@loomwork/ui-hydration 0.0.0-stage → 0.1.1

package/dist/client.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.publishChat = exports.connectConversation = exports.SplitHydrationController = exports.outputShapeHashOf = exports.jsonPathSelect = exports.topoWaves = exports.terminalSteps = exports.stepReferences = exports.checkParams = exports.DEFAULT_TIME_RANGE = exports.handleOfPath = exports.HYDRATION_VALUES_PREFIX = exports.isReservedHandle = exports.hydrationProjection = exports.HydrationStore = exports.HYDRATION_SET_EVENT = exports.HYDRATION_PROJECTION_VERSION = exports.HYDRATION_PROJECTION_ID = void 0;
+// ── @loomwork/ui-hydration/client: the browser entry ─────────────────────────────────
+// Everything a browser needs for SPLIT hydration and nothing that executes a provider: the split
+// controller, the loader contract it calls, the store it publishes to, and param checks. The
+// server half (`handleInventory`, `serveHandles`, `executeProvider`, the invokers and reshapers)
+// stays on the root entry, `@loomwork/ui-hydration`, which imports the sandbox and the MCP plugin.
+// `clientEntry.test.ts` fails the build if this entry's module graph ever reaches them.
+var projection_1 = require("./projection");
+Object.defineProperty(exports, "HYDRATION_PROJECTION_ID", { enumerable: true, get: function () { return projection_1.HYDRATION_PROJECTION_ID; } });
+Object.defineProperty(exports, "HYDRATION_PROJECTION_VERSION", { enumerable: true, get: function () { return projection_1.HYDRATION_PROJECTION_VERSION; } });
+Object.defineProperty(exports, "HYDRATION_SET_EVENT", { enumerable: true, get: function () { return projection_1.HYDRATION_SET_EVENT; } });
+Object.defineProperty(exports, "HydrationStore", { enumerable: true, get: function () { return projection_1.HydrationStore; } });
+Object.defineProperty(exports, "hydrationProjection", { enumerable: true, get: function () { return projection_1.hydrationProjection; } });
+Object.defineProperty(exports, "isReservedHandle", { enumerable: true, get: function () { return projection_1.isReservedHandle; } });
+var path_1 = require("./path");
+Object.defineProperty(exports, "HYDRATION_VALUES_PREFIX", { enumerable: true, get: function () { return path_1.HYDRATION_VALUES_PREFIX; } });
+Object.defineProperty(exports, "handleOfPath", { enumerable: true, get: function () { return path_1.handleOfPath; } });
+var params_1 = require("./params");
+Object.defineProperty(exports, "DEFAULT_TIME_RANGE", { enumerable: true, get: function () { return params_1.DEFAULT_TIME_RANGE; } });
+Object.defineProperty(exports, "checkParams", { enumerable: true, get: function () { return params_1.checkParams; } });
+var plan_1 = require("./plan");
+Object.defineProperty(exports, "stepReferences", { enumerable: true, get: function () { return plan_1.stepReferences; } });
+Object.defineProperty(exports, "terminalSteps", { enumerable: true, get: function () { return plan_1.terminalSteps; } });
+Object.defineProperty(exports, "topoWaves", { enumerable: true, get: function () { return plan_1.topoWaves; } });
+var select_1 = require("./select");
+Object.defineProperty(exports, "jsonPathSelect", { enumerable: true, get: function () { return select_1.jsonPathSelect; } });
+var shape_1 = require("./shape");
+Object.defineProperty(exports, "outputShapeHashOf", { enumerable: true, get: function () { return shape_1.outputShapeHashOf; } });
+var client_1 = require("./split/client");
+Object.defineProperty(exports, "SplitHydrationController", { enumerable: true, get: function () { return client_1.SplitHydrationController; } });
+var chatSource_1 = require("./chatSource");
+Object.defineProperty(exports, "connectConversation", { enumerable: true, get: function () { return chatSource_1.connectConversation; } });
+Object.defineProperty(exports, "publishChat", { enumerable: true, get: function () { return chatSource_1.publishChat; } });
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AAAA,wFAAwF;AACxF,iGAAiG;AACjG,6FAA6F;AAC7F,iGAAiG;AACjG,mGAAmG;AACnG,wFAAwF;AACxF,2CAOsB;AANpB,qHAAA,uBAAuB,OAAA;AACvB,0HAAA,4BAA4B,OAAA;AAC5B,iHAAA,mBAAmB,OAAA;AACnB,4GAAA,cAAc,OAAA;AACd,iHAAA,mBAAmB,OAAA;AACnB,8GAAA,gBAAgB,OAAA;AASlB,+BAA+D;AAAtD,+GAAA,uBAAuB,OAAA;AAAE,oGAAA,YAAY,OAAA;AAC9C,mCAA2D;AAAlD,4GAAA,kBAAkB,OAAA;AAAE,qGAAA,WAAW,OAAA;AAGxC,+BAAkE;AAAzD,sGAAA,cAAc,OAAA;AAAE,qGAAA,aAAa,OAAA;AAAE,iGAAA,SAAS,OAAA;AACjD,mCAA0C;AAAjC,wGAAA,cAAc,OAAA;AAEvB,iCAA4C;AAAnC,0GAAA,iBAAiB,OAAA;AAG1B,yCAA0D;AAAjD,kHAAA,wBAAwB,OAAA;AAQjC,2CAAgE;AAAvD,iHAAA,mBAAmB,OAAA;AAAE,yGAAA,WAAW,OAAA"}

