@kindgi/api 0.0.0-bootstrap.0 → 0.1.1

package/dist/errors.js

@@ -0,0 +1,268 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/**
+ * Maps a domain error `code` to the HTTP status the route layer should
+ * return. Codes not in this map fall through to `500` — the middleware
+ * treats that as a bug (unmapped code) rather than a plausible domain
+ * error. New codes MUST have a row here.
+ */
+export const ERROR_CODE_TO_STATUS = {
+    // 400 — bad request
+    'validation-failed': 400,
+    'unknown-field': 400,
+    'bad-input': 400,
+    'unresolved-tool': 400,
+    'unresolved-guardrail': 400,
+    'schema-validation-failed': 400,
+    // Platform hierarchy scope filter.
+    'scope-invalid': 400,
+    // 401 — auth
+    'auth-missing': 401,
+    'auth-expired': 401,
+    'auth-revoked': 401,
+    // 403
+    'permission-denied': 403,
+    // A deployment refuses tenant configuration that reaches its host
+    // (KINDGI_TENANT_HOST_ACCESS): a stdio MCP endpoint.
+    'host-access-denied': 403,
+    // 404
+    'not-found': 404,
+    'run-not-found': 404,
+    'agent-not-found': 404,
+    'conversation-not-found': 404,
+    'tool-not-found': 404,
+    'guardrail-not-found': 404,
+    'fact-not-found': 404,
+    'flow-not-found': 404,
+    // 409 — conflict
+    'already-terminal': 409,
+    'run-already-terminal': 409,
+    'run-lease-lost': 409,
+    'idempotency-key-body-mismatch': 409,
+    'hitl-required': 409,
+    'duplicate-node-id': 409,
+    'duplicate-edge-id': 409,
+    'agent-version-mismatch': 409,
+    'agent-already-registered': 409,
+    'agent-gone': 410,
+    'flow-gone': 410,
+    'policy-gone': 410,
+    'eval-suite-gone': 410,
+    'tool-gone': 410,
+    'tool-already-registered': 409,
+    'guardrail-already-registered': 409,
+    'flow-already-registered': 409,
+    'conversation-closed': 409,
+    'invalid-agent': 400,
+    'invalid-tool-definition': 400,
+    'invalid-schema': 400,
+    'unknown-effect': 400,
+    'invalid-guardrail': 400,
+    // 422 — unprocessable entity
+    'guardrail-violation': 422,
+    'agent-turn-aborted': 422,
+    'budget-exceeded': 422,
+    'output-schema-violation': 422,
+    'model-invocation-failed': 422,
+    'tool-invocation-failed': 422,
+    'capability-routing-failed': 422,
+    'runtime-not-configured': 422,
+    // A run the runtime can't start or resume yet: a flow with a node no
+    // handler is bound for, or a run shape the host's run handler doesn't
+    // support.
+    'flow-unbound': 422,
+    'flow-runs-not-supported': 422,
+    'flow-resume-not-supported': 422,
+    // `POST /v1/runs/{runId}/resume` in this release: every waitpoint
+    // belongs to an approval (decided through the approvals routes, which
+    // check the reviewer and record the decision) or to the runtime itself.
+    'run-resume-not-supported': 422,
+    // 429 — rate limit. No route in this package emits it; a rate limiter
+    // in front of the routes can.
+    'rate-limit-exceeded': 429,
+    // 500 — server
+    'internal-server-error': 500,
+    'journal-error': 500,
+    stuck: 500,
+    // Waitpoint domain: "no pending token" or "already resolved" are
+    // 409-shaped (a caller conflict with the run's current state).
+    'waitpoint-error': 409,
+    // HITL (approvals + reviewers).
+    'approval-not-found': 404,
+    'reviewer-not-found': 404,
+    'reviewer-deactivated': 409,
+    'insufficient-role': 403,
+    'approval-terminal': 409,
+    'approval-already-decided': 409,
+    'invalid-transition': 409,
+    'audit-bundle-not-found': 404,
+    'approval-not-decided': 409,
+    'export-key-error': 500,
+    'persistence-error': 500,
+    // Supervisor observations query — same discriminants.
+    'observation-not-found': 404,
+    // Provenance routes.
+    'provenance-not-found': 404,
+    'signing-not-configured': 404,
+    'signing-key-not-found': 404,
+    'signing-key-conflict': 409,
+    'signing-key-revoked': 409,
+    'signing-key-algorithm-unsupported': 400,
+    'signing-key-store-error': 500,
+    // Supervisor proposals lifecycle.
+    'proposal-not-found': 404,
+    'proposal-invalid-state-transition': 409,
+    'proposal-terminal': 409,
+    'baseline-mismatch': 422,
+    'apply-change-failed': 422,
+    'ground-layer-violation': 422,
+    'agent-not-in-registry': 422,
+    'version-already-exists': 409,
+    'invalid-new-version': 400,
+    'supervisor-header-missing': 400,
+    // Artifacts.
