@jsm-mit/sultana-agent-tools-package 0.2.0 → 0.4.0

package/README.md

@@ -1,7 +1,8 @@
 # sultana-agent-tools-package
 
-`@jsm-mit/sultana-agent-tools-package` — the tool layer that lets an LLM agent edit a Sultana
-salon by conversation: services, promos and working hours.
+`@jsm-mit/sultana-agent-tools-package` — the tool layer that lets an LLM agent work in Sultana by
+conversation: a salon owner's set (services, promos and working hours) and a customer's set
+(search, free times, booking on the customer's behalf).
 
 It is **framework-agnostic**. A tool is `{ name, description, parameters, progress, execute }`, which is what
 OpenAI, Anthropic and `@jsm-mit/chat-agent-package` all want from a function tool, so wiring this
@@ -23,6 +24,55 @@ const tools = createSalonTools({
 `salonId` is captured at construction and is **never a tool argument** — a model holding these
 tools cannot reach another salon's data whatever it sends.
 
+### Confirmations across turns
+
+A host that runs the owner set in a chat keeps one `ConfirmationLedger` per conversation and builds
+the tools again for every incoming owner message, with that message's turn:
+
+```ts
+import { ConfirmationLedger, createSalonTools, SALON_AGENT_PERSONA_PL } from "@jsm-mit/sultana-agent-tools-package";
+
+const ledger = new ConfirmationLedger();          // one per conversation, kept in memory
+
+// on every owner message — one agent turn:
+const tools = createSalonTools({ canisterId, identity, salonId, confirmations: ledger.forTurn() });
+```
+
+With `confirmations`, the two-step protocol is enforced by the tools, not only asked for by the
+persona:
+
+1. `confirmed: false` makes no canister write and returns `confirmation_required` with a
+   `summary` and an `echo` that now carries a `confirmationId` (`c-` and 8 hex digits).
+2. `confirmed: true` goes through only with that `confirmationId`, the **same arguments** (key
+   order does not matter, array order does; `confirmed`, `confirmationId` and
+   `confirmationPhrase` are not compared), from a **later turn**, within 15 minutes, and once.
+   Anything else is `status: "error"`, `code: "invalid_arguments"`, returned before the tool calls
+   the canister at all:
+
+| why | summary |
+|---|---|
+| same turn as the preview | Zgoda musi przyjść w osobnej wiadomości właścicielki — najpierw pokaż podsumowanie i poczekaj na odpowiedź. |
+| no id, unknown, used or expired | Brak ważnego podglądu tej zmiany — wywołaj narzędzie z confirmed=false i pokaż właścicielce podsumowanie. |
+| other tool or other arguments | Argumenty różnią się od pokazanego podglądu — pokaż nowy podgląd (confirmed=false). |
+
+Every write tool's schema gets a `confirmationId` parameter when a ledger is passed; without one,
+the schemas and the protocol are what they were in 0.2.0 (a model can still confirm in the same
+breath — only the persona stops it). The id is used up right before the write, not at the first
+check: a confirmation refused for a mistyped name can be sent again with the same id once the owner
+has typed it right. Two parallel calls with one id cannot both write: the second is refused right before its write.
+
+`ConfirmationLedger` takes `{ ttlMs, now, newId }` for tests; `createSalonToolsFromPort(port,
+{ confirmations })` is the same over any port. `forTurn()` returns `TurnConfirmations` —
+`issue(toolName, args)`, `check(toolName, args, id)` (the verdict, the id kept) and
+`redeem(toolName, args, id)` (the verdict, the id used up) — for a host that wants the protocol
+around tools of its own.
+
+`SALON_AGENT_PERSONA_PL` is written for this: every write first with `confirmed=false`, the
+summary shown, the owner's answer awaited in her **next** message, then `confirmed=true` with the
+`confirmationId` and the same arguments; a removal only with the name the owner typed herself; and
+with read tools only, the agent says that changes need the "Salon Assistant" page open in the
+panel.
+
 ### Read-only set
 
 An assistant that runs without the owner's identity takes the read-only set and its own persona:
@@ -79,17 +129,62 @@ never sent to the model. A write tool previewing with `confirmed: false` shows t
 `createSalonTools` returns all 21; `createSalonReadTools` returns `list_services`, `list_promos`
 and `find_service_type`.
 