package/dist/contentRefs.d.ts

@@ -0,0 +1,78 @@
+import type { TransientInvokeOptions } from "@loomwork/effect-runtime";
+import { type ContentRefTable, type Finding, type MCPToolNode, type ProviderSpec } from "@loomwork/ui-core";
+import { type LoadParams } from "./params";
+export type ContentRefPrincipal = TransientInvokeOptions["principal"];
+/** What the host's gate is told about a param that would fill a content-reference argument. */
+export interface ContentRefParamContext {
+    readonly handle: string;
+    readonly stepId: string;
+    readonly toolName: string;
+    readonly kind?: string;
+    readonly param: string;
+    readonly value: unknown;
+    /** The viewer the load runs for (the controller's `principal.id` / serve's `principalId`). */
+    readonly principalId?: string;
+    /** The full principal chain, when the load has one. */
+    readonly principal?: ContentRefPrincipal;
+}
+/**
+ * The host's gate on a PARAM that would fill a content-reference argument (U9b). Called once per
+ * replaced top-level argument that holds a marked path (for a tool whose schema is `"unknown"`, once
+ * per replaced param), EVERY time the answer is wanted: before a cache lookup as well as before a call.
+ * Return `true` only for a reference the host itself vouches for: one that `acceptMediaAttach`
+ * accepted, was ISSUED TO `ctx.principalId` (check issuance to THIS principal, not merely "some
+ * principal"), and is still current (a revoked share must answer `false`). Synchronous; a throw or a
+ * non-`true` answer refuses the step. With no gate configured, EVERY such param is refused: a param is
+ * a client-reachable value and a content address is a capability.
+ */
+export type ContentRefParamGate = (ctx: ContentRefParamContext) => boolean;
+/** Everything the guard needs about the load; built once per provider load. */
+export interface ContentRefEnv {
+    readonly table: ContentRefTable;
+    readonly handle: string;
+    readonly steps: ReadonlyMap<string, MCPToolNode>;
+    readonly acceptContentRefParam?: ContentRefParamGate;
+    readonly principalId?: string;
+    readonly principal?: ContentRefPrincipal;
+}
+export declare const contentRefEnv: (table: ContentRefTable, spec: ProviderSpec, gate: ContentRefParamGate | undefined, who: {
+    principalId?: string | undefined;
+    principal?: ContentRefPrincipal | undefined;
+}) => ContentRefEnv;
+/**
+ * U9b, defence in depth behind composition: after params are applied and BEFORE anything resolves,
+ * a marked content-reference argument must be absent / null, a step reference to an output its tool
+ * declares to be a content reference, or a param the host's gate accepted. A model-authored literal,
+ * an echo / concat reference, or an ungated param refuses the step, so the call is never made.
+ * `paramFilled` says a param filled a guarded argument (the caller then caches per principal only).
+ */
+export declare function checkContentRefs(node: MCPToolNode, applied: {
+    readonly args: Record<string, unknown>;
+    readonly replaced: readonly string[];
+}, env: ContentRefEnv): {
+    readonly finding?: Finding;
+    readonly paramFilled: boolean;
+};
+/** `args` without JSON null at the step's marked paths (a tool never sees `null` where a reference belongs). */
+export declare function finishContentRefArgs(node: MCPToolNode, args: Record<string, unknown>, table: ContentRefTable): Record<string, unknown>;
+/**
+ * Judge a whole provider BEFORE a cache lookup: the same guard `executeProvider` runs per step, over
+ * every step, with the gate asked now. A cached value was produced for an argument the gate accepted
+ * once; serving it to another principal, or after the host revoked it, would skip the gate. A
+ * refusal means: do not serve from the cache (the load itself will refuse). `paramFilled` means the
+ * answer depends on who is asking: cache it per principal, never globally.