+    'blob-not-found': 404,
+    'blob-hash-mismatch': 400,
+    'blob-size-mismatch': 400,
+    'blob-storage-error': 500,
+    // Admin plane — capabilities + providers.
+    'capability-not-found': 404,
+    'provider-not-found': 404,
+    'provider-already-registered': 409,
+    'invalid-provider': 400,
+    // Admin plane — cost readback.
+    'cost-record-not-found': 404,
+    // Admin plane — adapters.
+    'adapter-not-found': 404,
+    // Admin plane — policies.
+    'policy-not-found': 404,
+    'policy-already-registered': 409,
+    // Admin plane — eval suites.
+    'eval-suite-not-found': 404,
+    'eval-suite-already-registered': 409,
+    // Admin plane — eval-run dispatch.
+    'eval-run-not-found': 404,
+    'eval-run-already-terminal': 409,
+    'dispatcher-not-registered': 422,
+    'dispatcher-input-invalid': 400,
+    // Interop plane — MCP endpoint registry.
+    'mcp-endpoint-not-found': 404,
+    'mcp-endpoint-already-registered': 409,
+    'invalid-mcp-endpoint': 400,
+    // Interop plane — MCP resources + prompts.
+    'mcp-resource-not-found': 404,
+    'mcp-prompt-not-found': 404,
+    'mcp-resource-read-failed': 502,
+    'mcp-prompt-get-failed': 502,
+    // Auth surface — OAuth + sessions.
+    'session-not-found': 404,
+    'session-revoked': 409,
+    // NOTE: `session-expired` is a middleware-tier auth failure (401) —
+    // the token authenticated but the session's absolute TTL has elapsed.
+    // Distinct from `auth-expired` (bearer-token expiry) so callers can
+    // tell static bearer-token expiry from session TTL.
+    'session-expired': 401,
+    'session-inactive': 401,
+    'identity-provider-not-found': 404,
+    'identity-provider-already-registered': 409,
+    'oauth-state-invalid': 400,
+    'oauth-code-exchange-failed': 422,
+    'oauth-refresh-failed': 422,
+    'oauth-refresh-not-supported': 422,
+    'invalid-provider-config': 400,
+    'auth-not-session-token': 400,
+    // OAuth redirect URIs + refresh.
+    'redirect-uri-not-allowed': 400,
+    'redirect-uri-mismatch': 400,
+    'refresh-token-invalid': 401,
+    // Admin plane — identity directory.
+    'identity-user-not-found': 404,
+    'identity-revoke-failed': 500,
+    // Signed deployments.
+    'signature-invalid': 400,
+    'signer-not-trusted': 403,
+    'image-unverifiable': 400,
+    'deployment-validation-failed': 400,
+    'deployment-not-found': 404,
+    // Compliance routes.
+    'compliance-evidence-not-found': 404,
+    'compliance-export-failed': 500,
+    // Platform hierarchy.
+    'org-not-found': 404,
+    'team-not-found': 404,
+    'project-not-found': 404,
+    'team-membership-not-found': 404,
+    'project-membership-not-found': 404,
+    'tenant-not-found': 404,
+    'tenant-config-not-found': 404,
+    'tenant-config-revision-conflict': 409,
+    'authz-denied': 403,
+    'authz-backend-unavailable': 503,
+    // A tenant policy an agent turn must apply couldn't be (its store
+    // failed, or a stored spec is invalid): the turn fails closed.
+    'tenant-policy-unavailable': 503,
+    // Env + Secrets.
+    'env-not-found': 404,
+    'secret-not-found': 404,
+    'secret-revoked': 404,
+    'secret-version-not-found': 404,
+    'scope-kind-required': 400,
+    'scope-mismatch': 400,
+    'env-name-required': 400,
+    'env-name-mismatch': 400,
+    'env-cross-scope': 400,
+    'reserved-name-prefix': 400,
+    'secret-value-too-large': 400,
+    'secret-write-conflict': 409,
+    'env-write-conflict': 409,
+    'secret-encryption-failed': 500,
+    'secret-decryption-failed': 500,
+    'secret-provider-unavailable': 503,
+    'secret-provider-unauthorized': 502,
+    'secret-provider-rate-limited': 429,
+    'secret-store-error': 500,
+    'env-store-error': 500,
+    // Trigger HTTP surface.
+    'trigger-not-found': 404,
+    'trigger-invalid-config': 400,
+    'trigger-webhook-id-conflict': 409,
+    'trigger-already-in-state': 409,
+    'trigger-register-failed': 500,
+    'trigger-update-failed': 500,
+    'trigger-lifecycle-failed': 500,
+    'webhook-signature-invalid': 401,
+    'webhook-inactive': 410,
+    'webhook-secret-missing': 500,
+    'webhook-flow-not-found': 502,
+    // Outbound webhook endpoints.