+## Customer tools
+
+The second set works for ONE customer instead of one salon: it searches across all salons and
+books, lists and cancels visits **on the customer's behalf**. The host passes the customer's lent
+identity (an Internet Identity delegation) and the position the app sent; neither is ever a tool
+argument, so a model holding these tools can act for nobody else and search around nowhere else.
+
+```ts
+import { createCustomerTools, createCustomerReadTools, CUSTOMER_AGENT_PERSONA_PL } from "@jsm-mit/sultana-agent-tools-package";
+
+const tools = session
+    ? createCustomerTools({ canisterId, identity: session.identity, location: session.location, confirmations: ledger.forTurn() })
+    : createCustomerReadTools({ canisterId, location });   // no identity: search only, nothing books
+```
+
+| tool | writes | needs identity | progress |
+|---|---|---|---|
+| `find_service_type` | | | Szukam typu usługi… |
+| `search_slots` | | | Szukam wolnych terminów w okolicy… |
+| `get_salon` | | | Sprawdzam salon… |
+| `get_free_times` | | | Sprawdzam wolne godziny… |
+| `book_appointment` | yes | yes | Rezerwuję wizytę… |
+| `list_my_appointments` | | yes | Sprawdzam Twoje wizyty… |
+| `cancel_appointment` | yes | yes | Odwołuję wizytę… |
+
+- `search_slots` without `date`/`time` is the package's "as soon as possible" search (the next
+  hour, else up to 24 h ahead); with them it probes from 30 min before to 60 min after the moment.
+  Results: at most 6 salons, soonest first, each with its services and up to 6 free moments.
+- A model reads and sends local time: `date` `"YYYY-MM-DD"`, `time` `"HH:mm"`.
+  `get_free_times` folds the 5-minute start grid into ranges.
+- `book_appointment` picks the first free worker, like the app, and checks the slot on the preview
+  AND on the confirmed call — a booking the canister refuses still spends the customer's daily quota.
+- The public reads go out anonymously even with an identity; only booking, the visits and
+  cancelling are signed.
+- **The host process must run in the salons' time zone** (`TZ=Europe/Warsaw`): the canister wrapper
+  takes every offset from the process clock. While it does not, every time-dependent tool answers
+  `unavailable` instead of booking hours off (`timeZone: null` skips the guard; `hostTimeZoneProblem`
+  lets a host check at start-up).
+
 ## What the tools guarantee
 
 - **`execute` never throws.** Every call returns `{status: "ok" | "confirmation_required" | "error"}`
   so an agent can read a failure and talk about it.
 - **Confirmation is a schema field, not a prompt rule.** Called with `confirmed: false`, a write
-  tool makes no canister call and returns a sentence built from *resolved* arguments — worker names
-  and service-type labels already looked up — plus the exact arguments to send back. A persona can
-  be talked out of a rule; a required field cannot.
+  tool makes no canister write and returns a sentence built from *resolved* arguments — worker names
+  and service-type labels already looked up — plus the arguments to send back in `echo`. A persona
+  can be talked out of a rule; a required field cannot. With a `ConfirmationLedger` (above) the
+  confirmation must also come from a later turn, with the preview's id.
 - **Irreversible operations need the entity's own name** typed back in `confirmationPhrase`.
-- **A partial edit is merged.** `updateSalonService` replaces the whole record on the canister, so
-  "just change the price" would otherwise unassign the team.
+  `remove_service` and `remove_promo` leave the name OUT of `echo`, and their summary asks the
+  model to have the owner write it: a model that just sends the echo back deletes nothing.
+- **A partial edit is merged — at write time.** `updateSalonService` replaces the whole record on
+  the canister, so "just change the price" would otherwise unassign the team. The preview summary
+  shows the merged record, but `update_service`'s `echo` carries only `salonServiceId` and the
+  fields the model sent; the confirmed call reads the record again and merges then, so a change
+  made in the panel between preview and confirmation is kept.
 - **Units are fixed at the boundary**: price is whole zloty, duration is minutes rounded up to a
   multiple of 5 (the availability grid), and the tool says when it rounded.
 - **Service-type ids come from the catalogue.** `find_service_type` uses the same matcher as both
@@ -105,13 +200,16 @@ and `find_service_type`.
 | `npm run sandbox -- --fake` | talk to the tools against an in-memory salon |
 | `npm run sandbox` | the same conversation against a real canister |
 | `npm run test-tools` | the round trip against a live canister (creates its own salon) |
+| `npm run test-customer-tools` | the customer's round trip against a live, seeded canister: search, book, list, cancel (a fresh identity per run) |
 | `npm run publish-public` | publishes to npm from master — see below |
 
 ## Testing by talking
 
 `npm run sandbox -- --fake` is the loop to iterate in: a real model, real tool calls, an in-memory
 salon. Every call is printed with its arguments and its result, so a tool description that misleads
-the model shows up immediately — and a wrong answer costs no cycles and no daily action quota.
+the model shows up immediately — and a wrong answer costs no cycles and no daily action quota. The
+sandbox builds the tools again for every line you type, with a turn of one `ConfirmationLedger`,
+as a host does — so the confirmation id and the next-message rule are in play there too.
 
