@koda-sl/baker-cli 0.512.0 → 0.514.0-dev.555f7007e

package/dist/credentials-EIPEZ2C2.js

@@ -1,288 +0,0 @@
-import {
-  repeatedValues
-} from "./chunk-ERSX3MKH.js";
-import {
-  failApi,
-  failValidation
-} from "./chunk-HSQRITKG.js";
-import "./chunk-JND6XSGZ.js";
-import "./chunk-CAZGM2NX.js";
-import "./chunk-NZS3KEQ2.js";
-import "./chunk-GIWHHCD6.js";
-import "./chunk-NSBNIPIW.js";
-import {
-  getPublicSuffix,
-  parse
-} from "./chunk-2TOIY2WN.js";
-import {
-  apiPost
-} from "./chunk-X7VQFLHI.js";
-import "./chunk-LU4HI4KI.js";
-import "./chunk-LGK7UWBN.js";
-import {
-  registerSchema,
-  writeJson
-} from "./chunk-Q7US4OOA.js";
-import "./chunk-YQSBHWOI.js";
-
-// ../api/src/credentials/contract.ts
-import { z } from "zod";
-
-// ../api/src/credentials/hosts.ts
-function normaliseHost(host) {
-  return host.trim().toLowerCase().replace(/\.$/, "");
-}
-function asciiHost(host) {
-  if (!/[\u0080-\u{10FFFF}]/u.test(host) || /[/?#@:\\%[\]\s]/.test(host)) return host;
-  const url = `http://${host}`;
-  return URL.canParse(url) ? new URL(url).hostname : host;
-}
-function validateHostPattern(raw) {
-  const typed = normaliseHost(raw);
-  const wildcard = typed.startsWith("*.");
-  const host = asciiHost(wildcard ? typed.slice(2) : typed);
-  const pattern = wildcard ? `*.${host}` : host;
-  if (host === "" || host.includes("*")) {
-    return { ok: false, reason: "Use a website address like api.example.com or *.example.com." };
-  }
-  const parsed = parse(host);
-  if (parsed.isIp || host.startsWith("[")) {
-    return { ok: false, reason: "Use a website address, not an IP address." };
-  }
-  if (parsed.hostname !== host || parsed.domain === null) {
-    return { ok: false, reason: "Use only the website address, like api.example.com." };
-  }
-  if (wildcard && !wildcardSafe(host)) {
-    return { ok: false, reason: `*.${host} would allow any website. Name the company's own address.` };
-  }
-  return { ok: true, pattern };
-}
-var OPEN_HOSTING_DOMAINS = ["amazonaws.com", "cloudfront.net", "googleapis.com", "on.aws"];
-var WITH_PRIVATE = { allowPrivateDomains: true };
-function wildcardSafe(host) {
-  if (OPEN_HOSTING_DOMAINS.some((domain) => host === domain || host.endsWith(`.${domain}`))) return false;
-  const suffix = getPublicSuffix(host, WITH_PRIVATE);
-  return suffix !== host && getPublicSuffix(`zz.${host}`, WITH_PRIVATE) === suffix;
-}
-
-// ../api/src/credentials/placeholder.ts
-var CREDENTIAL_NAME_PATTERN = "[a-z0-9][a-z0-9_-]{0,63}";
-var CREDENTIAL_NAME_RE = new RegExp(`^${CREDENTIAL_NAME_PATTERN}$`);
-var PLACEHOLDER_SOURCE = `\\{\\{credential:(${CREDENTIAL_NAME_PATTERN})\\}\\}`;
-var WHOLE_PLACEHOLDER_RE = new RegExp(`^${PLACEHOLDER_SOURCE}$`);
-
-// ../api/src/credentials/contract.ts
-var MAX_CREDENTIAL_VALUE_LENGTH = 16384;
-var MAX_CREDENTIAL_HOSTS = 20;
-var credentialNameSchema = z.string().regex(new RegExp(`^${CREDENTIAL_NAME_PATTERN}$`), "Use lowercase letters, digits, - and _ (max 64).");
-var credentialHostsSchema = z.array(z.string()).max(MAX_CREDENTIAL_HOSTS).transform((hosts, ctx) => {
-  const patterns = [];
-  for (const host of hosts) {
-    const result = validateHostPattern(host);
-    if (result.ok) patterns.push(result.pattern);
-    else ctx.addIssue({ code: "custom", message: `${host}: ${result.reason}` });
-  }
-  return [...new Set(patterns)];
-});
-var credentialSourceSchema = z.enum(["user", "agent", "chat-detected", "requested"]);
-var credentialSummarySchema = z.object({
-  name: z.string(),
-  label: z.string(),
-  placeholder: z.string(),
-  allowedHosts: z.array(z.string()),
-  source: credentialSourceSchema,
-  lastUsedAt: z.number().nullable()
-});
-var credentialsListResponseSchema = z.object({ credentials: z.array(credentialSummarySchema) });
-var credentialsPutRequestSchema = z.object({
-  name: credentialNameSchema,
-  label: z.string().trim().min(1).max(80).optional(),
-  value: z.string().min(1).max(MAX_CREDENTIAL_VALUE_LENGTH),
-  allowedHosts: credentialHostsSchema
-});
-var credentialsPutResponseSchema = z.object({
-  name: z.string(),
-  placeholder: z.string(),
-  replaced: z.boolean()
-});
-var credentialsDeleteRequestSchema = z.object({ name: credentialNameSchema });
-var credentialsDeleteResponseSchema = z.object({ name: z.string(), deleted: z.literal(true) });
-var brokerResolveResponseSchema = z.object({
-  credentials: z.array(z.object({ name: z.string(), value: z.string(), allowedHosts: z.array(z.string()) }))
-});
-var brokerUsageRequestSchema = z.object({
-  uses: z.array(z.object({ name: credentialNameSchema, host: z.string().max(253) })).max(100)
-});
-
-// src/commands/credentials/index.ts
-import { defineCommand } from "citty";
-var DOC = "__tooling__/docs/tools/baker/credentials.md";
-var STDIN_ONLY = 'The value is read from stdin only, never from the command line (argv is visible to other processes and lands in logs). Pipe it: printf %s "$VALUE" | baker credentials put <name> --host <host>. For a credential the user owns, call request_credential instead.';
-registerSchema({
-  command: "credentials.list",
-  description: "Start here: the credentials (API keys, tokens, passwords) this company stored, by name \u2014 never their values. Write the `placeholder` ({{credential:NAME}}) into an HTTPS request (curl header, URL, SDK config, JSON body) and the sandbox proxy sends the real value, only to the credential's allowedHosts. Nothing listed? Ask the user with the request_credential tool. Compact by default; --full adds source and lastUsedAt.",
-  args: {
-    full: { type: "boolean", description: "Add source and lastUsedAt per credential", required: false, default: false }
-  }
-});
-registerSchema({
-  command: "credentials.put",
-  description: `Store a credential YOU created on the user's behalf (e.g. a key you just generated through an API), so later requests can use {{credential:NAME}}. Example: printf %s "$KEY" | baker credentials put stripe-key --host api.stripe.com --label "Stripe key". The value comes from stdin ONLY. For a credential the user owns, call request_credential instead \u2014 never ask for it in chat. Replacing is allowed only for credentials the agent created.`,
-  args: {
-    name: { type: "positional", description: "Lowercase name: letters, digits, - and _ (max 64)", required: true },
-    host: {
-      type: "string",
-      description: "Website the value may be sent to (repeatable, or comma-separated): api.stripe.com, acme-store.myshopify.com",
-      required: true
-    },
-    label: { type: "string", description: "Human-readable label shown in Settings \u2192 Credentials", required: false }
-  }
-});
-registerSchema({
-  command: "credentials.delete",
-  description: "Delete a credential the agent created (e.g. a key it rotated out). Credentials the user added can only be removed by the user, in Settings \u2192 Credentials.",
-  args: {
-    name: { type: "positional", description: "Credential name", required: true }
-  }
-});
-async function readPipedValue() {
-  const stdin = process.stdin;
-  if (stdin.isTTY) return "";
-  const chunks = [];
-  for await (const chunk of stdin) {
-    chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
-  }
-  return Buffer.concat(chunks).toString("utf8").replace(/\r?\n$/, "");
-}
-function parseName(raw) {
-  const parsed = credentialNameSchema.safeParse(raw);
-  if (!parsed.success) {
-    failValidation(`Invalid credential name "${String(raw)}": use lowercase letters, digits, - and _ (max 64).`);
-  }
-  return parsed.data;
-}
-function parseHosts(rawArgs, parsed) {
-  const hosts = repeatedValues(rawArgs, "host", parsed).flatMap((value) => value.split(",")).map((host) => host.trim()).filter((host) => host !== "");
-  if (hosts.length === 0) {
-    failValidation("Name at least one website the value may be sent to: --host api.example.com (repeatable).");
-  }
-  const result = credentialHostsSchema.safeParse(hosts);
-  if (!result.success) {
-    failValidation(`Invalid --host: ${result.error.issues.map((issue) => issue.message).join("; ")}`);
-  }
-  return result.data;
-}
-var listCommand = defineCommand({
-  meta: {
-    name: "list",
-    description: "Start here: stored credentials by name with their {{credential:NAME}} placeholder and allowed websites. Never shows values."
-  },
-  args: {
-    full: { type: "boolean", description: "Add source and lastUsedAt", required: false, default: false }
-  },
-  run: async ({ args }) => {
-    try {
-      const response = await apiPost("/api/credentials/list", {});
-      const credentials = response.data.credentials.map(
-        (credential) => args.full ? credential : {
-          name: credential.name,
-          placeholder: credential.placeholder,
-          allowedHosts: credential.allowedHosts,
-          label: credential.label
-        }
-      );
-      writeJson({
-        ok: true,
-        data: { credentials },
-        meta: { count: credentials.length },
-        ...credentials.length === 0 ? {
-          hints: [
-            "No credentials stored. When the task needs one the user owns, call the request_credential tool (label, reason, allowedHosts) \u2014 never ask them to paste it in chat."
-          ]
-        } : {}
-      });
-    } catch (err) {
-      failApi(err);
-    }
-  }
-});
-var putCommand = defineCommand({
-  meta: {
-    name: "put",
-    description: `Store a credential you created on the user's behalf; the value is read from stdin only.