+ */
+export declare function inspectContentRefs(spec: ProviderSpec, params: LoadParams, env: ContentRefEnv): {
+    readonly refusal?: Finding;
+    readonly paramFilled: boolean;
+};
+/** `spec` with `cachePolicy.scope: "principal"` (memoised per spec object, so its fingerprint is computed once). */
+export declare function principalScoped(spec: ProviderSpec): ProviderSpec;
+/** `contentRefArgs` is missing or malformed: a configuration error, never read as "nothing is guarded". */
+export declare class ContentRefConfigError extends Error {
+    readonly code = "content-ref-config";
+    constructor(where: string);
+}
+/** Throws {@link ContentRefConfigError} unless `value` is `"none"` or exactly a well-formed table. */
+export declare function assertContentRefConfig(value: unknown, where: string): void;
+//# sourceMappingURL=contentRefs.d.ts.map

package/dist/contentRefs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contentRefs.d.ts","sourceRoot":"","sources":["../src/contentRefs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,OAAO,EACZ,KAAK,WAAW,EAChB,KAAK,YAAY,EAQlB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,KAAK,UAAU,EAAuB,MAAM,UAAU,CAAC;AAOhE,MAAM,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;AAEtE,+FAA+F;AAC/F,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,8FAA8F;IAC9F,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,uDAAuD;IACvD,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,sBAAsB,KAAK,OAAO,CAAC;AAE3E,+EAA+E;AAC/E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACjD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,mBAAmB,CAAC;IACrD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;CAC1C;AAED,eAAO,MAAM,aAAa,GACxB,OAAO,eAAe,EACtB,MAAM,YAAY,EAClB,MAAM,mBAAmB,GAAG,SAAS,EACrC,KAAK;IAAE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,SAAS,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAA;CAAE,KACrF,aAOD,CAAC;AAEH;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,EACzF,GAAG,EAAE,aAAa,GACjB;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAAE,CA8C/D;AAED,gHAAgH;AAChH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,KAAK,EAAE,eAAe,GACrB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKzB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,UAAU,EAClB,GAAG,EAAE,aAAa,GACjB;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAAE,CAS/D;AAID,oHAAoH;AACpH,wBAAgB,eAAe,CAAC,IAAI,EAAE,YAAY,GAAG,YAAY,CAQhE;AAED,2GAA2G;AAC3G,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,wBAAwB;gBACzB,KAAK,EAAE,MAAM;CAM1B;AAED,sGAAsG;AACtG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAG1E"}

package/dist/contentRefs.js

@@ -0,0 +1,129 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ContentRefConfigError = exports.contentRefEnv = void 0;
+exports.checkContentRefs = checkContentRefs;
+exports.finishContentRefArgs = finishContentRefArgs;
+exports.inspectContentRefs = inspectContentRefs;
+exports.principalScoped = principalScoped;
+exports.assertContentRefConfig = assertContentRefConfig;
+const ui_core_1 = require("@loomwork/ui-core");
+const params_1 = require("./params");
+// U9b, the SERVER half: a module of its own so that the browser entry (which imports params.ts) never
+// reaches `@loomwork/ui-core`'s root, which pulls in node:crypto.
+const bad = (code, message) => ({ code, severity: "error", message });
+const contentRefEnv = (table, spec, gate, who) => ({
+    table,
+    handle: spec.handle,
+    steps: new Map(spec.executionGraph.map((s) => [s.stepId, s])),
+    ...(gate !== undefined && { acceptContentRefParam: gate }),
+    ...(who.principalId !== undefined && { principalId: who.principalId }),
+    ...(who.principal !== undefined && { principal: who.principal }),
+});
+exports.contentRefEnv = contentRefEnv;
+/**
+ * U9b, defence in depth behind composition: after params are applied and BEFORE anything resolves,
+ * a marked content-reference argument must be absent / null, a step reference to an output its tool
+ * declares to be a content reference, or a param the host's gate accepted. A model-authored literal,
+ * an echo / concat reference, or an ungated param refuses the step, so the call is never made.
+ * `paramFilled` says a param filled a guarded argument (the caller then caches per principal only).
+ */
+function checkContentRefs(node, applied, env) {
+    const entry = (0, ui_core_1.contentRefEntry)(env.table, (0, ui_core_1.toolKey)(node));
+    if (entry === undefined)
+        return { paramFilled: false };
+    const skip = new Set();
+    // A tool whose schema mentions the marker but cannot be read: every replaced param is gated.