 Drop `--fake` to run the same conversation against a canister with the owner's identity
 (`OWNER1_PEM`). Start with `npm run whoami`: it prints the principal the PEM makes you, the salons

package/dist/confirmations.d.ts

@@ -0,0 +1,61 @@
+/**
+ * The two-step write protocol, enforced in code rather than by the persona.
+ *
+ * A write tool called with `confirmed: false` issues a confirmation id for exactly those arguments.
+ * The write itself goes through only when a LATER turn — the owner's next message — sends the same
+ * arguments back with that id. A model that previews and confirms in one breath, confirms
+ * something it never showed, or reuses an id, is refused before any canister call.
+ *
+ * The ledger lives in memory next to the conversation. A host keeps one ledger per conversation and
+ * calls `forTurn()` once per incoming owner message, when it builds that turn's tools.
+ */
+export declare const DEFAULT_CONFIRMATION_TTL_MS: number;
+export interface ConfirmationLedgerOptions {
+    /** How long a preview can still be confirmed. Defaults to 15 minutes. */
+    ttlMs?: number;
+    /** Milliseconds since the epoch. For tests. */
+    now?: () => number;
+    /** Confirmation id generator. For tests. */
+    newId?: () => string;
+}
+export type ConfirmationRefusal = 
+/** No `confirmationId` was sent. */
+"missing"
+/** The id was never issued, was already used, or was cleared out after expiring. */
+ | "unknown"
+/** The id comes from this very turn — the owner has not answered the preview yet. */
+ | "same_turn"
+/** The preview is older than the ledger's TTL. */
+ | "expired"
+/** The id was issued for another tool or other arguments. */
+ | "mismatch";
+export type RedeemResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: ConfirmationRefusal;
+};
+/** One turn's view of the ledger. Ids issued here can only be redeemed from a later turn. */
+export interface TurnConfirmations {
+    /** Records a preview of `toolName` with `args` and returns its id (`c-` and 8 hex digits). */
+    issue(toolName: string, args: Record<string, unknown>): string;
+    /** Whether `redeem` would succeed now — without using the id up. An expired entry is cleared. */
+    check(toolName: string, args: Record<string, unknown>, confirmationId: string | undefined): RedeemResult;
+    /** The same verdict as `check`; on success the id is used up and cannot confirm anything again. */
+    redeem(toolName: string, args: Record<string, unknown>, confirmationId: string | undefined): RedeemResult;
+}
+export declare class ConfirmationLedger {
+    private readonly ttlMs;
+    private readonly now;
+    private readonly newId;
+    private readonly pending;
+    private turn;
+    constructor(options?: ConfirmationLedgerOptions);
+    /** Starts a new turn. Call it once per incoming owner message and hand the result to that
+     * turn's tools; every call is a later turn than the one before. */
+    forTurn(): TurnConfirmations;
+    private issue;
+    private verdict;
+    private isExpired;
+}
+//# sourceMappingURL=confirmations.d.ts.map

package/dist/confirmations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmations.d.ts","sourceRoot":"","sources":["../src/confirmations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,2BAA2B,QAAiB,CAAC;AAK1D,MAAM,WAAW,yBAAyB;IACtC,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,mBAAmB;AAC3B,oCAAoC;AAClC,SAAS;AACX,oFAAoF;GAClF,SAAS;AACX,qFAAqF;GACnF,WAAW;AACb,kDAAkD;GAChD,SAAS;AACX,6DAA6D;GAC3D,UAAU,CAAC;AAEjB,MAAM,MAAM,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAErF,6FAA6F;AAC7F,MAAM,WAAW,iBAAiB;IAC9B,8FAA8F;IAC9F,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;IAC/D,iGAAiG;IACjG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,CAAC;IACzG,mGAAmG;IACnG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,CAAC;CAC7G;AASD,qBAAa,kBAAkB;IAC3B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0C;IAClE,OAAO,CAAC,IAAI,CAAK;gBAEL,OAAO,GAAE,yBAA8B;IAMnD;uEACmE;IAC5D,OAAO,IAAI,iBAAiB;IAWnC,OAAO,CAAC,KAAK;IAeb,OAAO,CAAC,OAAO;IA6Bf,OAAO,CAAC,SAAS;CAGpB"}