-Start here: printf %s "$KEY" | baker credentials put stripe-key --host api.stripe.com
-For a credential the user owns, call request_credential instead.`
-  },
-  args: {
-    name: { type: "positional", description: "Lowercase name: letters, digits, - and _ (max 64)", required: true },
-    host: {
-      type: "string",
-      description: "Website the value may be sent to (repeatable, or comma-separated)",
-      required: false
-    },
-    label: { type: "string", description: "Label shown in Settings \u2192 Credentials", required: false },
-    value: {
-      type: "string",
-      description: "Refused \u2014 never put a value on the command line. Pipe it on stdin.",
-      required: false
-    }
-  },
-  run: async ({ args, rawArgs }) => {
-    if (args.value !== void 0 || args._.length > 1) {
-      failValidation(STDIN_ONLY);
-    }
-    const name = parseName(args.name);
-    const allowedHosts = parseHosts(rawArgs, args.host);
-    const value = await readPipedValue();
-    if (value === "") {
-      failValidation(`Nothing was piped on stdin. ${STDIN_ONLY}`);
-    }
-    if (value.length > MAX_CREDENTIAL_VALUE_LENGTH) {
-      failValidation(`The value is longer than ${MAX_CREDENTIAL_VALUE_LENGTH} characters.`);
-    }
-    const body = { name, value, allowedHosts, ...args.label ? { label: args.label } : {} };
-    try {
-      const response = await apiPost("/api/credentials/put", body);
-      writeJson({
-        ok: true,
-        data: { name: response.data.name, placeholder: response.data.placeholder },
-        hints: [
-          `Use ${response.data.placeholder} in the request; the value is sent only to: ${allowedHosts.join(", ")}.`,
-          "Never echo, print or write the value anywhere \u2014 unset the shell variable that held it."
-        ]
-      });
-    } catch (err) {
-      failApi(err);
-    }
-  }
-});
-var deleteCommand = defineCommand({
-  meta: {
-    name: "delete",
-    description: "Delete a credential the agent created. User-added credentials are removed by the user in Settings \u2192 Credentials."
-  },
-  args: {
-    name: { type: "positional", description: "Credential name", required: true }
-  },
-  run: async ({ args }) => {
-    const name = parseName(args.name);
-    try {
-      const response = await apiPost("/api/credentials/delete", { name });
-      writeJson({ ok: true, data: response.data });
-    } catch (err) {
-      failApi(err);
-    }
-  }
-});
-var credentialsCommand = defineCommand({
-  meta: {
-    name: "credentials",
-    description: `Credentials (API keys, tokens, passwords) by name: write {{credential:NAME}} in an HTTPS request and the value is sent only to the websites it is bound to. You never see values.
-Full guide: ${DOC}`
-  },
-  subCommands: { list: listCommand, put: putCommand, delete: deleteCommand }
-});
-export {
-  credentialsCommand
-};
-//# sourceMappingURL=credentials-EIPEZ2C2.js.map

package/dist/credentials-EIPEZ2C2.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../api/src/credentials/contract.ts","../../api/src/credentials/hosts.ts","../../api/src/credentials/placeholder.ts","../src/commands/credentials/index.ts"],"sourcesContent":["/**\n * Contract for `/api/credentials` (`baker credentials`) and the sandbox\n * broker's `/api/runtime/credentials/resolve`. Only the broker route ever\n * carries a value back; every agent-facing shape is metadata.\n */\nimport { z } from \"zod\";\nimport { validateHostPattern } from \"./hosts\";\nimport { CREDENTIAL_NAME_PATTERN } from \"./placeholder\";\n\nexport const MAX_CREDENTIAL_VALUE_LENGTH = 16_384;\nexport const MAX_CREDENTIAL_HOSTS = 20;\n\nexport const credentialNameSchema = z\n  .string()\n  .regex(new RegExp(`^${CREDENTIAL_NAME_PATTERN}$`), \"Use lowercase letters, digits, - and _ (max 64).\");\n\nexport const credentialHostsSchema = z\n  .array(z.string())\n  .max(MAX_CREDENTIAL_HOSTS)\n  .transform((hosts, ctx) => {\n    const patterns: string[] = [];\n    for (const host of hosts) {\n      const result = validateHostPattern(host);\n      if (result.ok) patterns.push(result.pattern);\n      else ctx.addIssue({ code: \"custom\", message: `${host}: ${result.reason}` });\n    }\n    return [...new Set(patterns)];\n  });\n\nexport const credentialSourceSchema = z.enum([\"user\", \"agent\", \"chat-detected\", \"requested\"]);\nexport type CredentialSource = z.infer<typeof credentialSourceSchema>;\n\nexport const credentialSummarySchema = z.object({\n  name: z.string(),\n  label: z.string(),\n  placeholder: z.string(),\n  allowedHosts: z.array(z.string()),\n  source: credentialSourceSchema,\n  lastUsedAt: z.number().nullable(),\n});\nexport type CredentialSummary = z.infer<typeof credentialSummarySchema>;\n\nexport const credentialsListResponseSchema = z.object({ credentials: z.array(credentialSummarySchema) });\nexport type CredentialsListResponse = z.infer<typeof credentialsListResponseSchema>;\n\nexport const credentialsPutRequestSchema = z.object({\n  name: credentialNameSchema,\n  label: z.string().trim().min(1).max(80).optional(),\n  value: z.string().min(1).max(MAX_CREDENTIAL_VALUE_LENGTH),\n  allowedHosts: credentialHostsSchema,\n});\nexport type CredentialsPutRequest = z.input<typeof credentialsPutRequestSchema>;\n\nexport const credentialsPutResponseSchema = z.object({\n  name: z.string(),\n  placeholder: z.string(),\n  replaced: z.boolean(),\n});\nexport type CredentialsPutResponse = z.infer<typeof credentialsPutResponseSchema>;\n\nexport const credentialsDeleteRequestSchema = z.object({ name: credentialNameSchema });\nexport type CredentialsDeleteRequest = z.infer<typeof credentialsDeleteRequestSchema>;\n\nexport const credentialsDeleteResponseSchema = z.object({ name: z.string(), deleted: z.literal(true) });\nexport type CredentialsDeleteResponse = z.infer<typeof credentialsDeleteResponseSchema>;\n\nexport const brokerResolveResponseSchema = z.object({\n  credentials: z.array(z.object({ name: z.string(), value: z.string(), allowedHosts: z.array(z.string()) })),\n});\nexport type BrokerResolveResponse = z.infer<typeof brokerResolveResponseSchema>;\n\nexport const brokerUsageRequestSchema = z.object({\n  uses: z.array(z.object({ name: credentialNameSchema, host: z.string().max(253) })).max(100),\n});\nexport type BrokerUsageRequest = z.infer<typeof brokerUsageRequestSchema>;\n","/**\n * Where a credential may be sent. The sandbox proxy only substitutes a\n * credential into a request whose host one of its patterns allows, so a\n * prompt-injected agent cannot post the value to a host it controls.\n */\nimport { getPublicSuffix, parse } from \"tldts\";\n\nexport type HostPatternResult = { ok: true; pattern: string } | { ok: false; reason: string };\n\nfunction normaliseHost(host: string): string {\n  return host.trim().toLowerCase().replace(/\\.$/, \"\");\n}\n\n/** An international name (`bücher.de`) in the ASCII form a request carries (`xn--bcher-kva.de`); unchanged when it is not a host. */\nfunction asciiHost(host: string): string {\n  // Only a bare name is converted: the URL parser would silently drop a path or a `user@` the person typed.\n  if (!/[\\u0080-\\u{10FFFF}]/u.test(host) || /[/?#@:\\\\%[\\]\\s]/.test(host)) return host;\n  const url = `http://${host}`;\n  return URL.canParse(url) ? new URL(url).hostname : host;\n}\n\nexport function validateHostPattern(raw: string): HostPatternResult {\n  const typed = normaliseHost(raw);\n  const wildcard = typed.startsWith(\"*.\");\n  const host = asciiHost(wildcard ? typed.slice(2) : typed);\n  const pattern = wildcard ? `*.${host}` : host;\n  if (host === \"\" || host.includes(\"*\")) {\n    return { ok: false, reason: \"Use a website address like api.example.com or *.example.com.\" };\n  }\n  const parsed = parse(host);\n  if (parsed.isIp || host.startsWith(\"[\")) {\n    return { ok: false, reason: \"Use a website address, not an IP address.\" };\n  }\n  if (parsed.hostname !== host || parsed.domain === null) {\n    return { ok: false, reason: \"Use only the website address, like api.example.com.\" };\n  }\n  if (wildcard && !wildcardSafe(host)) {\n    return { ok: false, reason: `*.${host} would allow any website. Name the company's own address.