+    const guarded = entry === "unknown"
+        ? new Set(applied.replaced)
+        : typeof entry === "string"
+            ? new Set()
+            : (0, ui_core_1.markedTopLevelKeys)(entry);
+    let paramFilled = false;
+    for (const name of applied.replaced) {
+        if (!guarded.has(name))
+            continue;
+        paramFilled = true;
+        let ok = false;
+        try {
+            ok =
+                env.acceptContentRefParam?.({
+                    handle: env.handle,
+                    stepId: node.stepId,
+                    toolName: node.toolName,
+                    ...(node.kind !== undefined && { kind: node.kind }),
+                    param: name,
+                    value: applied.args[name],
+                    ...(env.principalId !== undefined && { principalId: env.principalId }),
+                    ...(env.principal !== undefined && { principal: env.principal }),
+                }) === true;
+        }
+        catch {
+            ok = false;
+        }
+        if (!ok)
+            return {
+                paramFilled,
+                finding: bad("media-arg-param-refused", `step "${node.stepId}": the param for "${name}" fills a content-reference argument and the host did not accept it`),
+            };
+        skip.add(name);
+    }
+    const found = (0, ui_core_1.contentRefArgFindings)(applied.args, entry, `step "${node.stepId}"`, {
+        skipKeys: skip,
+        proven: (0, ui_core_1.provenIn)(env.table, env.steps, node.stepId, ui_core_1.toolKey),
+    }).find((f) => f.severity === "error");
+    return { paramFilled, ...(found !== undefined && { finding: found }) };
+}
+/** `args` without JSON null at the step's marked paths (a tool never sees `null` where a reference belongs). */
+function finishContentRefArgs(node, args, table) {
+    const entry = (0, ui_core_1.contentRefEntry)(table, (0, ui_core_1.toolKey)(node));
+    return entry === undefined || typeof entry === "string"
+        ? args
+        : (0, ui_core_1.stripNullContentRefs)(args, entry);
+}
+/**
+ * Judge a whole provider BEFORE a cache lookup: the same guard `executeProvider` runs per step, over
+ * every step, with the gate asked now. A cached value was produced for an argument the gate accepted
+ * once; serving it to another principal, or after the host revoked it, would skip the gate. A
+ * refusal means: do not serve from the cache (the load itself will refuse). `paramFilled` means the
+ * answer depends on who is asking: cache it per principal, never globally.
+ */
+function inspectContentRefs(spec, params, env) {
+    let paramFilled = false;
+    for (const step of spec.executionGraph) {
+        const applied = (0, params_1.applyParamsDetailed)(step, params);
+        const r = checkContentRefs(step, applied, env);
+        paramFilled ||= r.paramFilled;
+        if (r.finding !== undefined)
+            return { refusal: r.finding, paramFilled };
+    }
+    return { paramFilled };
+}
+const PRINCIPAL_SCOPED = new WeakMap();
+/** `spec` with `cachePolicy.scope: "principal"` (memoised per spec object, so its fingerprint is computed once). */
+function principalScoped(spec) {
+    if (spec.cachePolicy.scope === "principal")
+        return spec;
+    let s = PRINCIPAL_SCOPED.get(spec);
+    if (s === undefined) {
+        s = { ...spec, cachePolicy: { ...spec.cachePolicy, scope: "principal" } };
+        PRINCIPAL_SCOPED.set(spec, s);
+    }
+    return s;
+}
+/** `contentRefArgs` is missing or malformed: a configuration error, never read as "nothing is guarded". */
+class ContentRefConfigError extends Error {
+    code = "content-ref-config";
+    constructor(where) {
+        super(`${where}: contentRefArgs is required: pass the table contentRefArgsFrom(capabilities) builds (a malformed or missing one is refused, never read as "none"), or the explicit opt-out "none"`);
+        this.name = "ContentRefConfigError";
+    }
+}
+exports.ContentRefConfigError = ContentRefConfigError;
+/** Throws {@link ContentRefConfigError} unless `value` is `"none"` or exactly a well-formed table. */
+function assertContentRefConfig(value, where) {
+    if (value === "none")
+        return;
+    if ((0, ui_core_1.parseContentRefTable)(value) === undefined)
+        throw new ContentRefConfigError(where);
+}
+//# sourceMappingURL=contentRefs.js.map