package/dist/confirmations.js

@@ -0,0 +1,100 @@
+/**
+ * The two-step write protocol, enforced in code rather than by the persona.
+ *
+ * A write tool called with `confirmed: false` issues a confirmation id for exactly those arguments.
+ * The write itself goes through only when a LATER turn — the owner's next message — sends the same
+ * arguments back with that id. A model that previews and confirms in one breath, confirms
+ * something it never showed, or reuses an id, is refused before any canister call.
+ *
+ * The ledger lives in memory next to the conversation. A host keeps one ledger per conversation and
+ * calls `forTurn()` once per incoming owner message, when it builds that turn's tools.
+ */
+export const DEFAULT_CONFIRMATION_TTL_MS = 15 * 60 * 1000;
+/** Argument keys that carry the protocol, not the change — never part of what is compared. */
+const PROTOCOL_KEYS = new Set(["confirmed", "confirmationId", "confirmationPhrase"]);
+export class ConfirmationLedger {
+    ttlMs;
+    now;
+    newId;
+    pending = new Map();
+    turn = 0;
+    constructor(options = {}) {
+        this.ttlMs = options.ttlMs ?? DEFAULT_CONFIRMATION_TTL_MS;
+        this.now = options.now ?? Date.now;
+        this.newId = options.newId ?? randomConfirmationId;
+    }
+    /** Starts a new turn. Call it once per incoming owner message and hand the result to that
+     * turn's tools; every call is a later turn than the one before. */
+    forTurn() {
+        this.turn += 1;
+        const turn = this.turn;
+        return {
+            issue: (toolName, args) => this.issue(turn, toolName, args),
+            check: (toolName, args, confirmationId) => this.verdict(turn, toolName, args, confirmationId, false),
+            redeem: (toolName, args, confirmationId) => this.verdict(turn, toolName, args, confirmationId, true),
+        };
+    }
+    issue(turn, toolName, args) {
+        // Previews nobody confirmed would otherwise pile up for the life of the conversation.
+        const now = this.now();
+        for (const [id, entry] of this.pending) {
+            if (this.isExpired(entry, now))
+                this.pending.delete(id);
+        }
+        // A 32-bit collision only replaces an older preview, whose id then fails as a mismatch —
+        // never lets a change through.
+        const id = this.newId();
+        this.pending.set(id, { toolName, argsKey: confirmationArgsKey(args), turn, issuedAt: now });
+        return id;
+    }
+    verdict(turn, toolName, args, confirmationId, redeem) {
+        const id = confirmationId?.trim();
+        if (!id)
+            return { ok: false, reason: "missing" };
+        const entry = this.pending.get(id);
+        if (!entry)
+            return { ok: false, reason: "unknown" };
+        if (this.isExpired(entry, this.now())) {
+            this.pending.delete(id);
+            return { ok: false, reason: "expired" };
+        }
+        if (entry.turn >= turn)
+            return { ok: false, reason: "same_turn" };
+        if (entry.toolName !== toolName || entry.argsKey !== confirmationArgsKey(args)) {
+            return { ok: false, reason: "mismatch" };
+        }
+        if (redeem)
+            this.pending.delete(id);
+        return { ok: true };
+    }
+    isExpired(entry, now) {
+        return now - entry.issuedAt > this.ttlMs;
+    }
+}
+/** Canonical JSON of the arguments without the protocol keys: object keys sorted at every depth,
+ * array order kept — `{b, a}` and `{a, b}` are the same change, `[1, 2]` and `[2, 1]` are not. */
+function confirmationArgsKey(args) {
+    const change = {};
+    for (const [key, value] of Object.entries(args)) {
+        if (!PROTOCOL_KEYS.has(key))
+            change[key] = value;
+    }
+    return JSON.stringify(sortKeys(change));
+}
+function sortKeys(value) {
+    if (Array.isArray(value))
+        return value.map(sortKeys);
+    if (value === null || typeof value !== "object")
+        return value;
+    const sorted = {};
+    for (const key of Object.keys(value).sort()) {
+        sorted[key] = sortKeys(value[key]);
+    }
+    return sorted;
+}
+/** `crypto.getRandomValues` exists in Node and in every browser, secure context or not. */
+function randomConfirmationId() {
+    const bytes = new Uint8Array(4);
+    globalThis.crypto.getRandomValues(bytes);
+    return `c-${Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+}