` };\n  }\n  return { ok: true, pattern };\n}\n\n/**\n * Cloud hosts where anyone can own a subdomain and read the headers it is\n * sent, which the Public Suffix List does not list as a suffix: API Gateway\n * and Lambda URLs under amazonaws.com, and a Cloud Storage bucket at\n * `<bucket>.storage.googleapis.com`, and AWS's newer `on.aws`, whose Lambda\n * URLs sit two labels below it where the check below does not look.\n */\nconst OPEN_HOSTING_DOMAINS = [\"amazonaws.com\", \"cloudfront.net\", \"googleapis.com\", \"on.aws\"];\n\nconst WITH_PRIVATE = { allowPrivateDomains: true };\n\n/**\n * Whether `*.host` names one owner's sites. A public suffix (ICANN `com`, or\n * a private one such as `vercel.app`) is shared by everyone who can sign up,\n * and so is a base with one just below it (`run.app`, whose Cloud Run services\n * live under `a.run.app`).\n */\nfunction wildcardSafe(host: string): boolean {\n  if (OPEN_HOSTING_DOMAINS.some((domain) => host === domain || host.endsWith(`.${domain}`))) return false;\n  const suffix = getPublicSuffix(host, WITH_PRIVATE);\n  return suffix !== host && getPublicSuffix(`zz.${host}`, WITH_PRIVATE) === suffix;\n}\n\nexport function hostAllowed(host: string, patterns: readonly string[]): boolean {\n  const target = normaliseHost(host);\n  return patterns.some((raw) => {\n    const pattern = normaliseHost(raw);\n    return pattern.startsWith(\"*.\") ? target.endsWith(pattern.slice(1)) : target === pattern;\n  });\n}\n","/**\n * The one grammar an agent, a chat message and the sandbox proxy share for\n * \"the stored credential called NAME\": `{{credential:NAME}}`. The value never\n * appears in text; the proxy swaps the placeholder in on the way out.\n */\n\nexport const CREDENTIAL_NAME_PATTERN = \"[a-z0-9][a-z0-9_-]{0,63}\";\nconst CREDENTIAL_NAME_RE = new RegExp(`^${CREDENTIAL_NAME_PATTERN}$`);\nconst PLACEHOLDER_SOURCE = `\\\\{\\\\{credential:(${CREDENTIAL_NAME_PATTERN})\\\\}\\\\}`;\n\nexport type CredentialPlaceholder = { name: string; start: number; end: number };\n\nexport function isCredentialName(name: string): boolean {\n  return CREDENTIAL_NAME_RE.test(name);\n}\n\nexport function renderPlaceholder(name: string): string {\n  return `{{credential:${name}}}`;\n}\n\nexport function parsePlaceholders(text: string): CredentialPlaceholder[] {\n  return [...text.matchAll(new RegExp(PLACEHOLDER_SOURCE, \"g\"))].map((match) => ({\n    name: match[1] ?? \"\",\n    start: match.index,\n    end: match.index + match[0].length,\n  }));\n}\n\nconst WHOLE_PLACEHOLDER_RE = new RegExp(`^${PLACEHOLDER_SOURCE}$`);\n\n/** The credential a value stands for when the whole value is one placeholder, as a tag's secret field holds it. */\nexport function credentialNamedBy(value: string): string | null {\n  return WHOLE_PLACEHOLDER_RE.exec(value.trim())?.[1] ?? null;\n}\n\n/** A readable label (\"Meta access token\") as a placeholder name (\"meta-access-token\"). */\nexport function slugifyCredentialName(label: string): string {\n  const slug = label\n    .normalize(\"NFKD\")\n    .replace(/[̀-ͯ]/g, \"\")\n    .toLowerCase()\n    .replace(/[^a-z0-9_-]+/g, \"-\")\n    .replace(/-{2,}/g, \"-\")\n    .replace(/^[-_]+|[-_]+$/g, \"\")\n    .slice(0, 64)\n    .replace(/[-_]+$/g, \"\");\n  return slug === \"\" ? \"credential\" : slug;\n}\n","import type {\n  CredentialsDeleteResponse,\n  CredentialsListResponse,\n  CredentialsPutRequest,\n  CredentialsPutResponse,\n} from \"@baker/api/credentials\";\nimport { credentialHostsSchema, credentialNameSchema, MAX_CREDENTIAL_VALUE_LENGTH } from \"@baker/api/credentials\";\nimport { defineCommand } from \"citty\";\nimport { apiPost } from \"../../client.ts\";\nimport { repeatedValues } from \"../../lib/repeatedFlags.ts\";\nimport { writeJson } from \"../../output.ts\";\nimport { registerSchema } from \"../../schemas.ts\";\nimport { failApi, failValidation } from \"../actions/shared.ts\";\n\n/** The backend's success envelope around a contract response. */\ntype Ok<T> = { ok: true; data: T };\n\nconst DOC = \"__tooling__/docs/tools/baker/credentials.md\";\n\nconst STDIN_ONLY =\n  'The value is read from stdin only, never from the command line (argv is visible to other processes and lands in logs). Pipe it: printf %s \"$VALUE\" | baker credentials put <name> --host <host>. For a credential the user owns, call request_credential instead.';\n\nregisterSchema({\n  command: \"credentials.list\",\n  description:\n    \"Start here: the credentials (API keys, tokens, passwords) this company stored, by name — never their values. Write the `placeholder` ({{credential:NAME}}) into an HTTPS request (curl header, URL, SDK config, JSON body) and the sandbox proxy sends the real value, only to the credential's allowedHosts. Nothing listed? Ask the user with the request_credential tool. Compact by default; --full adds source and lastUsedAt.\",\n  args: {\n    full: { type: \"boolean\", description: \"Add source and lastUsedAt per credential\", required: false, default: false },\n  },\n});\n\nregisterSchema({\n  command: \"credentials.put\",\n  description:\n    'Store a credential YOU created on the user\\'s behalf (e.g. a key you just generated through an API), so later requests can use {{credential:NAME}}. Example: printf %s \"$KEY\" | baker credentials put stripe-key --host api.stripe.com --label \"Stripe key\". The value comes from stdin ONLY. For a credential the user owns, call request_credential instead — never ask for it in chat. Replacing is allowed only for credentials the agent created.',\n  args: {\n    name: { type: \"positional\", description: \"Lowercase name: letters, digits, - and _ (max 64)\", required: true },\n    host: {\n      type: \"string\",\n      description:\n        \"Website the value may be sent to (repeatable, or comma-separated): api.stripe.com, acme-store.myshopify.com\",\n      required: true,\n    },\n    label: { type: \"string\", description: \"Human-readable label shown in Settings → Credentials\", required: false },\n  },\n});\n\nregisterSchema({\n  command: \"credentials.delete\",\n  description:\n    \"Delete a credential the agent created (e.g. a key it rotated out). Credentials the user added can only be removed by the user, in Settings → Credentials.\",\n  args: {\n    name: { type: \"positional\", description: \"Credential name\", required: true },\n  },\n});\n\n/** Everything piped on stdin, with one trailing newline trimmed (what `echo` adds). */\nasync function readPipedValue(): Promise<string> {\n  const stdin = process.stdin;\n  if (stdin.isTTY) return \"\";\n  const chunks: Buffer[] = [];\n  for await (const chunk of stdin) {\n    chunks.push(typeof chunk === \"string\" ? Buffer.from(chunk) : chunk);\n  }\n  return Buffer.concat(chunks)\n    .toString(\"utf8\")\n    .replace(/\\r?\\n$/, \"\");\n}\n\nfunction parseName(raw: unknown): string {\n  const parsed = credentialNameSchema.safeParse(raw);\n  if (!parsed.success) {\n    failValidation(`Invalid credential name \"${String(raw)}\": use lowercase letters, digits, - and _ (max 64).`);\n  }\n  return parsed.data;\n}\n\nfunction parseHosts(rawArgs: readonly string[], parsed: unknown): string[] {\n  const hosts = repeatedValues(rawArgs, \"host\", parsed)\n    .flatMap((value) => value.split(\",\"))\n    .map((host) => host.trim())\n    .filter((host) => host !== \"\");\n  if (hosts.length === 0) {\n    failValidation(\"Name at least one website the value may be sent to: --host api.example.com (repeatable).\");\n  }\n  const result = credentialHostsSchema.safeParse(hosts);\n  if (!result.success) {\n    failValidation(`Invalid --host: ${result.error.issues.map((issue) => issue.message).join(\"; \")}`);\n  }\n  return result.data;\n}\n\nconst listCommand = defineCommand({\n  meta: {\n    name: \"list\",\n    description:\n      \"Start here: stored credentials by name with their {{credential:NAME}} placeholder and allowed websites. Never shows values.\",\n  },\n  args: {\n    full: { type: \"boolean\", description: \"Add source and lastUsedAt\", required: false, default: false },\n  },\n  run: async ({ args }) => {\n    try {\n      const response = await apiPost<Ok<CredentialsListResponse>>(\"/api/credentials/list\", {});\n      const credentials = response.data.credentials.map((credential) =>\n        args.full\n          ? credential\n          : {\n              name: credential.name,\n              placeholder: credential.placeholder,\n              allowedHosts: credential.allowedHosts,\n              label: credential.label,\n            },\n      );\n      writeJson({\n        ok: true,\n        data: { credentials },\n        meta: { count: credentials.length },\n        ...