package/dist/contentRefs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contentRefs.js","sourceRoot":"","sources":["../src/contentRefs.ts"],"names":[],"mappings":";;;AAgFA,4CAkDC;AAGD,oDASC;AASD,gDAaC;AAKD,0CAQC;AAcD,wDAGC;AAjMD,+CAY2B;AAC3B,qCAAgE;AAEhE,sGAAsG;AACtG,kEAAkE;AAElE,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,OAAe,EAAW,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAwCxF,MAAM,aAAa,GAAG,CAC3B,KAAsB,EACtB,IAAkB,EAClB,IAAqC,EACrC,GAAsF,EACvE,EAAE,CAAC,CAAC;IACnB,KAAK;IACL,MAAM,EAAE,IAAI,CAAC,MAAM;IACnB,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAU,CAAC,CAAC;IACtE,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC1D,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;IACtE,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;CACjE,CAAC,CAAC;AAZU,QAAA,aAAa,iBAYvB;AAEH;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAC9B,IAAiB,EACjB,OAAyF,EACzF,GAAkB;IAElB,MAAM,KAAK,GAAG,IAAA,yBAAe,EAAC,GAAG,CAAC,KAAK,EAAE,IAAA,iBAAO,EAAC,IAAI,CAAC,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,6FAA6F;IAC7F,MAAM,OAAO,GACX,KAAK,KAAK,SAAS;QACjB,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3B,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,CAAC,IAAI,GAAG,EAAU;YACnB,CAAC,CAAC,IAAA,4BAAkB,EAAC,KAAK,CAAC,CAAC;IAClC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACjC,WAAW,GAAG,IAAI,CAAC;QACnB,IAAI,EAAE,GAAG,KAAK,CAAC;QACf,IAAI,CAAC;YACH,EAAE;gBACA,GAAG,CAAC,qBAAqB,EAAE,CAAC;oBAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;oBACnD,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;oBACzB,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;oBACtE,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;iBACjE,CAAC,KAAK,IAAI,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,EAAE,GAAG,KAAK,CAAC;QACb,CAAC;QACD,IAAI,CAAC,EAAE;YACL,OAAO;gBACL,WAAW;gBACX,OAAO,EAAE,GAAG,CACV,yBAAyB,EACzB,SAAS,IAAI,CAAC,MAAM,qBAAqB,IAAI,qEAAqE,CACnH;aACF,CAAC;QACJ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,+BAAqB,EAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC,MAAM,GAAG,EAAE;QAChF,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,IAAA,kBAAQ,EAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,iBAAO,CAAC;KAC7D,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACvC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,gHAAgH;AAChH,SAAgB,oBAAoB,CAClC,IAAiB,EACjB,IAA6B,EAC7B,KAAsB;IAEtB,MAAM,KAAK,GAAG,IAAA,yBAAe,EAAC,KAAK,EAAE,IAAA,iBAAO,EAAC,IAAI,CAAC,CAAC,CAAC;IACpD,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QACrD,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAA,8BAAoB,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAChC,IAAkB,EAClB,MAAkB,EAClB,GAAkB;IAElB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAA,4BAAmB,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC/C,WAAW,KAAK,CAAC,CAAC,WAAW,CAAC;QAC9B,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,gBAAgB,GAAG,IAAI,OAAO,EAA8B,CAAC;AAEnE,oHAAoH;AACpH,SAAgB,eAAe,CAAC,IAAkB;IAChD,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QACpB,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;QAC1E,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,2GAA2G;AAC3G,MAAa,qBAAsB,SAAQ,KAAK;IACrC,IAAI,GAAG,oBAAoB,CAAC;IACrC,YAAY,KAAa;QACvB,KAAK,CACH,GAAG,KAAK,oLAAoL,CAC7L,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AARD,sDAQC;AAED,sGAAsG;AACtG,SAAgB,sBAAsB,CAAC,KAAc,EAAE,KAAa;IAClE,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO;IAC7B,IAAI,IAAA,8BAAoB,EAAC,KAAK,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,qBAAqB,CAAC,KAAK,CAAC,CAAC;AACxF,CAAC"}

package/dist/controller.d.ts

@@ -0,0 +1,228 @@
+import type { TransientInvokeOptions } from "@loomwork/effect-runtime";
+import { type Audience, type ContentRefTable, type DeclaredToolClasses, type Experience, type Finding, type ProviderSpec, type ReadPolicy, type SemanticCatalog, type Surface, type UndeclaredToolPolicy, type Viewer } from "@loomwork/ui-core";
+import { HydrationCache } from "./cache";
+import { type ContentRefParamGate } from "./contentRefs";
+import type { DataProviderRegistry } from "./dataProvider";
+import type { TransientInvoker } from "./invoker";
+import { type ArgumentHook, type LoadParams } from "./params";
+import { type HydrationStore } from "./projection";
+import { type DriftRecord, type InputDriftMode } from "./provider";
+import type { ReshaperRegistry } from "./reshape";
+export interface DriftReport {
+    readonly experienceId: string;
+    readonly versionHash: string;
+    readonly handle: string;
+    readonly spec: ProviderSpec;
+    readonly drift: readonly DriftRecord[];
+    readonly findings: readonly Finding[];
+    /** `true` when the load retried with the observed pin and published (`inputDrift: "report-and-proceed"`). */
+    readonly proceeded: boolean;
+}
+export interface ControllerOptions {