package/dist/create-salon-tools.d.ts

@@ -1,8 +1,19 @@
 import type { Identity } from "@icp-sdk/core/agent";
+import type { TurnConfirmations } from "./confirmations.js";
 import { type IcSalonCorePortOptions } from "./ic-salon-core-port.js";
 import type { SalonCorePort } from "./salon-core-port.js";
 import type { AgentTool } from "./types.js";
-export interface CreateSalonToolsOptions extends Omit<IcSalonCorePortOptions, "language" | "access"> {
+export interface CreateSalonToolsFromPortOptions {
+    /**
+     * This turn's confirmations — `ledger.forTurn()` from the conversation's `ConfirmationLedger`,
+     * taken once per incoming owner message. With it, every write tool issues a `confirmationId`
+     * on `confirmed: false` and refuses `confirmed: true` unless that id comes back, with the same
+     * arguments, from a later turn. Omit it and the tools keep the old protocol, where only the
+     * persona stops a model from confirming on its own.
+     */
+    confirmations?: TurnConfirmations;
+}
+export interface CreateSalonToolsOptions extends Omit<IcSalonCorePortOptions, "language" | "access">, CreateSalonToolsFromPortOptions {
     /** Language of service-type labels. Defaults to Polish. */
     language?: string;
 }
@@ -12,7 +23,7 @@ export interface CreateSalonToolsOptions extends Omit<IcSalonCorePortOptions, "l
  */
 export declare function createSalonTools(options: CreateSalonToolsOptions): AgentTool[];
 /** The same tool set over any port — the seam tests and the sandbox use. */
-export declare function createSalonToolsFromPort(port: SalonCorePort): AgentTool[];
+export declare function createSalonToolsFromPort(port: SalonCorePort, options?: CreateSalonToolsFromPortOptions): AgentTool[];
 export interface CreateSalonReadToolsOptions {
     canisterId: string;
     salonId: string;

package/dist/create-salon-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-salon-tools.d.ts","sourceRoot":"","sources":["../src/create-salon-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAmB,KAAK,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACvF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAI1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,WAAW,uBAAwB,SAAQ,IAAI,CAAC,sBAAsB,EAAE,UAAU,GAAG,QAAQ,CAAC;IAChG,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,SAAS,EAAE,CAG9E;AAED,4EAA4E;AAC5E,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,EAAE,CAEzE;AAED,MAAM,WAAW,2BAA2B;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,2BAA2B,GAAG,SAAS,EAAE,CAGtF;AAED;mEACmE;AACnE,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,EAAE,CAE7E"}
+{"version":3,"file":"create-salon-tools.d.ts","sourceRoot":"","sources":["../src/create-salon-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAmB,KAAK,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACvF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAI1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,WAAW,+BAA+B;IAC5C;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,iBAAiB,CAAC;CACrC;AAED,MAAM,WAAW,uBACb,SAAQ,IAAI,CAAC,sBAAsB,EAAE,UAAU,GAAG,QAAQ,CAAC,EACvD,+BAA+B;IACnC,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,SAAS,EAAE,CAK9E;AAED,4EAA4E;AAC5E,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,GAAE,+BAAoC,GAAG,SAAS,EAAE,CAQxH;AAED,MAAM,WAAW,2BAA2B;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,2BAA2B,GAAG,SAAS,EAAE,CAGtF;AAED;mEACmE;AACnE,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,EAAE,CAE7E"}

package/dist/create-salon-tools.js

@@ -7,12 +7,18 @@ import { createServiceTools, findServiceTypeTool, listServicesTool } from "./too
  * argument, so a model holding these tools cannot reach another salon's data whatever it sends.
  */
 export function createSalonTools(options) {
-    const port = new IcSalonCorePort({ ...options, language: options.language ?? "pl", access: "owner" });
-    return createSalonToolsFromPort(port);
+    const { confirmations, language, ...portOptions } = options;
+    const port = new IcSalonCorePort({ ...portOptions, language: language ?? "pl", access: "owner" });
+    return createSalonToolsFromPort(port, { confirmations });
 }
 /** The same tool set over any port — the seam tests and the sandbox use. */
-export function createSalonToolsFromPort(port) {
-    return [...createServiceTools(port), ...createScheduleTools(port), ...createPromoTools(port)];
+export function createSalonToolsFromPort(port, options = {}) {
+    const { confirmations } = options;
+    return [
+        ...createServiceTools(port, confirmations),
+        ...createScheduleTools(port, confirmations),
+        ...createPromoTools(port, confirmations),
+    ];
 }
 /**
  * The read-only tool set for ONE salon: `list_services`, `list_promos` and `find_service_type`,