+    'webhook-endpoint-not-found': 404,
+    'webhook-delivery-not-found': 404,
+    'webhook-url-refused': 400,
+    'webhook-secret-not-found': 400,
+    'webhook-secret-too-weak': 400,
+    // Public run tokens.
+    'token-mint-failed': 500,
+};
+/**
+ * Look up the HTTP status for a domain error code. Unmapped codes
+ * return `500` — the caller should log a warning; this indicates a
+ * mapping-table gap.
+ */
+export function statusFor(code) {
+    return ERROR_CODE_TO_STATUS[code] ?? 500;
+}
+/** Build a wire error body from a domain error + requestId. */
+export function toWireError(err, requestId) {
+    const { code, message, ...rest } = err;
+    const detailKeys = Object.keys(rest).filter((k) => k !== 'cause');
+    const details = detailKeys.length > 0 ? Object.fromEntries(detailKeys.map((k) => [k, rest[k]])) : undefined;
+    return {
+        error: {
+            code: String(code),
+            message: String(message),
+            ...(details !== undefined && { details }),
+            requestId,
+        },
+    };
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAuBjC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAqC;IACpE,oBAAoB;IACpB,mBAAmB,EAAE,GAAG;IACxB,eAAe,EAAE,GAAG;IACpB,WAAW,EAAE,GAAG;IAChB,iBAAiB,EAAE,GAAG;IACtB,sBAAsB,EAAE,GAAG;IAC3B,0BAA0B,EAAE,GAAG;IAC/B,mCAAmC;IACnC,eAAe,EAAE,GAAG;IACpB,aAAa;IACb,cAAc,EAAE,GAAG;IACnB,cAAc,EAAE,GAAG;IACnB,cAAc,EAAE,GAAG;IACnB,MAAM;IACN,mBAAmB,EAAE,GAAG;IACxB,kEAAkE;IAClE,qDAAqD;IACrD,oBAAoB,EAAE,GAAG;IACzB,MAAM;IACN,WAAW,EAAE,GAAG;IAChB,eAAe,EAAE,GAAG;IACpB,iBAAiB,EAAE,GAAG;IACtB,wBAAwB,EAAE,GAAG;IAC7B,gBAAgB,EAAE,GAAG;IACrB,qBAAqB,EAAE,GAAG;IAC1B,gBAAgB,EAAE,GAAG;IACrB,gBAAgB,EAAE,GAAG;IACrB,iBAAiB;IACjB,kBAAkB,EAAE,GAAG;IACvB,sBAAsB,EAAE,GAAG;IAC3B,gBAAgB,EAAE,GAAG;IACrB,+BAA+B,EAAE,GAAG;IACpC,eAAe,EAAE,GAAG;IACpB,mBAAmB,EAAE,GAAG;IACxB,mBAAmB,EAAE,GAAG;IACxB,wBAAwB,EAAE,GAAG;IAC7B,0BAA0B,EAAE,GAAG;IAC/B,YAAY,EAAE,GAAG;IACjB,WAAW,EAAE,GAAG;IAChB,aAAa,EAAE,GAAG;IAClB,iBAAiB,EAAE,GAAG;IACtB,WAAW,EAAE,GAAG;IAChB,yBAAyB,EAAE,GAAG;IAC9B,8BAA8B,EAAE,GAAG;IACnC,yBAAyB,EAAE,GAAG;IAC9B,qBAAqB,EAAE,GAAG;IAC1B,eAAe,EAAE,GAAG;IACpB,yBAAyB,EAAE,GAAG;IAC9B,gBAAgB,EAAE,GAAG;IACrB,gBAAgB,EAAE,GAAG;IACrB,mBAAmB,EAAE,GAAG;IACxB,6BAA6B;IAC7B,qBAAqB,EAAE,GAAG;IAC1B,oBAAoB,EAAE,GAAG;IACzB,iBAAiB,EAAE,GAAG;IACtB,yBAAyB,EAAE,GAAG;IAC9B,yBAAyB,EAAE,GAAG;IAC9B,wBAAwB,EAAE,GAAG;IAC7B,2BAA2B,EAAE,GAAG;IAChC,wBAAwB,EAAE,GAAG;IAC7B,qEAAqE;IACrE,sEAAsE;IACtE,WAAW;IACX,cAAc,EAAE,GAAG;IACnB,yBAAyB,EAAE,GAAG;IAC9B,2BAA2B,EAAE,GAAG;IAChC,kEAAkE;IAClE,sEAAsE;IACtE,wEAAwE;IACxE,0BAA0B,EAAE,GAAG;IAC/B,sEAAsE;IACtE,8BAA8B;IAC9B,qBAAqB,EAAE,GAAG;IAC1B,