(credentials.length === 0\n          ? {\n              hints: [\n                \"No credentials stored. When the task needs one the user owns, call the request_credential tool (label, reason, allowedHosts) — never ask them to paste it in chat.\",\n              ],\n            }\n          : {}),\n      });\n    } catch (err) {\n      failApi(err);\n    }\n  },\n});\n\nconst putCommand = defineCommand({\n  meta: {\n    name: \"put\",\n    description: `Store a credential you created on the user's behalf; the value is read from stdin only.\nStart here: printf %s \"$KEY\" | baker credentials put stripe-key --host api.stripe.com\nFor a credential the user owns, call request_credential instead.`,\n  },\n  args: {\n    name: { type: \"positional\", description: \"Lowercase name: letters, digits, - and _ (max 64)\", required: true },\n    host: {\n      type: \"string\",\n      description: \"Website the value may be sent to (repeatable, or comma-separated)\",\n      required: false,\n    },\n    label: { type: \"string\", description: \"Label shown in Settings → Credentials\", required: false },\n    value: {\n      type: \"string\",\n      description: \"Refused — never put a value on the command line. Pipe it on stdin.\",\n      required: false,\n    },\n  },\n  run: async ({ args, rawArgs }) => {\n    if (args.value !== undefined || args._.length > 1) {\n      failValidation(STDIN_ONLY);\n    }\n    const name = parseName(args.name);\n    const allowedHosts = parseHosts(rawArgs, args.host);\n    const value = await readPipedValue();\n    if (value === \"\") {\n      failValidation(`Nothing was piped on stdin. ${STDIN_ONLY}`);\n    }\n    if (value.length > MAX_CREDENTIAL_VALUE_LENGTH) {\n      failValidation(`The value is longer than ${MAX_CREDENTIAL_VALUE_LENGTH} characters.`);\n    }\n    const body: CredentialsPutRequest = { name, value, allowedHosts, ...(args.label ? { label: args.label } : {}) };\n    try {\n      const response = await apiPost<Ok<CredentialsPutResponse>>(\"/api/credentials/put\", body);\n      writeJson({\n        ok: true,\n        data: { name: response.data.name, placeholder: response.data.placeholder },\n        hints: [\n          `Use ${response.data.placeholder} in the request; the value is sent only to: ${allowedHosts.join(\", \")}.`,\n          \"Never echo, print or write the value anywhere — unset the shell variable that held it.\",\n        ],\n      });\n    } catch (err) {\n      failApi(err);\n    }\n  },\n});\n\nconst deleteCommand = defineCommand({\n  meta: {\n    name: \"delete\",\n    description:\n      \"Delete a credential the agent created. User-added credentials are removed by the user in Settings → Credentials.\",\n  },\n  args: {\n    name: { type: \"positional\", description: \"Credential name\", required: true },\n  },\n  run: async ({ args }) => {\n    const name = parseName(args.name);\n    try {\n      const response = await apiPost<Ok<CredentialsDeleteResponse>>(\"/api/credentials/delete\", { name });\n      writeJson({ ok: true, data: response.data });\n    } catch (err) {\n      failApi(err);\n    }\n  },\n});\n\nexport const credentialsCommand = defineCommand({\n  meta: {\n    name: \"credentials\",\n    description: `Credentials (API keys, tokens, passwords) by name: write {{credential:NAME}} in an HTTPS request and the value is sent only to the websites it is bound to. You never see values.\nFull guide: ${DOC}`,\n  },\n  subCommands: { list: listCommand, put: putCommand, delete: deleteCommand },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKA,SAAS,SAAS;;;ACIlB,SAAS,cAAc,MAAsB;AAC3C,SAAO,KAAK,KAAK,EAAE,YAAY,EAAE,QAAQ,OAAO,EAAE;AACpD;AAGA,SAAS,UAAU,MAAsB;AAEvC,MAAI,CAAC,uBAAuB,KAAK,IAAI,KAAK,kBAAkB,KAAK,IAAI,EAAG,QAAO;AAC/E,QAAM,MAAM,UAAU,IAAI;AAC1B,SAAO,IAAI,SAAS,GAAG,IAAI,IAAI,IAAI,GAAG,EAAE,WAAW;AACrD;AAEO,SAAS,oBAAoB,KAAgC;AAClE,QAAM,QAAQ,cAAc,GAAG;AAC/B,QAAM,WAAW,MAAM,WAAW,IAAI;AACtC,QAAM,OAAO,UAAU,WAAW,MAAM,MAAM,CAAC,IAAI,KAAK;AACxD,QAAM,UAAU,WAAW,KAAK,IAAI,KAAK;AACzC,MAAI,SAAS,MAAM,KAAK,SAAS,GAAG,GAAG;AACrC,WAAO,EAAE,IAAI,OAAO,QAAQ,+DAA+D;AAAA,EAC7F;AACA,QAAM,SAAS,MAAM,IAAI;AACzB,MAAI,OAAO,QAAQ,KAAK,WAAW,GAAG,GAAG;AACvC,WAAO,EAAE,IAAI,OAAO,QAAQ,4CAA4C;AAAA,EAC1E;AACA,MAAI,OAAO,aAAa,QAAQ,OAAO,WAAW,MAAM;AACtD,WAAO,EAAE,IAAI,OAAO,QAAQ,sDAAsD;AAAA,EACpF;AACA,MAAI,YAAY,CAAC,aAAa,IAAI,GAAG;AACnC,WAAO,EAAE,IAAI,OAAO,QAAQ,KAAK,IAAI,4DAA4D;AAAA,EACnG;AACA,SAAO,EAAE,IAAI,MAAM,QAAQ;AAC7B;AASA,IAAM,uBAAuB,CAAC,iBAAiB,kBAAkB,kBAAkB,QAAQ;AAE3F,IAAM,eAAe,EAAE,qBAAqB,KAAK;AAQjD,SAAS,aAAa,MAAuB;AAC3C,MAAI,qBAAqB,KAAK,CAAC,WAAW,SAAS,UAAU,KAAK,SAAS,IAAI,MAAM,EAAE,CAAC,EAAG,QAAO;AAClG,QAAM,SAAS,gBAAgB,MAAM,YAAY;AACjD,SAAO,WAAW,QAAQ,gBAAgB,MAAM,IAAI,IAAI,YAAY,MAAM;AAC5E;;;ACzDO,IAAM,0BAA0B;AACvC,IAAM,qBAAqB,IAAI,OAAO,IAAI,uBAAuB,GAAG;AACpE,IAAM,qBAAqB,qBAAqB,uBAAuB;AAoBvE,IAAM,uBAAuB,IAAI,OAAO,IAAI,kBAAkB,GAAG;;;AFnB1D,IAAM,8BAA8B;AACpC,IAAM,uBAAuB;AAE7B,IAAM,uBAAuB,EACjC,OAAO,EACP,MAAM,IAAI,OAAO,IAAI,uBAAuB,GAAG,GAAG,kDAAkD;AAEhG,IAAM,wBAAwB,EAClC,MAAM,EAAE,OAAO,CAAC,EAChB,IAAI,oBAAoB,EACxB,UAAU,CAAC,OAAO,QAAQ;AACzB,QAAM,WAAqB,CAAC;AAC5B,aAAW,QAAQ,OAAO;AACxB,UAAM,SAAS,oBAAoB,IAAI;AACvC,QAAI,OAAO,GAAI,UAAS,KAAK,OAAO,OAAO;AAAA,QACtC,KAAI,SAAS,EAAE,MAAM,UAAU,SAAS,GAAG,IAAI,KAAK,OAAO,MAAM,GAAG,CAAC;AAAA,EAC5E;AACA,SAAO,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC;AAC9B,CAAC;AAEI,IAAM,yBAAyB,EAAE,KAAK,CAAC,QAAQ,SAAS,iBAAiB,WAAW,CAAC;AAGrF,IAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,MAAM,EAAE,OAAO;AAAA,EACf,OAAO,EAAE,OAAO;AAAA,EAChB,aAAa,EAAE,OAAO;AAAA,EACtB,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EAChC,QAAQ;AAAA,EACR,YAAY,EAAE,OAAO,EAAE,SAAS;AAClC,CAAC;AAGM,IAAM,gCAAgC,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,EAAE,CAAC;AAGhG,IAAM,8BAA8B,EAAE,OAAO;AAAA,EAClD,MAAM;AAAA,EACN,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EACjD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,2BAA2B;AAAA,EACxD,cAAc;AAChB,CAAC;AAGM,IAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,MAAM,EAAE,OAAO;AAAA,EACf,aAAa,EAAE,OAAO;AAAA,EACtB,UAAU,EAAE,QAAQ;AACtB,CAAC;AAGM,IAAM,iCAAiC,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAG9E,IAAM,kCAAkC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,QAAQ,IAAI,EAAE,CAAC;AAG/F,IAAM,8BAA8B,EAAE,OAAO;AAAA,EAClD,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,EAAE,OAAO,GAAG,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;AAC3G,CAAC;AAGM,IAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,sBAAsB,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,GAAG;AAC5F,CAAC;;;AGlED,SAAS,qBAAqB;AAU9B,IAAM,MAAM;AAEZ,IAAM,aACJ;AAEF,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AAAA,IACJ,MAAM,EAAE,MAAM,WAAW,aAAa,4CAA4C,UAAU,OAAO,SAAS,MAAM;AAAA,EACpH;AACF,CAAC;AAED,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AAAA,IACJ,MAAM,EAAE,MAAM,cAAc,aAAa,qDAAqD,UAAU,KAAK;AAAA,IAC7G,MAAM;AAAA,MACJ,MAAM;AAAA,MACN,aACE;AAAA,MACF,UAAU;AAAA,IACZ;AAAA,IACA,OAAO,EAAE,MAAM,UAAU,aAAa,6DAAwD,UAAU,MAAM;AAAA,EAChH;AACF,CAAC;AAED,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AAAA,IACJ,MAAM,EAAE,MAAM,cAAc,aAAa,mBAAmB,UAAU,KAAK;AAAA,EAC7E;AACF,CAAC;AAGD,eAAe,iBAAkC;AAC/C,QAAM,QAAQ,QAAQ;AACtB,MAAI,MAAM,MAAO,QAAO;AACxB,QAAM,SAAmB,CAAC;AAC1B,mBAAiB,SAAS,OAAO;AAC/B,WAAO,KAAK,OAAO,UAAU,WAAW,OAAO,KAAK,KAAK,IAAI,KAAK;AAAA,EACpE;AACA,SAAO,OAAO,OAAO,MAAM,EACxB,SAAS,MAAM,EACf,QAAQ,UAAU,EAAE;AACzB;AAEA,SAAS,UAAU,KAAsB;AACvC,QAAM,SAAS,qBAAqB,UAAU,GAAG;AACjD,MAAI,CAAC,OAAO,SAAS;AACnB,mBAAe,4BAA4B,OAAO,GAAG,CAAC,qDAAqD;AAAA,EAC7G;AACA,SAAO,OAAO;AAChB;AAEA,SAAS,WAAW,SAA4B,QAA2B;AACzE,QAAM,QAAQ,eAAe,SAAS,QAAQ,MAAM,EACjD,QAAQ,CAAC,UAAU,MAAM,MAAM,GAAG,CAAC,EACnC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,SAAS,EAAE;AAC/B,MAAI,MAAM,WAAW,GAAG;AACtB,mBAAe,0FAA0F;AAAA,EAC3G;AACA,QAAM,SAAS,sBAAsB,UAAU,KAAK;AACpD,MAAI,CAAC,OAAO,SAAS;AACnB,mBAAe,mBAAmB,OAAO,MAAM,OAAO,IAAI,CAAC,UAAU,MAAM,OAAO,EAAE,KAAK,IAAI,CAAC,EAAE;AAAA,EAClG;AACA,SAAO,OAAO;AAChB;AAEA,IAAM,cAAc,cAAc;AAAA,EAChC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aACE;AAAA,EACJ;AAAA,EACA,MAAM;AAAA,IACJ,MAAM,EAAE,MAAM,WAAW,aAAa,6BAA6B,UAAU,OAAO,SAAS,MAAM;AAAA,EACrG;AAAA,EACA,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,QAAI;AACF,YAAM,WAAW,MAAM,QAAqC,yBAAyB,CAAC,CAAC;AACvF,YAAM,cAAc,SAAS,KAAK,YAAY;AAAA,QAAI,CAAC,eACjD,KAAK,OACD,aACA;AAAA,UACE,MAAM,WAAW;AAAA,UACjB,aAAa,WAAW;AAAA,UACxB,cAAc,WAAW;AAAA,UACzB,OAAO,WAAW;AAAA,QACpB;AAAA,MACN;AACA,gBAAU;AAAA,QACR,IAAI;AAAA,QACJ,MAAM,EAAE,YAAY;AAAA,QACpB,MAAM,EAAE,OAAO,YAAY,OAAO;AAAA,QAClC,GAAI,YAAY,WAAW,IACvB;AAAA,UACE,OAAO;AAAA,YACL;AAAA,UACF;AAAA,QACF,IACA,CAAC;AAAA,MACP,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,cAAQ,GAAG;AAAA,IACb;AAAA,EACF;AACF,CAAC;AAED,IAAM,aAAa,cAAc;AAAA,EAC/B,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA,EAGf;AAAA,EACA,MAAM;AAAA,IACJ,MAAM,EAAE,MAAM,cAAc,aAAa,qDAAqD,UAAU,KAAK;AAAA,IAC7G,MAAM;AAAA,MACJ,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,OAAO,EAAE,MAAM,UAAU,aAAa,8CAAyC,UAAU,MAAM;AAAA,IAC/F,OAAO;AAAA,MACL,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,EACF;AAAA,EACA,KAAK,OAAO,EAAE,MAAM,QAAQ,MAAM;AAChC,QAAI,KAAK,UAAU,UAAa,KAAK,EAAE,SAAS,GAAG;AACjD,qBAAe,UAAU;AAAA,IAC3B;AACA,UAAM,OAAO,UAAU,KAAK,IAAI;AAChC,UAAM,eAAe,WAAW,SAAS,KAAK,IAAI;AAClD,UAAM,QAAQ,MAAM,eAAe;AACnC,QAAI,UAAU,IAAI;AAChB,qBAAe,+BAA+B,UAAU,EAAE;AAAA,IAC5D;AACA,QAAI,MAAM,SAAS,6BAA6B;AAC9C,qBAAe,4BAA4B,2BAA2B,cAAc;AAAA,IACtF;AACA,UAAM,OAA8B,EAAE,MAAM,OAAO,cAAc,GAAI,KAAK,QAAQ,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC,EAAG;AAC9G,QAAI;AACF,YAAM,WAAW,MAAM,QAAoC,wBAAwB,IAAI;AACvF,gBAAU;AAAA,QACR,IAAI;AAAA,QACJ,MAAM,EAAE,MAAM,SAAS,KAAK,MAAM,aAAa,SAAS,KAAK,YAAY;AAAA,QACzE,OAAO;AAAA,UACL,OAAO,SAAS,KAAK,WAAW,+CAA+C,aAAa,KAAK,IAAI,CAAC;AAAA,UACtG;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,cAAQ,GAAG;AAAA,IACb;AAAA,EACF;AACF,CAAC;AAED,IAAM,gBAAgB,cAAc;AAAA,EAClC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aACE;AAAA,EACJ;AAAA,EACA,MAAM;AAAA,IACJ,MAAM,EAAE,MAAM,cAAc,aAAa,mBAAmB,UAAU,KAAK;AAAA,EAC7E;AAAA,EACA,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,UAAM,OAAO,UAAU,KAAK,IAAI;AAChC,QAAI;AACF,YAAM,WAAW,MAAM,QAAuC,2BAA2B,EAAE,KAAK,CAAC;AACjG,gBAAU,EAAE,IAAI,MAAM,MAAM,SAAS,KAAK,CAAC;AAAA,IAC7C,SAAS,KAAK;AACZ,cAAQ,GAAG;AAAA,IACb;AAAA,EACF;AACF,CAAC;AAEM,IAAM,qBAAqB,cAAc;AAAA,EAC9C,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,cACH,GAAG;AAAA,EACf;AAAA,EACA,aAAa,EAAE,MAAM,aAAa,KAAK,YAAY,QAAQ,cAAc;AAC3E,CAAC;","names":[]}

package/dist/critique-BADMZAZP.js

@@ -1,230 +0,0 @@
-import {
-  FRAME_PLACEHOLDER_NOTE,
-  exitOnPrepareError,
-  prepareCanvas
-} from "./chunk-RVEY7BTT.js";
-import "./chunk-P6BKKUSX.js";
-import "./chunk-RFIUOQLN.js";
-import "./chunk-WHBFXR6F.js";
-import "./chunk-DQVI7GCX.js";
-import "./chunk-EKX37C3T.js";
-import "./chunk-SWN6OHXG.js";
-import "./chunk-FPWQA7TK.js";
-import "./chunk-A3IQAONL.js";
-import "./chunk-SVBJ56T7.js";
-import "./chunk-XQXZJ5IR.js";
-import "./chunk-3YJNSUNF.js";
-import "./chunk-QPESDKZC.js";
-import "./chunk-E44NXCTL.js";
-import "./chunk-EJGAJHLB.js";
-import {
-  briefCopyLines,
-  frameDescriptionOf,
-  nativeDialogueOf
-} from "./chunk-TX7CQTD4.js";
-import "./chunk-F4YQ5PVR.js";
-import "./chunk-DGCUPJZD.js";
-import "./chunk-MVD7QIXI.js";
-import {
-  COPY_DIRECTIVE_HEADER
-} from "./chunk-LRV6M2WB.js";
-import "./chunk-7HZSORAB.js";
-import "./chunk-MCJ5I5LR.js";
-import "./chunk-2WZI36D3.js";
-import "./chunk-65Y3RCWP.js";
-import "./chunk-LNNTHEL7.js";
-import "./chunk-FOMFU2RX.js";
-import "./chunk-PSGIHSNC.js";
-import "./chunk-PONLPYD7.js";
-import "./chunk-JND6XSGZ.js";
-import "./chunk-CAZGM2NX.js";
-import "./chunk-NZS3KEQ2.js";
-import "./chunk-GIWHHCD6.js";
-import "./chunk-NSBNIPIW.js";
-import "./chunk-2TOIY2WN.js";
-import "./chunk-X7VQFLHI.js";
-import "./chunk-LU4HI4KI.js";
-import "./chunk-LGK7UWBN.js";
-import "./chunk-Q7US4OOA.js";
-import "./chunk-YQSBHWOI.js";
-
-// src/commands/canvas/critique.ts
-import path from "path";
-import { defineCommand } from "citty";
-
-// src/engine/scaffold/lib/critique.ts
-var VIBE_CUE = /\b(light|lighting|golden|moody|warm|cool|tone|grade|contrast|shadow|glow|rim|backlit|neon|soft)\b/i;
-var MECHANISM_CUE = /\b(because|works by|so that|mechanism|proof|guarantee|clinically|backed by|the reason|that's why)\b/i;
-function promptOf(node) {
-  const p = node?.params?.prompt;
-  return typeof p === "string" ? p : "";
-}
-function round(n) {
-  return Math.round(n * 100) / 100;
-}
-function frameLook(node) {
-  const description = frameDescriptionOf(promptOf(node)).trim();
-  return description.endsWith(FRAME_PLACEHOLDER_NOTE) ? "" : description;
-}
-function creativeText(nodes) {
-  return nodes.flatMap((n) => {
-    if (n.type === "image_generate") return [frameLook(n)];
-    if (n.type === "video_generate") return [nativeDialogueOf(promptOf(n)) ?? ""];
-    if (n.type === "tts" && typeof n.params?.text === "string") return [n.params.text];
-    return [];
-  }).join("\n");
-}
-function scoreHookStrength(nodes, scene0, hasOverlay) {
-  const scene0Text = scene0.map((n) => promptOf(n)).join("\n");
-  const frames = scene0.filter((n) => n.type === "image_generate");
-  const look = (frames.length > 0 ? frames.map(frameLook) : scene0.map((n) => promptOf(n))).join("\n");
-  const hookClip = scene0.find((n) => n.type === "video_generate");
-  const hasSound = hookClip?.params?.generate_audio === true || /Dialogue:|Audio:/.test(scene0Text) || nodes.some((n) => n.type === "tts" || n.type === "dialogue");
-  const layers = [hasOverlay, hasSound, look.trim().length > 40, VIBE_CUE.test(look)];
-  const layerCount = layers.filter(Boolean).length;
-  return {
-    dimension: "hook_strength",
-    score: round(hookClip ? layerCount / 4 : 0.5),
-    note: hookClip ? `hook works on ${layerCount}/4 layers (text/sound/visual/vibe)` : "no scene-0 clip found \u2014 is this a video creative?"
-  };
-}
-function scoreFirstFrameLegibility(hasOverlay) {
-  return {
-    dimension: "first_frame_legibility",
-    score: hasOverlay ? 1 : 0.4,
-    note: hasOverlay ? "a designed overlay layer carries the sound-off message" : "footage-only \u2014 the first frame may not read with sound off; consider an overlay hook"
-  };
-}
-function scoreRetentionRisk(videoNodes) {
-  let saggy = 0;
-  for (const n of videoNodes) {
-    const dur = typeof n.params?.duration === "number" ? n.params.duration : 0;
-    const spoken = /Dialogue:/.test(promptOf(n)) || n.params?.generate_audio === true;
-    if (dur >= 8 && !spoken) saggy += 1;
-  }
-  return {
-    dimension: "retention_risk",
-    score: round(videoNodes.length > 0 ? 1 - Math.min(1, saggy / videoNodes.length) : 0.7),
-    note: saggy > 0 ? `${saggy} long clip(s) with no spoken line may sag` : "no obvious sag points"
-  };
-}
-function scoreMechanismClarity(allPromptText) {
-  const clear = MECHANISM_CUE.test(allPromptText);
-  return {
-    dimension: "mechanism_clarity",
-    score: clear ? 1 : 0.4,
-    note: clear ? "states a mechanism/proof" : "no clear 'why it works' \u2014 add the mechanism"
-  };
-}
-function clamp01(n) {
-  return Math.max(0, Math.min(1, n));
-}
-function staticCopyLines(nodes) {
-  const sized = nodes.find((n) => n.type === "static_format")?.params?.copy;
-  if (Array.isArray(sized)) {
-    return sized.flatMap(
-      (l) => typeof l?.text === "string" ? [l.text] : []
-    );
-  }
-  const gen = nodes.find((n) => n.type === "image_generate");
-  const prompt = promptOf(gen);
-  const compiled = briefCopyLines(prompt);
-  if (compiled.length > 0) return compiled;
-  const start = prompt.indexOf(COPY_DIRECTIVE_HEADER);
-  if (start === -1) return [];
-  const bodyStart = start + COPY_DIRECTIVE_HEADER.length;
-  const end = prompt.indexOf("\n\n", bodyStart);
-  const block = prompt.slice(bodyStart, end === -1 ? void 0 : end);
-  const quoted = block.match(/"[^"]+"/g);
-  return quoted ? quoted.map((s) => s.slice(1, -1)) : [];
-}
-function scoreTextLegibilityRisk(copy) {
-  const lines = copy.length;
-  return {
-    dimension: "text_legibility_risk",
-    score: round(clamp01(1 - Math.max(0, lines - 6) / 12)),
-    note: lines > 6 ? `${lines} copy blocks \u2014 dense; trim or split so type stays legible` : `${lines} copy block(s) \u2014 reads cleanly`
-  };
-}
-function scoreIdentityGrounding(nodes) {
-  const grounded = nodes.filter((n) => n.type === "image_reference_sheet").length + nodes.filter((n) => n.type === "ingest" && typeof n.id === "string" && /^el_/.test(n.id)).length;
-  return {
-    dimension: "identity_grounding",
-    // 0 grounded is fine for a pure-type ad, so it's a soft nudge, not a failure.