package/dist/customer/create-customer-tools.d.ts

@@ -0,0 +1,38 @@
+import type { TurnConfirmations } from "../confirmations.js";
+import type { AgentTool } from "../types.js";
+import type { CustomerCorePort } from "./customer-core-port.js";
+import { type IcCustomerCorePortOptions } from "./ic-customer-core-port.js";
+/** The zone Sultana's salons live in. The canister keeps no zone per salon. */
+export declare const DEFAULT_SALON_TIME_ZONE = "Europe/Warsaw";
+export interface CreateCustomerToolsFromPortOptions {
+    /** This turn's confirmations — `ledger.forTurn()`, as for the salon tools. */
+    confirmations?: TurnConfirmations;
+    /** The clock; defaults to the system's. */
+    now?: () => Date;
+    /**
+     * The salons' time zone. The host process MUST run in it (`TZ=Europe/Warsaw`): the canister
+     * wrapper takes every offset from the process clock. While it does not, every tool that
+     * touches a time answers with an error instead of booking hours off. `null` skips the guard.
+     */
+    timeZone?: string | null;
+}
+export interface CreateCustomerToolsOptions extends Omit<IcCustomerCorePortOptions, "language">, CreateCustomerToolsFromPortOptions {
+    /** Language of service-type labels. Defaults to Polish. */
+    language?: string;
+}
+/**
+ * The tool set of ONE customer: search, free times, booking, the customer's visits, cancelling.
+ * The customer's identity and position are captured here and never appear as tool arguments, so a
+ * model holding these tools can act for nobody else and search around nowhere else.
+ */
+export declare function createCustomerTools(options: CreateCustomerToolsOptions): AgentTool[];
+/** The same set over any port — the seam tests use. */
+export declare function createCustomerToolsFromPort(port: CustomerCorePort, options?: CreateCustomerToolsFromPortOptions): AgentTool[];
+export type CreateCustomerReadToolsOptions = Omit<CreateCustomerToolsOptions, "identity" | "confirmations">;
+/**
+ * The set for a customer whose delegation is missing or expired: everything that needs no
+ * identity — finding a service type, searching slots, a salon, its free times. Nothing books.
+ */
+export declare function createCustomerReadTools(options: CreateCustomerReadToolsOptions): AgentTool[];
+export declare function createCustomerReadToolsFromPort(port: CustomerCorePort, options?: Omit<CreateCustomerToolsFromPortOptions, "confirmations">): AgentTool[];
+//# sourceMappingURL=create-customer-tools.d.ts.map

package/dist/customer/create-customer-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-customer-tools.d.ts","sourceRoot":"","sources":["../../src/customer/create-customer-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAsB,KAAK,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAWhG,+EAA+E;AAC/E,eAAO,MAAM,uBAAuB,kBAAkB,CAAC;AAEvD,MAAM,WAAW,kCAAkC;IAC/C,8EAA8E;IAC9E,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,2CAA2C;IAC3C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA2B,SAAQ,IAAI,CAAC,yBAAyB,EAAE,UAAU,CAAC,EAAE,kCAAkC;IAC/H,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,SAAS,EAAE,CAKpF;AAED,uDAAuD;AACvD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,gBAAgB,EAAE,OAAO,GAAE,kCAAuC,GAAG,SAAS,EAAE,CASjI;AAED,MAAM,MAAM,8BAA8B,GAAG,IAAI,CAAC,0BAA0B,EAAE,UAAU,GAAG,eAAe,CAAC,CAAC;AAE5G;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,8BAA8B,GAAG,SAAS,EAAE,CAK5F;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,gBAAgB,EAAE,OAAO,GAAE,IAAI,CAAC,kCAAkC,EAAE,eAAe,CAAM,GAAG,SAAS,EAAE,CAE5J"}

package/dist/customer/create-customer-tools.js

@@ -0,0 +1,47 @@
+import { findServiceTypeTool } from "../tools/services.js";
+import { IcCustomerCorePort } from "./ic-customer-core-port.js";
+import { bookAppointmentTool, cancelAppointmentTool, getFreeTimesTool, getSalonTool, listMyAppointmentsTool, searchSlotsTool, } from "./tools.js";
+/** The zone Sultana's salons live in. The canister keeps no zone per salon. */
+export const DEFAULT_SALON_TIME_ZONE = "Europe/Warsaw";
+/**
+ * The tool set of ONE customer: search, free times, booking, the customer's visits, cancelling.
+ * The customer's identity and position are captured here and never appear as tool arguments, so a
+ * model holding these tools can act for nobody else and search around nowhere else.
+ */
+export function createCustomerTools(options) {
+    const { confirmations, now, timeZone, language, ...portOptions } = options;
+    const port = new IcCustomerCorePort({ ...portOptions, language: language ?? "pl" });
+    return createCustomerToolsFromPort(port, { confirmations, now, timeZone });
+}
+/** The same set over any port — the seam tests use. */
+export function createCustomerToolsFromPort(port, options = {}) {
+    const context = contextOf(port, options);
+    return [
+        ...readTools(context),
+        bookAppointmentTool(context, options.confirmations),
+        listMyAppointmentsTool(context),
+        cancelAppointmentTool(context, options.confirmations),
+    ];
+}
+/**
+ * The set for a customer whose delegation is missing or expired: everything that needs no
+ * identity — finding a service type, searching slots, a salon, its free times. Nothing books.
+ */
+export function createCustomerReadTools(options) {
+    const { now, timeZone, language, ...portOptions } = options;
+    const port = new IcCustomerCorePort({ ...portOptions, language: language ?? "pl" });
+    return createCustomerReadToolsFromPort(port, { now, timeZone });
+}
+export function createCustomerReadToolsFromPort(port, options = {}) {
+    return readTools(contextOf(port, options));
+}
+function contextOf(port, options) {
+    return {
+        port,
+        now: options.now ?? (() => new Date()),
+        timeZone: options.timeZone === null ? undefined : options.timeZone ?? DEFAULT_SALON_TIME_ZONE,
+    };
+}
+function readTools(context) {
+    return [findServiceTypeTool(context.port), searchSlotsTool(context), getSalonTool(context), getFreeTimesTool(context)];
+}