eAAe;IACf,uBAAuB,EAAE,GAAG;IAC5B,eAAe,EAAE,GAAG;IACpB,KAAK,EAAE,GAAG;IACV,iEAAiE;IACjE,+DAA+D;IAC/D,iBAAiB,EAAE,GAAG;IACtB,gCAAgC;IAChC,oBAAoB,EAAE,GAAG;IACzB,oBAAoB,EAAE,GAAG;IACzB,sBAAsB,EAAE,GAAG;IAC3B,mBAAmB,EAAE,GAAG;IACxB,mBAAmB,EAAE,GAAG;IACxB,0BAA0B,EAAE,GAAG;IAC/B,oBAAoB,EAAE,GAAG;IACzB,wBAAwB,EAAE,GAAG;IAC7B,sBAAsB,EAAE,GAAG;IAC3B,kBAAkB,EAAE,GAAG;IACvB,mBAAmB,EAAE,GAAG;IACxB,sDAAsD;IACtD,uBAAuB,EAAE,GAAG;IAC5B,qBAAqB;IACrB,sBAAsB,EAAE,GAAG;IAC3B,wBAAwB,EAAE,GAAG;IAC7B,uBAAuB,EAAE,GAAG;IAC5B,sBAAsB,EAAE,GAAG;IAC3B,qBAAqB,EAAE,GAAG;IAC1B,mCAAmC,EAAE,GAAG;IACxC,yBAAyB,EAAE,GAAG;IAC9B,kCAAkC;IAClC,oBAAoB,EAAE,GAAG;IACzB,mCAAmC,EAAE,GAAG;IACxC,mBAAmB,EAAE,GAAG;IACxB,mBAAmB,EAAE,GAAG;IACxB,qBAAqB,EAAE,GAAG;IAC1B,wBAAwB,EAAE,GAAG;IAC7B,uBAAuB,EAAE,GAAG;IAC5B,wBAAwB,EAAE,GAAG;IAC7B,qBAAqB,EAAE,GAAG;IAC1B,2BAA2B,EAAE,GAAG;IAChC,aAAa;IACb,gBAAgB,EAAE,GAAG;IACrB,oBAAoB,EAAE,GAAG;IACzB,oBAAoB,EAAE,GAAG;IACzB,oBAAoB,EAAE,GAAG;IACzB,0CAA0C;IAC1C,sBAAsB,EAAE,GAAG;IAC3B,oBAAoB,EAAE,GAAG;IACzB,6BAA6B,EAAE,GAAG;IAClC,kBAAkB,EAAE,GAAG;IACvB,+BAA+B;IAC/B,uBAAuB,EAAE,GAAG;IAC5B,0BAA0B;IAC1B,mBAAmB,EAAE,GAAG;IACxB,0BAA0B;IAC1B,kBAAkB,EAAE,GAAG;IACvB,2BAA2B,EAAE,GAAG;IAChC,6BAA6B;IAC7B,sBAAsB,EAAE,GAAG;IAC3B,+BAA+B,EAAE,GAAG;IACpC,mCAAmC;IACnC,oBAAoB,EAAE,GAAG;IACzB,2BAA2B,EAAE,GAAG;IAChC,2BAA2B,EAAE,GAAG;IAChC,0BAA0B,EAAE,GAAG;IAC/B,yCAAyC;IACzC,wBAAwB,EAAE,GAAG;IAC7B,iCAAiC,EAAE,GAAG;IACtC,sBAAsB,EAAE,GAAG;IAC3B,2CAA2C;IAC3C,wBAAwB,EAAE,GAAG;IAC7B,sBAAsB,EAAE,GAAG;IAC3B,0BAA0B,EAAE,GAAG;IAC/B,uBAAuB,EAAE,GAAG;IAC5B,mCAAmC;IACnC,mBAAmB,EAAE,GAAG;IACxB,iBAAiB,EAAE,GAAG;IACtB,oEAAoE;IACpE,sEAAsE;IACtE,oEAAoE;IACpE,oDAAoD;IACpD,iBAAiB,EAAE,GAAG;IACtB,kBAAkB,EAAE,GAAG;IACvB,6BAA6B,EAAE,GAAG;IAClC,sCAAsC,EAAE,GAAG;IAC3C,qBAAqB,EAAE,GAAG;IAC1B,4BAA4B,EAAE,GAAG;IACjC,sBAAsB,EAAE,GAAG;IAC3B,6BAA6B,EAAE,GAAG;IAClC,yBAAyB,EAAE,GAAG;IAC9B,wBAAwB,EAAE,GAAG;IAC7B,iCAAiC;IACjC,0BAA0B,EAAE,GAAG;IAC/B,uBAAuB,EAAE,GAAG;IAC5B,uBAAuB,EAAE,GAAG;IAC5B,oCAAoC;IACpC,yBAAyB,EAAE,GAAG;IAC9B,wBAAwB,EAAE,GAAG;IAC7B,sBAAsB;IACtB,mBAAmB,EAAE,GAAG;IACxB,oBAAoB,EAAE,GAAG;IACzB,oBAAoB,EAAE,GAAG;IACzB,8BAA8B,EAAE,GAAG;IACnC,sBAAsB,EAAE,GAAG;IAC3B,qBAAqB;IACrB,+BAA+B,EAAE,GAAG;IACpC,0BAA0B,EAAE,GAAG;IAC/B,sBAAsB;IACtB,eAAe,EAAE,GAAG;IACpB,gBAAgB,EAAE,GAAG;IACrB,mBAAmB,EAAE,GAAG;IACxB,2BAA2B,EAAE,GAAG;IAChC,8BAA8B,EAAE,GAAG;IACnC,kBAAkB,EAAE,GAAG;IACvB,yBAAyB,EAAE,GAAG;IAC9B,iCAAiC,EAAE,GAAG;IACtC,cAAc,EAAE,GAAG;IACnB,2BAA2B,EAAE,GAAG;IAChC,kEAAkE;IAClE,+DAA+D;IAC/D,2BAA2B,EAAE,GAAG;IAChC,iBAAiB;IACjB,eAAe,EAAE,GAAG;IACpB,kBAAkB,EAAE,GAAG;IACvB,gBAAgB,EAAE,GAAG;IACrB,0BAA0B,EAAE,GAAG;IAC/B,qBAAqB,EAAE,GAAG;IAC1B,gBAAgB,EAAE,GAAG;IACrB,mBAAmB,EAAE,GAAG;IACxB,mBAAmB,EAAE,GAAG;IACxB,iBAAiB,EAAE,GAAG;IACtB,sBAAsB,EAAE,GAAG;IAC3B,wBAAwB,EAAE,GAAG;IAC7B,uBAAuB,EAAE,GAAG;IAC5B,oBAAoB,EAAE,GAAG;IACzB,0BAA0B,EAAE,GAAG;IAC/B,0BAA0B,EAAE,GAAG;IAC/B,6BAA6B,EAAE,GAAG;IAClC,8BAA8B,EAAE,GAAG;IACnC,8BAA8B,EAAE,GAAG;IACnC,oBAAoB,EAAE,GAAG;IACzB,iBAAiB,EAAE,GAAG;IACtB,wBAAwB;IACxB,mBAAmB,EAAE,GAAG;IACxB,wBAAwB,EAAE,GAAG;IAC7B,6BAA6B,EAAE,GAAG;IAClC,0BAA0B,EAAE,GAAG;IAC/B,yBAAyB,EAAE,GAAG;IAC9B,uBAAuB,EAAE,GAAG;IAC5B,0BAA0B,EAAE,GAAG;IAC/B,2BAA2B,EAAE,GAAG;IAChC,kBAAkB,EAAE,GAAG;IACvB,wBAAwB,EAAE,GAAG;IAC7B,wBAAwB,EAAE,GAAG;IAC7B,8BAA8B;IAC9B,4BAA4B,EAAE,GAAG;IACjC,4BAA4B,EAAE,GAAG;IACjC,qBAAqB,EAAE,GAAG;IAC1B,0BAA0B,EAAE,GAAG;IAC/B,yBAAyB,EAAE,GAAG;IAC9B,qBAAqB;IACrB,mBAAmB,EAAE,GAAG;CAChB,CAAC;AAEX;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;AAC3C,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,WAAW,CACzB,GAA4F,EAC5F,SAAiB;IAEjB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,GAAyC,CAAC;IAC7E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;IAClE,MAAM,OAAO,GACX,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,OAAO;QACL,KAAK,EAAE;YACL,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;YAClB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;YACxB,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC;YACzC,SAAS;SACV;KACF,CAAC;AACJ,CAAC"}

package/dist/eval-run-binding.d.ts

@@ -0,0 +1,196 @@
+import type { AgentId } from '@kindgi/agents';
+import type { Scope } from '@kindgi/platform';
+import type { Cursor, FlowId, ProjectId, RunId, Semver, TenantId, Timestamp } from '@kindgi/types';
+import type { EvalKind } from './eval-suite-binding.js';
+/**
+ * Caller-plugged surface for the evaluation-run data plane — the
+ * companion to the eval-suite registry that closes the loop by adding
+ * *execution*.
+ * Same pattern as every other admin binding: the API package does NOT
+ * own persistence. Deployments wire this binding to a runtime that
+ * dispatches per `EvalSuite.kind` (see `eval-run-dispatcher.ts` for
+ * the reference accuracy dispatcher).
+ *
+ * The wire shape mirrors the run surface. A durable implementation can
+ * make every `EvalRun` a specialized run (started with `runGraph`),
+ * inheriting durability, replay, and cancel semantics while adding
+ * eval-specific fields (`suiteId`, `suiteVersion`, `kind`, `result`);
+ * the in-process reference in `eval-run-dispatcher.ts` keeps runs in
+ * memory.
+ *
+ * `result` is kind-specific opaque JSON on the wire. For the
+ * `accuracy` reference dispatcher it is
+ * `{ passCount, totalCount, meanScore, perCase[] }`; other kinds define
+ * their own shapes.