+    readonly invoker: TransientInvoker;
+    readonly store: HydrationStore;
+    /** Cache TTLs AND relative-time tokens run on this clock (read once per pass). Default `Date.now`. */
+    readonly clock?: () => number;
+    /** Schedule `fn` after `ms`; returns a cancel. Default: setTimeout/clearTimeout. */
+    readonly setTimer?: (fn: () => void, ms: number) => () => void;
+    readonly batchWindowMs?: number;
+    /** Parallel steps per wave within ONE provider. Default 4. */
+    readonly concurrency?: number;
+    /** At most this many transient calls in flight across the WHOLE controller. Default: unbounded. */
+    readonly maxConcurrentCalls?: number;
+    readonly principal?: {
+        readonly id: string;
+        readonly chain?: TransientInvokeOptions["principal"];
+    };
+    readonly cache?: HydrationCache;
+    /**
+     * Who the data is for (`@loomwork/ui-core`'s `Viewer`). A handle bound by any node classified above
+     * the viewer's clearance is never loaded: its provider is not invoked, nothing is cached for it,
+     * and NOTHING is written to the store for it (no value, no status: a store projected to a client
+     * must not even name it). SNAPSHOT at construction: later mutation of this object changes
+     * nothing; a different viewer needs {@link HydrationController.setViewer} (or a new
+     * controller). FAIL-CLOSED: absent = a viewer
+     * with no clearance (and `load` reports one `viewer-not-supplied` warn if anything is
+     * classified); unclassified handles are unaffected. Pass `{ clearance: "secret" }` for full access.
+     */
+    readonly viewer?: Viewer;
+    /**
+     * Who the surface is for, the SAME value `compile` takes (`@loomwork/ui-core` `Audience`). `"broadcast"`
+     * clamps the viewer to the audience's ceiling (unclassified data only): every handle `compile`
+     * withheld for the audience is never loaded, cached or written to the store, and `appendStream`
+     * and friends refuse it, whoever the `viewer` is. Absent / `"viewer"` = the viewer as given.
+     */
+    readonly audience?: Audience;
+    /**
+     * The host's DECLARED class per tool (`toolKey`), a read-time floor under every handle calling
+     * that tool (`@loomwork/ui-core` `DeclaredToolClasses`): a handle whose stored nodes carry no class
+     * is still gated as strictly as its tool is declared. Absent = only the experience's own classes.
+     */
+    readonly declaredToolClasses?: DeclaredToolClasses;
+    /**
+     * The host's whole {@link ReadPolicy}, the SAME value `createServeSurface` takes, so one policy
+     * serves both. Bound first; the separate `declaredToolClasses` / `undeclared` options join it
+     * raise-only (`mergeReadPolicy`), so neither can lower the other.
+     */
+    readonly readPolicy?: ReadPolicy;
+    /**
+     * What a tool the `declaredToolClasses` table does not list reads as: `"allow"` (default) = as the
+     * experience itself says; `"deny"` = no viewer may read it (only with a table present).
+     */
+    readonly undeclared?: UndeclaredToolPolicy;
+    readonly onDrift?: (report: DriftReport) => void;
+    /**
+     * Where `outputCheck: "contract"` providers get their kinds: every bound node resolved on this
+     * surface through this catalogue (`handleKinds`). Without it a contract provider is an error.
+     */
+    readonly outputKinds?: {
+        readonly catalog: SemanticCatalog;
+        readonly surface: Surface;
+    };
+    /** Params every load starts from (e.g. `DEFAULT_TIME_RANGE`); `setParams` layers over them. */
+    readonly defaultParams?: LoadParams;
+    /** On an input-schema drift: `"report"` (default) goes stale; `"report-and-proceed"` publishes. */
+    readonly inputDrift?: InputDriftMode;
+    /** The host's last word on each step's arguments (after params, time tokens, templates). */
+    readonly argumentHook?: ArgumentHook;
+    /**
+     * REQUIRED (U9b): the marked content-reference argument paths per tool, derived from the offered
+     * capabilities with the planner's `contentRefArgsFrom(capabilities)` (persist it with the capability
+     * set; `parseContentRefTable` re-reads it). A step whose marked argument holds a literal, or a
+     * reference to an output its tool does not declare to be one, is refused (`media-arg-literal` /
+     * `media-arg-unproven-ref`) and its call is NOT made, whatever validation did or did not run. `"none"`
+     * is the explicit opt-out: nothing is guarded, and loading an experience with media nodes then returns
+     * a `media-content-refs-unguarded` warning.