-    score: grounded > 0 ? 1 : 0.6,
-    note: grounded > 0 ? `${grounded} subject(s) grounded in a real reference` : "no grounded subject \u2014 fine for a type-only ad; otherwise ground the hero in a real reference"
-  };
-}
-function scoreTypeFidelity(nodes) {
-  const hasSpecimen = nodes.some((n) => n.type === "font_specimen");
-  return {
-    dimension: "type_fidelity",
-    score: hasSpecimen ? 1 : 0.5,
-    note: hasSpecimen ? "brand type biased by a font specimen" : "no font specimen \u2014 brand type may drift; wire the brand font"
-  };
-}
-function critiqueVideo(nodes, videoNodes) {
-  const scene0 = nodes.filter((n) => typeof n.id === "string" && /^s0(?:[_a-z0-9])*_/.test(n.id));
-  const hasOverlay = nodes.some((n) => typeof n.type === "string" && /hyperframe/.test(n.type));
-  return [
-    scoreHookStrength(nodes, scene0, hasOverlay),
-    scoreFirstFrameLegibility(hasOverlay),
-    scoreRetentionRisk(videoNodes),
-    scoreMechanismClarity(creativeText(nodes))
-  ];
-}
-function critiqueStatic(nodes) {
-  const copy = staticCopyLines(nodes);
-  const copyText = copy.join("\n");
-  return [
-    scoreTextLegibilityRisk(copy),
-    scoreIdentityGrounding(nodes),
-    scoreTypeFidelity(nodes),
-    scoreMechanismClarity(copyText)
-  ];
-}
-function critiqueCanvas(canvas) {
-  const nodes = Array.isArray(canvas.nodes) ? canvas.nodes : [];
-  const videoNodes = nodes.filter((n) => n.type === "video_generate");
-  const dimensions = videoNodes.length > 0 ? critiqueVideo(nodes, videoNodes) : critiqueStatic(nodes);
-  const overall = round(dimensions.reduce((s, d) => s + d.score, 0) / dimensions.length);
-  return { advisory: true, overall, dimensions };
-}
-
-// src/commands/canvas/critique.ts
-var critiqueCommand = defineCommand({
-  meta: {
-    name: "critique",
-    description: "Pre-spend creative critic (ADVISORY \u2014 never blocks). Scores a scaffolded creative BEFORE the billed render, so weak spots get fixed for free. It scores what will render: prompt.json and scenes/*.json edits are brought into the canvas first, exactly as `run` does. A VIDEO creative is scored on hook strength, sound-off first-frame legibility, retention risk, and mechanism clarity; a STATIC ad on baked-text legibility risk, identity grounding, brand-type fidelity, and mechanism clarity. Ground a video hook against `baker winning-ads hooks` for a proven pattern."
-  },
-  args: { file: { type: "positional", required: true, description: "Path to canvas JSON" } },
-  async run({ args }) {
-    const filePath = path.resolve(String(args.file));
-    let prepared;
-    try {
-      prepared = await prepareCanvas(filePath, { log: (line) => process.stderr.write(`${line}
-`) });
-    } catch (e) {
-      exitOnPrepareError(e);
-    }
-    const report = critiqueCanvas(prepared.canvas);
-    process.stdout.write(
-      `${JSON.stringify(
-        {
-          ok: true,
-          advisory: true,
-          overall: report.overall,
-          dimensions: report.dimensions,
-          hint: "Scores are 0\u20131 (higher is better). This never blocks a render \u2014 strengthen weak dimensions or proceed."
-        },
-        null,
-        2
-      )}
-`
-    );
-  }
-});
-export {
-  critiqueCommand
-};
-//# sourceMappingURL=critique-BADMZAZP.js.map

package/dist/critique-BADMZAZP.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/commands/canvas/critique.ts","../src/engine/scaffold/lib/critique.ts"],"sourcesContent":["import path from \"node:path\";\nimport { defineCommand } from \"citty\";\nimport { critiqueCanvas } from \"../../engine/scaffold/lib/critique.ts\";\nimport { exitOnPrepareError, type PreparedCanvas, prepareCanvas } from \"./prepare-canvas.ts\";\n\nexport const critiqueCommand = defineCommand({\n  meta: {\n    name: \"critique\",\n    description:\n      \"Pre-spend creative critic (ADVISORY — never blocks). Scores a scaffolded creative BEFORE the billed render, so weak spots get fixed for free. It scores what will render: prompt.json and scenes/*.json edits are brought into the canvas first, exactly as `run` does. A VIDEO creative is scored on hook strength, sound-off first-frame legibility, retention risk, and mechanism clarity; a STATIC ad on baked-text legibility risk, identity grounding, brand-type fidelity, and mechanism clarity. Ground a video hook against `baker winning-ads hooks` for a proven pattern.\",\n  },\n  args: { file: { type: \"positional\", required: true, description: \"Path to canvas JSON\" } },\n  async run({ args }) {\n    const filePath = path.resolve(String(args.file));\n    // Scored on the graph the render will run: every projection applied (the static copy\n    // from prompt.json, each scene's frame and clip prompts from scenes/*.json), not the\n    // canvas as it was scaffolded.\n    let prepared: PreparedCanvas;\n    try {\n      prepared = await prepareCanvas(filePath, { log: (line) => process.stderr.write(`${line}\\n`) });\n    } catch (e) {\n      exitOnPrepareError(e);\n    }\n    const report = critiqueCanvas(prepared.canvas as Parameters<typeof critiqueCanvas>[0]);\n    // Advisory: always exit 0. A low score is guidance, not a gate — the operator\n    // decides whether to strengthen the creative or render as-is.\n    process.stdout.write(\n      `${JSON.stringify(\n        {\n          ok: true,\n          advisory: true,\n          overall: report.overall,\n          dimensions: report.dimensions,\n          hint: \"Scores are 0–1 (higher is better). This never blocks a render — strengthen weak dimensions or proceed.\",\n        },\n        null,\n        2,\n      )}\\n`,\n    );\n  },\n});\n","/**\n * Pre-spend creative critic (T4.1) — our answer to Higgsfield's Virality Predictor,\n * grounded in the doctrine we already enforce. It scores a scaffolded creative on\n * the dimensions that decide whether an ad stops the scroll, BEFORE the billed\n * render, so the operator can strengthen a weak hook for free.\n *\n * ADVISORY ONLY. It never blocks a render or publish — it returns scores + notes;\n * the operator decides. This mirrors our validator philosophy (advisory warnings\n * steer, they don't gate).\n *\n * Pure + offline: it reads the parsed canvas and reasons from the node graph. The\n * deeper \"is this hook a proven winner for the segment\" question is answered by\n * grounding against `baker winning-ads hooks` (see references/critique.md) — kept\n * out of this function so the critic can't fail on a network hiccup.\n */\n\nimport { frameDescriptionOf } from \"../../engine/lint/rules/video-prompt.ts\";\nimport { nativeDialogueOf } from \"../../lib/prompt-profiles.ts\";\nimport { briefCopyLines } from \"../static-brief.ts\";\nimport { COPY_DIRECTIVE_HEADER } from \"../static-copy.ts\";\nimport { FRAME_PLACEHOLDER_NOTE } from \"../video/prompts/frame.ts\";\n\nexport type CritiqueCanvasInput = {\n  nodes?: Array<{ id?: string; type?: string; params?: Record<string, unknown>; inputs?: unknown }>;\n  metadata?: { video?: { duration_s?: number; vo_segments?: unknown[]; talking_scenes?: unknown[] } };\n};\n\nexport type CritiqueDimension = {\n  dimension: // Video creative dimensions.\n    | \"hook_strength\"\n    | \"first_frame_legibility\"\n    | \"retention_risk\"\n    // Static-ad dimensions.\n    | \"text_legibility_risk\"\n    | \"identity_grounding\"\n    | \"type_fidelity\"\n    // Shared.