+ */
+export interface EvalRunBinding {
+    /**
+     * Start a new eval run against a specific suite id (the dispatcher
+     * resolves the suite version internally — bindings MAY reject with
+     * `suite-not-found` when the suiteId is unknown for the tenant).
+     */
+    start(input: EvalRunStartInput): Promise<EvalRunStartOutcome>;
+    /**
+     * Fetch a single eval run by id, or `null` if unknown. The route
+     * surfaces `null` as `404 eval-run-not-found`.
+     */
+    get(input: EvalRunGetInput): Promise<EvalRun | null>;
+    /**
+     * Cursor-paginated list of eval runs. Optional filters — see
+     * `EvalRunFilter`. Sort order is fixed: `startedAt` descending, id
+     * descending as tie-breaker (same shape as `/v1/runs`).
+     */
+    list(input: EvalRunListInput): Promise<EvalRunPage>;
+    /**
+     * Cancel an eval run. Returns `{ cancelled: true }` on success;
+     * `{ cancelled: false, reason: 'not-found' | 'already-terminal' }`
+     * otherwise — the route flips each `reason` to the appropriate
+     * 4xx status.
+     */
+    cancel(input: EvalRunCancelInput): Promise<EvalRunCancelOutcome>;
+}
+/**
+ * How the caller identifies the eval subject on `start`. Exactly one
+ * of `agentRef` / `flowRef` MUST be supplied — the route enforces
+ * that mutual exclusion before calling the binding.
+ */
+export interface AgentRef {
+    readonly agentId: AgentId;
+    readonly version?: Semver;
+}
+export interface FlowRef {
+    readonly flowId: FlowId;
+    readonly version?: Semver;
+}
+/**
+ * Terminal statuses match the run vocabulary. `pending` is a
+ * pre-execution state a dispatcher MAY use if it queues the run
+ * before starting it; the reference in-process dispatcher goes
+ * straight to `running`.
+ */
+export declare const EVAL_RUN_STATUSES: readonly ["pending", "running", "completed", "failed", "cancelled"];
+export type EvalRunStatus = (typeof EVAL_RUN_STATUSES)[number];
+/**
+ * Wire shape for a single evaluation run. `result` is kind-specific
+ * opaque JSON (accuracy writes `{ passCount, totalCount, meanScore,
+ * perCase[] }`; other kinds define their own shapes). `error`
+ * carries the failure message when `status === 'failed'`.
+ */
+export interface EvalRun {
+    readonly runId: RunId;
+    readonly tenantId: TenantId;
+    readonly suiteId: string;
+    readonly suiteVersion: string;
+    readonly kind: EvalKind;
+    readonly agentRef?: AgentRef;
+    readonly flowRef?: FlowRef;
+    readonly status: EvalRunStatus;
+    readonly dryRun: boolean;
+    readonly startedAt: Timestamp;
+    readonly completedAt?: Timestamp;
+    readonly result?: Readonly<Record<string, unknown>>;
+    readonly error?: string;
+    readonly correlationId?: string;
+}
+export interface EvalRunFilter {
+    readonly suiteId?: string;
+    readonly status?: EvalRunStatus;
+    readonly agentId?: AgentId;
+    readonly flowId?: FlowId;
+    readonly from?: Timestamp;
+    readonly to?: Timestamp;
+}
+export interface EvalRunStartInput {
+    readonly tenantId: TenantId;
+    /**
+     * Content-scope anchor. REQUIRED — every
+     * eval-run row is anchored to a project. The caller resolves this at
+     * ITS layer; storage adapters treat a missing / bogus id as a
+     * `project-not-found` outcome. No silent fallback to a tenant Default here.
+     */
+    readonly projectId: ProjectId;
+    readonly suiteId: string;
+    readonly agentRef?: AgentRef;
+    readonly flowRef?: FlowRef;
+    readonly dryRun?: boolean;
+    readonly correlationId?: string;
+}
+/**
+ * `start` outcomes. `ok` returns the newly-minted `runId`; other
+ * shapes carry the domain error the route flips to a 4xx.
+ */
+export type EvalRunStartOutcome = {
+    readonly kind: 'ok';
+    readonly runId: RunId;
+    readonly dryRunPreview?: Readonly<Record<string, unknown>>;
+} | {
+    readonly kind: 'suite-not-found';
+    readonly suiteId: string;
+} | {
+    readonly kind: 'dispatcher-not-registered';
+    readonly evalKind: EvalKind;
+} | {
+    readonly kind: 'dispatcher-input-invalid';
+    readonly message: string;
+} | {
+    /**
+     * The caller-supplied `projectId` does not resolve to a real
+     * project row in this tenant. Distinct from
+     * `dispatcher-input-invalid` so the route can surface a clean
+     * 4xx with the offending id rather than a generic dispatcher
+     * error.