package/dist/customer/customer-core-port.d.ts

@@ -0,0 +1,94 @@
+import type { ServiceTypeView, TimeRange } from "../salon-core-port.js";
+/**
+ * Everything the customer tools may do on the core canister, in plain JSON. Unlike
+ * `SalonCorePort` it is bound to no salon — a customer looks across all of them — but to ONE
+ * customer: the identity behind the port (the customer's lent delegation) and the place the
+ * customer searches around. Neither ever appears as a tool argument.
+ *
+ * Moments are Unix milliseconds; a day is the LOCAL date `"YYYY-MM-DD"`.
+ */
+export interface Coordinates {
+    lat: number;
+    lng: number;
+}
+/** A salon's service as a visitor sees it (active services only). */
+export interface CustomerServiceView {
+    id: string;
+    salonId: string;
+    name: string;
+    pricePln: number;
+    durationMinutes: number;
+    serviceTypeIds: string[];
+    /** Workers who can perform it; the tools pick the first free one, like the app does. */
+    workerIds: string[];
+}
+export interface SalonView {
+    id: string;
+    name: string;
+    address: string;
+}
+export interface CustomerPromoView {
+    name: string;
+    textLines: string[];
+    discountCode?: string;
+    /** The service the promo leads to; absent = the salon itself. */
+    targetServiceId?: string;
+}
+/** One salon's answer to a slot search. */
+export interface SalonSlotsView {
+    salonId: string;
+    distanceKm: number;
+    /** The salon's services of the searched type. */
+    services: CustomerServiceView[];
+    /** Free start moments, ascending. */
+    availableAt: number[];
+    /** Asap only: the soonest moment the customer can still reach from the search location. */
+    soonestAt: number | null;
+}
+export interface SlotSearchView {
+    /** Asap only. "extended": nothing reachable within the hour, so the scan went on up to 24 h. */
+    phase?: "soon" | "extended";
+    salons: SalonSlotsView[];
+    /** Probes whose canister call failed — an empty list with failures means "could not check". */
+    failedProbes: number;
+}
+export type AppointmentStatusView = "Pending" | "Confirmed" | "Cancelled" | "Completed" | "NoShow";
+export interface AppointmentView {
+    id: string;
+    salonId: string;
+    serviceId: string;
+    startAt: number;
+    durationMinutes: number;
+    pricePln: number;
+    status: AppointmentStatusView;
+    discountCode?: string;
+}
+export interface BookingInput {
+    salonId: string;
+    serviceId: string;
+    workerId: string;
+    startAt: number;
+    notes: string;
+    discountCode?: string;
+}
+export interface CustomerCorePort {
+    /** Where the customer searches around; `null` when the app sent no position. */
+    readonly location: Coordinates | null;
+    findServiceTypes(query: string): Promise<ServiceTypeView[]>;
+    /** "As soon as possible" around `location`. */
+    searchAsap(serviceTypeId: string, radiusKm: number, now: Date): Promise<SlotSearchView>;
+    /** The given start moments around `location`. */
+    searchAtMoments(serviceTypeId: string, radiusKm: number, moments: number[]): Promise<SlotSearchView>;
+    getSalons(salonIds: string[]): Promise<SalonView[]>;
+    listSalonServices(salonId: string): Promise<CustomerServiceView[]>;
+    listSalonPromos(salonId: string): Promise<CustomerPromoView[]>;
+    /** One worker's free windows on a local day. A worker with no hours that day gives `[]`. */
+    freeWindows(salonId: string, workerId: string, day: string): Promise<TimeRange[]>;
+    /** Needs the customer's identity. Returns the appointment id. */
+    book(input: BookingInput): Promise<string>;
+    /** Needs the customer's identity. Every appointment of the customer, past and cancelled too. */
+    listMyAppointments(): Promise<AppointmentView[]>;
+    /** Needs the customer's identity. */
+    cancel(appointmentId: string): Promise<void>;
+}
+//# sourceMappingURL=customer-core-port.d.ts.map