\n    | \"mechanism_clarity\";\n  /** 0–1, higher is better (for the *_risk dimensions, higher = LOWER risk). */\n  score: number;\n  note: string;\n};\n\nexport type CritiqueReport = {\n  advisory: true;\n  overall: number;\n  dimensions: CritiqueDimension[];\n};\n\nconst VIBE_CUE = /\\b(light|lighting|golden|moody|warm|cool|tone|grade|contrast|shadow|glow|rim|backlit|neon|soft)\\b/i;\nconst MECHANISM_CUE =\n  /\\b(because|works by|so that|mechanism|proof|guarantee|clinically|backed by|the reason|that's why)\\b/i;\n\nfunction promptOf(node: { params?: Record<string, unknown> } | undefined): string {\n  const p = node?.params?.prompt;\n  return typeof p === \"string\" ? p : \"\";\n}\n\nfunction round(n: number): number {\n  return Math.round(n * 100) / 100;\n}\n\ntype CanvasNode = NonNullable<CritiqueCanvasInput[\"nodes\"]>[number];\n\n/**\n * What a frame node says about its own picture: the FRAME DESCRIPTION a scaffolded frame\n * wraps in fixed instructions (the same slice the validator reads), or a hand-authored\n * prompt whole. The fixed instructions are the same on every frame — scoring them is how\n * every hook read as having a mood, because they name \"lighting\" — and a frame still\n * waiting for its description has none.\n */\nfunction frameLook(node: CanvasNode): string {\n  const description = frameDescriptionOf(promptOf(node)).trim();\n  return description.endsWith(FRAME_PLACEHOLDER_NOTE) ? \"\" : description;\n}\n\n/** The words the creative itself says: every frame's own description and every spoken line. */\nfunction creativeText(nodes: CanvasNode[]): string {\n  return nodes\n    .flatMap((n) => {\n      if (n.type === \"image_generate\") return [frameLook(n)];\n      if (n.type === \"video_generate\") return [nativeDialogueOf(promptOf(n)) ?? \"\"];\n      if (n.type === \"tts\" && typeof n.params?.text === \"string\") return [n.params.text];\n      return [];\n    })\n    .join(\"\\n\");\n}\n\n/**\n * HOOK STRENGTH — the four hook layers present on scene 0 (text/sound/visual/vibe). The\n * visual and vibe layers are read off the opening frames' own descriptions (a canvas with\n * no generated frame: its scene-0 prompts, whole).\n */\nfunction scoreHookStrength(nodes: CanvasNode[], scene0: CanvasNode[], hasOverlay: boolean): CritiqueDimension {\n  const scene0Text = scene0.map((n) => promptOf(n)).join(\"\\n\");\n  const frames = scene0.filter((n) => n.type === \"image_generate\");\n  const look = (frames.length > 0 ? frames.map(frameLook) : scene0.map((n) => promptOf(n))).join(\"\\n\");\n  const hookClip = scene0.find((n) => n.type === \"video_generate\");\n  const hasSound =\n    hookClip?.params?.generate_audio === true ||\n    /Dialogue:|Audio:/.test(scene0Text) ||\n    nodes.some((n) => n.type === \"tts\" || n.type === \"dialogue\");\n  const layers = [hasOverlay, hasSound, look.trim().length > 40, VIBE_CUE.test(look)];\n  const layerCount = layers.filter(Boolean).length;\n  return {\n    dimension: \"hook_strength\",\n    score: round(hookClip ? layerCount / 4 : 0.5),\n    note: hookClip\n      ? `hook works on ${layerCount}/4 layers (text/sound/visual/vibe)`\n      : \"no scene-0 clip found — is this a video creative?\",\n  };\n}\n\n/** FIRST-FRAME LEGIBILITY (sound-off) — feeds autoplay muted, so the first frame\n * must read without audio. A designed overlay text layer is the strongest signal. */\nfunction scoreFirstFrameLegibility(hasOverlay: boolean): CritiqueDimension {\n  return {\n    dimension: \"first_frame_legibility\",\n    score: hasOverlay ? 1 : 0.4,\n    note: hasOverlay\n      ? \"a designed overlay layer carries the sound-off message\"\n      : \"footage-only — the first frame may not read with sound off; consider an overlay hook\",\n  };\n}\n\n/** RETENTION RISK (higher = lower risk) — long clips with no spoken line sag. */\nfunction scoreRetentionRisk(videoNodes: CanvasNode[]): CritiqueDimension {\n  let saggy = 0;\n  for (const n of videoNodes) {\n    const dur = typeof n.params?.duration === \"number\" ? n.params.duration : 0;\n    const spoken = /Dialogue:/.test(promptOf(n)) || n.params?.generate_audio === true;\n    if (dur >= 8 && !spoken) saggy += 1;\n  }\n  return {\n    dimension: \"retention_risk\",\n    score: round(videoNodes.length > 0 ? 1 - Math.min(1, saggy / videoNodes.length) : 0.7),\n    note: saggy > 0 ? `${saggy} long clip(s) with no spoken line may sag` : \"no obvious sag points\",\n  };\n}\n\n/** MECHANISM CLARITY — does the creative state WHY it works, not just what it is? */\nfunction scoreMechanismClarity(allPromptText: string): CritiqueDimension {\n  const clear = MECHANISM_CUE.test(allPromptText);\n  return {\n    dimension: \"mechanism_clarity\",\n    score: clear ? 1 : 0.4,\n    note: clear ? \"states a mechanism/proof\" : \"no clear 'why it works' — add the mechanism\",\n  };\n}\n\nfunction clamp01(n: number): number {\n  return Math.max(0, Math.min(1, n));\n}\n\n/**\n * The copy a static ad carries: on one picture the designed lines every size sets\n * (`static_format`'s `copy`, its picture carrying none); else the numbered lines its compiled\n * brief quotes (`static-brief.ts`), or, on a canvas no run has compiled yet, the strings of the\n * older prompt's copy block (from its header to the next blank line).\n */\nfunction staticCopyLines(nodes: CanvasNode[]): string[] {\n  const sized = nodes.find((n) => n.type === \"static_format\")?.params?.copy;\n  if (Array.isArray(sized)) {\n    return sized.flatMap((l) =>\n      typeof (l as { text?: unknown })?.text === \"string\" ? [(l as { text: string }).text] : [],\n    );\n  }\n  const gen = nodes.find((n) => n.type === \"image_generate\");\n  const prompt = promptOf(gen);\n  const compiled = briefCopyLines(prompt);\n  if (compiled.length > 0) return compiled;\n  const start = prompt.indexOf(COPY_DIRECTIVE_HEADER);\n  if (start === -1) return [];\n  const bodyStart = start + COPY_DIRECTIVE_HEADER.length;\n  const end = prompt.indexOf(\"\\n\\n\", bodyStart);\n  const block = prompt.slice(bodyStart, end === -1 ? undefined : end);\n  const quoted = block.match(/\"[^\"]+\"/g);\n  return quoted ? quoted.map((s) => s.slice(1, -1)) : [];\n}\n\n/** TEXT LEGIBILITY RISK (higher = lower risk) — baked copy is the #1 static-ad defect,\n * and it crowds fast: past ~6 distinct copy blocks the render garbles and duplicates. */\nfunction scoreTextLegibilityRisk(copy: string[]): CritiqueDimension {\n  const lines = copy.length;\n  return {\n    dimension: \"text_legibility_risk\",\n    score: round(clamp01(1 - Math.max(0, lines - 6) / 12)),\n    note:\n      lines > 6\n        ? `${lines} copy blocks — dense; trim or split so type stays legible`\n        : `${lines} copy block(s) — reads cleanly`,\n  };\n}\n\n/** IDENTITY GROUNDING — Rule 1: every real subject grounds on a real reference (a\n * dropped `el_*` asset or its fused reference sheet), never free-generated. */\nfunction scoreIdentityGrounding(nodes: CanvasNode[]): CritiqueDimension {\n  const grounded =\n    nodes.filter((n) => n.type === \"image_reference_sheet\").length +\n    nodes.filter((n) => n.type === \"ingest\" && typeof n.id === \"string\" && /^el_/.test(n.id)).length;\n  return {\n    dimension: \"identity_grounding\",\n    // 0 grounded is fine for a pure-type ad, so it's a soft nudge, not a failure.\n    score: grounded > 0 ? 1 : 0.6,\n    note:\n      grounded > 0\n        ? `${grounded} subject(s) grounded in a real reference`\n        : \"no grounded subject — fine for a type-only ad; otherwise ground the hero in a real reference\",\n  };\n}\n\n/** TYPE FIDELITY — \"the big one\": image models don't hold a brand font, so a wired\n * font specimen that biases the render toward the real face is the strongest lever. */\nfunction scoreTypeFidelity(nodes: CanvasNode[]): CritiqueDimension {\n  const hasSpecimen = nodes.some((n) => n.type === \"font_specimen\");\n  return {\n    dimension: \"type_fidelity\",\n    score: hasSpecimen ? 