+     */
+    readonly kind: 'project-not-found';
+    readonly projectId: ProjectId;
+};
+export interface EvalRunGetInput {
+    readonly tenantId: TenantId;
+    readonly runId: RunId;
+}
+export interface EvalRunListInput {
+    readonly tenantId: TenantId;
+    readonly limit: number;
+    readonly cursor?: Cursor;
+    readonly filter?: EvalRunFilter;
+    /**
+     * Narrow the list to a specific scope. Absent = no scope narrow
+     * (return every row in the tenant the caller can see — admin/audit
+     * default).
+     *
+     * Content-scoped semantics (this binding):
+     * - `{ kind: 'project', projectId }` — rows in that project.
+     * - `{ kind: 'org', orgId }` — rows in every project belonging to
+     *   that org.
+     * - `{ kind: 'tenant', tenantId }` — every row in the tenant.
+     *
+     * Content rows always belong to a project, so `inherit` has no
+     * effect here.
+     */
+    readonly scope?: Scope;
+    /**
+     * `false` = literal-at-this-scope only (admin/audit view).
+     * `true` (default) = inheritance walk (user-facing view).
+     * No-op for content-scoped bindings (rows only exist at
+     * project-level — there is no upward hierarchy to walk). Kept for
+     * uniformity: scope-aware bindings share one filter shape across the
+     * SDK and OpenAPI schemas.
+     */
+    readonly inherit?: boolean;
+}
+export interface EvalRunPage {
+    readonly data: readonly EvalRun[];
+    readonly nextCursor?: Cursor;
+}
+export interface EvalRunCancelInput {
+    readonly tenantId: TenantId;
+    readonly runId: RunId;
+}
+export type EvalRunCancelOutcome = {
+    readonly kind: 'ok';
+} | {
+    readonly kind: 'not-found';
+} | {
+    readonly kind: 'already-terminal';
+    readonly status: EvalRunStatus;
+};
+//# sourceMappingURL=eval-run-binding.d.ts.map

package/dist/eval-run-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eval-run-binding.d.ts","sourceRoot":"","sources":["../src/eval-run-binding.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAEnG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,KAAK,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9D;;;OAGG;IACH,GAAG,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACrD;;;;OAIG;IACH,IAAI,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACpD;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAClE;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AACD,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,qEAMpB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IACE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC5D,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,2BAA2B,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,GAC3E;IAAE,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvE;IACE;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/B,CAAC;AAEN,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,SAAS,OAAO,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC"}

package/dist/eval-run-binding.js

@@ -0,0 +1,16 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/**
+ * Terminal statuses match the run vocabulary. `pending` is a
+ * pre-execution state a dispatcher MAY use if it queues the run
+ * before starting it; the reference in-process dispatcher goes
+ * straight to `running`.
+ */
+export const EVAL_RUN_STATUSES = [
+    'pending',
+    'running',
+    'completed',
+    'failed',
+    'cancelled',
+];
+//# sourceMappingURL=eval-run-binding.js.map

package/dist/eval-run-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eval-run-binding.js","sourceRoot":"","sources":["../src/eval-run-binding.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAsEjC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,SAAS;IACT,SAAS;IACT,WAAW;IACX,QAAQ;IACR,WAAW;CACH,CAAC"}

package/dist/eval-run-dispatcher.d.ts

@@ -0,0 +1,131 @@
+import type { RunId, TenantId } from '@kindgi/types';
+import type { AgentRef, EvalRunBinding, FlowRef } from './eval-run-binding.js';
+import { EVAL_RUN_STATUSES } from './eval-run-binding.js';
+import type { EvalKind, EvalSuite, EvalSuiteRegistryBinding } from './eval-suite-binding.js';
+/**
+ * Reference eval-run dispatcher — proves the pattern end-to-end for
+ * the `accuracy` kind with an in-process `EvalRunBinding` that wraps
+ * an in-memory run store. Durable deployments swap this for a
+ * dispatcher that starts real runs (`runGraph`) so the EvalRun is a
+ * specialized run and inherits durability + replay + cancel.
+ *
+ * The in-process shape lets tests wire a subject invoker + a judge
+ * without booting a full runtime — the surface (`EvalRunBinding`) is
+ * identical to what a durable deployment exposes.
+ */
+export interface EvalCase {
+    readonly id?: string;
+    readonly input: unknown;
+    readonly expected?: unknown;
+    readonly expectedOutput?: unknown;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface EvalRunSubjectInvokeInput {
+    readonly tenantId: TenantId;
+    readonly target: AgentRef | FlowRef;
+    readonly input: unknown;
+    readonly dryRun: boolean;
+    readonly abortSignal: AbortSignal;
+}
+export interface EvalRunSubjectInvokeOutcome {
+    readonly output?: unknown;
+    readonly error?: string;
+    readonly costUsd?: number;
+    readonly durationMs?: number;
+}
+/**
+ * Caller-plugged subject invoker. Real deployments route this into
+ * `RunHandlerBinding.invokeAgent` / `invokeFlow` (the same surface
+ * `/v1/runs` uses); tests pass a synchronous stub.