+     */
+    readonly contentRefArgs: ContentRefTable | "none";
+    /**
+     * U9b: the host's gate on a PARAM that fills a marked argument. Return `true` only for a reference
+     * the host vouches for, i.e. one that `acceptMediaAttach` accepted for this principal. Absent =
+     * every such param is refused.
+     */
+    readonly acceptContentRefParam?: ContentRefParamGate;
+    /** Where `Named` reshaping looks its reshapers up. */
+    readonly reshapers?: ReshaperRegistry;
+    /** The data-provider kinds composed for this controller (default: MCP only). */
+    readonly providers?: DataProviderRegistry;
+    /**
+     * Attach the RAW terminal output to each output-drift record `onDrift` reports, as a tainted
+     * sample (`DriftRecord.observedSample`) — what a planner repair pins against. Default false.
+     * The same option `serveHandle` takes, so in-process and split drift reports carry the same.
+     */
+    readonly captureSample?: boolean;
+}
+export declare function loadFingerprint(spec: ProviderSpec, kinds: readonly string[]): string;
+export declare class HydrationController {
+    private readonly opts;
+    private readonly cache;
+    private readonly clock;
+    private readonly sched;
+    private current;
+    private kinds;
+    private globalParams;
+    private readonly scopedParams;
+    private readonly lifetime;
+    /**
+     * Throws `RangeError` for a `maxConcurrentCalls` that is not a positive integer, or
+     * `defaultParams` that `checkParams` refuses.
+     */
+    /** The viewer, copied once at construction so a live mutation of the caller's object is inert. */
+    private viewer;
+    /**
+     * Handles that may take token chunks RIGHT NOW: bound by the current experience, cleared for the
+     * viewer, and (when output kinds are known) resolving to `StreamingText`. Rebuilt on every bind.
+     */
+    private streamable;
+    private bound;
+    private readonly policy;
+    private readonly broadcast;
+    private readonly audience;
+    constructor(opts: ControllerOptions);
+    /**
+     * Bind an experience: schedule every handle it binds. Findings for handles that cannot load.
+     * A second `load` while one experience is already bound IS a recompose — the previous
+     * experience's handles are aborted and dropped rather than left published forever.
+     */
+    load(exp: Experience): {
+        findings: Finding[];
+    };
+    /**
+     * Replace the viewer and re-plan the bound experience: a handle the new viewer may not see is
+     * aborted and dropped (an in-flight result is discarded, a loaded value removed), one it newly
+     * may see is scheduled. Before any `load` it only records the viewer.
+     */
+    setViewer(viewer: Viewer | undefined): {
+        findings: Finding[];
+    };
+    /**
+     * Append one token chunk to a `StreamingText` handle, through the same viewer gate as `load`:
+     * refused (a finding, nothing written) for a handle that is not bound by the current
+     * experience (`stream-unbound`), is restricted for the viewer (`restricted`, the fixed text that
+     * names nothing), or — when `outputKinds` is configured — does not resolve to `StreamingText`
+     * (`stream-kind-mismatch`). Without `outputKinds` the kind is unknown and is not checked. The
+     * store's own `append` is gated by the same rule once a controller fronts it.
+     */
+    append(handle: string, chunk: unknown): {
+        ok: true;
+        applied: boolean;
+    } | {
+        ok: false;
+        finding: Finding;
+    };
+    /**
+     * Publish a value for a handle that is NOT loaded by a provider (a live transcript a browser
+     * connection folds, ...), through the same gates as a load: the handle must be bound by the current
+     * experience, must not be restricted for the viewer (`restricted`, the fixed text that names
+     * nothing), must resolve to the kind the caller names (when it names one), and the value must pass
+     * EVERY bound kind's contract (a kind with none is refused: nothing is published unchecked).
+     * Refused = a finding and nothing written.
+     */
+    publishValue(handle: string, value: unknown, options?: {
+        readonly state?: "ready" | "pending";
+        readonly kind?: string;
+    }): {
+        ok: true;
+    } | {
+        ok: false;
+        finding: Finding;
+    };
+    private appendRefusal;
+    private restrictedHandles;
+    /** The surface reports a lazy (P2) widget entered the viewport. */
+    markVisible(handle: string): void;
+    /** A new artifact replaces the current one: abort and drop unbound handles, keep the rest, load new ones. */
+    recompose(next: Experience): {
+        findings: Finding[];
+    };
+    /**
+     * Replace the global params (no `scope.handle`) or one handle's scoped params, then re-ask
+     * every bound handle whose question changed — only those, so a handle that ended on `error`
+     * with an unchanged question is NOT retried here (`invalidate` retries it). `{}` clears.