1 : 0.5,\n    note: hasSpecimen\n      ? \"brand type biased by a font specimen\"\n      : \"no font specimen — brand type may drift; wire the brand font\",\n  };\n}\n\n/** VIDEO creative dimensions (hook / legibility / retention / mechanism). */\nfunction critiqueVideo(nodes: CanvasNode[], videoNodes: CanvasNode[]): CritiqueDimension[] {\n  const scene0 = nodes.filter((n) => typeof n.id === \"string\" && /^s0(?:[_a-z0-9])*_/.test(n.id));\n  const hasOverlay = nodes.some((n) => typeof n.type === \"string\" && /hyperframe/.test(n.type));\n  return [\n    scoreHookStrength(nodes, scene0, hasOverlay),\n    scoreFirstFrameLegibility(hasOverlay),\n    scoreRetentionRisk(videoNodes),\n    scoreMechanismClarity(creativeText(nodes)),\n  ];\n}\n\n/** STATIC-ad dimensions (legibility / grounding / type / mechanism). */\nfunction critiqueStatic(nodes: CanvasNode[]): CritiqueDimension[] {\n  // Only the ad's own copy: every other prompt on the canvas is the scaffold's boilerplate,\n  // and the judge's rubric alone (\"the reason the reference ad works\") read as a stated\n  // mechanism on every multi-take ad.\n  const copy = staticCopyLines(nodes);\n  const copyText = copy.join(\"\\n\");\n  return [\n    scoreTextLegibilityRisk(copy),\n    scoreIdentityGrounding(nodes),\n    scoreTypeFidelity(nodes),\n    scoreMechanismClarity(copyText),\n  ];\n}\n\n/**\n * Score a scaffolded creative. Branches on modality — a canvas with `video_generate`\n * nodes is a video creative; anything else (an `image_generate` static ad, or an empty\n * canvas) is scored on the static dimensions. All heuristics degrade gracefully rather\n * than throwing, and every dimension is advisory only.\n */\nexport function critiqueCanvas(canvas: CritiqueCanvasInput): CritiqueReport {\n  const nodes = Array.isArray(canvas.nodes) ? canvas.nodes : [];\n  const videoNodes = nodes.filter((n) => n.type === \"video_generate\");\n  const dimensions = videoNodes.length > 0 ? critiqueVideo(nodes, videoNodes) : critiqueStatic(nodes);\n  const overall = round(dimensions.reduce((s, d) => s + d.score, 0) / dimensions.length);\n  return { advisory: true, overall, dimensions };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,UAAU;AACjB,SAAS,qBAAqB;;;ACgD9B,IAAM,WAAW;AACjB,IAAM,gBACJ;AAEF,SAAS,SAAS,MAAgE;AAChF,QAAM,IAAI,MAAM,QAAQ;AACxB,SAAO,OAAO,MAAM,WAAW,IAAI;AACrC;AAEA,SAAS,MAAM,GAAmB;AAChC,SAAO,KAAK,MAAM,IAAI,GAAG,IAAI;AAC/B;AAWA,SAAS,UAAU,MAA0B;AAC3C,QAAM,cAAc,mBAAmB,SAAS,IAAI,CAAC,EAAE,KAAK;AAC5D,SAAO,YAAY,SAAS,sBAAsB,IAAI,KAAK;AAC7D;AAGA,SAAS,aAAa,OAA6B;AACjD,SAAO,MACJ,QAAQ,CAAC,MAAM;AACd,QAAI,EAAE,SAAS,iBAAkB,QAAO,CAAC,UAAU,CAAC,CAAC;AACrD,QAAI,EAAE,SAAS,iBAAkB,QAAO,CAAC,iBAAiB,SAAS,CAAC,CAAC,KAAK,EAAE;AAC5E,QAAI,EAAE,SAAS,SAAS,OAAO,EAAE,QAAQ,SAAS,SAAU,QAAO,CAAC,EAAE,OAAO,IAAI;AACjF,WAAO,CAAC;AAAA,EACV,CAAC,EACA,KAAK,IAAI;AACd;AAOA,SAAS,kBAAkB,OAAqB,QAAsB,YAAwC;AAC5G,QAAM,aAAa,OAAO,IAAI,CAAC,MAAM,SAAS,CAAC,CAAC,EAAE,KAAK,IAAI;AAC3D,QAAM,SAAS,OAAO,OAAO,CAAC,MAAM,EAAE,SAAS,gBAAgB;AAC/D,QAAM,QAAQ,OAAO,SAAS,IAAI,OAAO,IAAI,SAAS,IAAI,OAAO,IAAI,CAAC,MAAM,SAAS,CAAC,CAAC,GAAG,KAAK,IAAI;AACnG,QAAM,WAAW,OAAO,KAAK,CAAC,MAAM,EAAE,SAAS,gBAAgB;AAC/D,QAAM,WACJ,UAAU,QAAQ,mBAAmB,QACrC,mBAAmB,KAAK,UAAU,KAClC,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS,EAAE,SAAS,UAAU;AAC7D,QAAM,SAAS,CAAC,YAAY,UAAU,KAAK,KAAK,EAAE,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAClF,QAAM,aAAa,OAAO,OAAO,OAAO,EAAE;AAC1C,SAAO;AAAA,IACL,WAAW;AAAA,IACX,OAAO,MAAM,WAAW,aAAa,IAAI,GAAG;AAAA,IAC5C,MAAM,WACF,iBAAiB,UAAU,uCAC3B;AAAA,EACN;AACF;AAIA,SAAS,0BAA0B,YAAwC;AACzE,SAAO;AAAA,IACL,WAAW;AAAA,IACX,OAAO,aAAa,IAAI;AAAA,IACxB,MAAM,aACF,2DACA;AAAA,EACN;AACF;AAGA,SAAS,mBAAmB,YAA6C;AACvE,MAAI,QAAQ;AACZ,aAAW,KAAK,YAAY;AAC1B,UAAM,MAAM,OAAO,EAAE,QAAQ,aAAa,WAAW,EAAE,OAAO,WAAW;AACzE,UAAM,SAAS,YAAY,KAAK,SAAS,CAAC,CAAC,KAAK,EAAE,QAAQ,mBAAmB;AAC7E,QAAI,OAAO,KAAK,CAAC,OAAQ,UAAS;AAAA,EACpC;AACA,SAAO;AAAA,IACL,WAAW;AAAA,IACX,OAAO,MAAM,WAAW,SAAS,IAAI,IAAI,KAAK,IAAI,GAAG,QAAQ,WAAW,MAAM,IAAI,GAAG;AAAA,IACrF,MAAM,QAAQ,IAAI,GAAG,KAAK,8CAA8C;AAAA,EAC1E;AACF;AAGA,SAAS,sBAAsB,eAA0C;AACvE,QAAM,QAAQ,cAAc,KAAK,aAAa;AAC9C,SAAO;AAAA,IACL,WAAW;AAAA,IACX,OAAO,QAAQ,IAAI;AAAA,IACnB,MAAM,QAAQ,6BAA6B;AAAA,EAC7C;AACF;AAEA,SAAS,QAAQ,GAAmB;AAClC,SAAO,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,CAAC,CAAC;AACnC;AAQA,SAAS,gBAAgB,OAA+B;AACtD,QAAM,QAAQ,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,eAAe,GAAG,QAAQ;AACrE,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM;AAAA,MAAQ,CAAC,MACpB,OAAQ,GAA0B,SAAS,WAAW,CAAE,EAAuB,IAAI,IAAI,CAAC;AAAA,IAC1F;AAAA,EACF;AACA,QAAM,MAAM,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,gBAAgB;AACzD,QAAM,SAAS,SAAS,GAAG;AAC3B,QAAM,WAAW,eAAe,MAAM;AACtC,MAAI,SAAS,SAAS,EAAG,QAAO;AAChC,QAAM,QAAQ,OAAO,QAAQ,qBAAqB;AAClD,MAAI,UAAU,GAAI,QAAO,CAAC;AAC1B,QAAM,YAAY,QAAQ,sBAAsB;AAChD,QAAM,MAAM,OAAO,QAAQ,QAAQ,SAAS;AAC5C,QAAM,QAAQ,OAAO,MAAM,WAAW,QAAQ,KAAK,SAAY,GAAG;AAClE,QAAM,SAAS,MAAM,MAAM,UAAU;AACrC,SAAO,SAAS,OAAO,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC;AACvD;AAIA,SAAS,wBAAwB,MAAmC;AAClE,QAAM,QAAQ,KAAK;AACnB,SAAO;AAAA,IACL,WAAW;AAAA,IACX,OAAO,MAAM,QAAQ,IAAI,KAAK,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;AAAA,IACrD,MACE,QAAQ,IACJ,GAAG,KAAK,mEACR,GAAG,KAAK;AAAA,EAChB;AACF;AAIA,SAAS,uBAAuB,OAAwC;AACtE,QAAM,WACJ,MAAM,OAAO,CAAC,MAAM,EAAE,SAAS,uBAAuB,EAAE,SACxD,MAAM,OAAO,CAAC,MAAM,EAAE,SAAS,YAAY,OAAO,EAAE,OAAO,YAAY,OAAO,KAAK,EAAE,EAAE,CAAC,EAAE;AAC5F,SAAO;AAAA,IACL,WAAW;AAAA;AAAA,IAEX,OAAO,WAAW,IAAI,IAAI;AAAA,IAC1B,MACE,WAAW,IACP,GAAG,QAAQ,6CACX;AAAA,EACR;AACF;AAIA,SAAS,kBAAkB,OAAwC;AACjE,QAAM,cAAc,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,eAAe;AAChE,SAAO;AAAA,IACL,WAAW;AAAA,IACX,OAAO,cAAc,IAAI;AAAA,IACzB,MAAM,cACF,yCACA;AAAA,EACN;AACF;AAGA,SAAS,cAAc,OAAqB,YAA+C;AACzF,QAAM,SAAS,MAAM,OAAO,CAAC,MAAM,OAAO,EAAE,OAAO,YAAY,qBAAqB,KAAK,EAAE,EAAE,CAAC;AAC9F,QAAM,aAAa,MAAM,KAAK,CAAC,MAAM,OAAO,EAAE,SAAS,YAAY,aAAa,KAAK,EAAE,IAAI,CAAC;AAC5F,SAAO;AAAA,IACL,kBAAkB,OAAO,QAAQ,UAAU;AAAA,IAC3C,0BAA0B,UAAU;AAAA,IACpC,mBAAmB,UAAU;AAAA,IAC7B,sBAAsB,aAAa,KAAK,CAAC;AAAA,EAC3C;AACF;AAGA,SAAS,eAAe,OAA0C;AAIhE,QAAM,OAAO,gBAAgB,KAAK;AAClC,QAAM,WAAW,KAAK,KAAK,IAAI;AAC/B,SAAO;AAAA,IACL,wBAAwB,IAAI;AAAA,IAC5B,uBAAuB,KAAK;AAAA,IAC5B,kBAAkB,KAAK;AAAA,IACvB,sBAAsB,QAAQ;AAAA,EAChC;AACF;AAQO,SAAS,eAAe,QAA6C;AAC1E,QAAM,QAAQ,MAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,QAAQ,CAAC;AAC5D,QAAM,aAAa,MAAM,OAAO,CAAC,MAAM,EAAE,SAAS,gBAAgB;AAClE,QAAM,aAAa,WAAW,SAAS,IAAI,cAAc,OAAO,UAAU,IAAI,eAAe,KAAK;AAClG,QAAM,UAAU,MAAM,WAAW,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,OAAO,CAAC,IAAI,WAAW,MAAM;AACrF,SAAO,EAAE,UAAU,MAAM,SAAS,WAAW;AAC/C;;;ADlQO,IAAM,kBAAkB,cAAc;AAAA,EAC3C,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aACE;AAAA,EACJ;AAAA,EACA,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,UAAU,MAAM,aAAa,sBAAsB,EAAE;AAAA,EACzF,MAAM,IAAI,EAAE,KAAK,GAAG;AAClB,UAAM,WAAW,KAAK,QAAQ,OAAO,KAAK,IAAI,CAAC;AAI/C,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,cAAc,UAAU,EAAE,KAAK,CAAC,SAAS,QAAQ,OAAO,MAAM,GAAG,IAAI;AAAA,CAAI,EAAE,CAAC;AAAA,IAC/F,SAAS,GAAG;AACV,yBAAmB,CAAC;AAAA,IACtB;AACA,UAAM,SAAS,eAAe,SAAS,MAA8C;AAGrF,YAAQ,OAAO;AAAA,MACb,GAAG,KAAK;AAAA,QACN;AAAA,UACE,IAAI;AAAA,UACJ,UAAU;AAAA,UACV,SAAS,OAAO;AAAA,UAChB,YAAY,OAAO;AAAA,UACnB,MAAM;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA;AAAA,IACH;AAAA,EACF;AACF,CAAC;","names":[]}