package/dist/customer/customer-core-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-core-port.d.ts","sourceRoot":"","sources":["../../src/customer/customer-core-port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAExE;;;;;;;GAOG;AAEH,MAAM,WAAW,WAAW;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACf;AAED,qEAAqE;AACrE,MAAM,WAAW,mBAAmB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,wFAAwF;IACxF,SAAS,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,2CAA2C;AAC3C,MAAM,WAAW,cAAc;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,qCAAqC;IACrC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,2FAA2F;IAC3F,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC3B,gGAAgG;IAChG,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;IAC5B,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,+FAA+F;IAC/F,YAAY,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEnG,MAAM,WAAW,eAAe;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC7B,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAC;IAEtC,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAE5D,+CAA+C;IAC/C,UAAU,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACxF,iDAAiD;IACjD,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAErG,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACpD,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IACnE,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAE/D,4FAA4F;IAC5F,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAElF,iEAAiE;IACjE,IAAI,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,gGAAgG;IAChG,kBAAkB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACjD,qCAAqC;IACrC,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD"}

package/dist/customer/customer-core-port.js

@@ -0,0 +1 @@
+export {};

package/dist/customer/ic-customer-core-port.d.ts

@@ -0,0 +1,45 @@
+import type { Identity } from "@icp-sdk/core/agent";
+import type { ServiceTypeView, TimeRange } from "../salon-core-port.js";
+import type { AppointmentView, BookingInput, Coordinates, CustomerCorePort, CustomerPromoView, CustomerServiceView, SalonView, SlotSearchView } from "./customer-core-port.js";
+export interface IcCustomerCorePortOptions {
+    canisterId: string;
+    /** The customer's lent delegation. Omit it and every read still works (they are public
+     * queries), while booking, the customer's appointments and cancelling are refused. */
+    identity?: Identity;
+    /** Where the customer searches around — the position the app sent with the session. */
+    location?: Coordinates;
+    /** Language of service-type labels. */
+    language: string;
+}
+/**
+ * The customer port over the published canister wrapper. Conversions live here and nowhere
+ * else: the canister speaks `bigint`, `Principal` and nanoseconds, the tools speak numbers,
+ * strings and milliseconds.
+ *
+ * The public reads go out ANONYMOUSLY even when an identity is present: they answer the same
+ * either way, and a signed query would only spend the customer's delegation on nothing.
+ */
+export declare class IcCustomerCorePort implements CustomerCorePort {
+    readonly location: Coordinates | null;
+    private readonly language;
+    private readonly search;
+    private readonly salons;
+    private readonly services;
+    private readonly serviceTypes;
+    private readonly promo;
+    private readonly availability;
+    private readonly appointments;
+    constructor(options: IcCustomerCorePortOptions);
+    findServiceTypes(query: string): Promise<ServiceTypeView[]>;
+    searchAsap(serviceTypeId: string, radiusKm: number, now: Date): Promise<SlotSearchView>;
+    searchAtMoments(serviceTypeId: string, radiusKm: number, moments: number[]): Promise<SlotSearchView>;
+    getSalons(salonIds: string[]): Promise<SalonView[]>;
+    listSalonServices(salonId: string): Promise<CustomerServiceView[]>;
+    listSalonPromos(salonId: string): Promise<CustomerPromoView[]>;
+    freeWindows(salonId: string, workerId: string, day: string): Promise<TimeRange[]>;
+    book(input: BookingInput): Promise<string>;
+    listMyAppointments(): Promise<AppointmentView[]>;
+    cancel(appointmentId: string): Promise<void>;
+    private requireLocation;
+}
+//# sourceMappingURL=ic-customer-core-port.d.ts.map

package/dist/customer/ic-customer-core-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ic-customer-core-port.d.ts","sourceRoot":"","sources":["../../src/customer/ic-customer-core-port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAepD,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,KAAK,EAER,eAAe,EACf,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EAEnB,SAAS,EACT,cAAc,EACjB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,WAAW,yBAAyB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB;0FACsF;IACtF,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,uFAAuF;IACvF,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;CACpB;AAaD;;;;;;;GAOG;AACH,qBAAa,kBAAmB,YAAW,gBAAgB;IACvD,SAAgB,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAC;IAE7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;gBAErC,OAAO,EAAE,yBAAyB;IAajC,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAU3D,UAAU,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC;IAWvF,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IAWpG,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAQnD,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAKlE,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAa9D,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAUjF,IAAI,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAW1C,kBAAkB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAehD,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzD,OAAO,CAAC,eAAe;CAI1B"}