+ */
+export interface EvalSubjectInvoker {
+    invoke(input: EvalRunSubjectInvokeInput): Promise<EvalRunSubjectInvokeOutcome>;
+}
+/**
+ * Grader contract used by the reference accuracy dispatcher —
+ * deployments can plug in an eval-judge adapter or an LLM judge. Kept
+ * local to `@kindgi/api` so the API package does not depend on an
+ * evals package (it stays consumer-neutral).
+ */
+export interface EvalGrader {
+    readonly id: string;
+    grade(input: EvalGraderInput): Promise<EvalGraderOutcome>;
+}
+export interface EvalGraderInput {
+    readonly caseInput: unknown;
+    readonly actualOutput: unknown;
+    readonly expected: unknown;
+}
+export interface EvalGraderOutcome {
+    readonly pass: boolean;
+    readonly score: number;
+    readonly reason?: string;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface DispatchContext {
+    readonly tenantId: TenantId;
+    readonly runId: RunId;
+    readonly suite: EvalSuite;
+    readonly target: AgentRef | FlowRef;
+    readonly dryRun: boolean;
+    readonly abortSignal: AbortSignal;
+    readonly subject: EvalSubjectInvoker;
+    onProgress(perCase: Readonly<Record<string, unknown>>): void;
+}
+export interface DispatchResult {
+    readonly result: Readonly<Record<string, unknown>>;
+    readonly error?: string;
+}
+export interface EvalRunDispatcher {
+    readonly kind: EvalKind;
+    validate?(suite: EvalSuite, target: AgentRef | FlowRef): {
+        kind: 'ok';
+    } | {
+        kind: 'err';
+        message: string;
+    };
+    dispatch(ctx: DispatchContext): Promise<DispatchResult>;
+}
+export interface AccuracyDispatcherOptions {
+    readonly grader: EvalGrader;
+}
+/**
+ * Reference dispatcher for `EvalKind === 'accuracy'`. Reads
+ * `spec.cases` from the registered suite; for each case, invokes the
+ * subject with `case.input`, grades `(caseInput, actualOutput,
+ * case.expected ?? case.expectedOutput)` through the injected
+ * `EvalGrader`, and aggregates `{ passCount, totalCount, meanScore,
+ * perCase[] }`.
+ *
+ * A dry-run echoes the plan (case count + first-case preview) without
+ * invoking the subject — proves the same envelope is available on
+ * `dryRun: true` requests. Callers use it as a sanity check before
+ * paying for the real run.
+ */
+export declare function createAccuracyDispatcher(options: AccuracyDispatcherOptions): EvalRunDispatcher;
+export interface InProcessEvalRunBindingOptions {
+    readonly suiteRegistry: EvalSuiteRegistryBinding;
+    readonly subject: EvalSubjectInvoker;
+    readonly dispatchers: Partial<Record<EvalKind, EvalRunDispatcher>>;
+    /**
+     * Optional clock override — tests inject a monotonic stub so
+     * timestamps are deterministic. Defaults to `() => new Date()`.
+     */
+    readonly now?: () => Date;
+}
+/**
+ * Reference in-process `EvalRunBinding`. Persists eval-run rows in a
+ * `Map<runId, EvalRun>`; suitable for tests and dev deployments.
+ * Production deployments swap in a durable binding that starts real
+ * runs (`runGraph`) — the surface is identical, only the persistence +
+ * execution substrate changes.
+ *
+ * A run starts as `running`, resolves per its dispatcher's outcome,
+ * and can be cancelled via `AbortController.abort()` on the wrapped
+ * controller. Cancellation is best-effort — a dispatcher that has
+ * already returned cannot be undone; the row transitions to
+ * `cancelled` and any partial `perCase` results are preserved.
+ */
+export declare function createInProcessEvalRunBinding(options: InProcessEvalRunBindingOptions): EvalRunBinding;
+export { EVAL_RUN_STATUSES };
+//# sourceMappingURL=eval-run-dispatcher.d.ts.map

package/dist/eval-run-dispatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eval-run-dispatcher.d.ts","sourceRoot":"","sources":["../src/eval-run-dispatcher.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAa,MAAM,eAAe,CAAC;AAEhE,OAAO,KAAK,EACV,QAAQ,EAER,cAAc,EASd,OAAO,EACR,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAE7F;;;;;;;;;;GAUG;AAIH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CACnC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;CAChF;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;CAC9D;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,CACP,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,QAAQ,GAAG,OAAO,GACzB;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,QAAQ,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACzD;AAID,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG,iBAAiB,CAiG9F;AAsBD,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACnE;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,8BAA8B,GACtC,cAAc,CA8MhB;AAOD,OAAO,EAAE,iBAAiB,EAAE,CAAC"}