/`assign`/`delete` are HITL through the change-set review layer.
+ */
+export declare const NAVIGATION_AI_TOOLS: readonly ["navigation.search", "navigation.get", "navigation.where_used", "navigation.update", "navigation.assign"];
+export type NavigationAiTool = (typeof NAVIGATION_AI_TOOLS)[number];
+/** Result shape of `navigation.where_used` — menus referencing a target. */
+export interface NavWhereUsedResult {
+    readonly targetId: UUID;
+    readonly menus: readonly Pick<NavMenuEntry, "id" | "slug" | "title">[];
+}
+//# sourceMappingURL=contracts.d.ts.map

package/dist/navigation/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/navigation/contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EACV,WAAW,EACX,cAAc,EACd,YAAY,EACb,MAAM,YAAY,CAAC;AAMpB;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,sBAAsB,yKAQzB,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAM3E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,WAAW,EAAE,GAAG,SAAS,CAAC;CACrD;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;CACtC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;CACtC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,gFAAgF;IAChF,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACtC;AAMD,oEAAoE;AACpE,eAAO,MAAM,iBAAiB,8JAMpB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAErE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;CACvB;AAMD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,iGAOnB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAMnE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,qHAMtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;CACxE"}