+     * Refused, with nothing changed, for params `checkParams` refuses or a reserved handle. A lazy
+     * (P2) handle whose question changed waits for its next `markVisible`. Params scoped to a handle
+     * the experience does not bind are kept only until the next bind, which forgets them.
+     */
+    setParams(params: LoadParams, scope?: {
+        readonly handle?: string;
+    }): {
+        findings: Finding[];
+    };
+    /**
+     * Drop cached results (one handle or all) and reload the affected bound handles. An in-flight
+     * load answering the invalidated question is superseded; a lazy (P2) widget stays lazy.
+     */
+    invalidate(handle?: string): {
+        findings: Finding[];
+    };
+    inFlight(): string[];
+    /** Terminal: every in-flight load is aborted and reported, and nothing schedules again. */
+    dispose(): void;
+    private bind;
+    /** Pure: the jobs `exp` asks for right now, and the handles that cannot load (with why). */
+    private plan;
+    /** The content-reference guard over a whole job (asks the host's gate now); `undefined` when nothing is guarded. */
+    private refsVerdict;
+    private run;
+}
+//# sourceMappingURL=controller.d.ts.map

package/dist/controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../src/controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,OAAO,EAEZ,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,OAAO,EACZ,KAAK,oBAAoB,EACzB,KAAK,MAAM,EAWZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAmC,MAAM,SAAS,CAAC;AAC1E,OAAO,EACL,KAAK,mBAAmB,EAKzB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAElD,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,UAAU,EAIhB,MAAM,UAAU,CAAC;AAClB,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,cAAc,EAAkC,MAAM,YAAY,CAAC;AACnG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AA6BlD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,6GAA6G;IAC7G,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,sGAAsG;IACtG,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B,oFAAoF;IACpF,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,MAAM,IAAI,CAAC;IAC/D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,8DAA8D;IAC9D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,mGAAmG;IACnG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,KAAK,CAAC,EAAE,sBAAsB,CAAC,WAAW,CAAC,CAAC;KACtD,CAAC;IACF,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAChC;;;;;;;;;OASG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IACnD;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACxF,+FAA+F;IAC/F,QAAQ,CAAC,aAAa,CAAC,EAAE,UAAU,CAAC;IACpC,mGAAmG;IACnG,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC,4FAA4F;IAC5F,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC;;;;;;;;OAQG;IACH,QAAQ,CAAC,cAAc,EAAE,eAAe,GAAG,MAAM,CAAC;IAClD;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,mBAAmB,CAAC;IACrD,sDAAsD;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC;IACtC,gFAAgF;IAChF,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAiBD,wBAAgB,eAAe,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAKpF;AAuBD,qBAAa,mBAAmB;IA2BlB,OAAO,CAAC,QAAQ,CAAC,IAAI;IA1BjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiB;IACvC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqD;IAC3E,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,KAAK,CAAqD;IAClE,OAAO,CAAC,YAAY,CAAkB;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAC9D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyB;IAElD;;;OAGG;IACH,kGAAkG;IAClG,OAAO,CAAC,MAAM,CAAqB;IACnC;;;OAGG;IACH,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,KAAK,CAAkC;IAE/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;gBAEP,IAAI,EAAE,iBAAiB;IA+FpD;;;;OAIG;IACH,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG;QAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;KAAE;IAM9C;;;;OAIG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG;QAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;KAAE;IAM9D;;;;;;;OAOG;IACH,MAAM,CACJ,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,GACb;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE;IAInE;;;;;;;OAOG;IACH,YAAY,CACV,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,EACd,OAAO,GAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAC7E;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE;IA4BjD,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,iBAAiB,CAAkC;IAE3D,mEAAmE;IACnE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIjC,6GAA6G;IAC7G,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG;QAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;KAAE;IAiBpD;;;;;;;OAOG;IACH,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,GAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG;QAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;KAAE;IA6BhG;;;OAGG;IACH,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG;QAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;KAAE;IASpD,QAAQ,IAAI,MAAM,EAAE;IAIpB,2FAA2F;IAC3F,OAAO,IAAI,IAAI;IAWf,OAAO,CAAC,IAAI;IAuEZ,4FAA4F;IAC5F,OAAO,CAAC,IAAI;IAiEZ,oHAAoH;IACpH,OAAO,CAAC,WAAW;YAaL,GAAG;CAyBlB"}